$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: Op4Gg6ByARiT3c1n8pch2so05v8EuFJRLRd2LNJ2V68= Subject key identifier: 55:45:E6:95:D6:02:B0:39:34:E6:3F:86:13:08:90:E6:CA:E9:D4:4B Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 0242 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 0235 Signing time: Sat 19 Sep 2026 02:43:28 +0000 Manifest this update: Sat 19 Sep 2026 02:43:28 +0000 Manifest next update: Sat 26 Sep 2026 02:43:28 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: ddfa25tRtGQrMjuT1nVBrgvvu7WCAucZVNNdQJTj1bQ=) 2: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: 6ItTRA5BinCfkM/YDEDL4VrpFPkwwb1Q479PqDEMyKE=) 3: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: 5pAydkFPBG/xNuitrTpbftHSJib51VywK3J+r7VMLUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 578 (0x242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: Sep 19 02:43:28 2026 GMT Not After : Sep 26 02:43:28 2026 GMT Subject: CN=6aadf6d0-9feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4f:4c:20:02:dc:0c:5c:07:4b:89:72:71:ce: ad:18:e9:5b:f9:78:db:e1:71:42:10:16:22:f2:1c: fb:bb:27:49:5c:7c:21:0a:81:4d:e4:c0:3a:43:1a: db:f6:a2:2f:6f:c3:bd:92:71:9c:74:51:21:53:f1: 8f:7c:c2:57:45:cd:3d:a8:1f:0c:d3:ef:bb:ed:0a: 8d:2d:c9:1d:db:aa:ad:11:d6:4f:bb:42:66:8d:dd: 5c:81:78:0c:28:c4:91:e6:b9:17:b9:9f:61:4d:d3: c2:6c:4c:59:92:2b:fd:f4:d4:28:72:84:6d:b7:41: 9b:bb:d7:49:fa:56:8c:8d:95:8f:6a:90:6a:9d:03: 6b:9b:6c:fe:45:8b:c2:f5:9b:0e:31:6c:47:c9:e8: 1f:a6:ed:b5:e6:2c:30:1d:9d:70:93:1b:fa:f8:25: ea:b2:91:54:ce:cf:64:10:a1:03:51:4e:5d:a3:82: fe:4c:be:24:2c:99:21:a1:8c:69:0f:c3:38:f9:92: c8:42:57:43:ce:37:23:ce:19:34:ea:60:69:ac:82: ab:5f:43:38:d3:d2:6c:8b:b3:b5:ac:84:28:7e:d3: df:96:12:dd:0a:1a:7f:cf:b2:8f:f0:3d:fb:b1:e8: 57:fd:12:96:ec:ef:e2:6d:86:87:4f:14:87:a8:ef: 91:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:45:E6:95:D6:02:B0:39:34:E6:3F:86:13:08:90:E6:CA:E9:D4:4B X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:3a:65:f3:03:e9:2e:ec:d8:a0:7e:6d:50:e3:92:63:3b:75: 71:3a:90:36:4d:76:68:76:42:00:e4:43:61:1f:d5:30:d2:15: fd:5f:14:4b:68:37:7e:2f:7e:84:14:d9:f7:ab:4e:3f:d2:06: 45:c9:0b:f1:4d:1f:1f:6b:3f:1c:9d:5a:93:3a:45:24:27:2a: b3:d4:8a:9c:a8:a7:14:75:cc:ed:b8:d1:b0:42:38:14:f5:8f: 48:3f:b9:df:d3:6e:7a:cc:1e:5f:7e:cb:4c:78:32:da:0f:18: 48:59:83:17:8a:70:4e:49:a5:d5:ab:c5:32:de:5f:64:ab:28: 66:35:b2:61:36:5d:68:de:5b:f6:4c:af:3a:7c:0f:11:c0:d7: d9:a5:52:2d:15:8c:ea:cb:a1:f0:46:1a:3f:63:d3:b2:1f:a6: cb:89:bd:48:8c:60:43:33:fd:cd:83:43:84:27:74:d4:11:1c: a1:f9:fa:8c:87:db:4b:53:3c:0e:08:33:3e:f6:cf:74:30:18: 1a:d4:4f:88:d7:0b:a6:11:8a:c7:46:87:c4:ae:34:48:5e:2b: c8:29:91:53:d3:07:09:d0:93:62:db:77:6b:db:1d:bf:e2:3b: f5:0f:2a:c8:e5:df:35:89:d8:7d:b1:8b:75:2c:16:31:1d:09: 59:67:6f:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjYwOTE5MDI0MzI4WhcNMjYwOTI2MDI0MzI4WjAYMRYwFAYD VQQDEw02YWFkZjZkMC05ZmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoE9MIALcDFwHS4lycc6tGOlb+Xjb4XFCEBYi8hz7uydJXHwhCoFN5MA6Qxrb 9qIvb8O9knGcdFEhU/GPfMJXRc09qB8M0++77QqNLckd26qtEdZPu0Jmjd1cgXgM KMSR5rkXuZ9hTdPCbExZkiv99NQocoRtt0Gbu9dJ+laMjZWPapBqnQNrm2z+RYvC 9ZsOMWxHyegfpu215iwwHZ1wkxv6+CXqspFUzs9kEKEDUU5do4L+TL4kLJkhoYxp D8M4+ZLIQldDzjcjzhk06mBprIKrX0M409Jsi7O1rIQoftPflhLdChp/z7KP8D37 sehX/RKW7O/ibYaHTxSHqO+RmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFVF5pXW ArA5NOY/hhMIkObK6dRLMB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWTpl8wPpLuzYoH5tUOOSYzt1cTqQNk12aHZCAORDYR/VMNIV/V8US2g3fi9+ hBTZ96tOP9IGRckL8U0fH2s/HJ1akzpFJCcqs9SKnKinFHXM7bjRsEI4FPWPSD+5 39NuesweX37LTHgy2g8YSFmDF4pwTkml1avFMt5fZKsoZjWyYTZdaN5b9kyvOnwP EcDX2aVSLRWM6suh8EYaP2PTsh+my4m9SIxgQzP9zYNDhCd01BEcofn6jIfbS1M8 DggzPvbPdDAYGtRPiNcLphGKx0aHxK40SF4ryCmRU9MHCdCTYtt3a9sdv+I79Q8q yOXfNYnYfbGLdSwWMR0JWWdvxA== -----END CERTIFICATE-----Generated at Sat Sep 19 09:14:14 2026 by rpki-client