$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft File: nag9eBUvVmRHEvSlgLqVNV-IgUc.mft (raw, json) Hash identifier: lcbYMrWemFO8ZfaCPNIZh6NexsDlgQEvB/gR87hohdU= Subject key identifier: 35:29:A8:46:54:FA:F9:24:F6:B0:06:38:60:D9:C3:13:4D:1A:24:A9 Authority key identifier: 9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 Certificate issuer: /CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Certificate serial: 0A00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft Manifest number: 09F5 Signing time: Sun 20 Sep 2026 19:43:57 +0000 Manifest this update: Sun 20 Sep 2026 19:43:57 +0000 Manifest next update: Sun 27 Sep 2026 19:43:57 +0000 Files and hashes: 1: nag9eBUvVmRHEvSlgLqVNV-IgUc.crl (hash: ihq9ZefK3nTR71ik/ckuIObntGp7uPlhcoSGjQYtuH0=) 2: 9C3E2D18A98111EAB4B3FD50C4F9AE02.roa (hash: /gvEqRmEcBBJsgYPjYvvjjFizcU0bI3zTeQb96cSavo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2560 (0xa00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8E33, serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Validity Not Before: Sep 20 19:43:57 2026 GMT Not After : Sep 27 19:43:57 2026 GMT Subject: CN=6ab0377d-c900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:13:42:a9:ad:e7:a0:08:85:69:33:ed:e3:b0: 47:fa:46:0a:e2:4b:e2:25:6d:74:c1:44:d7:19:22: 2f:4e:aa:38:cc:e5:4d:9a:b5:20:fd:f6:cd:12:e6: 4e:7a:7d:7e:e8:f1:8d:0f:36:09:fc:92:1f:9f:05: fb:97:41:8c:56:6e:d3:33:9a:e7:e0:c2:1d:02:52: 66:e5:0b:39:fa:7d:30:38:86:c9:d3:fe:27:4a:07: 95:de:80:86:68:a8:ff:2f:f7:c6:db:ae:b8:2c:49: a2:32:96:98:bf:08:18:7b:35:3f:a2:b1:33:76:cb: 0c:46:75:de:41:de:2c:dd:26:9c:2b:c9:23:76:db: 65:77:3c:82:7a:c1:7f:a0:df:27:c2:e7:97:9b:45: ed:1e:a2:9f:93:29:30:96:5e:12:d4:96:7a:b2:cb: 3f:35:dc:8c:65:fd:f0:b1:56:b5:6b:81:1a:15:ea: 1c:f7:43:5e:c3:7e:4e:e1:da:63:71:22:ad:27:40: e0:a8:78:82:4c:fc:b9:4e:26:c9:f4:6c:72:f1:84: f4:0f:30:63:92:ee:7f:a1:4d:c7:6c:0c:7d:e9:3a: a0:41:47:c1:9c:cd:fb:7e:e2:35:bd:d9:49:ba:11: 34:07:d3:c1:5a:2f:e2:fb:2e:d0:48:07:70:59:e2: 92:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:29:A8:46:54:FA:F9:24:F6:B0:06:38:60:D9:C3:13:4D:1A:24:A9 X509v3 Authority Key Identifier: keyid:9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:bf:d8:6e:6d:c7:06:14:98:dc:5c:aa:90:fa:96:c6:93:d2: 9e:f5:2e:62:86:0e:5e:62:d7:5e:86:94:8d:39:36:30:25:c3: 13:4d:ca:1a:da:f8:f2:5e:71:e9:41:4f:1f:f2:da:53:eb:a2: 03:2c:f8:f7:d8:b9:07:4d:f6:2b:32:2c:98:88:a7:6a:e2:5d: 66:04:90:2e:2b:13:95:50:af:c7:f2:e0:5e:86:f2:26:be:46: 8a:15:17:16:70:92:86:32:8c:c1:5b:57:04:0d:8a:bb:03:1e: 3a:1b:97:91:76:08:88:36:80:d7:3c:ce:18:50:2b:37:31:7e: cc:7b:e6:ff:0b:05:55:c1:40:e3:6d:d4:8a:c0:4d:50:26:ea: 8b:bd:3f:23:61:f5:4f:59:ce:a1:33:f5:e2:ae:52:c4:e8:c0: 89:f7:6c:5f:19:50:22:38:bb:41:fa:bb:16:eb:f8:bf:af:8f: 89:9d:1c:dd:5c:6c:20:c5:de:bd:40:df:54:41:c1:ec:65:ed: e8:04:39:68:60:bc:06:db:7b:f7:be:99:ab:a7:62:73:56:75: 71:c2:85:80:35:05:4f:7c:ee:e0:a0:9d:e4:1e:3d:e2:9a:f5: ee:06:41:36:8c:aa:4a:e3:a5:df:9c:3b:42:c5:68:08:73:95: 69:be:c1:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFMzMxMTAvBgNVBAUTKDlEQTgzRDc4MTUyRjU2NjQ0NzEyRjRBNTgwQkE5NTM1 NUY4ODgxNDcwHhcNMjYwOTIwMTk0MzU3WhcNMjYwOTI3MTk0MzU3WjAYMRYwFAYD VQQDEw02YWIwMzc3ZC1jOTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hNCqa3noAiFaTPt47BH+kYK4kviJW10wUTXGSIvTqo4zOVNmrUg/fbNEuZO en1+6PGNDzYJ/JIfnwX7l0GMVm7TM5rn4MIdAlJm5Qs5+n0wOIbJ0/4nSgeV3oCG aKj/L/fG2664LEmiMpaYvwgYezU/orEzdssMRnXeQd4s3SacK8kjdttldzyCesF/ oN8nwueXm0XtHqKfkykwll4S1JZ6sss/NdyMZf3wsVa1a4EaFeoc90New35O4dpj cSKtJ0DgqHiCTPy5TibJ9Gxy8YT0DzBjku5/oU3HbAx96TqgQUfBnM37fuI1vdlJ uhE0B9PBWi/i+y7QSAdwWeKStQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDUpqEZU +vkk9rAGOGDZwxNNGiSpMB8GA1UdIwQYMBaAFJ2oPXgVL1ZkRxL0pYC6lTVfiIFH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEUzMy9BRDJDRjIxRUE5 N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZtUkhFdlNsZ0xxVk5WLUln VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25hZzllQlV2Vm1SSEV2U2xnTHFWTlYtSWdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEUzMy9BRDJDRjIxRUE5N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZt UkhFdlNsZ0xxVk5WLUlnVWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE7/Ybm3HBhSY3FyqkPqWxpPSnvUuYoYOXmLXXoaUjTk2MCXDE03KGtr48l5x 6UFPH/LaU+uiAyz499i5B032KzIsmIinauJdZgSQLisTlVCvx/LgXobyJr5GihUX FnCShjKMwVtXBA2KuwMeOhuXkXYIiDaA1zzOGFArNzF+zHvm/wsFVcFA423UisBN UCbqi70/I2H1T1nOoTP14q5SxOjAifdsXxlQIji7Qfq7Fuv4v6+PiZ0c3VxsIMXe vUDfVEHB7GXt6AQ5aGC8Btt7976Zq6dic1Z1ccKFgDUFT3zu4KCd5B494pr17gZB NoyqSuOl35w7QsVoCHOVab7BUA== -----END CERTIFICATE-----Generated at Mon Sep 21 19:55:55 2026 by rpki-client