$ rpki-client -vvvf rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft File: 1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft (raw, json) Hash identifier: sGKIhq8Q6G5AtEOemFjk7tffl2jYls3VcP3ljZw2+8o= Subject key identifier: AF:C3:9C:66:E8:79:70:DE:56:D0:41:EB:51:E3:04:33:52:7A:CF:30 Authority key identifier: D4:D1:8E:F1:C4:2B:04:99:5C:B1:A1:8F:57:64:BA:49:EF:B9:5B:E5 Certificate issuer: /CN=A91689B9/serialNumber=D4D18EF1C42B04995CB1A18F5764BA49EFB95BE5 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft Manifest number: 2C Signing time: Fri 25 Sep 2026 08:52:19 +0000 Manifest this update: Fri 25 Sep 2026 08:52:18 +0000 Manifest next update: Fri 02 Oct 2026 08:52:18 +0000 Files and hashes: 1: 1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl (hash: fqUKnHQ5dXuaGsyi7jTrSqDEKzWvGr8fllEekG74tJY=) 2: C0D1BBF079BD11F1BB8B39355BA30FBC.roa (hash: gGu0FmVRoRjPupu9uKCq5cNV44H2mLC6217rmSNSokI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689B9, serialNumber=D4D18EF1C42B04995CB1A18F5764BA49EFB95BE5 Validity Not Before: Sep 25 08:52:18 2026 GMT Not After : Oct 2 08:52:18 2026 GMT Subject: CN=6ab63642-69b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:42:28:da:40:1a:b6:71:17:b1:47:c6:f8:18: da:17:b6:ee:80:17:14:8b:3b:fd:50:ff:04:62:8d: 2e:6f:33:fd:51:ca:30:e3:08:2f:69:1b:f6:8b:71: 12:95:68:c9:57:56:3c:e5:08:7b:c2:c1:12:72:95: af:82:9e:5e:d3:b7:4b:fa:1b:08:7d:e9:37:ef:dc: c5:2c:78:1d:65:51:18:a4:61:70:99:8e:83:e1:ec: 05:75:d8:d9:9e:a4:63:05:b3:f2:80:49:bd:9d:92: 7e:1b:24:75:c6:ee:10:f3:4a:75:86:3c:b2:ca:84: 78:48:f0:3f:5f:0f:3b:d6:e3:a3:38:de:57:14:06: b7:4e:3c:0f:ef:cd:eb:48:c9:63:7b:07:ae:f6:ba: 89:1b:67:d8:5b:b9:cf:a6:28:ba:23:c5:1d:61:45: 1f:7b:43:40:6d:e0:d9:0d:c8:3b:6f:59:4f:c3:f5: 76:0c:88:d9:a5:e8:2c:a3:9e:bc:5a:72:e6:29:20: f5:6e:fe:13:73:8a:6b:16:9c:04:5b:78:53:c2:64: 94:59:a9:a9:72:13:1d:72:60:fe:a5:6e:77:45:c5: 54:81:2d:94:4e:c6:fe:76:f9:8a:22:f0:ca:6d:a3: 99:9f:ec:74:91:89:48:09:4e:bd:05:23:84:cf:a6: 57:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C3:9C:66:E8:79:70:DE:56:D0:41:EB:51:E3:04:33:52:7A:CF:30 X509v3 Authority Key Identifier: keyid:D4:D1:8E:F1:C4:2B:04:99:5C:B1:A1:8F:57:64:BA:49:EF:B9:5B:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:02:c3:2d:f9:83:60:9b:f1:2f:4b:79:cd:a5:b4:86:17:f6: a3:e7:34:27:dd:25:7e:38:fd:32:91:86:e4:d9:a6:d3:2a:a8: 57:a9:69:b7:b5:e4:52:7a:a8:30:ae:bc:7f:43:37:78:49:09: 97:bb:ae:d1:b6:81:9b:70:2d:53:fa:48:50:f8:fb:c3:f3:6d: fc:94:5e:12:50:0a:02:20:d8:38:55:d3:94:2c:93:43:22:31: d4:87:16:6b:e1:8a:dc:5f:1b:f7:dc:3e:46:9f:cb:c9:40:a1: 2c:00:03:d0:fa:17:cd:1b:2f:5f:90:af:03:d4:70:c1:b7:a6: 07:95:49:02:cd:7d:99:cf:87:f9:74:b4:34:44:43:0b:19:cc: a2:7d:fa:9a:ec:4d:7c:88:61:fc:74:b5:15:94:00:07:a6:30: 16:f8:a1:ec:f9:62:5a:b3:ae:a6:43:49:79:8e:b5:e3:97:85: 25:b8:9f:9e:35:4e:27:c5:d8:1c:2e:9a:4c:13:f1:f6:02:6c: c0:97:00:ce:b9:ae:4c:f5:b5:e7:92:2f:f2:2b:69:83:7b:50: 55:91:a1:01:55:64:fd:17:87:1b:3a:a2:15:96:42:b2:f5:1a: b5:9b:c5:50:a9:41:a0:1c:1c:be:30:57:c5:d9:d2:fb:e5:de: d5:c1:49:0c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODlCOTExMC8GA1UEBRMoRDREMThFRjFDNDJCMDQ5OTVDQjFBMThGNTc2NEJBNDlF RkI5NUJFNTAeFw0yNjA5MjUwODUyMThaFw0yNjEwMDIwODUyMThaMBgxFjAUBgNV BAMTDTZhYjYzNjQyLTY5YjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfQijaQBq2cRexR8b4GNoXtu6AFxSLO/1Q/wRijS5vM/1RyjDjCC9pG/aLcRKV aMlXVjzlCHvCwRJyla+Cnl7Tt0v6Gwh96Tfv3MUseB1lURikYXCZjoPh7AV12Nme pGMFs/KASb2dkn4bJHXG7hDzSnWGPLLKhHhI8D9fDzvW46M43lcUBrdOPA/vzetI yWN7B672uokbZ9hbuc+mKLojxR1hRR97Q0Bt4NkNyDtvWU/D9XYMiNml6Cyjnrxa cuYpIPVu/hNzimsWnARbeFPCZJRZqalyEx1yYP6lbndFxVSBLZROxv52+Yoi8Mpt o5mf7HSRiUgJTr0FI4TPplfLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUr8OcZuh5 cN5W0EHrUeMEM1J6zzAwHwYDVR0jBBgwFoAU1NGO8cQrBJlcsaGPV2S6Se+5W+Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4OUI5LzFEMkQwNzA2Nzky RDExRjFCQzg4OTA5MDZGQTMwRkJDLzFOR084Y1FyQkpsY3NhR1BWMlM2U2UtNVct VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMU5HTzhjUXJCSmxjc2FHUFYyUzZTZS01Vy1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 OUI5LzFEMkQwNzA2NzkyRDExRjFCQzg4OTA5MDZGQTMwRkJDLzFOR084Y1FyQkps Y3NhR1BWMlM2U2UtNVctVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBoAsMt+YNgm/EvS3nNpbSGF/aj5zQn3SV+OP0ykYbk2abTKqhXqWm3teRSeqgw rrx/Qzd4SQmXu67RtoGbcC1T+khQ+PvD8238lF4SUAoCINg4VdOULJNDIjHUhxZr 4YrcXxv33D5Gn8vJQKEsAAPQ+hfNGy9fkK8D1HDBt6YHlUkCzX2Zz4f5dLQ0REML Gcyiffqa7E18iGH8dLUVlAAHpjAW+KHs+WJas66mQ0l5jrXjl4UluJ+eNU4nxdgc LppME/H2AmzAlwDOua5M9bXnki/yK2mDe1BVkaEBVWT9F4cbOqIVlkKy9Rq1m8VQ qUGgHBy+MFfF2dL75d7VwUkM -----END CERTIFICATE-----Generated at Sun Sep 27 06:18:56 2026 by rpki-client