$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft File: NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft (raw, json) Hash identifier: aHKlco6fbEr3hpQxTGrTAMD3FgYtnqljwQqgSyWkR00= Subject key identifier: 65:23:8F:72:57:6F:F4:CD:BC:25:C9:37:E9:18:1F:91:22:AF:98:19 Authority key identifier: 35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85 Certificate issuer: /CN=A91E2EFF/serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft Manifest number: F0 Signing time: Mon 21 Sep 2026 06:21:35 +0000 Manifest this update: Mon 21 Sep 2026 06:21:35 +0000 Manifest next update: Mon 28 Sep 2026 06:21:35 +0000 Files and hashes: 1: NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl (hash: r4o/t0WU/3vBASmWTxvmWNLXhUcz2/Wa7wEDc6CofLQ=) 2: 370DA046484A11F0B96B9D10C4F9AE02.roa (hash: jnh0hd9BJeU6DriRSa5jcG1pBk63GyyVkCh16HHy3wA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EFF, serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385 Validity Not Before: Sep 21 06:21:35 2026 GMT Not After : Sep 28 06:21:35 2026 GMT Subject: CN=6ab0ccef-0c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:08:c1:bc:ba:c2:0b:92:01:f3:a0:9a:e3:e7: 18:79:ab:7f:38:44:86:4c:2c:1c:3c:a5:42:20:5d: d8:14:72:6f:9a:5a:b1:e4:52:39:ac:eb:24:19:5a: 2f:5b:a0:59:d7:db:de:34:18:23:98:6f:4f:71:0c: c3:05:c0:a7:b4:da:9c:77:60:8d:a0:9a:e2:71:14: 93:b2:2a:0a:1d:fe:d9:5e:44:7a:ab:55:3d:e8:70: c3:49:02:57:f9:7e:25:50:75:a6:21:1e:de:f3:b2: 8a:fc:bd:cf:75:bd:af:c0:d7:00:f9:b2:00:14:53: 2f:0f:2a:31:8b:08:12:f4:15:84:43:bb:cd:16:29: a1:ab:71:6d:8d:82:5d:fa:19:2f:5b:96:87:8b:78: 0d:26:f7:a4:27:94:5f:77:ad:9b:d2:02:54:d5:eb: 8a:37:ae:22:1e:de:02:32:da:d5:66:6e:fd:24:db: 23:38:a1:c7:b0:25:63:d3:19:a4:d2:0e:9f:f5:e9: 04:d2:9c:4c:7c:01:2c:56:7e:25:15:10:73:18:0a: 1d:d5:3c:e6:6b:5d:af:c5:c7:c1:e8:9c:86:51:1a: bf:90:03:6a:8f:2b:1b:5b:8c:79:d0:da:18:e6:2b: c7:58:18:cb:a0:ed:35:2c:d9:ec:30:2a:1f:d3:1a: b5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:23:8F:72:57:6F:F4:CD:BC:25:C9:37:E9:18:1F:91:22:AF:98:19 X509v3 Authority Key Identifier: keyid:35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:a9:8d:51:24:85:87:60:f0:c4:52:0d:a2:89:da:51:14:6a: f6:2c:24:8e:cd:e4:d5:2f:ed:b0:d2:1f:51:55:0f:48:87:44: 5f:ae:5f:9c:7d:a5:23:cb:67:d1:fb:f7:68:37:e7:13:1d:85: eb:f0:f9:13:7c:7e:9f:f7:fd:7a:81:d8:06:ce:55:a5:54:33: 79:28:3c:f6:78:42:41:03:02:53:6e:46:3f:ca:32:56:79:a9: 2e:2c:34:58:29:71:76:21:13:68:c0:90:9a:2e:e7:b1:29:f6: df:26:0f:5c:ad:da:a4:79:e4:b6:97:e3:f4:90:ed:a1:d4:8f: 8c:3b:11:3f:4b:74:18:af:42:1b:69:f9:c8:4c:f0:9a:d0:ff: 9f:73:52:c6:b5:43:fe:a7:16:c9:72:33:19:22:8f:b5:ea:89: b7:d0:41:4b:89:5f:31:37:6c:af:eb:60:c3:8e:56:23:87:47: 17:de:04:75:55:d1:c7:e2:0e:4a:78:0a:1f:1f:65:61:62:83: bc:3a:10:3f:a3:cc:2b:c4:b0:9d:4c:c2:24:d3:56:16:78:3a: 6c:02:58:66:42:0b:64:28:d5:dc:e5:db:0e:2c:b5:df:2a:cc: 0d:f6:22:65:18:0e:e9:8b:39:2f:2f:2c:66:e1:d8:94:37:10: a2:96:b9:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFRkYxMTAvBgNVBAUTKDM1NDMzQzlFQzQwODA5OUY3MDE4QkM1MTQ0MUQyMkM0 QzExRkMzODUwHhcNMjYwOTIxMDYyMTM1WhcNMjYwOTI4MDYyMTM1WjAYMRYwFAYD VQQDEw02YWIwY2NlZi0wYzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwjBvLrCC5IB86Ca4+cYeat/OESGTCwcPKVCIF3YFHJvmlqx5FI5rOskGVov W6BZ19veNBgjmG9PcQzDBcCntNqcd2CNoJricRSTsioKHf7ZXkR6q1U96HDDSQJX +X4lUHWmIR7e87KK/L3Pdb2vwNcA+bIAFFMvDyoxiwgS9BWEQ7vNFimhq3FtjYJd +hkvW5aHi3gNJvekJ5Rfd62b0gJU1euKN64iHt4CMtrVZm79JNsjOKHHsCVj0xmk 0g6f9ekE0pxMfAEsVn4lFRBzGAod1Tzma12vxcfB6JyGURq/kANqjysbW4x50NoY 5ivHWBjLoO01LNnsMCof0xq14wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGUjj3JX b/TNvCXJN+kYH5Eir5gZMB8GA1UdIwQYMBaAFDVDPJ7ECAmfcBi8UUQdIsTBH8OF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkVGRi9BQjk3NUJDRTQ4 NDkxMUYwQkYwNzAzNzBDNEY5QUUwMi9OVU04bnNRSUNaOXdHTHhSUkIwaXhNRWZ3 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05VTThuc1FJQ1o5d0dMeFJSQjBpeE1FZnc0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkVGRi9BQjk3NUJDRTQ4NDkxMUYwQkYwNzAzNzBDNEY5QUUwMi9OVU04bnNRSUNa OXdHTHhSUkIwaXhNRWZ3NFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFqmNUSSFh2DwxFINoonaURRq9iwkjs3k1S/tsNIfUVUPSIdEX65fnH2lI8tn 0fv3aDfnEx2F6/D5E3x+n/f9eoHYBs5VpVQzeSg89nhCQQMCU25GP8oyVnmpLiw0 WClxdiETaMCQmi7nsSn23yYPXK3apHnktpfj9JDtodSPjDsRP0t0GK9CG2n5yEzw mtD/n3NSxrVD/qcWyXIzGSKPteqJt9BBS4lfMTdsr+tgw45WI4dHF94EdVXRx+IO SngKHx9lYWKDvDoQP6PMK8SwnUzCJNNWFng6bAJYZkILZCjV3OXbDiy13yrMDfYi ZRgO6Ys5Ly8sZuHYlDcQopa5ow== -----END CERTIFICATE-----Generated at Mon Sep 21 13:57:30 2026 by rpki-client