$ rpki-client -vvvf rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft File: NtqOcqrHflUzc5DvTGHJVAtFldc.mft (raw, json) Hash identifier: 6+LA68bnM/HPz8SfbvNqDK4LEw5T/V8pisAG44MkuJ8= Subject key identifier: 25:48:10:D1:C6:35:FE:E7:BA:50:BF:A1:7F:90:23:B2:AD:50:63:DF Authority key identifier: 36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7 Certificate issuer: /CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7 Certificate serial: 0B12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft Manifest number: 0AF8 Signing time: Sun 20 Sep 2026 19:20:25 +0000 Manifest this update: Sun 20 Sep 2026 19:20:25 +0000 Manifest next update: Sun 27 Sep 2026 19:20:25 +0000 Files and hashes: 1: NtqOcqrHflUzc5DvTGHJVAtFldc.crl (hash: s0jryOxe/2eJeKgOvXag+waPeHdZXU47Rnt+SbIhKmM=) 2: 6B5765BC499211ED879F2D11C4F9AE02.roa (hash: /vzrtqQCcQVSvHagWxuB+gMULE9rVx3mbboeBNca//A=) 3: 6A23E166499211ED879F2D11C4F9AE02.roa (hash: Qr7OnU5cwXgYQ6DyrDnDHL3zNQ6VCMQTENBCUIMJfFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2834 (0xb12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91577A2, serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7 Validity Not Before: Sep 20 19:20:25 2026 GMT Not After : Sep 27 19:20:25 2026 GMT Subject: CN=6ab031f9-3a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e5:47:e7:0f:34:cc:34:e1:17:cb:20:0e:6f: e3:96:d2:9d:c0:18:ae:04:88:cc:4c:ca:74:0f:03: 22:04:33:c2:f1:e3:8c:ba:d3:98:8b:12:49:0c:46: 4a:41:c1:e2:e9:1b:a1:b4:05:a4:62:b3:96:4b:d4: cb:86:7b:b2:13:31:78:98:13:b6:f6:eb:f2:3b:2a: 3f:c0:d9:d5:d8:2f:95:2c:90:7b:2d:aa:71:3a:7c: f0:a8:e5:88:f9:30:c8:da:34:73:23:d2:8d:a0:1a: ff:91:5e:7c:c4:b1:42:41:2e:a8:ce:37:ec:52:52: a5:a6:5f:00:1f:57:89:c1:70:d4:ce:96:ea:70:6f: de:8e:75:e0:66:24:65:c9:82:9c:b0:05:a2:87:f7: e0:9d:b1:14:ea:5d:0e:0e:f6:70:a5:fa:1f:5c:f0: b1:a2:80:48:ce:5b:a2:b8:47:94:31:3d:d2:49:e1: c7:5d:27:f0:b4:24:d6:f5:c6:d7:e8:8f:45:61:45: 1d:d5:ee:d4:69:b7:e1:04:a9:f4:e5:ad:9e:fb:c7: 69:e2:f8:69:18:40:02:09:f1:1b:96:a1:fe:96:6c: de:b6:29:cf:fe:8a:43:27:a5:31:e1:f7:a4:4e:fe: b5:10:4b:87:78:0b:b2:11:1e:28:c3:46:72:aa:56: a8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:48:10:D1:C6:35:FE:E7:BA:50:BF:A1:7F:90:23:B2:AD:50:63:DF X509v3 Authority Key Identifier: keyid:36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:42:d7:a7:ad:76:b9:f0:6b:ec:af:b4:fb:db:ca:f5:c9:8b: fd:d8:1a:d4:fd:ed:3d:de:98:5b:be:c7:0b:5e:9f:2f:82:57: 72:90:21:cf:06:56:1c:98:c2:d1:c9:47:1d:93:d2:d4:f2:ea: 03:22:c4:1c:7e:f2:da:17:9f:83:c5:f8:23:8e:35:f5:38:a0: fb:68:fa:c2:bc:57:38:d9:1d:cf:33:02:71:65:71:76:20:13: 2c:c2:5f:f6:e2:42:35:91:22:11:8b:d3:c7:43:8a:ba:d2:a9: aa:c6:40:62:47:c3:69:2c:fd:78:c0:24:cc:1c:24:fc:84:36: 75:3d:21:71:8c:0c:5c:8e:45:a3:de:d6:bc:36:2f:ad:cd:77: d5:f9:f0:55:12:40:55:96:3a:c1:86:b7:7c:63:c1:0c:fb:12: 5f:5c:f0:0f:7f:0f:c4:de:b6:6f:6c:8e:f7:dd:08:26:e5:f9: ed:93:40:74:b9:eb:a1:6d:ba:85:a7:92:ad:50:6e:02:a8:fc: 6c:f3:33:71:83:68:26:40:58:79:a6:ba:53:3d:90:cd:26:61: 22:30:2b:b2:02:52:64:bc:38:db:f9:62:a7:35:0d:38:06:bd: 29:3e:c4:30:7e:20:8d:d2:45:d0:64:be:b8:a7:15:0f:18:f4: a7:85:c6:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3QTIxMTAvBgNVBAUTKDM2REE4RTcyQUFDNzdFNTUzMzczOTBFRjRDNjFDOTU0 MEI0NTk1RDcwHhcNMjYwOTIwMTkyMDI1WhcNMjYwOTI3MTkyMDI1WjAYMRYwFAYD VQQDEw02YWIwMzFmOS0zYTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+VH5w80zDThF8sgDm/jltKdwBiuBIjMTMp0DwMiBDPC8eOMutOYixJJDEZK QcHi6RuhtAWkYrOWS9TLhnuyEzF4mBO29uvyOyo/wNnV2C+VLJB7LapxOnzwqOWI +TDI2jRzI9KNoBr/kV58xLFCQS6ozjfsUlKlpl8AH1eJwXDUzpbqcG/ejnXgZiRl yYKcsAWih/fgnbEU6l0ODvZwpfofXPCxooBIzluiuEeUMT3SSeHHXSfwtCTW9cbX 6I9FYUUd1e7UabfhBKn05a2e+8dp4vhpGEACCfEblqH+lmzetinP/opDJ6Ux4fek Tv61EEuHeAuyER4ow0ZyqlaoNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCVIENHG Nf7nulC/oX+QI7KtUGPfMB8GA1UdIwQYMBaAFDbajnKqx35VM3OQ70xhyVQLRZXX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzdBMi84QkMxNUM0MDdC MDQxMUVBOURBQUQ0MzJDNEY5QUUwMi9OdHFPY3FySGZsVXpjNUR2VEdISlZBdEZs ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL050cU9jcXJIZmxVemM1RHZUR0hKVkF0RmxkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzdBMi84QkMxNUM0MDdCMDQxMUVBOURBQUQ0MzJDNEY5QUUwMi9OdHFPY3FySGZs VXpjNUR2VEdISlZBdEZsZGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl0LXp612ufBr7K+0+9vK9cmL/dga1P3tPd6YW77HC16fL4JXcpAhzwZWHJjC 0clHHZPS1PLqAyLEHH7y2hefg8X4I4419Tig+2j6wrxXONkdzzMCcWVxdiATLMJf 9uJCNZEiEYvTx0OKutKpqsZAYkfDaSz9eMAkzBwk/IQ2dT0hcYwMXI5Fo97WvDYv rc131fnwVRJAVZY6wYa3fGPBDPsSX1zwD38PxN62b2yO990IJuX57ZNAdLnroW26 haeSrVBuAqj8bPMzcYNoJkBYeaa6Uz2QzSZhIjArsgJSZLw42/lipzUNOAa9KT7E MH4gjdJF0GS+uKcVDxj0p4XGvg== -----END CERTIFICATE-----Generated at Mon Sep 21 23:51:17 2026 by rpki-client