$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft File: NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft (raw, json) Hash identifier: yFwavPYNqcs1KEolP/WdoxBTqManqBXnL15B/XBdyFc= Subject key identifier: 32:AC:0A:9F:DD:7B:0C:7A:F4:AC:31:68:A8:D7:85:4F:6D:A8:1B:48 Authority key identifier: 34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5 Certificate issuer: /CN=A9148DB2/serialNumber=34ABEF846474BBDA0C556465DD7E9EC0FA674BB5 Certificate serial: 03B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft Manifest number: 03AB Signing time: Wed 23 Sep 2026 00:15:24 +0000 Manifest this update: Wed 23 Sep 2026 00:15:23 +0000 Manifest next update: Wed 30 Sep 2026 00:15:23 +0000 Files and hashes: 1: NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl (hash: 2IU6gwLn08PykKA9jYiQTwuqNfRZ7hybZ55ODPIX/Rk=) 2: F343C4ECF93911ECBD1E663DC4F9AE02.roa (hash: QwQkgtoePZKxFtkm4cXFgAdorKM4wsMJHhlleIVTFws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 947 (0x3b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148DB2, serialNumber=34ABEF846474BBDA0C556465DD7E9EC0FA674BB5 Validity Not Before: Sep 23 00:15:23 2026 GMT Not After : Sep 30 00:15:23 2026 GMT Subject: CN=6ab31a1c-3a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a5:c4:b1:82:76:ef:39:1d:0f:ca:33:f8:75: e6:19:99:b5:d2:0b:4c:69:60:6d:f1:25:5a:bd:0e: ae:28:b9:b8:da:15:1b:db:d6:b4:9f:59:a9:3a:bc: aa:63:0b:36:4d:7f:a8:95:fa:ee:89:3e:b3:cf:25: 87:a5:51:3a:f2:26:ef:c1:18:52:bb:43:79:fb:1e: 4a:6c:27:6a:5f:bf:95:5a:c6:1c:24:c4:9c:01:4d: 27:75:12:36:51:2a:d1:0d:a3:17:9f:41:c8:7a:0f: bf:49:39:b4:6b:ca:0c:d6:97:ab:20:6f:61:a4:66: a1:28:6f:86:90:5e:f3:27:e4:e2:0f:68:b8:4c:35: 72:06:ae:68:af:3f:6a:5e:1b:4f:d0:a5:21:db:be: b1:df:64:f7:ed:bc:bb:b2:c4:af:f4:32:f0:eb:db: 49:c3:c5:29:60:5e:0b:71:e6:61:5f:a5:39:36:55: f2:14:e7:15:77:bd:ac:f0:f0:a9:4e:9d:6c:90:35: 6a:98:3a:0a:ff:33:a4:7a:9c:15:a0:2d:55:b2:70: 6a:78:36:2e:59:2f:cd:1c:4d:bc:eb:00:49:7c:96: b4:bb:ed:21:b7:e0:88:d7:2e:f0:b2:12:43:d1:c1: d2:cb:c8:56:2d:8a:45:6f:51:60:62:50:29:f5:21: 48:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AC:0A:9F:DD:7B:0C:7A:F4:AC:31:68:A8:D7:85:4F:6D:A8:1B:48 X509v3 Authority Key Identifier: keyid:34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:c8:f0:dc:ce:94:dd:c3:7e:72:d8:0e:32:99:08:49:1c:bb: 06:0f:a4:ee:6d:67:13:d1:cb:81:22:19:89:ee:6c:31:68:2f: 42:77:5a:15:fc:ac:24:55:b3:2f:12:e9:8f:e1:ef:46:f7:1a: 7f:31:d8:33:67:57:e9:4c:69:bc:9c:6a:b0:fd:50:86:77:9f: ac:f4:ac:c3:24:38:a3:69:40:47:eb:d1:2f:03:6b:af:e4:d4: e5:bb:61:48:6d:58:3d:ef:66:5f:78:12:59:d7:e2:7a:a8:9f: fa:7b:e9:ac:b9:f1:ea:62:11:9e:a5:d7:5a:17:e5:24:ea:60: 4d:e0:c8:90:98:bb:2a:45:68:cc:38:2d:10:44:67:b1:94:98: 10:30:df:02:94:35:74:b1:ae:6c:1f:41:06:09:13:c8:24:58: a2:6d:b6:1d:c4:bc:0b:71:94:9f:fb:67:94:05:dc:8c:2a:2a: ee:de:e4:ec:28:7a:0b:f4:31:f7:5f:5a:d7:5f:97:5f:57:91: 3d:e0:83:15:6e:ab:3b:88:c3:60:fe:48:e0:71:e7:16:f3:86: 28:7f:ca:0d:ab:a7:43:93:ae:e5:05:94:96:b2:7b:6a:76:0f: f0:3d:e7:21:db:3f:33:5d:1c:6d:4a:7a:92:c2:11:b7:7a:81: ce:b8:42:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhEQjIxMTAvBgNVBAUTKDM0QUJFRjg0NjQ3NEJCREEwQzU1NjQ2NUREN0U5RUMw RkE2NzRCQjUwHhcNMjYwOTIzMDAxNTIzWhcNMjYwOTMwMDAxNTIzWjAYMRYwFAYD VQQDEw02YWIzMWExYy0zYTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6XEsYJ27zkdD8oz+HXmGZm10gtMaWBt8SVavQ6uKLm42hUb29a0n1mpOryq Yws2TX+olfruiT6zzyWHpVE68ibvwRhSu0N5+x5KbCdqX7+VWsYcJMScAU0ndRI2 USrRDaMXn0HIeg+/STm0a8oM1perIG9hpGahKG+GkF7zJ+TiD2i4TDVyBq5orz9q XhtP0KUh276x32T37by7ssSv9DLw69tJw8UpYF4LceZhX6U5NlXyFOcVd72s8PCp Tp1skDVqmDoK/zOkepwVoC1VsnBqeDYuWS/NHE286wBJfJa0u+0ht+CI1y7wshJD 0cHSy8hWLYpFb1FgYlAp9SFIVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDKsCp/d ewx69KwxaKjXhU9tqBtIMB8GA1UdIwQYMBaAFDSr74RkdLvaDFVkZd1+nsD6Z0u1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OERCMi8wNDdEQzM4OEY5 MzYxMUVDOTIxQjgxMEVDNEY5QUUwMi9OS3Z2aEdSMHU5b01WV1JsM1g2ZXdQcG5T N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LdnZoR1IwdTlvTVZXUmwzWDZld1BwblM3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OERCMi8wNDdEQzM4OEY5MzYxMUVDOTIxQjgxMEVDNEY5QUUwMi9OS3Z2aEdSMHU5 b01WV1JsM1g2ZXdQcG5TN1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAcjw3M6U3cN+ctgOMpkISRy7Bg+k7m1nE9HLgSIZie5sMWgvQndaFfysJFWz LxLpj+HvRvcafzHYM2dX6UxpvJxqsP1QhnefrPSswyQ4o2lAR+vRLwNrr+TU5bth SG1YPe9mX3gSWdfieqif+nvprLnx6mIRnqXXWhflJOpgTeDIkJi7KkVozDgtEERn sZSYEDDfApQ1dLGubB9BBgkTyCRYom22HcS8C3GUn/tnlAXcjCoq7t7k7Ch6C/Qx 919a11+XX1eRPeCDFW6rO4jDYP5I4HHnFvOGKH/KDaunQ5Ou5QWUlrJ7anYP8D3n Ids/M10cbUp6ksIRt3qBzrhCng== -----END CERTIFICATE-----Generated at Fri Sep 25 01:41:13 2026 by rpki-client