$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft File: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft (raw, json) Hash identifier: 036euBfGSCBYr+QLceGwi2TM2NlN89xbUZrPeMRjUjw= Subject key identifier: EE:CE:60:E3:67:6D:E9:CF:29:BD:95:3D:C3:3E:80:C0:45:3E:2F:DB Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 Certificate issuer: /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft Manifest number: 01CD Signing time: Wed 09 Sep 2026 04:18:33 +0000 Manifest this update: Wed 09 Sep 2026 04:18:33 +0000 Manifest next update: Wed 16 Sep 2026 04:18:33 +0000 Files and hashes: 1: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl (hash: gL5aOiYn/L0PP2N8B9WiULaJIWG9LWJanexQuBxpANs=) 2: 77E54B78C45111EF9D399128C4F9AE02.roa (hash: JwFEBQDBS2XvD+XrlUfnJ9Rr/0S0seAaVJadWlIPqzs=) 3: FF233C70E62111EFACA87766C4F9AE02.roa (hash: l81QgUkAG3jb2K1eCkfJ4vvLxu4iwZrMMfKmrpOvZAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Sep 2026 04:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAE0, serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Validity Not Before: Sep 9 04:18:33 2026 GMT Not After : Sep 16 04:18:33 2026 GMT Subject: CN=6aa0de19-ea4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:52:47:b8:0c:7a:ea:fc:7d:be:19:d5:5f:09: dc:57:b6:61:94:2e:09:0c:76:81:d7:62:5b:6c:7d: a0:20:28:1a:2c:03:80:89:4d:e2:cb:dd:ce:7e:89: cd:79:0e:67:dd:7c:23:06:2d:8e:0a:50:4e:7a:d2: 48:8f:1c:9e:bb:87:0d:a1:aa:93:30:16:a1:44:a1: 87:1a:73:13:61:cb:6a:f5:b2:16:56:9c:d9:6a:72: cb:98:05:db:8e:6e:a8:17:3f:66:8d:25:30:92:0a: c5:92:ec:01:02:90:88:f0:1e:64:a3:4f:0a:63:54: da:93:12:77:05:0e:5e:c3:e1:bd:54:04:48:ce:04: f9:6a:47:87:3e:ee:a7:27:05:c8:74:0b:5e:0c:39: 53:48:20:9f:31:a9:56:43:ef:e8:c3:ac:bc:96:f8: b8:52:34:fd:c6:06:b8:c1:e5:6f:26:46:ab:97:e3: ea:c6:10:a7:3d:32:72:73:00:2c:b1:65:d0:b8:f4: a7:01:38:71:70:34:e9:07:c2:ad:8b:ff:34:19:a3: a3:db:e8:0d:c7:b1:02:58:75:50:b4:eb:5c:56:1a: 07:20:77:b4:eb:52:1e:f0:93:bf:8f:f5:9a:5c:e2: 5a:35:de:f7:4f:a0:00:f3:7f:d2:3b:36:56:a2:b5: 79:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CE:60:E3:67:6D:E9:CF:29:BD:95:3D:C3:3E:80:C0:45:3E:2F:DB X509v3 Authority Key Identifier: keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:0c:ba:13:70:68:09:6e:d7:d0:bb:05:df:d3:63:09:c9:ea: df:68:35:ad:ee:70:44:dc:bc:8e:e6:b0:1c:9c:1a:d9:98:1b: 41:d2:57:4f:43:6a:96:bb:c9:44:b2:97:d4:03:59:66:30:de: 33:44:38:08:4e:18:e9:d6:26:6f:e6:44:54:04:b5:71:d1:96: 83:76:ef:e0:9b:9f:67:96:e8:67:af:9e:37:be:13:ff:a7:9c: 25:77:4c:f8:99:f9:95:a8:c9:bd:b4:21:f4:f5:f4:1d:3d:c7: ac:38:d9:d4:d5:aa:4f:62:74:7a:02:d7:53:4e:33:41:f0:03: 34:8b:1d:3f:74:36:06:32:85:9c:0d:af:a2:a2:9d:cd:89:33: 5a:bf:6c:6b:a9:4d:0c:bd:8d:df:7d:55:e7:df:ae:cc:cc:4c: 6e:9c:94:7f:c5:1f:c5:ab:ed:19:06:fd:ad:1c:02:26:93:d0: 1b:cb:8b:b4:17:47:15:3f:58:8c:4a:9c:68:e6:86:3f:e3:63: e6:92:46:5b:0e:31:a2:c9:f9:51:4c:85:b3:76:41:d9:9a:7a: 9b:19:13:79:54:57:b0:75:d1:c2:59:e7:24:c2:8a:66:28:35: be:ff:d7:c6:72:7f:b2:9e:9e:70:77:dd:40:d0:1f:39:b1:9b: 6d:5e:be:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBRTAxMTAvBgNVBAUTKDlERjRGRURGRjkyQTlFN0Y2RTAyQkZDMDU0QUQzMzk4 NTNEOUREMzIwHhcNMjYwOTA5MDQxODMzWhcNMjYwOTE2MDQxODMzWjAYMRYwFAYD VQQDEw02YWEwZGUxOS1lYTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnVJHuAx66vx9vhnVXwncV7ZhlC4JDHaB12JbbH2gICgaLAOAiU3iy93OfonN eQ5n3XwjBi2OClBOetJIjxyeu4cNoaqTMBahRKGHGnMTYctq9bIWVpzZanLLmAXb jm6oFz9mjSUwkgrFkuwBApCI8B5ko08KY1TakxJ3BQ5ew+G9VARIzgT5akeHPu6n JwXIdAteDDlTSCCfMalWQ+/ow6y8lvi4UjT9xga4weVvJkarl+PqxhCnPTJycwAs sWXQuPSnAThxcDTpB8Kti/80GaOj2+gNx7ECWHVQtOtcVhoHIHe061Ie8JO/j/Wa XOJaNd73T6AA83/SOzZWorV5BwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO7OYONn benPKb2VPcM+gMBFPi/bMB8GA1UdIwQYMBaAFJ30/t/5Kp5/bgK/wFStM5hT2d0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFFMC9BRUY2Mzc2MDE5 NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5uOXVBcl9BVkswem1GUFoz VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25mVC0zX2txbm45dUFyX0FWSzB6bUZQWjNUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFFMC9BRUY2Mzc2MDE5NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5u OXVBcl9BVkswem1GUFozVEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALgy6E3BoCW7X0LsF39NjCcnq32g1re5wRNy8juawHJwa2ZgbQdJXT0NqlrvJ RLKX1ANZZjDeM0Q4CE4Y6dYmb+ZEVAS1cdGWg3bv4JufZ5boZ6+eN74T/6ecJXdM +Jn5lajJvbQh9PX0HT3HrDjZ1NWqT2J0egLXU04zQfADNIsdP3Q2BjKFnA2voqKd zYkzWr9sa6lNDL2N331V59+uzMxMbpyUf8UfxavtGQb9rRwCJpPQG8uLtBdHFT9Y jEqcaOaGP+Nj5pJGWw4xosn5UUyFs3ZB2Zp6mxkTeVRXsHXRwlnnJMKKZig1vv/X xnJ/sp6ecHfdQNAfObGbbV6+qw== -----END CERTIFICATE-----Generated at Thu Sep 10 21:58:01 2026 by rpki-client