$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft File: NdqtT3Wuk43GUzSEzejIF93Csig.mft (raw, json) Hash identifier: z6KAg801Cy75lnppyvfCCCwkHFSoY6kbVOh3VU32cM8= Subject key identifier: E4:38:27:5D:8F:45:73:29:BF:DC:BF:97:23:E0:D4:76:23:EB:2C:14 Authority key identifier: 35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 Certificate issuer: /CN=A911E351/serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Certificate serial: 04F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft Manifest number: 04F1 Signing time: Sat 26 Sep 2026 23:44:42 +0000 Manifest this update: Sat 26 Sep 2026 23:44:41 +0000 Manifest next update: Sat 03 Oct 2026 23:44:41 +0000 Files and hashes: 1: NdqtT3Wuk43GUzSEzejIF93Csig.crl (hash: E1QUfIfR7087eWLOwt4Q3fdh+qvvaRhVN9DpQqliYC8=) 2: E9ED080A785011ECBD2B6A10C4F9AE02.roa (hash: 0VJSSuNZNqd6Mi6Fcfyrw/oW75/x9p5H40HqIw6BOBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 23:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1272 (0x4f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E351, serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Validity Not Before: Sep 26 23:44:41 2026 GMT Not After : Oct 3 23:44:41 2026 GMT Subject: CN=6ab858ea-785f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:96:7b:b4:82:58:11:1b:4b:9c:55:4d:8f:2f: 0a:39:12:e7:62:ef:6e:64:69:b2:3f:ae:94:9d:b9: a2:08:ae:a2:cc:b4:a1:ad:aa:05:7a:6f:d4:2d:13: 25:ae:5c:29:05:f8:94:1d:44:89:ce:a5:3b:48:af: 2e:53:05:e3:c2:23:0e:d7:bb:27:df:8a:26:91:67: ae:64:f4:2c:1e:33:c2:ce:36:45:c5:05:16:08:ec: bd:ac:e0:09:04:60:82:59:e8:a8:04:5a:39:76:fd: c1:5a:9e:1a:9d:a6:aa:2c:e3:75:69:61:b1:20:cc: 07:7e:ed:a4:12:2a:57:ff:8d:d8:e6:9a:07:4e:16: 3a:0a:e9:10:38:31:64:b4:4a:ee:fd:26:07:c9:04: 16:1c:01:77:7d:61:4c:a1:82:a2:56:ca:0d:8f:96: 5c:39:a5:df:bd:04:f7:82:6a:7f:d3:11:67:24:d3: f3:58:70:24:7c:e7:a8:31:f4:b5:6d:17:5e:aa:9d: 2f:de:40:92:ca:be:78:41:a7:bc:e1:21:76:71:6e: 91:67:bd:1d:07:b0:43:a4:17:66:23:41:ae:15:22: 27:47:ad:2f:e7:1c:30:b1:54:79:94:6e:3b:fe:aa: 90:ce:d2:99:da:19:d5:a3:9d:27:d6:be:46:7e:fa: 71:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:38:27:5D:8F:45:73:29:BF:DC:BF:97:23:E0:D4:76:23:EB:2C:14 X509v3 Authority Key Identifier: keyid:35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e9:4b:73:63:83:28:24:07:2e:99:a3:b9:7e:81:19:fe:ee: a8:c4:94:1e:ba:e4:87:7e:23:92:6b:e1:70:38:ce:46:43:7c: c4:8a:df:95:12:32:25:25:70:74:5f:65:bc:64:50:a5:22:e4: ce:8e:de:91:5c:8f:a4:93:e3:98:ba:31:cd:9f:9f:d6:d1:fc: 59:3d:40:6b:72:8e:26:e9:91:68:46:ad:5b:1d:e3:53:1d:35: 0e:0e:bf:3e:75:fa:d3:90:03:da:dd:c5:6e:30:a5:12:56:d1: 77:dc:22:73:79:0b:23:94:b1:34:16:89:17:80:ee:4f:4b:c7: 4f:6c:43:62:02:69:e6:0f:7b:68:da:03:9e:cc:02:3c:21:0f: de:98:83:1e:1a:dd:cd:1e:fc:d4:77:9f:3d:db:73:f1:fa:84: 82:1f:6a:33:d7:1d:63:e8:04:cc:69:1e:34:e4:e7:93:ee:41: cb:4c:1c:c4:3f:c8:06:4a:76:d1:1b:47:a9:7b:2b:6e:44:ee: 77:16:77:64:9a:d3:18:87:06:49:a8:96:fc:5a:08:76:83:8c: de:7a:e0:4f:75:0b:08:d1:c7:ba:96:e9:0e:c4:73:4b:4d:05: 9c:17:16:25:81:d4:0a:0f:45:8e:27:fa:24:4a:2e:59:58:71: 5d:af:d3:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUzNTExMTAvBgNVBAUTKDM1REFBRDRGNzVBRTkzOERDNjUzMzQ4NENERThDODE3 RERDMkIyMjgwHhcNMjYwOTI2MjM0NDQxWhcNMjYxMDAzMjM0NDQxWjAYMRYwFAYD VQQDEw02YWI4NThlYS03ODVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspZ7tIJYERtLnFVNjy8KORLnYu9uZGmyP66UnbmiCK6izLShraoFem/ULRMl rlwpBfiUHUSJzqU7SK8uUwXjwiMO17sn34omkWeuZPQsHjPCzjZFxQUWCOy9rOAJ BGCCWeioBFo5dv3BWp4anaaqLON1aWGxIMwHfu2kEipX/43Y5poHThY6CukQODFk tEru/SYHyQQWHAF3fWFMoYKiVsoNj5ZcOaXfvQT3gmp/0xFnJNPzWHAkfOeoMfS1 bRdeqp0v3kCSyr54Qae84SF2cW6RZ70dB7BDpBdmI0GuFSInR60v5xwwsVR5lG47 /qqQztKZ2hnVo50n1r5GfvpxswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOQ4J12P RXMpv9y/lyPg1HYj6ywUMB8GA1UdIwQYMBaAFDXarU91rpONxlM0hM3oyBfdwrIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTM1MS81QkNGODhBNjc4 NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0M0dVelNFemVqSUY5M0Nz aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05kcXRUM1d1azQzR1V6U0V6ZWpJRjkzQ3NpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTM1MS81QkNGODhBNjc4NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0 M0dVelNFemVqSUY5M0NzaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb+lLc2ODKCQHLpmjuX6BGf7uqMSUHrrkh34jkmvhcDjORkN8xIrflRIyJSVw dF9lvGRQpSLkzo7ekVyPpJPjmLoxzZ+f1tH8WT1Aa3KOJumRaEatWx3jUx01Dg6/ PnX605AD2t3FbjClElbRd9wic3kLI5SxNBaJF4DuT0vHT2xDYgJp5g97aNoDnswC PCEP3piDHhrdzR781HefPdtz8fqEgh9qM9cdY+gEzGkeNOTnk+5By0wcxD/IBkp2 0RtHqXsrbkTudxZ3ZJrTGIcGSaiW/FoIdoOM3nrgT3ULCNHHupbpDsRzS00FnBcW JYHUCg9Fjif6JEouWVhxXa/Tfg== -----END CERTIFICATE-----Generated at Mon Sep 28 18:07:12 2026 by rpki-client