$ rpki-client -vvvf rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft File: NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft (raw, json) Hash identifier: 81/OWpP9CjLnf9gwemUQkdZZKldIwplnEGalYw32E4w= Subject key identifier: CB:E6:84:BA:6A:56:0E:C6:B5:C6:F1:EC:43:6F:97:10:1E:EC:04:5D Authority key identifier: 35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5 Certificate issuer: /CN=A917FACB/serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft Manifest number: 0157 Signing time: Wed 23 Sep 2026 05:03:38 +0000 Manifest this update: Wed 23 Sep 2026 05:03:38 +0000 Manifest next update: Wed 30 Sep 2026 05:03:38 +0000 Files and hashes: 1: NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl (hash: 7gyqSvIZEA/Ifo/P1DzrgtW5KVTr/LXovKkFJaanDdk=) 2: 81FC16A6B46511EF86BEAC6BC4F9AE02.roa (hash: xq7YEvfaNzXWM/9MQqDfYNsSlsB3/7fTEB/zk7EcfRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FACB, serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5 Validity Not Before: Sep 23 05:03:38 2026 GMT Not After : Sep 30 05:03:38 2026 GMT Subject: CN=6ab35daa-21f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:68:50:88:16:09:07:d6:4b:9c:91:76:44:e0: ce:b8:02:d6:b0:35:b7:af:90:dd:92:58:84:19:f1: 1b:03:f0:9c:cd:8e:42:3a:e7:d3:0d:80:19:1f:33: 1d:ee:e8:23:8b:cf:5c:22:4d:94:43:ca:6b:29:a9: 2a:79:58:c5:41:0e:70:80:35:5b:19:d0:1f:72:71: b9:d4:a7:6b:e6:f9:b9:79:eb:38:46:ad:10:51:3e: 2e:cc:2c:29:4e:25:1a:70:72:ac:8d:bc:03:7a:7f: 81:c6:96:95:04:59:41:83:ce:b2:55:5b:b6:c4:09: 33:18:92:ae:07:b1:3c:b2:42:35:a1:c2:5f:93:83: 0c:76:56:88:f1:46:5d:07:3d:bc:23:7e:01:ff:54: 5b:67:8d:e9:24:43:04:07:5f:79:84:61:61:79:3c: 0f:58:d2:a1:bc:85:11:39:58:94:51:b6:5f:02:80: 27:b8:b2:dc:b1:60:3c:f6:bd:67:76:ed:9f:3d:03: f4:a4:bd:7a:7d:bd:10:0a:02:96:64:3f:8b:54:09: fe:0d:7d:af:8a:3f:3a:88:a2:6d:90:ef:80:74:08: ef:e8:89:ec:8f:7a:2b:e7:46:52:20:f9:a0:0d:6d: 24:6d:23:60:6c:d6:c7:9b:ed:2e:aa:4c:97:9c:38: a7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E6:84:BA:6A:56:0E:C6:B5:C6:F1:EC:43:6F:97:10:1E:EC:04:5D X509v3 Authority Key Identifier: keyid:35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:21:68:68:42:ba:47:09:c3:4e:93:cc:c2:fd:15:bb:02:b0: 38:e8:44:b2:12:3f:48:8c:68:62:70:62:f7:77:37:67:ee:40: 56:29:fa:ab:80:df:2f:79:61:80:55:2b:3c:fd:5a:d8:c4:6c: 28:6b:ef:d7:b7:05:36:94:40:52:8a:41:8e:38:96:d2:82:d9: 1e:71:0d:14:59:51:58:79:4d:07:db:ad:e6:fe:50:7d:d0:bd: 9e:87:b9:12:26:98:7a:18:d7:01:9f:ee:d7:94:39:51:3b:8e: 13:8f:28:c5:d2:d7:1b:24:c2:08:07:ea:8c:6a:79:48:a0:76: 52:94:51:fa:80:0f:de:1e:8d:5b:38:ea:e9:b8:a4:b3:68:52: f2:98:9d:cf:88:dc:4c:d6:53:74:1a:b3:96:7d:51:76:b3:9f: b1:ad:b1:e9:85:1f:52:30:84:e8:7e:fe:0c:d4:40:bd:cc:a3: 90:70:aa:c3:31:e0:be:d2:1f:b3:71:2c:c6:97:d8:e7:78:57: 5a:a4:3e:00:a4:03:14:86:f2:e5:6b:e6:4b:d7:70:78:5c:49: 27:cf:18:3d:46:2b:ed:99:2f:bc:fb:61:63:46:d6:86:8d:eb: 56:bf:5c:97:55:19:71:d5:c7:04:8c:91:89:f9:f7:aa:25:7b: e8:60:5a:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBQ0IxMTAvBgNVBAUTKDM1ODE0QjE1RkI4MzQ5MzlFRUE4NUNDNEE2N0M0RTFB NkE4NUE0RjUwHhcNMjYwOTIzMDUwMzM4WhcNMjYwOTMwMDUwMzM4WjAYMRYwFAYD VQQDEw02YWIzNWRhYS0yMWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmhQiBYJB9ZLnJF2RODOuALWsDW3r5DdkliEGfEbA/CczY5COufTDYAZHzMd 7ugji89cIk2UQ8prKakqeVjFQQ5wgDVbGdAfcnG51Kdr5vm5ees4Rq0QUT4uzCwp TiUacHKsjbwDen+BxpaVBFlBg86yVVu2xAkzGJKuB7E8skI1ocJfk4MMdlaI8UZd Bz28I34B/1RbZ43pJEMEB195hGFheTwPWNKhvIUROViUUbZfAoAnuLLcsWA89r1n du2fPQP0pL16fb0QCgKWZD+LVAn+DX2vij86iKJtkO+AdAjv6Insj3or50ZSIPmg DW0kbSNgbNbHm+0uqkyXnDinKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMvmhLpq Vg7Gtcbx7ENvlxAe7ARdMB8GA1UdIwQYMBaAFDWBSxX7g0k57qhcxKZ8ThpqhaT1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkFDQi8yNUQxMTg4NkI0 NjUxMUVGOUJGQkFBNjdDNEY5QUUwMi9OWUZMRmZ1RFNUbnVxRnpFcG54T0dtcUZw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05ZRkxGZnVEU1RudXFGekVwbnhPR21xRnBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkFDQi8yNUQxMTg4NkI0NjUxMUVGOUJGQkFBNjdDNEY5QUUwMi9OWUZMRmZ1RFNU bnVxRnpFcG54T0dtcUZwUFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuCFoaEK6RwnDTpPMwv0VuwKwOOhEshI/SIxoYnBi93c3Z+5AVin6q4DfL3lh gFUrPP1a2MRsKGvv17cFNpRAUopBjjiW0oLZHnENFFlRWHlNB9ut5v5QfdC9noe5 EiaYehjXAZ/u15Q5UTuOE48oxdLXGyTCCAfqjGp5SKB2UpRR+oAP3h6NWzjq6bik s2hS8pidz4jcTNZTdBqzln1RdrOfsa2x6YUfUjCE6H7+DNRAvcyjkHCqwzHgvtIf s3EsxpfY53hXWqQ+AKQDFIby5WvmS9dweFxJJ88YPUYr7ZkvvPthY0bWho3rVr9c l1UZcdXHBIyRifn3qiV76GBaJg== -----END CERTIFICATE-----Generated at Thu Sep 24 15:25:22 2026 by rpki-client