$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft File: NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft (raw, json) Hash identifier: 6lQMsKqR8X9UkNcirE3ZVXUZ0ESHtmJSQeow4hecHhw= Subject key identifier: BE:A1:86:E1:2C:77:20:57:D7:BD:B2:EF:0F:99:4D:E2:0A:7F:3F:AD Authority key identifier: 37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A Certificate issuer: /CN=A91DE7DE/serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Certificate serial: 12AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft Manifest number: 127C Signing time: Fri 04 Sep 2026 17:04:22 +0000 Manifest this update: Fri 04 Sep 2026 17:04:21 +0000 Manifest next update: Fri 11 Sep 2026 17:04:21 +0000 Files and hashes: 1: NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl (hash: 1WQncNEhLZUwjbzjDDmpIudTJ9uZRcVTSJY+Cz3FH8g=) 2: 7F7F1470091D11F0B7E95627C4F9AE02.roa (hash: f+/uDtECPh4z9lUgGecamZwBqy/HTP1IaGpVkdXlDqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 17:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4782 (0x12ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Validity Not Before: Sep 4 17:04:21 2026 GMT Not After : Sep 11 17:04:21 2026 GMT Subject: CN=6a9afa16-60d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b9:db:cb:0f:d6:e2:7e:17:9a:f9:44:95:8e: cd:4a:27:b5:2b:f2:b5:86:1e:d4:67:6a:fb:05:ee: 69:95:11:dd:32:3e:b5:c4:84:b6:cd:c7:3a:51:25: 57:3e:d6:08:65:75:92:38:d2:4b:8a:59:45:e2:84: 47:0c:de:54:58:91:c0:f1:97:a6:e2:e2:68:61:0b: d5:aa:9c:38:5a:5b:a9:68:92:6e:98:44:0d:d8:1f: 5c:e6:cf:e4:7b:24:6e:74:c7:6e:33:97:3b:6d:12: 71:7c:6c:01:68:bc:ac:06:a6:e8:50:4b:53:ce:34: c5:a8:a7:14:27:9e:e8:34:d6:98:cf:fd:85:af:84: 57:13:f9:65:61:f0:60:9e:f0:02:5f:56:0a:1c:3e: c4:7c:d8:6d:df:bd:03:4e:f3:79:f6:34:26:e4:fe: a9:50:36:71:8b:4f:c5:69:b8:28:3b:37:74:d7:65: 99:b1:bc:c1:8c:42:a7:bd:a7:66:fa:86:f2:83:7d: 8e:26:71:1b:76:9c:28:c4:8e:e1:7a:46:c1:f8:3d: 56:97:62:62:ce:2f:0a:97:39:40:21:c0:45:d3:0c: 48:ad:1b:3a:f2:3b:c5:34:76:3d:46:1e:52:56:4e: 9f:d0:1f:65:75:5d:4d:90:b7:6e:f5:21:0f:29:17: d6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A1:86:E1:2C:77:20:57:D7:BD:B2:EF:0F:99:4D:E2:0A:7F:3F:AD X509v3 Authority Key Identifier: keyid:37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:eb:43:01:33:b4:9e:1f:6f:ab:b8:95:de:df:4f:6d:fe:ed: 77:d2:c0:8e:62:00:1b:a1:67:47:ae:85:f1:ce:7b:af:9c:35: 6e:41:0c:61:27:8b:4c:56:fd:52:75:ef:11:10:6e:8f:0f:0d: a9:ed:66:dd:f5:56:06:08:a0:17:2e:8c:53:8e:93:af:42:c4: 91:84:40:ff:b1:84:fc:31:45:f1:81:d8:4a:09:ad:1b:d3:5e: d9:72:fc:5e:4e:87:f8:0d:70:7a:dc:b7:8c:74:a2:4c:6f:e1: 6d:80:50:0a:72:67:50:28:3b:37:a3:f8:77:93:0a:a6:f4:30: c3:42:b7:e1:17:67:25:93:bc:27:6a:08:9a:b7:78:b8:c3:48: 10:92:a2:26:05:73:c6:ac:7c:c9:56:9f:e6:54:55:da:f2:a9: c4:cf:ce:25:f9:67:fd:59:2e:1f:89:78:ca:b7:5e:0d:0f:14: b1:70:16:66:48:41:ff:b5:a0:ee:61:bf:b2:24:5e:f7:6e:4f: c7:80:9f:7d:84:d0:72:de:21:d7:97:c4:bd:2e:4e:b7:89:8b: c8:ae:9c:21:57:9b:5e:24:81:81:75:b7:ff:78:56:3c:a7:f0: ba:17:2a:6b:20:9a:ea:cc:70:d8:0b:bc:fa:ae:5c:4c:a9:d9: ea:1f:0e:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDM3MTI3M0NGRDhDMkM5MDhCNjkxRDZCRUExNzVFOERF ODJCRDQzOUEwHhcNMjYwOTA0MTcwNDIxWhcNMjYwOTExMTcwNDIxWjAYMRYwFAYD VQQDEw02YTlhZmExNi02MGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57nbyw/W4n4XmvlElY7NSie1K/K1hh7UZ2r7Be5plRHdMj61xIS2zcc6USVX PtYIZXWSONJLillF4oRHDN5UWJHA8Zem4uJoYQvVqpw4WlupaJJumEQN2B9c5s/k eyRudMduM5c7bRJxfGwBaLysBqboUEtTzjTFqKcUJ57oNNaYz/2Fr4RXE/llYfBg nvACX1YKHD7EfNht370DTvN59jQm5P6pUDZxi0/FabgoOzd012WZsbzBjEKnvadm +obyg32OJnEbdpwoxI7hekbB+D1Wl2Jizi8KlzlAIcBF0wxIrRs68jvFNHY9Rh5S Vk6f0B9ldV1NkLdu9SEPKRfWaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL6hhuEs dyBX172y7w+ZTeIKfz+tMB8GA1UdIwQYMBaAFDcSc8/YwskItpHWvqF16N6CvUOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DRUUzRDcxODA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lRaTJrZGEtb1hYbzNvSzlR NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL054Snp6OWpDeVFpMmtkYS1vWFhvM29LOVE1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DRUUzRDcxODA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lR aTJrZGEtb1hYbzNvSzlRNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa+tDATO0nh9vq7iV3t9Pbf7td9LAjmIAG6FnR66F8c57r5w1bkEMYSeLTFb9 UnXvERBujw8Nqe1m3fVWBgigFy6MU46Tr0LEkYRA/7GE/DFF8YHYSgmtG9Ne2XL8 Xk6H+A1wety3jHSiTG/hbYBQCnJnUCg7N6P4d5MKpvQww0K34RdnJZO8J2oImrd4 uMNIEJKiJgVzxqx8yVaf5lRV2vKpxM/OJfln/VkuH4l4yrdeDQ8UsXAWZkhB/7Wg 7mG/siRe925Px4CffYTQct4h15fEvS5Ot4mLyK6cIVebXiSBgXW3/3hWPKfwuhcq ayCa6sxw2Au8+q5cTKnZ6h8OXg== -----END CERTIFICATE-----Generated at Sat Sep 5 09:41:54 2026 by rpki-client