$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft File: NebIf2uhtlE6EnD23BNt23ETZFc.mft (raw, json) Hash identifier: 4aWCfe3y+p7y5qClGN6cfURpuczgat6dl0RjsvjIE5Y= Subject key identifier: AB:B9:29:0F:F9:A9:75:55:4D:00:2A:8A:03:40:DD:6E:F3:BC:79:61 Authority key identifier: 35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57 Certificate issuer: /CN=A91F9749/serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457 Certificate serial: 0430 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft Manifest number: 0429 Signing time: Tue 01 Sep 2026 00:11:53 +0000 Manifest this update: Tue 01 Sep 2026 00:11:52 +0000 Manifest next update: Tue 08 Sep 2026 00:11:52 +0000 Files and hashes: 1: NebIf2uhtlE6EnD23BNt23ETZFc.crl (hash: GMiQ+dlvUW6EkcRh33d7e4eBzrrj3F5tm9R3XLxlvZs=) 2: 97B81DD6BF9F11ECAB5B1239C4F9AE02.roa (hash: nCTovFi354+ZfaPTQ0ztwkkd94a5/Uc+5BEDc/vwPfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Sep 2026 00:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1072 (0x430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9749, serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457 Validity Not Before: Sep 1 00:11:52 2026 GMT Not After : Sep 8 00:11:52 2026 GMT Subject: CN=6a961849-4f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5f:7d:48:b5:27:c7:da:17:3f:ee:a6:da:c8: c2:4c:99:21:4d:fd:1c:9d:01:88:e1:cc:d0:5c:7a: db:49:0e:c0:59:35:f8:a2:83:93:c9:88:9c:7a:a7: 71:08:19:f5:0b:c3:2a:36:11:bf:99:79:cb:56:9d: 74:42:a1:53:f5:de:d2:8b:15:f7:be:ac:6e:1a:b2: 43:fa:04:03:35:64:4b:84:ec:d0:6e:82:dd:4c:f4: 9f:ca:03:92:c7:38:f8:d5:18:12:c1:cf:0b:33:8e: c2:d9:71:6a:d7:a2:9d:7f:b2:75:5d:21:a3:48:14: 0b:54:4d:bd:f5:8f:f2:99:96:82:9c:50:96:43:b7: e2:e0:5c:ba:ad:4b:eb:46:66:b8:50:85:38:f5:b1: 36:3f:24:8e:55:f2:b4:26:4e:ca:7f:15:98:be:9c: 12:6a:8d:78:a1:a3:a7:34:44:ae:62:2b:8a:e7:fc: 61:7a:d7:16:33:57:95:ef:a5:74:2e:3f:b6:45:bb: 65:d8:f1:23:8a:78:ed:78:7a:1e:4a:dd:48:86:4f: d4:5a:15:da:5b:ae:be:9f:45:9e:16:e5:ad:78:b1: 97:68:72:24:e2:7f:34:9c:ad:5e:6c:c2:7b:16:c6: f6:24:f4:4a:44:3c:5f:4a:a7:e6:8c:e0:d7:a0:0e: b3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B9:29:0F:F9:A9:75:55:4D:00:2A:8A:03:40:DD:6E:F3:BC:79:61 X509v3 Authority Key Identifier: keyid:35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9d:55:4f:17:0c:8f:27:b7:2a:5d:9b:55:3b:55:ec:f5:e9: 77:58:8e:fb:10:5f:20:92:d7:62:0a:10:ae:dc:13:ea:c7:31: b6:63:4d:f3:f9:92:36:ae:c3:33:a2:e5:0c:d9:35:cb:a4:3d: 5a:20:ea:d1:96:fd:bb:c6:ee:f1:5c:e2:ae:e6:35:02:3f:29: 8e:53:29:a2:3b:39:66:7d:2b:53:e3:38:bd:91:4e:82:cc:13: 81:b4:e0:5f:5f:03:45:18:e2:10:1b:36:62:09:d2:17:93:8a: 97:bf:bb:0e:81:1f:04:5e:75:89:eb:d7:0f:82:29:31:b1:4a: 06:2c:aa:ae:5d:cd:e2:74:1d:4f:f1:a2:27:af:ef:c5:82:c3: 03:f9:23:15:ec:16:73:68:6f:db:9c:2b:7f:2c:e1:93:d2:3e: ec:cb:7a:2a:f9:03:40:b9:4f:9b:be:0a:3c:4e:5f:d8:40:0e: d3:aa:5d:ea:e1:f5:0d:0a:0e:bb:4e:79:d3:14:8c:89:71:46: e1:0f:0a:de:a0:47:cd:62:ca:9c:f6:ee:ff:e3:31:32:10:e7: df:40:20:19:5e:9e:e2:f9:fc:23:e9:3b:b0:b7:66:e8:83:e0: c6:48:c7:40:89:1a:96:49:65:5d:a5:81:72:4c:7f:be:ab:e0: 8f:2f:bf:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk3NDkxMTAvBgNVBAUTKDM1RTZDODdGNkJBMUI2NTEzQTEyNzBGNkRDMTM2RERC NzExMzY0NTcwHhcNMjYwOTAxMDAxMTUyWhcNMjYwOTA4MDAxMTUyWjAYMRYwFAYD VQQDEw02YTk2MTg0OS00ZjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz199SLUnx9oXP+6m2sjCTJkhTf0cnQGI4czQXHrbSQ7AWTX4ooOTyYiceqdx CBn1C8MqNhG/mXnLVp10QqFT9d7SixX3vqxuGrJD+gQDNWRLhOzQboLdTPSfygOS xzj41RgSwc8LM47C2XFq16Kdf7J1XSGjSBQLVE299Y/ymZaCnFCWQ7fi4Fy6rUvr Rma4UIU49bE2PySOVfK0Jk7KfxWYvpwSao14oaOnNESuYiuK5/xhetcWM1eV76V0 Lj+2Rbtl2PEjinjteHoeSt1Ihk/UWhXaW66+n0WeFuWteLGXaHIk4n80nK1ebMJ7 Fsb2JPRKRDxfSqfmjODXoA6zUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKu5KQ/5 qXVVTQAqigNA3W7zvHlhMB8GA1UdIwQYMBaAFDXmyH9robZROhJw9twTbdtxE2RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTc0OS85OUQxN0Q5NkJG OUIxMUVDQUQzQzBBMzBDNEY5QUUwMi9OZWJJZjJ1aHRsRTZFbkQyM0JOdDIzRVRa RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05lYklmMnVodGxFNkVuRDIzQk50MjNFVFpGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTc0OS85OUQxN0Q5NkJGOUIxMUVDQUQzQzBBMzBDNEY5QUUwMi9OZWJJZjJ1aHRs RTZFbkQyM0JOdDIzRVRaRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATp1VTxcMjye3Kl2bVTtV7PXpd1iO+xBfIJLXYgoQrtwT6scxtmNN8/mSNq7D M6LlDNk1y6Q9WiDq0Zb9u8bu8VziruY1Aj8pjlMpojs5Zn0rU+M4vZFOgswTgbTg X18DRRjiEBs2YgnSF5OKl7+7DoEfBF51ievXD4IpMbFKBiyqrl3N4nQdT/GiJ6/v xYLDA/kjFewWc2hv25wrfyzhk9I+7Mt6KvkDQLlPm74KPE5f2EAO06pd6uH1DQoO u0550xSMiXFG4Q8K3qBHzWLKnPbu/+MxMhDn30AgGV6e4vn8I+k7sLdm6IPgxkjH QIkalkllXaWBckx/vqvgjy+/SQ== -----END CERTIFICATE-----Generated at Tue Sep 1 04:50:21 2026 by rpki-client