$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft File: NUOeC_NciIu4TRsk7N5wYM90TpE.mft (raw, json) Hash identifier: XKA38n2GO7raLF5zLW5/FH3PteJ/i2nNQLBRWp5+YtI= Subject key identifier: C9:B6:C5:6B:84:EC:34:00:B7:4F:7C:3C:ED:F5:A0:97:F3:3A:54:6B Authority key identifier: 35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91 Certificate issuer: /CN=A917C422/serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91 Certificate serial: 2C83 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft Manifest number: 2C67 Signing time: Mon 26 Oct 2026 14:26:23 +0000 Manifest this update: Mon 26 Oct 2026 14:26:23 +0000 Manifest next update: Mon 02 Nov 2026 14:26:23 +0000 Files and hashes: 1: NUOeC_NciIu4TRsk7N5wYM90TpE.crl (hash: 1aMCMxY4YJPQ2qZmi+o0SV0MpqgaenSXfA+7LBAvGLU=) 2: 6313DADA500011EBB74A2C2AC4F9AE02.roa (hash: F3q5SdQyNRy46VY++95DIbd5WpjFJL6migDka8lzyZM=) 3: F645F318500C11EBA2295426C4F9AE02.roa (hash: 4G3vVPOGEDdUYCZ6ThbE1U9ra65JpKzKc6OEmZ3iYf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 14:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11395 (0x2c83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C422, serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91 Validity Not Before: Oct 26 14:26:23 2026 GMT Not After : Nov 2 14:26:23 2026 GMT Subject: CN=6adf630f-7c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:76:f7:17:fd:b2:30:6c:b9:e2:51:7b:23:3a: 99:52:c7:21:e6:fb:f3:37:5f:75:4a:2c:9a:c6:20: 14:3e:b5:d3:ea:56:25:55:93:32:30:a0:90:b5:65: 33:cd:9c:6b:4b:5f:86:fb:0d:e3:78:99:44:50:72: ed:32:d8:ea:22:70:0a:50:f5:b4:34:50:60:90:e3: 72:47:a3:05:63:79:b6:32:e2:47:47:34:bf:c2:56: 00:44:59:60:fe:f8:39:1b:2e:61:c1:00:be:02:ce: c8:3d:0c:8c:5d:25:e5:e0:96:50:bc:5c:f4:5b:a3: b1:82:37:8c:48:5a:d3:2e:27:e0:d6:6d:f2:df:de: 3e:2e:e1:3c:dd:26:c0:3b:f1:9d:58:b0:ec:26:ef: b6:2f:89:cd:33:5f:51:27:01:67:c0:40:1c:3e:84: a6:3a:15:3d:4d:5f:ee:82:b3:bc:4d:26:4f:0d:9f: 6c:5f:b3:48:a1:7c:c6:5a:97:91:f3:6c:3d:56:4f: 53:28:5e:0b:f6:68:84:3e:a2:dc:8e:8e:36:fa:49: 2b:61:10:a1:50:0e:ce:57:7f:af:19:1e:49:93:94: 47:83:f2:11:72:59:3f:2c:20:d0:f2:0b:f4:32:3f: cb:c4:a8:5e:ea:3c:86:27:05:d7:35:88:cb:27:58: d4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B6:C5:6B:84:EC:34:00:B7:4F:7C:3C:ED:F5:A0:97:F3:3A:54:6B X509v3 Authority Key Identifier: keyid:35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:6c:43:6a:b7:08:95:d5:d7:85:c1:f1:f5:2d:d7:13:c0:65: a4:45:e1:65:17:79:4b:51:c9:32:58:15:05:a4:b3:19:cc:b2: e3:fc:6c:9a:5b:c3:f8:f2:e0:7b:a8:3c:63:93:a1:23:15:f6: 51:a3:15:b3:91:6d:66:12:94:12:65:1f:4e:a7:4f:2c:cd:6c: 8d:99:45:d7:01:42:ba:b4:d8:22:87:f0:7e:31:fa:f3:3c:fe: 19:66:fa:fa:e6:84:a5:16:58:96:ac:05:a2:3d:53:f6:7a:24: ca:1b:7f:2d:86:02:18:d3:03:61:dd:00:2d:cf:c6:92:b7:3e: 61:8d:25:6b:ae:41:91:37:8f:88:b0:bd:3c:30:90:bf:e2:c9: 31:a8:6f:0a:f7:1e:7b:9b:8d:5a:44:34:77:23:af:d6:aa:54: a2:49:82:31:0a:f8:a0:42:3d:47:48:58:68:47:00:a5:a3:f8: 01:15:4c:8e:15:f5:34:7d:72:fb:70:ef:84:ce:a7:74:81:ee: 02:a6:3e:df:15:a0:57:b2:08:42:5a:5c:18:ad:8b:dd:6a:3f: 40:66:07:af:cd:58:0b:7f:2e:44:d0:ad:c2:61:22:48:05:09: 47:11:2b:c5:06:86:b2:c9:0f:10:1e:e6:ef:7b:34:2d:07:83: 67:3b:31:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0MjIxMTAvBgNVBAUTKDM1NDM5RTBCRjM1Qzg4OEJCODREMUIyNEVDREU3MDYw Q0Y3NDRFOTEwHhcNMjYxMDI2MTQyNjIzWhcNMjYxMTAyMTQyNjIzWjAYMRYwFAYD VQQDEw02YWRmNjMwZi03YzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHb3F/2yMGy54lF7IzqZUsch5vvzN191SiyaxiAUPrXT6lYlVZMyMKCQtWUz zZxrS1+G+w3jeJlEUHLtMtjqInAKUPW0NFBgkONyR6MFY3m2MuJHRzS/wlYARFlg /vg5Gy5hwQC+As7IPQyMXSXl4JZQvFz0W6OxgjeMSFrTLifg1m3y394+LuE83SbA O/GdWLDsJu+2L4nNM19RJwFnwEAcPoSmOhU9TV/ugrO8TSZPDZ9sX7NIoXzGWpeR 82w9Vk9TKF4L9miEPqLcjo42+kkrYRChUA7OV3+vGR5Jk5RHg/IRclk/LCDQ8gv0 Mj/LxKhe6jyGJwXXNYjLJ1jUfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMm2xWuE 7DQAt098PO31oJfzOlRrMB8GA1UdIwQYMBaAFDVDngvzXIiLuE0bJOzecGDPdE6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQyMi8zRTc0NTM2OEVE NTUxMUUzODA3MkM1N0U1OTExRUEzMi9OVU9lQ19OY2lJdTRUUnNrN041d1lNOTBU cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05VT2VDX05jaUl1NFRSc2s3TjV3WU05MFRwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzQyMi8zRTc0NTM2OEVENTUxMUUzODA3MkM1N0U1OTExRUEzMi9OVU9lQ19OY2lJ dTRUUnNrN041d1lNOTBUcEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAw2xDarcIldXXhcHx9S3XE8BlpEXhZRd5S1HJMlgVBaSzGcyy4/xsmlvD+PLg e6g8Y5OhIxX2UaMVs5FtZhKUEmUfTqdPLM1sjZlF1wFCurTYIofwfjH68zz+GWb6 +uaEpRZYlqwFoj1T9nokyht/LYYCGNMDYd0ALc/Gkrc+YY0la65BkTePiLC9PDCQ v+LJMahvCvcee5uNWkQ0dyOv1qpUokmCMQr4oEI9R0hYaEcApaP4ARVMjhX1NH1y +3DvhM6ndIHuAqY+3xWgV7IIQlpcGK2L3Wo/QGYHr81YC38uRNCtwmEiSAUJRxEr xQaGsskPEB7m73s0LQeDZzsxYg== -----END CERTIFICATE-----Generated at Tue Oct 27 18:46:26 2026 by rpki-client