$ rpki-client -vvvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft File: NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft (raw, json) Hash identifier: dRlSOxKsIGcArurOJ5rume2b+69GIKBCpFrCyD8LFXI= Subject key identifier: 21:14:BE:98:53:D8:54:BE:34:80:5C:4B:19:B3:FA:3B:B6:DC:C4:EF Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D Certificate issuer: /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft Manifest number: 0222 Signing time: Mon 21 Sep 2026 02:52:47 +0000 Manifest this update: Mon 21 Sep 2026 02:52:46 +0000 Manifest next update: Mon 28 Sep 2026 02:52:46 +0000 Files and hashes: 1: NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl (hash: 7f1eYwkmaj6JpTsaPttk5mb+E3h5IovLb/mXlAh3+1c=) 2: 2C4CD10078C011EE90D36F13C4F9AE02.roa (hash: /FvIDYbl/mVf08+fKbfi2snHOASjdNbVb4Yy2Ni1NGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Validity Not Before: Sep 21 02:52:46 2026 GMT Not After : Sep 28 02:52:46 2026 GMT Subject: CN=6ab09bff-baca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4a:87:f0:cc:ea:40:dc:df:e3:aa:50:8b:07: 60:5f:ad:54:f2:f2:58:9f:9d:03:f5:73:58:18:a0: 82:44:ab:9e:5d:09:6b:3a:29:54:05:8d:e7:9b:47: f1:d9:df:ab:83:bd:1f:1e:2c:90:54:eb:01:12:d3: 44:13:94:b6:b7:e0:e1:c2:28:f6:59:77:d4:56:42: 81:4c:b1:76:fa:7b:26:65:22:70:01:a0:9a:9a:e8: b4:27:77:f3:24:8d:65:be:fd:5a:45:9d:1a:c0:23: 93:de:4a:97:ce:fa:81:e6:d6:64:45:81:a6:6e:15: 65:25:a5:ff:5b:a8:a1:3e:cc:ff:dc:94:21:1e:9f: b8:34:5d:48:0e:8b:54:2c:e8:8b:a5:c7:16:58:d3: 9e:62:04:33:6f:bb:2a:53:c9:c5:1c:86:ed:f6:8b: 18:21:33:f0:43:14:57:3b:00:f8:30:79:cb:9f:e2: 05:32:e2:ec:c8:6c:7b:da:70:60:2a:47:63:58:79: b3:b7:be:36:da:aa:46:38:de:34:d1:18:ef:a9:62: 43:b2:19:95:8a:07:c4:60:78:51:75:63:26:df:47: 0a:92:fe:b3:b5:9a:a3:c4:2f:63:0a:1c:ae:72:4e: 66:6d:67:63:4c:01:c8:b1:fd:3c:f8:0a:7f:f6:5d: c8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:14:BE:98:53:D8:54:BE:34:80:5C:4B:19:B3:FA:3B:B6:DC:C4:EF X509v3 Authority Key Identifier: keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:b0:fd:99:ea:00:3f:f3:c0:b0:19:18:fd:5a:b0:9c:27:b2: 2c:74:83:02:85:6a:3b:23:e7:19:a2:41:4e:8a:33:17:23:2e: 85:52:ca:16:1b:e7:ea:41:7d:d2:a2:a5:62:ff:98:2c:6d:c8: f1:2c:b4:f5:fb:ab:6c:94:38:c2:ea:10:db:00:ad:64:fe:5b: e0:b3:c1:f7:9a:7a:9e:70:1b:b4:b6:73:91:43:c5:e4:a9:56: 27:32:9f:3f:11:d5:d3:7e:68:4c:a3:bc:c7:da:15:80:73:88: 5b:41:a4:1f:64:47:6d:33:f6:bd:e2:4b:41:f3:6f:5c:78:72: dc:ac:59:e3:70:29:f3:b9:a0:ef:38:01:84:11:04:ee:91:f5: 05:eb:06:34:0c:d6:ed:42:d6:6a:19:47:94:73:cc:d3:94:af: c9:2e:ed:84:0d:43:08:9b:48:87:9f:88:20:3e:f9:81:66:68: ce:58:8f:26:ac:6f:3d:bf:be:d1:1a:ba:b3:44:0c:f4:07:5b: ca:64:9e:b6:98:d7:90:4f:ec:54:12:9b:dd:cf:13:13:97:f7: b4:eb:e4:83:61:75:8f:b0:6d:e7:b0:18:75:32:35:d1:af:c0: 2d:3d:ce:0e:76:da:42:34:d9:92:2a:de:ea:40:94:41:9e:6b: a7:cb:23:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI1RDIxMTAvBgNVBAUTKDM0NTE3Q0MyOUY3NDE2OUZENzM2QTJDMjQwNjE5RjhC MzMwRkREOUQwHhcNMjYwOTIxMDI1MjQ2WhcNMjYwOTI4MDI1MjQ2WjAYMRYwFAYD VQQDEw02YWIwOWJmZi1iYWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA70qH8MzqQNzf46pQiwdgX61U8vJYn50D9XNYGKCCRKueXQlrOilUBY3nm0fx 2d+rg70fHiyQVOsBEtNEE5S2t+Dhwij2WXfUVkKBTLF2+nsmZSJwAaCamui0J3fz JI1lvv1aRZ0awCOT3kqXzvqB5tZkRYGmbhVlJaX/W6ihPsz/3JQhHp+4NF1IDotU LOiLpccWWNOeYgQzb7sqU8nFHIbt9osYITPwQxRXOwD4MHnLn+IFMuLsyGx72nBg KkdjWHmzt7422qpGON400RjvqWJDshmVigfEYHhRdWMm30cKkv6ztZqjxC9jChyu ck5mbWdjTAHIsf08+Ap/9l3IxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCEUvphT 2FS+NIBcSxmz+ju23MTvMB8GA1UdIwQYMBaAFDRRfMKfdBaf1zaiwkBhn4szD92d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjVEMi82REY2MDJEMDc4 QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZwX1hOcUxDUUdHZml6TVAz WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GRjh3cDkwRnBfWE5xTENRR0dmaXpNUDNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjVEMi82REY2MDJEMDc4QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZw X1hOcUxDUUdHZml6TVAzWjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh7D9meoAP/PAsBkY/VqwnCeyLHSDAoVqOyPnGaJBToozFyMuhVLKFhvn6kF9 0qKlYv+YLG3I8Sy09furbJQ4wuoQ2wCtZP5b4LPB95p6nnAbtLZzkUPF5KlWJzKf PxHV035oTKO8x9oVgHOIW0GkH2RHbTP2veJLQfNvXHhy3KxZ43Ap87mg7zgBhBEE 7pH1BesGNAzW7ULWahlHlHPM05SvyS7thA1DCJtIh5+IID75gWZozliPJqxvPb++ 0Rq6s0QM9AdbymSetpjXkE/sVBKb3c8TE5f3tOvkg2F1j7Bt57AYdTI10a/ALT3O DnbaQjTZkire6kCUQZ5rp8sjiw== -----END CERTIFICATE-----Generated at Mon Sep 21 20:53:42 2026 by rpki-client