$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft File: -NaTomlkzTxaGZ0sJu0iZHog534.mft (raw, json) Hash identifier: nGdHhnaFQS79hh5V8r9Q2Oi11xWT1Q/GlDagxh2yxWo= Subject key identifier: 3F:97:84:E1:1F:95:40:79:84:F7:01:5F:01:F4:95:40:11:BE:8B:6E Authority key identifier: F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E Certificate issuer: /CN=A919EF67/serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E Certificate serial: 030B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft Manifest number: 02F7 Signing time: Fri 11 Sep 2026 01:05:42 +0000 Manifest this update: Fri 11 Sep 2026 01:05:42 +0000 Manifest next update: Fri 18 Sep 2026 01:05:42 +0000 Files and hashes: 1: -NaTomlkzTxaGZ0sJu0iZHog534.crl (hash: HTZiIrotBiyCsTXHd56qIqQKF275Rh/29B0sDuWoGuE=) 2: 256273EE355011EEBCB7D945C4F9AE02.roa (hash: d181Z1DYLcItp5l9IsZ1mcEBRFCLJxml8DnOv1hi/n0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 779 (0x30b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF67, serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E Validity Not Before: Sep 11 01:05:42 2026 GMT Not After : Sep 18 01:05:42 2026 GMT Subject: CN=6aa353e6-e559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:77:16:3e:d1:ef:7c:3b:eb:4a:85:ab:ac:e0: fb:a1:a0:c5:83:14:e7:37:a0:74:c5:4a:31:d5:9a: 9a:b9:90:07:95:89:f7:d2:b8:e3:9f:e1:dd:9e:3c: 2b:92:a8:d6:05:1f:bb:ce:2c:6f:f6:b1:8c:92:b9: 99:c2:e6:6c:b4:79:26:b3:25:66:ff:3c:d7:0f:4e: d5:c4:d1:c6:cc:bc:ea:43:8f:8e:f1:64:20:db:2f: 82:2c:42:87:ba:89:06:78:85:15:2c:6b:87:fe:6b: 2e:c1:56:bf:87:6e:a6:c6:65:12:f0:db:cd:33:15: 1f:98:9e:1a:e2:79:68:04:5d:4b:7b:cc:9b:79:7d: ce:97:0e:e1:66:2b:d1:d9:ed:c0:cd:46:ce:84:8c: f1:00:0d:7e:19:65:35:42:38:12:04:7a:9b:e9:f5: e0:43:c4:93:7a:e7:21:1f:31:be:cd:42:b0:91:1b: 52:ea:12:4a:ec:18:65:00:9f:c8:16:0f:1b:62:2e: f4:dd:ea:7c:41:1a:5a:40:14:ef:d4:a9:45:94:4c: 85:8c:a1:5d:4a:b0:b4:1d:fe:6d:45:08:bf:8c:95: 9f:8e:06:56:9b:d0:d2:f4:ee:07:b7:ec:85:17:4f: 8c:80:c7:94:ba:54:ba:d5:a6:62:b0:76:37:0e:81: 38:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:97:84:E1:1F:95:40:79:84:F7:01:5F:01:F4:95:40:11:BE:8B:6E X509v3 Authority Key Identifier: keyid:F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:67:d4:82:6e:10:f4:f6:4e:d1:50:a0:e4:33:3f:58:e4:28: 19:c7:e4:fa:32:2e:1f:7a:b6:7a:c8:ed:c2:6f:b5:28:9a:21: 88:d2:aa:b4:77:12:02:c8:04:41:0f:3b:6b:69:fd:4c:34:26: 87:0f:2e:e4:b8:b3:af:c6:cf:c5:5c:88:23:92:9c:25:25:c1: 55:d5:2d:c4:e4:6e:11:67:54:5f:bb:19:ce:a7:85:4d:0f:65: 38:54:d1:cd:ca:d0:a4:a0:46:99:2f:8f:ca:45:a6:e7:04:22: a0:2b:d8:39:2e:41:6f:1f:01:dd:e3:f3:72:14:0e:84:63:bd: 04:98:ad:f0:5d:f3:cb:94:92:7a:37:dc:56:58:fb:c8:76:65: af:a9:c9:dc:86:78:6f:8f:92:e2:a5:10:26:76:db:26:5d:e3: 80:06:4b:60:d4:a0:64:2e:72:55:ff:5c:e2:d6:54:c9:58:29: 77:f8:a7:cd:76:b5:0e:e3:51:86:fb:cd:25:f1:7e:35:9c:7b: ab:e5:7d:ca:92:b2:ae:33:88:b3:85:33:56:5c:f4:85:4e:18: 24:51:83:d2:71:9f:92:18:00:1c:1f:02:dc:a1:ae:4e:89:82: 25:f5:be:42:e6:31:e3:e7:d8:99:13:94:08:0e:f1:f7:2f:3a: 6f:64:b8:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNjcxMTAvBgNVBAUTKEY4RDY5M0EyNjk2NENEM0M1QTE5OUQyQzI2RUQyMjY0 N0EyMEU3N0UwHhcNMjYwOTExMDEwNTQyWhcNMjYwOTE4MDEwNTQyWjAYMRYwFAYD VQQDEw02YWEzNTNlNi1lNTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh3cWPtHvfDvrSoWrrOD7oaDFgxTnN6B0xUox1ZqauZAHlYn30rjjn+Hdnjwr kqjWBR+7zixv9rGMkrmZwuZstHkmsyVm/zzXD07VxNHGzLzqQ4+O8WQg2y+CLEKH uokGeIUVLGuH/msuwVa/h26mxmUS8NvNMxUfmJ4a4nloBF1Le8ybeX3Olw7hZivR 2e3AzUbOhIzxAA1+GWU1QjgSBHqb6fXgQ8STeuchHzG+zUKwkRtS6hJK7BhlAJ/I Fg8bYi703ep8QRpaQBTv1KlFlEyFjKFdSrC0Hf5tRQi/jJWfjgZWm9DS9O4Ht+yF F0+MgMeUulS61aZisHY3DoE4dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD+XhOEf lUB5hPcBXwH0lUARvotuMB8GA1UdIwQYMBaAFPjWk6JpZM08WhmdLCbtImR6IOd+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY2Ny8xMkNFNThDMDRC Q0IxMUVEQkJFNTkyNUVDNEY5QUUwMi8tTmFUb21sa3pUeGFHWjBzSnUwaVpIb2c1 MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1OYVRvbWxrelR4YUdaMHNKdTBpWkhvZzUzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUY2Ny8xMkNFNThDMDRCQ0IxMUVEQkJFNTkyNUVDNEY5QUUwMi8tTmFUb21sa3pU eGFHWjBzSnUwaVpIb2c1MzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY2fUgm4Q9PZO0VCg5DM/WOQoGcfk+jIuH3q2esjtwm+1KJohiNKqtHcSAsgE QQ87a2n9TDQmhw8u5Lizr8bPxVyII5KcJSXBVdUtxORuEWdUX7sZzqeFTQ9lOFTR zcrQpKBGmS+PykWm5wQioCvYOS5Bbx8B3ePzchQOhGO9BJit8F3zy5SSejfcVlj7 yHZlr6nJ3IZ4b4+S4qUQJnbbJl3jgAZLYNSgZC5yVf9c4tZUyVgpd/inzXa1DuNR hvvNJfF+NZx7q+V9ypKyrjOIs4UzVlz0hU4YJFGD0nGfkhgAHB8C3KGuTomCJfW+ QuYx4+fYmROUCA7x9y86b2S4qA== -----END CERTIFICATE-----Generated at Fri Sep 11 15:43:32 2026 by rpki-client