$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft File: NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft (raw, json) Hash identifier: wC8hSI+7YrFE42qNcQPVe/xM00WsOcoNDsFPBhMYxI0= Subject key identifier: 2F:B7:A0:AC:60:93:0D:39:2B:F3:51:26:EA:25:02:B7:9A:7B:E5:87 Authority key identifier: 34:0F:81:34:33:71:9A:76:0E:3B:FE:21:93:36:87:26:11:79:C3:27 Certificate issuer: /CN=A91FA562/serialNumber=340F813433719A760E3BFE21933687261179C327 Certificate serial: 0276 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft Manifest number: 026F Signing time: Mon 05 Oct 2026 02:23:01 +0000 Manifest this update: Mon 05 Oct 2026 02:23:00 +0000 Manifest next update: Mon 12 Oct 2026 02:23:00 +0000 Files and hashes: 1: NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl (hash: Q/StCdP5+1AEiN2/PilsCOUVBHh8wYWTKRNSB/o947A=) 2: 7588035C913E11EFB46E9A72C4F9AE02.roa (hash: dL/U4UhMZabXz3OJx25MIDSywgaSKV+Fyuq3FcC4oxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 02:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 630 (0x276) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA562, serialNumber=340F813433719A760E3BFE21933687261179C327 Validity Not Before: Oct 5 02:23:00 2026 GMT Not After : Oct 12 02:23:00 2026 GMT Subject: CN=6ac30a05-adaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f1:69:44:53:7f:19:77:9d:c2:0b:39:b7:4f: 8b:fd:69:6f:d7:c8:60:59:c2:f5:fa:7f:32:77:8b: 2d:81:d6:56:24:14:ff:45:10:c1:69:42:fe:3b:47: 5e:4f:a5:99:a6:93:30:1c:1d:d6:d4:8a:f4:23:7f: 62:eb:6e:aa:a7:71:72:63:dc:06:69:8a:d0:41:6e: e6:ae:21:2f:7e:7b:d3:4a:9b:7c:92:0b:02:89:fa: 1e:69:04:35:b0:ca:41:70:17:93:77:3e:e6:d4:f8: 33:7a:0b:ab:f0:06:a1:a9:44:18:ca:e5:74:bb:67: 24:55:0b:98:bb:03:9b:2f:d9:15:78:1c:c8:43:c0: 76:88:eb:b7:c5:64:10:70:3e:8d:7b:b8:f6:14:2e: dd:50:f5:99:57:78:b7:a3:ae:d5:c5:34:1b:8a:e2: 42:3e:3a:02:fe:2a:59:bf:08:3a:a6:45:2c:ba:ce: 48:f8:59:96:f4:31:fd:79:5a:cc:77:41:21:03:1b: ac:df:3a:32:03:b3:30:4e:f8:c5:b0:3d:26:41:be: 55:27:a6:f1:89:60:2f:9e:db:bd:66:6a:f5:b2:54: d6:12:b2:e4:51:88:b9:30:50:ea:e2:0f:b5:aa:a3: cb:32:d0:31:4f:4f:0d:15:38:df:f6:8d:c7:4d:ab: 0a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B7:A0:AC:60:93:0D:39:2B:F3:51:26:EA:25:02:B7:9A:7B:E5:87 X509v3 Authority Key Identifier: keyid:34:0F:81:34:33:71:9A:76:0E:3B:FE:21:93:36:87:26:11:79:C3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c6:e2:91:59:2f:a0:a3:61:06:6e:dd:e0:90:f9:eb:6e:60: dc:92:95:60:0c:68:f3:64:96:be:da:aa:21:b1:08:52:39:3b: ae:71:ba:31:82:58:30:69:86:d2:60:d3:09:cb:24:a6:50:e4: af:52:73:8c:5a:22:cc:c0:92:80:ce:cc:e7:75:bc:bf:57:5c: 0f:a6:16:e7:e1:b3:9a:28:26:45:02:9a:ab:68:0e:ca:6e:40: 0b:05:80:6c:e7:a5:1d:e9:e1:56:4c:dd:57:7e:0a:80:88:60: 96:11:50:64:53:35:d3:55:3b:b6:a6:7c:f1:d8:f8:68:9f:a0: 87:18:43:55:0f:19:78:33:31:ee:be:e5:3b:09:b6:38:7f:22: e6:d8:2d:d4:83:08:57:39:ef:6f:88:ef:75:d5:2d:7e:5d:66: c1:1a:ac:7a:04:0b:06:41:18:f0:59:98:5b:82:c6:c0:c8:6d: a2:e1:ec:d1:47:df:4a:6e:47:1d:1a:82:84:7a:e5:d4:65:df: a8:b6:63:3d:b1:b0:0d:00:19:59:79:b9:47:5b:e5:f4:23:ff: a1:ea:61:5d:a6:ab:53:7a:88:91:31:8d:64:c4:ae:f5:d3:7c: 2c:5b:25:a5:7e:4f:f4:1d:3f:ba:70:25:53:46:34:1e:03:f3: ba:f7:5b:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1NjIxMTAvBgNVBAUTKDM0MEY4MTM0MzM3MTlBNzYwRTNCRkUyMTkzMzY4NzI2 MTE3OUMzMjcwHhcNMjYxMDA1MDIyMzAwWhcNMjYxMDEyMDIyMzAwWjAYMRYwFAYD VQQDEw02YWMzMGEwNS1hZGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/FpRFN/GXedwgs5t0+L/Wlv18hgWcL1+n8yd4stgdZWJBT/RRDBaUL+O0de T6WZppMwHB3W1Ir0I39i626qp3FyY9wGaYrQQW7mriEvfnvTSpt8kgsCifoeaQQ1 sMpBcBeTdz7m1Pgzegur8AahqUQYyuV0u2ckVQuYuwObL9kVeBzIQ8B2iOu3xWQQ cD6Ne7j2FC7dUPWZV3i3o67VxTQbiuJCPjoC/ipZvwg6pkUsus5I+FmW9DH9eVrM d0EhAxus3zoyA7MwTvjFsD0mQb5VJ6bxiWAvntu9Zmr1slTWErLkUYi5MFDq4g+1 qqPLMtAxT08NFTjf9o3HTasKGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC+3oKxg kw05K/NRJuolAreae+WHMB8GA1UdIwQYMBaAFDQPgTQzcZp2Djv+IZM2hyYRecMn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTU2Mi8yNjU3RjczRTBC QzkxMUVFOEY3OUJCNURDNEY5QUUwMi9OQS1CTkROeG1uWU9PXzRoa3phSEpoRjV3 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BLUJORE54bW5ZT09fNGhremFISmhGNXd5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTU2Mi8yNjU3RjczRTBCQzkxMUVFOEY3OUJCNURDNEY5QUUwMi9OQS1CTkROeG1u WU9PXzRoa3phSEpoRjV3eWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXsbikVkvoKNhBm7d4JD5625g3JKVYAxo82SWvtqqIbEIUjk7rnG6MYJYMGmG 0mDTCcskplDkr1JzjFoizMCSgM7M53W8v1dcD6YW5+GzmigmRQKaq2gOym5ACwWA bOelHenhVkzdV34KgIhglhFQZFM101U7tqZ88dj4aJ+ghxhDVQ8ZeDMx7r7lOwm2 OH8i5tgt1IMIVznvb4jvddUtfl1mwRqsegQLBkEY8FmYW4LGwMhtouHs0UffSm5H HRqChHrl1GXfqLZjPbGwDQAZWXm5R1vl9CP/oephXaarU3qIkTGNZMSu9dN8LFsl pX5P9B0/unAlU0Y0HgPzuvdbBQ== -----END CERTIFICATE-----Generated at Mon Oct 5 06:45:21 2026 by rpki-client