$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft File: nQi_OKDTi4yrfP2I9djE7WZ3jME.mft (raw, json) Hash identifier: l4weydLYMJx0MoU4N0XZrGo3Da4NNqcu48IsVDM+6jU= Subject key identifier: 1E:3D:E7:F5:AE:C5:04:56:76:38:22:1D:B0:66:6B:1E:C4:A5:AD:59 Authority key identifier: 9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 Certificate issuer: /CN=A913F0DF/serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft Manifest number: 020C Signing time: Wed 23 Sep 2026 02:57:07 +0000 Manifest this update: Wed 23 Sep 2026 02:57:07 +0000 Manifest next update: Wed 30 Sep 2026 02:57:07 +0000 Files and hashes: 1: nQi_OKDTi4yrfP2I9djE7WZ3jME.crl (hash: PuKfCaxvH5DxSR5Rs/qOb65PfER8GplECP/MrgYtuNs=) 2: 7C7AF8E6E67011EEB76DCB76C4F9AE02.roa (hash: KcnRjC7T6Kcnl9YrWn5mYyKPUtty/r1wIebOb0MFfxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0DF, serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Validity Not Before: Sep 23 02:57:07 2026 GMT Not After : Sep 30 02:57:07 2026 GMT Subject: CN=6ab34003-073d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d3:94:cf:a4:73:4b:ae:31:b5:48:b6:16:70: 7a:fb:f7:ad:7f:72:c2:be:23:e8:c1:8b:41:45:f0: 09:75:cd:9e:14:d8:7f:6e:80:8c:f0:5c:7a:eb:1d: 1f:f2:6a:9f:e4:79:b5:7f:bc:47:a6:49:8f:b1:0d: a8:a6:cb:c3:68:a8:76:a6:c9:71:33:25:fb:14:30: 60:cc:c0:b2:25:73:c7:d9:ca:d2:2d:04:72:68:1a: fe:6e:aa:a7:de:cd:50:f4:71:ea:b8:e0:a2:65:9f: c7:ff:32:0b:d9:a5:90:e3:0f:af:99:53:e8:3b:97: 58:da:5f:c3:b8:dd:b5:0b:c0:3d:17:42:52:e6:69: 22:f2:3c:a4:41:ac:62:bd:07:a3:b5:7b:3f:80:66: 20:f1:3a:da:98:d8:ae:7d:c5:af:f9:bf:47:e1:90: 0a:c1:63:c5:91:a4:07:36:43:e5:ca:26:1e:5b:32: c9:c7:4e:c0:a5:59:21:77:8a:1f:a4:86:78:43:63: 2d:41:6a:dd:13:c0:c5:f0:c0:1f:a2:4e:23:29:b1: a2:bd:72:85:dd:87:57:fd:e9:21:98:dd:58:f9:a8: de:8c:1f:7b:19:ee:be:cd:05:17:9b:d8:52:79:f2: e7:ee:87:40:0d:ea:32:09:90:5a:5f:6f:76:d1:7a: 2b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3D:E7:F5:AE:C5:04:56:76:38:22:1D:B0:66:6B:1E:C4:A5:AD:59 X509v3 Authority Key Identifier: keyid:9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:9a:97:82:14:5e:1f:c6:fb:55:d2:cd:2a:09:2a:b6:45:70: 10:16:22:0d:98:dc:de:32:0e:23:6b:94:da:d3:14:3e:c0:f8: 7a:8b:03:b3:42:b6:e0:53:9c:cc:64:bc:9e:2b:2f:75:06:cb: 2e:f5:19:71:bd:77:20:a1:1e:b6:88:46:39:22:7e:51:b1:35: 1d:a8:78:a2:49:e8:c1:c5:19:08:ab:ff:c7:1f:79:10:54:5c: 0a:b1:1b:06:82:f7:b7:00:0d:24:5f:5b:3c:a9:fe:1c:68:9b: 7d:f6:f2:c0:0c:bb:c1:29:69:46:15:46:7e:35:0f:ac:66:52: db:c2:f9:c3:f0:7e:65:81:73:e1:d5:c1:6d:a1:ef:67:38:b2: 3c:3e:cc:77:16:c7:34:d4:b5:43:eb:8c:b0:7f:f9:3e:74:12: 4c:45:fa:d3:54:fb:e9:0f:0d:3b:d5:ba:13:8e:82:0a:45:3f: 17:7e:c0:94:5d:a5:bb:88:00:08:55:8e:8c:67:c5:5c:d8:db: 7b:c9:0b:89:99:ab:0d:6f:9a:6d:ea:0e:3b:9f:c0:a5:23:9d: 90:67:1b:e1:a1:39:07:42:a4:72:2e:af:d5:37:ae:7b:aa:13: 93:87:8f:42:8f:3d:b6:96:57:75:7e:4d:96:c7:d1:b8:ae:8b: e5:57:02:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwREYxMTAvBgNVBAUTKDlEMDhCRjM4QTBEMzhCOENBQjdDRkQ4OEY1RDhDNEVE NjY3NzhDQzEwHhcNMjYwOTIzMDI1NzA3WhcNMjYwOTMwMDI1NzA3WjAYMRYwFAYD VQQDEw02YWIzNDAwMy0wNzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tOUz6RzS64xtUi2FnB6+/etf3LCviPowYtBRfAJdc2eFNh/boCM8Fx66x0f 8mqf5Hm1f7xHpkmPsQ2opsvDaKh2pslxMyX7FDBgzMCyJXPH2crSLQRyaBr+bqqn 3s1Q9HHquOCiZZ/H/zIL2aWQ4w+vmVPoO5dY2l/DuN21C8A9F0JS5mki8jykQaxi vQejtXs/gGYg8TramNiufcWv+b9H4ZAKwWPFkaQHNkPlyiYeWzLJx07ApVkhd4of pIZ4Q2MtQWrdE8DF8MAfok4jKbGivXKF3YdX/ekhmN1Y+ajejB97Ge6+zQUXm9hS efLn7odADeoyCZBaX2920XorzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB495/Wu xQRWdjgiHbBmax7Epa1ZMB8GA1UdIwQYMBaAFJ0Ivzig04uMq3z9iPXYxO1md4zB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBERi9FNTA4MzY0ODk5 MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0eXJmUDJJOWRqRTdXWjNq TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RaV9PS0RUaTR5cmZQMkk5ZGpFN1daM2pNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBERi9FNTA4MzY0ODk5MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0 eXJmUDJJOWRqRTdXWjNqTUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg5qXghReH8b7VdLNKgkqtkVwEBYiDZjc3jIOI2uU2tMUPsD4eosDs0K24FOc zGS8nisvdQbLLvUZcb13IKEetohGOSJ+UbE1Hah4oknowcUZCKv/xx95EFRcCrEb BoL3twANJF9bPKn+HGibffbywAy7wSlpRhVGfjUPrGZS28L5w/B+ZYFz4dXBbaHv ZziyPD7MdxbHNNS1Q+uMsH/5PnQSTEX601T76Q8NO9W6E46CCkU/F37AlF2lu4gA CFWOjGfFXNjbe8kLiZmrDW+abeoOO5/ApSOdkGcb4aE5B0Kkci6v1Teue6oTk4eP Qo89tpZXdX5NlsfRuK6L5VcCow== -----END CERTIFICATE-----Generated at Thu Sep 24 15:09:49 2026 by rpki-client