$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft File: NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft (raw, json) Hash identifier: 6M7WmMRn9fhlPazOG+h+HDZCABWjP8jeWwd3M6yQNIM= Subject key identifier: 9E:52:BD:4D:38:87:50:31:05:C5:BA:D3:4C:69:E1:00:ED:A5:79:5F Authority key identifier: 34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B Certificate issuer: /CN=A91A56E7/serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Certificate serial: 0D02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft Manifest number: 0CF9 Signing time: Sun 20 Sep 2026 18:21:24 +0000 Manifest this update: Sun 20 Sep 2026 18:21:24 +0000 Manifest next update: Sun 27 Sep 2026 18:21:24 +0000 Files and hashes: 1: NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl (hash: aDUOlfnzQ3hkp0W4cK8oZYuhKiqaZ6F1d6LYynWujTg=) 2: 2157C3E011C211EA93417583C4F9AE02.roa (hash: +1OqTpdYQThGOs42BYoaAj2a2Cg6wC/jJbBuEZgzjdU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3330 (0xd02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A56E7, serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Validity Not Before: Sep 20 18:21:24 2026 GMT Not After : Sep 27 18:21:24 2026 GMT Subject: CN=6ab02424-9c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e9:13:f1:77:7c:cc:9f:f2:14:f1:7c:34:f2: 2f:39:88:4a:df:70:99:4b:6a:fc:50:7c:87:64:35: ee:c8:e3:e2:54:16:7d:d8:53:2a:b0:85:43:84:68: 97:ad:37:71:4c:fc:00:2c:54:96:fb:ad:1d:0e:35: 0f:60:ff:77:b6:bc:5d:21:d2:2a:3f:39:22:54:59: ab:6d:0b:0b:17:ac:4b:fc:78:1b:b8:97:d4:cc:ab: a3:69:c8:f9:ea:d0:39:28:cb:52:6a:33:d0:de:57: b9:c7:da:45:b5:ea:d6:2b:08:6d:11:cb:69:51:27: a9:f4:35:88:00:ea:99:3c:55:fe:82:b4:e7:79:fe: ab:6b:a2:ba:98:3c:3c:7c:e1:14:63:0b:78:cd:dc: db:93:33:c9:db:51:ab:81:a7:9d:b4:83:12:f4:8f: 81:fe:a3:79:f5:a5:d5:76:7d:13:3c:65:91:ec:7a: 26:0e:e0:94:6c:fb:38:a1:ab:4a:c8:ee:08:93:e8: d7:63:55:96:b1:97:34:38:75:e2:04:7a:58:14:f0: 5a:6d:18:5a:bd:29:71:55:d8:07:d8:0a:87:79:d0: 89:39:71:1a:58:bd:1c:89:49:f5:f6:1f:b3:39:d5: 5b:fb:9e:97:8d:fa:57:b7:10:80:cd:f9:ea:e8:be: 56:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:52:BD:4D:38:87:50:31:05:C5:BA:D3:4C:69:E1:00:ED:A5:79:5F X509v3 Authority Key Identifier: keyid:34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:86:11:9c:0c:2c:ae:87:3a:85:9a:d6:ea:07:67:de:01:ce: 14:83:07:bf:1e:f8:f9:f3:d7:01:f1:46:11:dc:62:90:42:75: 85:cd:cc:3b:a7:30:b7:7d:cf:c8:44:d3:29:0b:14:43:80:4b: 07:8e:bb:42:be:a7:5d:65:94:b3:35:d7:9d:a7:ef:1a:10:c8: bc:b0:e9:5a:45:c6:0c:69:0d:9d:4f:91:84:7b:87:61:7d:d8: a7:ac:be:ca:58:20:9f:66:d6:22:6e:5c:ff:50:4d:13:54:b3: e7:83:d4:29:5f:3a:cf:46:cc:7d:bc:08:d9:cb:01:41:69:f6: 26:46:e4:62:75:55:96:6c:aa:c1:d9:5e:52:49:d4:ae:83:08: bd:54:62:1e:54:bd:1b:20:33:bf:6d:f1:28:c3:af:bc:12:f8: 4a:31:b0:49:f1:11:97:dc:b5:fb:e0:39:d8:6a:d0:5a:4c:72: 41:a7:6a:38:d8:ff:4e:94:5f:3b:14:77:c4:63:a1:a2:5a:4a: d0:6b:55:a3:28:a4:c5:f1:32:ef:9c:9b:b2:00:b8:8f:9a:36: c8:7f:96:21:44:33:fe:11:7c:6a:8b:47:6b:a6:59:d7:ae:42: ae:12:d1:fb:b5:42:4d:e6:2a:9f:bd:1e:2e:c1:21:b6:77:d8: 76:6c:a5:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2RTcxMTAvBgNVBAUTKDM0NzYzNkYwRTk4QUY4MjQ4MjZCMUJDRjk2RjNDNzc2 RDgxMkY1NUIwHhcNMjYwOTIwMTgyMTI0WhcNMjYwOTI3MTgyMTI0WjAYMRYwFAYD VQQDEw02YWIwMjQyNC05YzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyukT8Xd8zJ/yFPF8NPIvOYhK33CZS2r8UHyHZDXuyOPiVBZ92FMqsIVDhGiX rTdxTPwALFSW+60dDjUPYP93trxdIdIqPzkiVFmrbQsLF6xL/HgbuJfUzKujacj5 6tA5KMtSajPQ3le5x9pFterWKwhtEctpUSep9DWIAOqZPFX+grTnef6ra6K6mDw8 fOEUYwt4zdzbkzPJ21GrgaedtIMS9I+B/qN59aXVdn0TPGWR7HomDuCUbPs4oatK yO4Ik+jXY1WWsZc0OHXiBHpYFPBabRhavSlxVdgH2AqHedCJOXEaWL0ciUn19h+z OdVb+56XjfpXtxCAzfnq6L5WawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ5SvU04 h1AxBcW600xp4QDtpXlfMB8GA1UdIwQYMBaAFDR2NvDpivgkgmsbz5bzx3bYEvVb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTZFNy83ODYwRjhCQTEx QzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1DU0NheHZQbHZQSGR0Z1M5 VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IWTI4T21LLUNTQ2F4dlBsdlBIZHRnUzlWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTZFNy83ODYwRjhCQTExQzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1D U0NheHZQbHZQSGR0Z1M5VnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkIYRnAwsroc6hZrW6gdn3gHOFIMHvx74+fPXAfFGEdxikEJ1hc3MO6cwt33P yETTKQsUQ4BLB467Qr6nXWWUszXXnafvGhDIvLDpWkXGDGkNnU+RhHuHYX3Yp6y+ ylggn2bWIm5c/1BNE1Sz54PUKV86z0bMfbwI2csBQWn2JkbkYnVVlmyqwdleUknU roMIvVRiHlS9GyAzv23xKMOvvBL4SjGwSfERl9y1++A52GrQWkxyQadqONj/TpRf OxR3xGOholpK0GtVoyikxfEy75ybsgC4j5o2yH+WIUQz/hF8aotHa6ZZ165CrhLR +7VCTeYqn70eLsEhtnfYdmylLw== -----END CERTIFICATE-----Generated at Tue Sep 22 06:00:55 2026 by rpki-client