$ rpki-client -vvvf rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft File: 0NDWzWh3DDh4O764QbES0FYBdKI.mft (raw, json) Hash identifier: WmhCe9Amq6guwGmgVeA3kC+CqAU1FRkzEkynIjHPNTk= Subject key identifier: FD:D4:2B:6E:93:97:66:DE:75:48:CF:57:FD:28:93:E8:1D:76:3F:C8 Authority key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2 Certificate issuer: /CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2 Certificate serial: 099B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft Manifest number: 0958 Signing time: Sun 20 Sep 2026 20:07:23 +0000 Manifest this update: Sun 20 Sep 2026 20:07:22 +0000 Manifest next update: Sun 27 Sep 2026 20:07:22 +0000 Files and hashes: 1: 0NDWzWh3DDh4O764QbES0FYBdKI.crl (hash: w0Mg1yM6/mFX/ecz2ad3eJXV2w8oNpzEIfRmZw3fpQg=) 2: BD1D670AA9AE11F0BAAC4E40C4F9AE02.roa (hash: GzxogbU8QiwwF++aswC6YdHu3ZoZCEYz5G0xx5UJTJQ=) 3: 4EF79184489411ED86987260C4F9AE02.roa (hash: FW+6trj4ky9MIx0ol9teJ9/ApDWDbFtG0371+JMzJmo=) 4: 577FD5BE067C11ED882FC127C4F9AE02.roa (hash: oRxcNHxks0xSpQQ3xzQ2CValnLK9KvTZJVfHvaOGSxM=) 5: 530A6E26721711F1A345157A7BA30FBC.roa (hash: q5oiasmtw4zs+gP72ndK+9apIt6id57zzQstMwGY0i4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2459 (0x99b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91998BE, serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2 Validity Not Before: Sep 20 20:07:22 2026 GMT Not After : Sep 27 20:07:22 2026 GMT Subject: CN=6ab03cfb-f103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d4:be:8e:ac:fb:32:b4:7d:c6:dd:55:39:1b: b6:55:a5:33:32:aa:77:cd:01:06:24:49:2c:64:fc: a0:6f:ba:12:ee:79:3c:a3:f6:51:c1:2e:3e:7f:c0: e1:d5:54:c0:9a:e7:69:22:03:c4:b4:51:d9:31:07: 03:5f:01:6b:02:14:58:00:f7:28:74:ae:69:0e:e1: 74:96:ac:7c:53:47:8a:1d:3e:db:b7:f9:36:d5:24: c1:70:00:31:5c:5d:ba:f1:78:84:8a:fb:28:10:54: 75:10:7c:44:12:79:c0:e0:73:56:cf:c4:02:2e:2a: a1:ff:69:9f:05:55:31:54:81:43:9b:08:c0:cc:20: 4d:1a:71:ee:6e:84:5c:2a:91:d5:c8:9f:78:41:68: ba:b4:c4:a2:d4:20:fa:43:d7:77:d4:8d:e8:e5:47: 51:92:4e:34:09:48:36:42:b5:0d:7a:49:57:59:34: df:94:c4:d8:90:5a:fe:36:7c:6f:aa:5a:69:35:af: ce:9a:46:01:3d:5c:52:ff:ce:1b:7a:d1:5f:cc:b8: 28:57:9d:94:53:48:f8:f1:cc:2b:f0:7a:92:17:c8: 48:96:b9:2f:78:29:2a:d2:51:66:db:14:65:09:6b: 85:54:95:85:39:35:89:61:06:8e:ad:7d:7c:57:1a: 21:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D4:2B:6E:93:97:66:DE:75:48:CF:57:FD:28:93:E8:1D:76:3F:C8 X509v3 Authority Key Identifier: keyid:D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:38:b3:79:5a:1d:7d:2b:f7:ea:62:7c:45:8c:d7:88:b9:2a: df:a3:11:6c:98:e5:eb:ef:62:c1:e0:46:e5:56:13:c8:59:00: e8:1b:67:1d:97:11:80:8c:21:b0:d9:4c:4b:e3:4f:fc:de:0a: 62:73:8e:f1:35:e2:17:24:3c:8d:de:99:2c:bc:6e:3d:02:24: 54:07:76:b3:33:30:5f:df:04:b5:c4:83:8c:00:46:37:46:c2: a5:c2:60:00:36:24:f5:35:e2:f6:a2:4e:1f:ad:04:fb:c3:85: c3:64:24:1f:d2:3b:48:61:22:93:51:b6:fe:76:86:c1:41:9e: b2:ae:03:db:da:75:8b:ae:03:c2:6d:61:eb:1a:85:22:dd:9d: ab:ac:98:4c:6f:30:0b:cb:81:2d:76:f8:64:6b:bf:c7:e9:fd: 16:cf:30:2e:73:25:c5:02:bb:0e:79:81:12:65:b6:51:98:6c: d9:39:56:10:67:29:61:96:cf:4c:42:1f:a0:0b:47:62:2b:a3: c4:14:06:b7:cf:72:52:8f:c3:3c:60:2f:79:ea:dc:2c:c1:44: 96:6d:ef:fb:5b:9a:29:6a:28:5d:d7:9f:58:80:cc:35:16:27: 0c:23:bd:d4:d0:04:6d:66:a8:81:e0:50:e2:50:f9:23:10:64: 70:48:b3:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4QkUxMTAvBgNVBAUTKEQwRDBENkNENjg3NzBDMzg3ODNCQkVCODQxQjExMkQw NTYwMTc0QTIwHhcNMjYwOTIwMjAwNzIyWhcNMjYwOTI3MjAwNzIyWjAYMRYwFAYD VQQDEw02YWIwM2NmYi1mMTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAktS+jqz7MrR9xt1VORu2VaUzMqp3zQEGJEksZPygb7oS7nk8o/ZRwS4+f8Dh 1VTAmudpIgPEtFHZMQcDXwFrAhRYAPcodK5pDuF0lqx8U0eKHT7bt/k21STBcAAx XF268XiEivsoEFR1EHxEEnnA4HNWz8QCLiqh/2mfBVUxVIFDmwjAzCBNGnHuboRc KpHVyJ94QWi6tMSi1CD6Q9d31I3o5UdRkk40CUg2QrUNeklXWTTflMTYkFr+Nnxv qlppNa/OmkYBPVxS/84betFfzLgoV52UU0j48cwr8HqSF8hIlrkveCkq0lFm2xRl CWuFVJWFOTWJYQaOrX18VxohyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP3UK26T l2bedUjPV/0ok+gddj/IMB8GA1UdIwQYMBaAFNDQ1s1odww4eDu+uEGxEtBWAXSi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OThCRS8xNTBFNTdDNkNG NDkxMUVBOUNDOTM1M0VDNEY5QUUwMi8wTkRXeldoM0REaDRPNzY0UWJFUzBGWUJk S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBORFd6V2gzRERoNE83NjRRYkVTMEZZQmRLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OThCRS8xNTBFNTdDNkNGNDkxMUVBOUNDOTM1M0VDNEY5QUUwMi8wTkRXeldoM0RE aDRPNzY0UWJFUzBGWUJkS0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhDizeVodfSv36mJ8RYzXiLkq36MRbJjl6+9iweBG5VYTyFkA6BtnHZcRgIwh sNlMS+NP/N4KYnOO8TXiFyQ8jd6ZLLxuPQIkVAd2szMwX98EtcSDjABGN0bCpcJg ADYk9TXi9qJOH60E+8OFw2QkH9I7SGEik1G2/naGwUGesq4D29p1i64Dwm1h6xqF It2dq6yYTG8wC8uBLXb4ZGu/x+n9Fs8wLnMlxQK7DnmBEmW2UZhs2TlWEGcpYZbP TEIfoAtHYiujxBQGt89yUo/DPGAveercLMFElm3v+1uaKWooXdefWIDMNRYnDCO9 1NAEbWaogeBQ4lD5IxBkcEizTg== -----END CERTIFICATE-----Generated at Tue Sep 22 12:43:56 2026 by rpki-client