$ rpki-client -vvvf rpki.apnic.net/member_repository/A916845C/3E240F5CD7EE11F18E6C7EB21A66CEF9/NAB_QFS3fCKMYHVVKD7fBOX1KeI.mft File: NAB_QFS3fCKMYHVVKD7fBOX1KeI.mft (raw, json) Hash identifier: hrmqbV70yOekc0oDPuifsJNZTSmSJPjoLEb6Gt1lGmY= Subject key identifier: 1D:21:2A:35:5F:9A:81:9B:74:55:06:C4:24:05:08:C7:26:B8:88:8C Authority key identifier: 34:00:7F:40:54:B7:7C:22:8C:60:75:55:28:3E:DF:04:E5:F5:29:E2 Certificate issuer: /CN=A916845C/serialNumber=34007F4054B77C228C607555283EDF04E5F529E2 Certificate serial: 02 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NAB_QFS3fCKMYHVVKD7fBOX1KeI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916845C/3E240F5CD7EE11F18E6C7EB21A66CEF9/NAB_QFS3fCKMYHVVKD7fBOX1KeI.mft Manifest number: 02 Signing time: Wed 04 Nov 2026 02:19:40 +0000 Manifest this update: Wed 04 Nov 2026 02:19:40 +0000 Manifest next update: Wed 11 Nov 2026 02:19:40 +0000 Files and hashes: 1: NAB_QFS3fCKMYHVVKD7fBOX1KeI.crl (hash: IMqYoTCvT8ery3vc1edSDs2a0DQ+9979U0XX+J333nc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916845C/3E240F5CD7EE11F18E6C7EB21A66CEF9/NAB_QFS3fCKMYHVVKD7fBOX1KeI.crl rsync://rpki.apnic.net/member_repository/A916845C/3E240F5CD7EE11F18E6C7EB21A66CEF9/NAB_QFS3fCKMYHVVKD7fBOX1KeI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NAB_QFS3fCKMYHVVKD7fBOX1KeI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 02:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916845C, serialNumber=34007F4054B77C228C607555283EDF04E5F529E2 Validity Not Before: Nov 4 02:19:40 2026 GMT Not After : Nov 11 02:19:40 2026 GMT Subject: CN=6aea963c-21ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9d:3d:bb:9d:c2:21:7e:f3:1a:14:12:68:b6: 29:d8:62:88:ac:86:d0:7b:b0:2a:e1:a7:a0:3d:80: 76:aa:4b:05:7a:6d:67:c0:7a:4a:f8:0e:f5:3a:48: 08:29:0e:1d:64:0c:bf:3c:85:db:3a:87:36:3a:02: 70:08:e6:a2:d7:62:b4:f1:15:92:af:fa:0c:70:6b: 35:1d:28:68:93:c9:6b:2d:73:44:50:af:9c:db:76: 20:f6:4a:99:47:b4:e7:e1:98:ce:4b:0c:fb:c8:7c: 9d:dc:0a:01:ca:a4:d2:f9:18:74:a1:9c:8e:e1:9c: 1b:ac:39:3b:fc:6c:10:3f:36:ca:ee:13:a3:54:20: 24:b6:51:a5:51:b6:30:4a:d0:e7:c6:ef:66:c5:85: f0:db:46:5c:30:03:00:a4:e1:67:85:b9:3c:a7:4b: 62:ba:49:f3:86:33:16:39:98:86:61:a4:6c:69:68: 17:c8:70:73:aa:8d:c9:52:aa:0e:9a:cc:67:e8:11: 6c:be:0f:8e:6f:f1:a9:95:ed:b3:3e:44:a9:67:fb: d0:8b:ff:25:0e:f9:3d:0a:6c:dc:f0:4b:8e:fe:91: 7c:02:2d:93:32:58:f3:48:3d:75:96:44:3b:d4:32: 45:a1:98:ce:7b:37:ab:06:fb:c5:bd:8b:f8:f2:2c: 68:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:21:2A:35:5F:9A:81:9B:74:55:06:C4:24:05:08:C7:26:B8:88:8C X509v3 Authority Key Identifier: keyid:34:00:7F:40:54:B7:7C:22:8C:60:75:55:28:3E:DF:04:E5:F5:29:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916845C/3E240F5CD7EE11F18E6C7EB21A66CEF9/NAB_QFS3fCKMYHVVKD7fBOX1KeI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NAB_QFS3fCKMYHVVKD7fBOX1KeI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916845C/3E240F5CD7EE11F18E6C7EB21A66CEF9/NAB_QFS3fCKMYHVVKD7fBOX1KeI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:98:b4:fe:f3:cc:cf:2a:3e:fd:58:c4:95:82:2d:4e:93:ea: 3a:26:76:23:99:3e:a0:4d:9e:61:ee:88:f9:c7:64:f3:2e:5e: 49:ec:c8:49:f5:8d:e7:de:b5:98:af:f8:c1:19:01:28:2b:a8: 67:df:35:82:20:7f:38:53:31:89:0a:e6:ae:98:c6:15:83:a3: 89:29:15:3e:7c:dd:f4:0c:aa:15:2d:a7:00:61:6b:e3:13:8d: 02:b6:da:6f:ec:bc:25:17:78:ec:20:fd:04:34:75:50:e5:ed: af:9c:39:3d:8d:92:e8:f4:ee:cb:dd:a0:da:ef:07:a0:1c:c7: 98:b4:23:f5:c3:c0:e0:c0:a9:85:e0:3c:4a:04:c7:30:fa:8e: 87:34:21:fc:1a:26:d1:21:ce:6b:07:5c:59:f8:d2:02:0b:db: cf:bb:09:dd:96:d8:64:b5:54:b9:80:05:8d:c7:3e:eb:ad:15: 1a:85:67:f4:5b:9c:7e:d4:80:e6:37:0f:be:22:2a:f3:ea:1f: c2:8f:a6:95:c4:83:46:c6:7d:a0:c9:8e:a8:e0:2f:81:20:08: 2e:30:e5:77:52:36:85:8e:04:17:fd:84:94:49:3c:96:28:19: a6:9b:9e:a2:0b:c8:26:e5:5f:8c:cc:aa:01:d6:9d:2c:7a:8e: d3:58:9f:49 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODQ1QzExMC8GA1UEBRMoMzQwMDdGNDA1NEI3N0MyMjhDNjA3NTU1MjgzRURGMDRF NUY1MjlFMjAeFw0yNjExMDQwMjE5NDBaFw0yNjExMTEwMjE5NDBaMBgxFjAUBgNV BAMTDTZhZWE5NjNjLTIxZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCRnT27ncIhfvMaFBJotinYYoishtB7sCrhp6A9gHaqSwV6bWfAekr4DvU6SAgp Dh1kDL88hds6hzY6AnAI5qLXYrTxFZKv+gxwazUdKGiTyWstc0RQr5zbdiD2SplH tOfhmM5LDPvIfJ3cCgHKpNL5GHShnI7hnBusOTv8bBA/NsruE6NUICS2UaVRtjBK 0OfG72bFhfDbRlwwAwCk4WeFuTynS2K6SfOGMxY5mIZhpGxpaBfIcHOqjclSqg6a zGfoEWy+D45v8amV7bM+RKln+9CL/yUO+T0KbNzwS47+kXwCLZMyWPNIPXWWRDvU MkWhmM57N6sG+8W9i/jyLGgXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHSEqNV+a gZt0VQbEJAUIxya4iIwwHwYDVR0jBBgwFoAUNAB/QFS3fCKMYHVVKD7fBOX1KeIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4NDVDLzNFMjQwRjVDRDdF RTExRjE4RTZDN0VCMjFBNjZDRUY5L05BQl9RRlMzZkNLTVlIVlZLRDdmQk9YMUtl SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTkFCX1FGUzNmQ0tNWUhWVktEN2ZCT1gxS2VJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 NDVDLzNFMjQwRjVDRDdFRTExRjE4RTZDN0VCMjFBNjZDRUY5L05BQl9RRlMzZkNL TVlIVlZLRDdmQk9YMUtlSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCumLT+88zPKj79WMSVgi1Ok+o6JnYjmT6gTZ5h7oj5x2TzLl5J7MhJ9Y3n3rWY r/jBGQEoK6hn3zWCIH84UzGJCuaumMYVg6OJKRU+fN30DKoVLacAYWvjE40Cttpv 7LwlF3jsIP0ENHVQ5e2vnDk9jZLo9O7L3aDa7wegHMeYtCP1w8DgwKmF4DxKBMcw +o6HNCH8GibRIc5rB1xZ+NICC9vPuwndlthktVS5gAWNxz7rrRUahWf0W5x+1IDm Nw++Iirz6h/Cj6aVxINGxn2gyY6o4C+BIAguMOV3UjaFjgQX/YSUSTyWKBmmm56i C8gm5V+MzKoB1p0seo7TWJ9J -----END CERTIFICATE-----Generated at Thu Nov 5 05:16:40 2026 by rpki-client