$ rpki-client -vvvf rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft File: NYOZxzbvBV1dWSyrGQFv44FvZgg.mft (raw, json) Hash identifier: +gdYtv+gUrY+Ma624ebRhJiQdSWNAJT9htzDJxpOk/E= Subject key identifier: C1:98:59:2E:2D:CF:38:35:4E:DD:4E:7F:45:BE:96:22:67:F8:10:9D Authority key identifier: 35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08 Certificate issuer: /CN=A919819A/serialNumber=358399C736EF055D5D592CAB19016FE3816F6608 Certificate serial: 35AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft Manifest number: 3596 Signing time: Tue 22 Sep 2026 14:58:34 +0000 Manifest this update: Tue 22 Sep 2026 14:58:33 +0000 Manifest next update: Tue 29 Sep 2026 14:58:33 +0000 Files and hashes: 1: NYOZxzbvBV1dWSyrGQFv44FvZgg.crl (hash: 5KATwls4DJedYhavYkwZHuRpWj20eSSBIP4a4U9t5SU=) 2: 73462B74643C11EB9E7DF918C4F9AE02.roa (hash: uaBZ8rrkBWuiO8vvVUgSMMRL47cpkYF6IyC6kK7kqtg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13739 (0x35ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919819A, serialNumber=358399C736EF055D5D592CAB19016FE3816F6608 Validity Not Before: Sep 22 14:58:33 2026 GMT Not After : Sep 29 14:58:33 2026 GMT Subject: CN=6ab2979a-f8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:17:7c:22:51:6b:ec:2d:9e:28:34:9c:2b:12: ec:4c:52:2d:43:a3:a1:91:97:73:72:26:2d:92:39: 35:7f:1b:bd:d3:95:60:25:e7:b1:e7:80:fa:f7:bb: d0:1e:8b:45:59:1b:ea:5d:f0:94:76:88:4f:2f:6b: 77:ea:94:d8:b0:18:48:6c:26:36:39:d9:51:35:0c: b0:b2:28:59:27:c6:df:a6:f1:3a:de:2a:84:81:42: bb:ae:0e:97:ad:ce:09:ca:6a:7b:67:a7:24:fb:71: df:bf:fa:34:ca:65:64:73:e2:82:1b:34:ff:89:e7: 8d:6d:74:a7:1f:ae:95:e1:a8:4e:fa:a6:70:3e:3e: 3e:70:d9:35:60:8f:38:b7:a8:f1:33:76:b7:3a:8f: c4:cc:30:ae:15:2b:e4:63:e2:43:99:fc:13:cc:a6: 24:f3:31:3b:99:f3:ae:de:75:70:18:b8:df:20:45: 36:b9:56:8a:ce:1c:13:e0:ce:47:fa:85:81:ff:c7: 5a:d8:08:6d:97:28:d1:b7:b3:b1:1a:39:2e:9a:dc: 07:23:51:93:39:51:53:f7:fc:48:92:36:d0:18:76: 69:85:3f:94:ca:97:30:15:d6:6c:d5:c2:98:b4:29: 3b:66:72:c7:04:1c:56:a9:fe:9b:4d:ca:80:92:1e: b1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:98:59:2E:2D:CF:38:35:4E:DD:4E:7F:45:BE:96:22:67:F8:10:9D X509v3 Authority Key Identifier: keyid:35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:f8:08:61:ee:99:bd:7a:c8:a5:cf:fc:24:a6:5b:a2:fc:52: ca:8c:f4:7f:60:66:99:ae:8d:41:69:cd:a6:9c:4e:85:4b:15: cf:1a:de:4e:ca:c1:19:51:19:9d:a2:19:39:70:be:bb:9c:ea: a4:ca:dd:08:06:07:a8:c2:4b:a4:3d:ba:31:48:2e:df:ab:98: ec:69:32:c8:17:c1:dd:7a:73:b4:b6:87:5d:f3:87:73:da:ae: 2c:62:8e:6a:eb:2b:bf:4e:8f:5a:8d:79:72:1a:2e:7f:89:17: e6:47:8d:1f:d1:8d:70:05:57:01:c5:fb:bc:93:d4:d2:85:9b: e9:80:24:52:d9:0e:ea:aa:d3:f9:44:97:53:c1:9d:2d:5a:f2: 64:99:bd:81:50:78:c4:e1:f0:6d:fa:00:b3:61:e8:45:7e:bd: 81:64:f3:ac:6a:d9:59:45:d2:5d:72:fe:93:74:fa:8c:5e:d0: 94:40:57:b8:30:bf:e7:07:c5:c6:62:dd:c4:5e:e0:47:87:91: d0:74:0f:07:2c:2f:8d:f7:68:48:6c:8b:78:f9:3c:43:75:4a: 79:c7:b9:24:6c:38:fa:a0:a7:f1:4d:31:be:43:1d:61:95:a8: 89:8a:06:f5:98:b3:2e:08:d5:c3:13:5e:7b:ea:4b:8a:0e:d9: 4f:85:c5:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgxOUExMTAvBgNVBAUTKDM1ODM5OUM3MzZFRjA1NUQ1RDU5MkNBQjE5MDE2RkUz ODE2RjY2MDgwHhcNMjYwOTIyMTQ1ODMzWhcNMjYwOTI5MTQ1ODMzWjAYMRYwFAYD VQQDEw02YWIyOTc5YS1mOGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBd8IlFr7C2eKDScKxLsTFItQ6OhkZdzciYtkjk1fxu905VgJeex54D697vQ HotFWRvqXfCUdohPL2t36pTYsBhIbCY2OdlRNQywsihZJ8bfpvE63iqEgUK7rg6X rc4Jymp7Z6ck+3Hfv/o0ymVkc+KCGzT/ieeNbXSnH66V4ahO+qZwPj4+cNk1YI84 t6jxM3a3Oo/EzDCuFSvkY+JDmfwTzKYk8zE7mfOu3nVwGLjfIEU2uVaKzhwT4M5H +oWB/8da2AhtlyjRt7OxGjkumtwHI1GTOVFT9/xIkjbQGHZphT+UypcwFdZs1cKY tCk7ZnLHBBxWqf6bTcqAkh6xxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMGYWS4t zzg1Tt1Of0W+liJn+BCdMB8GA1UdIwQYMBaAFDWDmcc27wVdXVksqxkBb+OBb2YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODE5QS82M0VBMjA5MjFE OUUxMUUyQURCNzNGOEUwOEIwMkNEMi9OWU9aeHpidkJWMWRXU3lyR1FGdjQ0RnZa Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05ZT1p4emJ2QlYxZFdTeXJHUUZ2NDRGdlpnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODE5QS82M0VBMjA5MjFEOUUxMUUyQURCNzNGOEUwOEIwMkNEMi9OWU9aeHpidkJW MWRXU3lyR1FGdjQ0RnZaZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdfgIYe6ZvXrIpc/8JKZbovxSyoz0f2Bmma6NQWnNppxOhUsVzxreTsrBGVEZ naIZOXC+u5zqpMrdCAYHqMJLpD26MUgu36uY7GkyyBfB3XpztLaHXfOHc9quLGKO ausrv06PWo15chouf4kX5keNH9GNcAVXAcX7vJPU0oWb6YAkUtkO6qrT+USXU8Gd LVryZJm9gVB4xOHwbfoAs2HoRX69gWTzrGrZWUXSXXL+k3T6jF7QlEBXuDC/5wfF xmLdxF7gR4eR0HQPBywvjfdoSGyLePk8Q3VKece5JGw4+qCn8U0xvkMdYZWoiYoG 9ZizLgjVwxNee+pLig7ZT4XFoQ== -----END CERTIFICATE-----Generated at Tue Sep 22 18:56:28 2026 by rpki-client