$ rpki-client -vvvf rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft File: NkbrHzcLfmPR823rNsJHbJbmuug.mft (raw, json) Hash identifier: zl18o11nrGHGkQLaPcV6U2cyH0OYPLLQgPYg3wy/IGs= Subject key identifier: 8E:09:B3:23:F9:EB:18:32:65:87:CE:1F:07:6F:14:DE:0A:04:CD:04 Authority key identifier: 36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 Certificate issuer: /CN=A9113BE5/serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Certificate serial: 03D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft Manifest number: 03BF Signing time: Mon 21 Sep 2026 00:24:21 +0000 Manifest this update: Mon 21 Sep 2026 00:24:20 +0000 Manifest next update: Mon 28 Sep 2026 00:24:20 +0000 Files and hashes: 1: NkbrHzcLfmPR823rNsJHbJbmuug.crl (hash: aYi9C8C1AgmWZofp4ZUNbm9v/jnA8OhRx5alVh+xkbU=) 2: F3B00CD2666C11EEB1B4711CC4F9AE02.roa (hash: GEMe9ump7DziyClNxc0hJy5hK+NWLlXJWoTI2Zbh1v0=) 3: 627A6758DF2A11EEBC440C5EC4F9AE02.roa (hash: 5OUj2P3cZH3wkGmc2rAIZUnruDYVCrQATzxWwxl+fw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 977 (0x3d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BE5, serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Validity Not Before: Sep 21 00:24:20 2026 GMT Not After : Sep 28 00:24:20 2026 GMT Subject: CN=6ab07935-923e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:08:0a:48:ae:cf:9a:f3:18:a7:ee:5f:10:fd: db:a3:ed:97:3f:a4:a1:46:fc:03:a5:08:eb:ba:3d: a8:45:75:cf:99:ca:0f:74:f0:3b:1f:30:4d:8e:f8: 88:82:ce:67:9f:8c:d5:ef:22:de:f8:5b:85:57:b2: e3:d3:ad:da:cd:a5:5e:1b:e8:d6:ef:75:3f:a2:8f: 74:36:0a:ea:81:71:0b:48:86:30:27:f2:b6:a3:0f: bd:17:b9:3f:53:4b:aa:57:b7:9b:eb:52:dd:da:e1: 5b:19:dd:e7:92:40:05:80:e3:08:60:d5:8a:ac:57: 87:6d:99:48:fa:a9:c2:dd:32:c9:df:39:2c:46:83: 95:97:e7:75:6e:af:4f:61:1f:23:06:30:2a:d1:30: a7:8d:33:3a:34:71:ba:7c:ca:c6:f4:a6:59:d4:9a: e4:bc:ca:85:7a:19:2c:8d:a0:f4:6b:ea:f5:aa:16: ac:39:86:c4:74:39:25:97:65:90:8b:7b:da:c0:c8: f0:00:52:0e:b4:47:60:4f:b7:6c:c5:12:4d:99:ea: 7d:16:b0:fc:27:20:3b:62:3d:ac:c0:97:b3:ca:cb: e7:75:0e:2c:b1:99:56:7c:56:2e:9f:cd:89:fc:ea: fc:b7:5e:d1:95:4c:fd:7f:4c:28:be:11:9f:6e:ab: e8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:09:B3:23:F9:EB:18:32:65:87:CE:1F:07:6F:14:DE:0A:04:CD:04 X509v3 Authority Key Identifier: keyid:36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:69:b6:28:f8:78:04:4a:53:1d:a3:b5:7a:b1:ca:4d:ef:08: 7c:39:f8:af:6c:c7:41:cd:e1:59:35:b5:a7:fa:a4:8f:77:02: 37:92:60:50:f3:52:68:dd:c3:ef:7f:99:42:13:9a:43:8e:13: b3:50:d2:e7:e0:1e:b3:1f:c0:c5:17:41:93:ce:17:10:8f:84: 92:ab:03:2a:07:28:57:9a:c3:2f:35:36:8e:74:39:cc:32:ce: 76:52:a9:6f:56:e9:53:11:24:6f:96:66:56:ed:1b:28:6f:f3: 07:9f:7f:b0:b6:66:d2:0f:12:f8:8a:3e:3a:f3:5d:25:56:bf: a1:cc:69:8b:35:72:26:f4:01:da:c3:ea:16:41:7d:6f:37:19: 8e:b0:54:84:a6:8a:46:33:bc:1a:93:37:68:c7:60:cb:d0:cb: 7e:6f:ff:c8:40:de:66:86:bb:40:7b:67:fe:20:c9:1b:67:25: c4:6f:5f:80:57:7f:1e:99:a7:34:c4:7f:73:8a:e1:76:ef:65: 26:8b:84:8f:9e:66:fe:02:ae:a8:c8:14:be:80:19:13:c2:c1: 13:5f:42:68:b8:29:d1:7a:d5:41:5e:ca:ef:a9:cf:2a:5d:ac: 07:eb:81:9e:de:01:80:b3:85:53:f3:a9:0f:40:f9:14:21:e3: f5:a6:f3:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCRTUxMTAvBgNVBAUTKDM2NDZFQjFGMzcwQjdFNjNEMUYzNkRFQjM2QzI0NzZD OTZFNkJBRTgwHhcNMjYwOTIxMDAyNDIwWhcNMjYwOTI4MDAyNDIwWjAYMRYwFAYD VQQDEw02YWIwNzkzNS05MjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmAgKSK7PmvMYp+5fEP3bo+2XP6ShRvwDpQjruj2oRXXPmcoPdPA7HzBNjviI gs5nn4zV7yLe+FuFV7Lj063azaVeG+jW73U/oo90NgrqgXELSIYwJ/K2ow+9F7k/ U0uqV7eb61Ld2uFbGd3nkkAFgOMIYNWKrFeHbZlI+qnC3TLJ3zksRoOVl+d1bq9P YR8jBjAq0TCnjTM6NHG6fMrG9KZZ1JrkvMqFehksjaD0a+r1qhasOYbEdDkll2WQ i3vawMjwAFIOtEdgT7dsxRJNmep9FrD8JyA7Yj2swJezysvndQ4ssZlWfFYun82J /Or8t17RlUz9f0wovhGfbqvozwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI4JsyP5 6xgyZYfOHwdvFN4KBM0EMB8GA1UdIwQYMBaAFDZG6x83C35j0fNt6zbCR2yW5rro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0JFNS82MTFDNTEyQ0Yw RjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZtUFI4MjNyTnNKSGJKYm11 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rYnJIemNMZm1QUjgyM3JOc0pIYkpibXV1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0JFNS82MTFDNTEyQ0YwRjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZt UFI4MjNyTnNKSGJKYm11dWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHGm2KPh4BEpTHaO1erHKTe8IfDn4r2zHQc3hWTW1p/qkj3cCN5JgUPNSaN3D 73+ZQhOaQ44Ts1DS5+Aesx/AxRdBk84XEI+EkqsDKgcoV5rDLzU2jnQ5zDLOdlKp b1bpUxEkb5ZmVu0bKG/zB59/sLZm0g8S+Io+OvNdJVa/ocxpizVyJvQB2sPqFkF9 bzcZjrBUhKaKRjO8GpM3aMdgy9DLfm//yEDeZoa7QHtn/iDJG2clxG9fgFd/Hpmn NMR/c4rhdu9lJouEj55m/gKuqMgUvoAZE8LBE19CaLgp0XrVQV7K76nPKl2sB+uB nt4BgLOFU/OpD0D5FCHj9abz5g== -----END CERTIFICATE-----Generated at Mon Sep 21 10:07:20 2026 by rpki-client