$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft File: NctCHFV3F3WBziSzai9syTGEYFI.mft (raw, json) Hash identifier: 54TzVy0pLaibPlTkCYt23uxBZpINf3iXkOihQVfS08M= Subject key identifier: C8:4D:26:F6:D1:C3:42:8F:38:18:55:10:54:96:12:BD:E4:DE:CA:63 Authority key identifier: 35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52 Certificate issuer: /CN=A91CA3CD/serialNumber=35CB421C5577177581CE24B36A2F6CC931846052 Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft Manifest number: 0201 Signing time: Wed 19 Aug 2026 03:45:28 +0000 Manifest this update: Wed 19 Aug 2026 03:45:27 +0000 Manifest next update: Wed 26 Aug 2026 03:45:27 +0000 Files and hashes: 1: NctCHFV3F3WBziSzai9syTGEYFI.crl (hash: 6iCBXPKIXdASEDUm7IxcQY71IPjk8iCDU2agmQpp2D4=) 2: F5121FB090CF11EE8036815AC4F9AE02.roa (hash: fAaur7LW2+pEge7BQCktlo8tOQuU2cmVWJ8Ioa474Lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 03:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA3CD, serialNumber=35CB421C5577177581CE24B36A2F6CC931846052 Validity Not Before: Aug 19 03:45:27 2026 GMT Not After : Aug 26 03:45:27 2026 GMT Subject: CN=6a8526d8-c14c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:08:90:67:21:90:32:d2:56:83:1b:b2:3f:89: 56:60:74:7d:ce:9a:e8:b1:42:4e:9f:4a:a4:43:27: 6f:59:12:91:a4:05:e3:f1:26:16:ef:d0:00:52:f4: 8d:1c:8b:eb:66:2d:6b:66:db:13:84:0d:26:18:1b: 33:03:b8:69:80:79:04:cc:f8:8a:2e:1e:94:8f:b7: c2:a9:ec:60:de:a6:21:87:ce:35:38:58:07:d8:15: 06:a1:0c:a7:1c:93:06:36:41:2f:59:81:3a:ee:56: 68:ea:2b:13:b5:32:06:8d:51:63:f4:cf:72:2b:c8: d3:a9:a1:9c:e6:4d:4c:7c:89:24:73:cd:e7:2b:3f: 6c:89:dc:89:e9:08:9c:eb:2a:f4:09:c4:03:69:22: 88:b7:fa:b4:39:0b:71:a2:79:93:62:e3:87:1f:41: 01:8a:78:91:87:ad:0b:ba:10:25:51:b8:b7:e6:46: f3:bb:ce:61:2c:1e:44:02:c4:32:ba:1f:87:ab:8c: 66:fa:c3:c5:22:4c:3b:54:22:d0:69:90:db:8c:e8: 99:c3:09:2e:30:1d:a7:47:30:d3:b6:8f:97:4d:95: 6d:34:96:55:57:fd:6c:b0:27:a2:e8:5a:c0:61:d1: b1:6e:0c:fd:d2:d7:2a:0f:44:ec:d7:d5:12:63:cb: b2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4D:26:F6:D1:C3:42:8F:38:18:55:10:54:96:12:BD:E4:DE:CA:63 X509v3 Authority Key Identifier: keyid:35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:9e:03:88:13:4f:6d:db:cb:d1:b3:25:c7:62:49:bd:78:6f: fd:6b:6e:01:fc:51:63:0b:c9:99:11:16:6d:79:f3:39:f9:db: 0b:39:09:23:07:88:7c:f7:94:7a:24:91:b4:6a:28:48:9e:b9: 89:aa:6a:07:78:3e:66:f7:32:59:ff:fd:7b:51:51:57:24:e1: aa:4c:b0:e7:cf:36:7b:52:d2:bb:72:08:bc:7e:f1:d3:72:13: 56:a4:ec:dd:df:6d:54:67:68:19:f0:45:9b:bc:fd:84:4e:bc: 13:da:b0:99:18:14:47:07:db:8f:20:a8:8e:5a:1a:e8:ad:3c: a1:0c:90:1a:98:a4:ff:89:55:61:19:93:ab:74:d4:50:fe:a7: e3:e3:49:ce:25:67:b4:49:52:2e:a8:25:aa:22:47:3c:bd:d8: 8a:fe:c6:f3:92:bd:5f:7b:d8:10:80:21:fa:a1:90:18:5f:ec: ed:41:84:35:bd:92:de:1d:30:d0:32:f0:f3:bd:0a:84:ae:a8: ff:06:8a:f7:eb:95:90:30:af:88:74:24:11:e3:06:df:85:40: db:f6:05:ed:9c:17:cb:de:84:a4:ab:e6:9c:c8:59:b8:d0:6e: 3d:1f:9e:ab:02:ef:58:68:28:c2:16:ff:8e:9c:86:fb:13:d8: 0d:61:3e:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EzQ0QxMTAvBgNVBAUTKDM1Q0I0MjFDNTU3NzE3NzU4MUNFMjRCMzZBMkY2Q0M5 MzE4NDYwNTIwHhcNMjYwODE5MDM0NTI3WhcNMjYwODI2MDM0NTI3WjAYMRYwFAYD VQQDEw02YTg1MjZkOC1jMTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QiQZyGQMtJWgxuyP4lWYHR9zprosUJOn0qkQydvWRKRpAXj8SYW79AAUvSN HIvrZi1rZtsThA0mGBszA7hpgHkEzPiKLh6Uj7fCqexg3qYhh841OFgH2BUGoQyn HJMGNkEvWYE67lZo6isTtTIGjVFj9M9yK8jTqaGc5k1MfIkkc83nKz9sidyJ6Qic 6yr0CcQDaSKIt/q0OQtxonmTYuOHH0EBiniRh60LuhAlUbi35kbzu85hLB5EAsQy uh+Hq4xm+sPFIkw7VCLQaZDbjOiZwwkuMB2nRzDTto+XTZVtNJZVV/1ssCei6FrA YdGxbgz90tcqD0Ts19USY8uycQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMhNJvbR w0KPOBhVEFSWEr3k3spjMB8GA1UdIwQYMBaAFDXLQhxVdxd1gc4ks2ovbMkxhGBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTNDRC8yNjQ1M0ZBMDkw NTcxMUVFODY0OTM2MTNDNEY5QUUwMi9OY3RDSEZWM0YzV0J6aVN6YWk5c3lUR0VZ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05jdENIRlYzRjNXQnppU3phaTlzeVRHRVlGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTNDRC8yNjQ1M0ZBMDkwNTcxMUVFODY0OTM2MTNDNEY5QUUwMi9OY3RDSEZWM0Yz V0J6aVN6YWk5c3lUR0VZRkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACJ4DiBNPbdvL0bMlx2JJvXhv/WtuAfxRYwvJmREWbXnzOfnbCzkJIweIfPeU eiSRtGooSJ65iapqB3g+ZvcyWf/9e1FRVyThqkyw5882e1LSu3IIvH7x03ITVqTs 3d9tVGdoGfBFm7z9hE68E9qwmRgURwfbjyCojloa6K08oQyQGpik/4lVYRmTq3TU UP6n4+NJziVntElSLqglqiJHPL3Yiv7G85K9X3vYEIAh+qGQGF/s7UGENb2S3h0w 0DLw870KhK6o/waK9+uVkDCviHQkEeMG34VA2/YF7ZwXy96EpKvmnMhZuNBuPR+e qwLvWGgowhb/jpyG+xPYDWE+1g== -----END CERTIFICATE-----Generated at Wed Aug 19 11:45:41 2026 by rpki-client