$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft File: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft (raw, json) Hash identifier: T2dgfk3gNM9S3I6xOYSRvtmd3TqGdRrBzzW3+4N7qJg= Subject key identifier: 5B:B3:F3:7B:51:15:D9:0F:B9:73:CD:F9:88:62:87:3B:35:A0:75:A2 Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 Certificate issuer: /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Certificate serial: 01F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft Manifest number: 01D3 Signing time: Mon 21 Sep 2026 03:56:58 +0000 Manifest this update: Mon 21 Sep 2026 03:56:57 +0000 Manifest next update: Mon 28 Sep 2026 03:56:57 +0000 Files and hashes: 1: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl (hash: hroMtVh/nr+SRuraRPw1/hmYuo+HjcPpFvbEZtDEm1U=) 2: 77E54B78C45111EF9D399128C4F9AE02.roa (hash: JwFEBQDBS2XvD+XrlUfnJ9Rr/0S0seAaVJadWlIPqzs=) 3: FF233C70E62111EFACA87766C4F9AE02.roa (hash: l81QgUkAG3jb2K1eCkfJ4vvLxu4iwZrMMfKmrpOvZAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:56:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 505 (0x1f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAE0, serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Validity Not Before: Sep 21 03:56:57 2026 GMT Not After : Sep 28 03:56:57 2026 GMT Subject: CN=6ab0ab0a-17da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ca:64:a8:de:d2:90:98:07:3f:41:de:67:5d: 95:d4:ef:80:14:8a:94:32:34:70:c7:ef:ce:21:8e: 09:75:84:27:27:4c:9a:30:d3:f2:91:09:fe:89:ab: c2:60:c8:0b:54:34:78:bb:b6:c1:72:bd:b5:82:a6: a3:f6:92:ef:89:ce:95:46:05:11:97:de:84:37:32: b7:53:b9:b1:06:d2:50:1c:4a:7b:bb:79:46:34:44: d5:8e:6c:ff:d4:16:64:44:e9:5b:17:a9:11:35:38: 18:68:6b:eb:f6:a9:1a:cc:c4:50:e8:c5:f9:4f:ff: b3:a5:f9:b8:57:0b:53:b9:b5:1c:89:9b:f0:e2:7c: 57:08:9d:ba:af:74:db:c3:64:72:2d:75:66:fb:55: e6:a6:cc:70:cb:6f:8c:88:4a:d3:54:99:90:29:36: 33:5a:98:08:dc:19:e8:9a:e4:49:27:01:f5:91:6f: 26:1d:0c:b7:f6:e3:d4:1f:d1:48:07:a3:7f:83:9c: 7f:59:f6:3e:da:2d:ba:60:eb:69:af:36:05:b8:cd: 91:d8:c0:93:cf:a4:59:65:0b:7f:2b:83:78:36:d0: 64:08:37:07:71:00:4e:3b:fe:31:90:2d:4e:94:bf: a9:5c:ca:d5:3d:0d:e4:ae:75:b0:8b:76:36:80:6b: ca:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B3:F3:7B:51:15:D9:0F:B9:73:CD:F9:88:62:87:3B:35:A0:75:A2 X509v3 Authority Key Identifier: keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:69:e8:d5:4f:d5:05:57:7b:3b:d4:96:6b:26:09:d8:a4:3e: e6:6d:c8:27:c4:b2:e7:e3:b9:f0:45:65:11:34:73:a7:ad:54: 4e:db:fe:af:9a:5e:62:c3:41:58:54:39:33:83:a0:43:28:5f: d8:e5:db:d6:60:cf:40:76:dd:e3:0e:04:9d:2c:ee:1d:61:39: 44:c8:37:49:21:01:e9:73:32:b5:cb:17:2a:2f:38:c1:07:84: e9:b8:c3:f8:e5:8a:05:54:e0:cd:60:e6:02:5d:ba:de:8e:ba: 84:91:21:32:53:d5:44:0a:04:66:3e:f9:b7:6f:f1:25:81:39: 3f:79:41:21:ec:fa:23:5d:b1:c7:b1:97:b3:e6:41:27:ff:26: 19:e4:2e:72:7e:f8:e2:ef:52:6f:33:f6:f2:9e:80:21:87:ac: f2:96:3b:f2:e4:d3:7b:e6:b7:72:80:03:f3:a0:ca:bb:25:f6: 62:94:be:18:aa:df:21:80:b4:c7:51:2f:6d:bb:2f:ce:e2:bb: 1f:84:94:bc:ea:c5:6f:28:3c:29:04:c0:72:94:3f:25:05:86: f3:40:b5:03:41:73:ab:61:fb:df:09:da:82:59:c3:ba:8d:7f: a5:19:9d:be:a1:04:5b:04:f7:76:a6:ee:95:91:8b:0e:2d:56: 8b:b9:91:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBRTAxMTAvBgNVBAUTKDlERjRGRURGRjkyQTlFN0Y2RTAyQkZDMDU0QUQzMzk4 NTNEOUREMzIwHhcNMjYwOTIxMDM1NjU3WhcNMjYwOTI4MDM1NjU3WjAYMRYwFAYD VQQDEw02YWIwYWIwYS0xN2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwspkqN7SkJgHP0HeZ12V1O+AFIqUMjRwx+/OIY4JdYQnJ0yaMNPykQn+iavC YMgLVDR4u7bBcr21gqaj9pLvic6VRgURl96ENzK3U7mxBtJQHEp7u3lGNETVjmz/ 1BZkROlbF6kRNTgYaGvr9qkazMRQ6MX5T/+zpfm4VwtTubUciZvw4nxXCJ26r3Tb w2RyLXVm+1Xmpsxwy2+MiErTVJmQKTYzWpgI3BnomuRJJwH1kW8mHQy39uPUH9FI B6N/g5x/WfY+2i26YOtprzYFuM2R2MCTz6RZZQt/K4N4NtBkCDcHcQBOO/4xkC1O lL+pXMrVPQ3krnWwi3Y2gGvKnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFuz83tR FdkPuXPN+Yhihzs1oHWiMB8GA1UdIwQYMBaAFJ30/t/5Kp5/bgK/wFStM5hT2d0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFFMC9BRUY2Mzc2MDE5 NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5uOXVBcl9BVkswem1GUFoz VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25mVC0zX2txbm45dUFyX0FWSzB6bUZQWjNUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFFMC9BRUY2Mzc2MDE5NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5u OXVBcl9BVkswem1GUFozVEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxGno1U/VBVd7O9SWayYJ2KQ+5m3IJ8Sy5+O58EVlETRzp61UTtv+r5peYsNB WFQ5M4OgQyhf2OXb1mDPQHbd4w4EnSzuHWE5RMg3SSEB6XMytcsXKi84wQeE6bjD +OWKBVTgzWDmAl263o66hJEhMlPVRAoEZj75t2/xJYE5P3lBIez6I12xx7GXs+ZB J/8mGeQucn744u9SbzP28p6AIYes8pY78uTTe+a3coAD86DKuyX2YpS+GKrfIYC0 x1EvbbsvzuK7H4SUvOrFbyg8KQTAcpQ/JQWG80C1A0Fzq2H73wnaglnDuo1/pRmd vqEEWwT3dqbulZGLDi1Wi7mRUA== -----END CERTIFICATE-----Generated at Mon Sep 21 20:07:51 2026 by rpki-client