$ rpki-client -vvvf rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft File: NaA6oUeNBoHAZxl2yftD9pMTgr4.mft (raw, json) Hash identifier: qcAmZ/obNWUopW+T8Iapl89XaZw5H5f7ORHJHUPX5SE= Subject key identifier: 86:D9:3F:CC:8C:E3:F9:8E:46:FA:90:04:92:97:9F:5A:A7:DA:D8:62 Authority key identifier: 35:A0:3A:A1:47:8D:06:81:C0:67:19:76:C9:FB:43:F6:93:13:82:BE Certificate issuer: /CN=A91161EB/serialNumber=35A03AA1478D0681C0671976C9FB43F6931382BE Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft Manifest number: 56 Signing time: Mon 21 Sep 2026 08:13:07 +0000 Manifest this update: Mon 21 Sep 2026 08:13:07 +0000 Manifest next update: Mon 28 Sep 2026 08:13:07 +0000 Files and hashes: 1: NaA6oUeNBoHAZxl2yftD9pMTgr4.crl (hash: oLCy91NvAmkBoFaGoRfIs9yJ163otLYLvImexIbGyoE=) 2: 3FAB1696ADA911F1A6606A8C6F11F970.roa (hash: Z1a/tuAmkiyt4Eq8nxykrWeYBIPm8sZY0IammJRdAN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.crl rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91161EB, serialNumber=35A03AA1478D0681C0671976C9FB43F6931382BE Validity Not Before: Sep 21 08:13:07 2026 GMT Not After : Sep 28 08:13:07 2026 GMT Subject: CN=6ab0e713-cf90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:91:3f:fb:43:28:65:90:38:00:ec:a9:9d:1d: de:19:8e:2a:f7:c8:54:06:f1:23:b5:24:1b:3e:b9: 51:bc:82:ae:81:57:54:41:05:19:60:f8:cf:8e:cf: ef:7f:ae:d6:a1:d8:03:8b:a8:aa:99:a3:34:be:e2: 43:17:6f:ff:33:e3:dd:78:53:22:76:ea:7b:94:14: 3b:47:6b:67:65:da:1e:2c:d7:de:0a:06:66:da:31: 44:a0:f9:e0:b0:ec:c8:57:02:2a:40:09:00:4a:08: 03:92:e5:a4:11:e9:5a:b4:ba:81:e0:28:b8:50:94: fc:21:bb:b4:fd:00:00:e8:12:6a:18:41:95:11:fe: 74:45:10:47:dc:1c:58:64:4a:f7:32:9c:ae:79:a2: ec:9b:4e:63:3e:d1:b1:e3:f5:ad:03:b5:27:dc:37: 29:c5:55:68:ca:47:b9:98:16:b7:a1:20:9c:00:a0: 5b:8a:f5:af:32:d9:a6:59:0e:39:2e:f6:49:bf:aa: d7:03:02:cf:51:3f:30:50:65:1f:a1:5b:43:fb:1a: b4:79:2d:7e:16:08:60:c6:e8:30:4c:42:c0:df:c4: eb:b0:11:b7:61:11:d2:58:62:99:72:4d:3d:6b:51: dd:ca:94:90:0f:5a:d5:4b:82:01:f2:08:50:58:68: 33:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D9:3F:CC:8C:E3:F9:8E:46:FA:90:04:92:97:9F:5A:A7:DA:D8:62 X509v3 Authority Key Identifier: keyid:35:A0:3A:A1:47:8D:06:81:C0:67:19:76:C9:FB:43:F6:93:13:82:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:42:55:8a:5c:56:5c:34:a2:a1:41:67:20:44:e4:f2:a1:82: b9:37:b7:a9:92:31:2d:26:74:67:d9:14:39:e9:86:ed:41:d7: 91:3b:39:68:b7:90:d2:3c:09:98:50:f3:b2:33:6e:95:d4:18: c4:04:f9:9f:69:87:00:bf:85:c4:f4:fd:15:7d:ca:85:e5:29: 9c:d3:94:2b:20:58:b0:82:81:6d:b4:04:b1:40:2d:12:35:ff: d8:7b:d9:45:d3:21:3b:3c:c3:a7:ed:c4:f2:e0:da:44:a3:37: 06:57:48:be:e9:90:43:aa:12:dd:17:7e:95:66:18:59:a5:a1: d6:bb:c2:a2:4f:8d:33:29:22:6c:71:bd:a4:bd:e5:c2:fa:59: 7d:f9:33:fc:f8:e7:7c:f9:77:8b:53:09:53:97:b9:67:12:28: d2:6b:e2:e7:4f:7d:05:65:39:eb:91:a9:65:c6:f5:f8:34:aa: 17:b7:ac:c4:c4:e6:1a:cd:14:f2:7a:25:4b:8e:d0:a7:3f:4d: 38:e2:12:5b:45:80:8f:f7:4b:1b:a3:41:a7:e3:9e:b5:4b:12: 1a:c0:8b:1b:c8:a5:9a:16:25:72:51:f7:06:ab:cc:97:42:91: d0:7e:e9:a4:94:af:1a:a6:72:21:c1:99:10:95:b8:2e:16:30: 1c:9e:b2:ec -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjFFQjExMC8GA1UEBRMoMzVBMDNBQTE0NzhEMDY4MUMwNjcxOTc2QzlGQjQzRjY5 MzEzODJCRTAeFw0yNjA5MjEwODEzMDdaFw0yNjA5MjgwODEzMDdaMBgxFjAUBgNV BAMTDTZhYjBlNzEzLWNmOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+kT/7QyhlkDgA7KmdHd4Zjir3yFQG8SO1JBs+uVG8gq6BV1RBBRlg+M+Oz+9/ rtah2AOLqKqZozS+4kMXb/8z4914UyJ26nuUFDtHa2dl2h4s194KBmbaMUSg+eCw 7MhXAipACQBKCAOS5aQR6Vq0uoHgKLhQlPwhu7T9AADoEmoYQZUR/nRFEEfcHFhk SvcynK55ouybTmM+0bHj9a0DtSfcNynFVWjKR7mYFrehIJwAoFuK9a8y2aZZDjku 9km/qtcDAs9RPzBQZR+hW0P7GrR5LX4WCGDG6DBMQsDfxOuwEbdhEdJYYplyTT1r Ud3KlJAPWtVLggHyCFBYaDMrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhtk/zIzj +Y5G+pAEkpefWqfa2GIwHwYDVR0jBBgwFoAUNaA6oUeNBoHAZxl2yftD9pMTgr4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2MUVCLzBBOTM4NUQwMzUw MjExRjFCMUZENkQ3NDlCODMzNzczL05hQTZvVWVOQm9IQVp4bDJ5ZnREOXBNVGdy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTmFBNm9VZU5Cb0hBWnhsMnlmdEQ5cE1UZ3I0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 MUVCLzBBOTM4NUQwMzUwMjExRjFCMUZENkQ3NDlCODMzNzczL05hQTZvVWVOQm9I QVp4bDJ5ZnREOXBNVGdyNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAOQlWKXFZcNKKhQWcgROTyoYK5N7epkjEtJnRn2RQ56YbtQdeROzlot5DSPAmY UPOyM26V1BjEBPmfaYcAv4XE9P0VfcqF5Smc05QrIFiwgoFttASxQC0SNf/Ye9lF 0yE7PMOn7cTy4NpEozcGV0i+6ZBDqhLdF36VZhhZpaHWu8KiT40zKSJscb2kveXC +ll9+TP8+Od8+XeLUwlTl7lnEijSa+LnT30FZTnrkallxvX4NKoXt6zExOYazRTy eiVLjtCnP0044hJbRYCP90sbo0Gn4561SxIawIsbyKWaFiVyUfcGq8yXQpHQfumk lK8apnIhwZkQlbguFjAcnrLs -----END CERTIFICATE-----Generated at Tue Sep 22 18:10:04 2026 by rpki-client