$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft File: NCaEGmQGa3hlW77KDAH9CfZXBTY.mft (raw, json) Hash identifier: P9IXbuYpEptrj/IFeTyD0NXVmzw6VQOvANVgDKhMFHA= Subject key identifier: 6F:04:16:F8:37:B1:C0:47:04:91:83:B5:85:8B:1C:C0:77:AA:11:51 Authority key identifier: 34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36 Certificate issuer: /CN=A9157DAE/serialNumber=3426841A64066B78655BBECA0C01FD09F6570536 Certificate serial: 028D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft Manifest number: 028D Signing time: Sun 20 Sep 2026 16:56:58 +0000 Manifest this update: Sun 20 Sep 2026 16:56:58 +0000 Manifest next update: Sun 27 Sep 2026 16:56:58 +0000 Files and hashes: 1: NCaEGmQGa3hlW77KDAH9CfZXBTY.crl (hash: kdyUpHfXjhw5jenUKbRFoyGZBf2YLIeAw3mSfM+57jU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.crl rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 16:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 653 (0x28d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=3426841A64066B78655BBECA0C01FD09F6570536 Validity Not Before: Sep 20 16:56:58 2026 GMT Not After : Sep 27 16:56:58 2026 GMT Subject: CN=6ab0105a-18d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8f:36:13:fe:f7:8b:c0:5f:3e:c9:66:0d:23: 63:1d:a0:9e:0b:20:a2:f6:71:df:3f:2a:22:7b:15: 9d:cf:18:d2:90:6d:ee:e7:3c:f6:35:e7:b9:f0:82: 57:64:cc:e2:d7:17:86:ed:29:de:61:a8:16:d8:de: 12:fe:f1:42:2e:62:15:1f:c0:b5:ef:54:b9:d8:5c: 87:ef:c3:63:1f:4b:bc:7a:d5:04:f8:3e:ee:a0:6a: 54:e6:d5:18:6c:4f:61:cd:ea:68:9e:5e:a5:1f:93: 04:68:f5:94:a3:84:41:6e:1e:1a:36:a6:3b:89:f9: c8:dd:50:dd:cf:6e:fb:a1:18:74:4e:9d:ef:e5:60: ec:fb:3a:09:25:28:f2:82:8e:be:6c:ba:0d:b5:a7: 38:e4:dd:d9:23:20:da:c3:a2:37:c1:82:fd:0e:6e: 7b:29:ec:0d:5d:31:fd:54:e6:55:0e:7f:38:91:28: a8:ee:d9:02:c1:53:97:e0:06:cb:0c:a4:03:82:f5: fc:6f:23:f8:c9:0e:33:73:9e:d9:c7:43:c8:e1:43: 77:9b:29:38:65:36:e4:c2:5f:dc:bc:fb:0b:d3:65: 62:33:cd:a0:b3:bc:7c:d6:a5:18:73:a9:a9:1a:15: a2:a8:11:d2:e6:50:c4:04:6f:9d:a2:5f:6f:14:79: 22:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:04:16:F8:37:B1:C0:47:04:91:83:B5:85:8B:1C:C0:77:AA:11:51 X509v3 Authority Key Identifier: keyid:34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:c5:35:05:17:cd:bb:da:02:a3:ed:ee:88:77:8d:cf:9b:9a: 42:2c:81:5c:c5:50:ff:56:e3:b6:0d:fa:10:d5:d3:59:55:11: ef:72:e2:8e:12:ff:4a:55:0b:d8:08:99:77:32:13:59:79:c3: fb:80:84:fd:32:68:a5:7e:7f:a7:1b:5f:90:07:55:f9:7a:31: 18:d4:6b:4c:17:2f:e3:78:4d:33:e1:78:d7:e6:d1:24:e0:07: c3:dd:44:d7:c6:54:f4:da:1c:bd:40:a7:42:4f:69:1b:c8:8d: e5:ab:b1:09:3f:48:1b:67:82:60:d3:72:59:68:4e:32:e6:c2: 9b:c4:44:9b:02:03:de:c7:70:1e:1c:e5:ba:63:98:95:39:b6: 06:02:fa:b0:e4:48:5f:e1:41:89:95:0b:82:37:b5:08:78:a2: 0f:fe:fc:a0:92:e1:56:e1:fe:4e:fb:51:2f:98:6c:24:d1:33: 86:df:4d:27:ea:46:85:16:b8:01:b0:c1:04:be:e8:af:fa:89: 87:25:c1:17:40:66:43:7f:5c:f0:98:fb:7c:af:7c:fb:32:3b: 21:fb:61:23:8b:fd:f5:bf:a2:c7:af:9b:7f:5a:25:c2:d6:4a: d4:99:73:f3:c3:07:7a:6d:25:01:53:df:b0:4b:75:85:30:f5: f2:f6:07:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKDM0MjY4NDFBNjQwNjZCNzg2NTVCQkVDQTBDMDFGRDA5 RjY1NzA1MzYwHhcNMjYwOTIwMTY1NjU4WhcNMjYwOTI3MTY1NjU4WjAYMRYwFAYD VQQDEw02YWIwMTA1YS0xOGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt482E/73i8BfPslmDSNjHaCeCyCi9nHfPyoiexWdzxjSkG3u5zz2Nee58IJX ZMzi1xeG7SneYagW2N4S/vFCLmIVH8C171S52FyH78NjH0u8etUE+D7uoGpU5tUY bE9hzeponl6lH5MEaPWUo4RBbh4aNqY7ifnI3VDdz277oRh0Tp3v5WDs+zoJJSjy go6+bLoNtac45N3ZIyDaw6I3wYL9Dm57KewNXTH9VOZVDn84kSio7tkCwVOX4AbL DKQDgvX8byP4yQ4zc57Zx0PI4UN3myk4ZTbkwl/cvPsL02ViM82gs7x81qUYc6mp GhWiqBHS5lDEBG+dol9vFHkiEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG8EFvg3 scBHBJGDtYWLHMB3qhFRMB8GA1UdIwQYMBaAFDQmhBpkBmt4ZVu+ygwB/Qn2VwU2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS8xMDRBN0UxRURG QUQxMUVEOTUxNTNEMzFDNEY5QUUwMi9OQ2FFR21RR2EzaGxXNzdLREFIOUNmWlhC VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL05DYUVHbVFHYTNobFc3N0tEQUg5Q2ZaWEJUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0RBRS8xMDRBN0UxRURGQUQxMUVEOTUxNTNEMzFDNEY5QUUwMi9OQ2FFR21RR2Ez aGxXNzdLREFIOUNmWlhCVFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAScU1BRfNu9oCo+3uiHeNz5uaQiyBXMVQ/1bjtg36ENXTWVUR73LijhL/SlUL 2AiZdzITWXnD+4CE/TJopX5/pxtfkAdV+XoxGNRrTBcv43hNM+F41+bRJOAHw91E 18ZU9NocvUCnQk9pG8iN5auxCT9IG2eCYNNyWWhOMubCm8REmwID3sdwHhzlumOY lTm2BgL6sORIX+FBiZULgje1CHiiD/78oJLhVuH+TvtRL5hsJNEzht9NJ+pGhRa4 AbDBBL7or/qJhyXBF0BmQ39c8Jj7fK98+zI7IfthI4v99b+ix6+bf1olwtZK1Jlz 88MHem0lAVPfsEt1hTD18vYHtw== -----END CERTIFICATE-----Generated at Tue Sep 22 01:19:46 2026 by rpki-client