$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft File: NM2mWwLxdr_CSHhNqprIp74WU9s.mft (raw, json) Hash identifier: Ep2VIPEWvrwKhOhhA6ecph5Tq63irI100phAEtsYjVQ= Subject key identifier: 88:B6:C2:9C:3E:4E:B2:F9:D8:5C:F0:AF:03:CE:DA:5C:2B:CE:EE:4D Authority key identifier: 34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB Certificate issuer: /CN=A91E3DDB/serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft Manifest number: F7 Signing time: Mon 21 Sep 2026 06:21:15 +0000 Manifest this update: Mon 21 Sep 2026 06:21:15 +0000 Manifest next update: Mon 28 Sep 2026 06:21:15 +0000 Files and hashes: 1: NM2mWwLxdr_CSHhNqprIp74WU9s.crl (hash: NZP/KFQLcw9yBdYyG3fBUjLAfWKLZrkj1bKPju1AFtk=) 2: B24F568A4C7A11F09CF1A77BC4F9AE02.roa (hash: n7sRPa6I69j+h39GN76+PY3SuYecQbYjjiiW9wMz2wU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.crl rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3DDB, serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB Validity Not Before: Sep 21 06:21:15 2026 GMT Not After : Sep 28 06:21:15 2026 GMT Subject: CN=6ab0ccdb-ed85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ca:6d:40:d2:0e:19:27:17:01:02:08:1c:70: 25:00:f0:99:b6:73:65:ef:2e:d5:6d:9a:9f:33:b3: 22:12:77:e2:1f:fe:55:dc:59:64:50:0f:72:7a:75: 96:8f:fc:c3:ae:16:e3:27:cd:0b:ca:a1:2a:4e:c2: 2a:4f:eb:7f:7d:50:80:42:b4:3f:95:e7:18:e6:60: c0:92:8f:7d:5d:43:43:27:a0:02:62:d8:f7:e9:75: c3:1b:b3:59:b3:39:69:66:02:34:5e:91:c8:88:18: cf:0c:4b:3e:4b:6d:62:42:aa:70:0d:dd:2c:df:74: 96:84:7e:c6:4d:87:21:28:b0:57:fe:76:b2:67:65: 4a:ed:e6:e5:02:d9:29:22:b3:42:aa:12:b3:4d:99: cc:33:f3:8c:89:ef:9d:15:95:37:c0:b7:e8:f3:54: ef:7f:c6:0c:fa:36:5a:54:95:29:9d:4d:56:ef:f5: 53:5d:f5:62:e2:ea:e3:29:44:5e:37:05:09:b5:aa: a4:8a:26:49:02:75:a4:7c:95:cf:6a:1a:a2:38:af: 09:e9:c5:52:21:50:df:b0:2f:69:d7:7e:d8:5d:56: a8:fb:39:44:f0:dc:62:59:d8:96:88:d6:6b:72:19: be:92:6c:fb:87:e5:0d:26:a3:d9:e4:9e:18:0b:91: 83:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B6:C2:9C:3E:4E:B2:F9:D8:5C:F0:AF:03:CE:DA:5C:2B:CE:EE:4D X509v3 Authority Key Identifier: keyid:34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:f0:2f:cd:d8:58:dc:ef:6b:6e:0b:c4:d5:f6:8a:36:54:c2: d0:06:60:c0:9f:20:78:a4:4b:21:4c:ef:ca:6a:46:6d:73:77: 06:8d:7c:e7:19:16:e3:e1:32:bd:26:5d:aa:0f:a8:c8:e8:07: 5a:43:26:f7:e5:22:d9:49:ac:f8:e0:5b:b0:c9:c8:12:f5:91: 1e:95:64:5f:9d:97:76:74:d4:8d:66:fc:42:d9:5e:b2:01:9a: 56:e6:0f:04:66:93:a2:89:7f:9f:85:b3:7a:8e:64:fb:68:33: 03:5e:61:fa:52:31:df:db:b5:a3:6d:d9:2c:f6:ab:d8:6f:66: e9:a3:cd:3b:50:84:48:c9:97:9f:9a:f2:90:95:1f:84:fd:5c: 8d:02:af:14:87:8a:2a:39:aa:b2:bb:09:ad:d1:7e:c9:2f:ac: d7:5e:32:cb:05:86:bb:5c:ea:24:7f:52:f6:e1:bd:7a:87:ad: cb:20:1d:0a:bb:39:b0:03:50:f5:3e:10:de:65:94:fd:c4:42: db:48:34:ed:fa:e0:73:f4:fd:ba:91:05:65:64:1f:0f:69:f8: a8:82:62:34:99:a3:c4:fa:b6:9e:a8:86:c3:c4:94:ca:01:46: a6:3f:23:37:77:88:3a:f6:2c:b7:b0:55:92:a7:43:ca:5d:62: 94:dd:b2:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNEREIxMTAvBgNVBAUTKDM0Q0RBNjVCMDJGMTc2QkZDMjQ4Nzg0REFBOUFDOEE3 QkUxNjUzREIwHhcNMjYwOTIxMDYyMTE1WhcNMjYwOTI4MDYyMTE1WjAYMRYwFAYD VQQDEw02YWIwY2NkYi1lZDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmMptQNIOGScXAQIIHHAlAPCZtnNl7y7VbZqfM7MiEnfiH/5V3FlkUA9yenWW j/zDrhbjJ80LyqEqTsIqT+t/fVCAQrQ/lecY5mDAko99XUNDJ6ACYtj36XXDG7NZ szlpZgI0XpHIiBjPDEs+S21iQqpwDd0s33SWhH7GTYchKLBX/nayZ2VK7eblAtkp IrNCqhKzTZnMM/OMie+dFZU3wLfo81Tvf8YM+jZaVJUpnU1W7/VTXfVi4urjKURe NwUJtaqkiiZJAnWkfJXPahqiOK8J6cVSIVDfsC9p137YXVao+zlE8NxiWdiWiNZr chm+kmz7h+UNJqPZ5J4YC5GD1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIi2wpw+ TrL52FzwrwPO2lwrzu5NMB8GA1UdIwQYMBaAFDTNplsC8Xa/wkh4TaqayKe+FlPb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0REQi8wRTNCREFFQzQ3 MjQxMUYwOTVGOTFCMjNDNEY5QUUwMi9OTTJtV3dMeGRyX0NTSGhOcXBySXA3NFdV OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05NMm1Xd0x4ZHJfQ1NIaE5xcHJJcDc0V1U5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0REQi8wRTNCREFFQzQ3MjQxMUYwOTVGOTFCMjNDNEY5QUUwMi9OTTJtV3dMeGRy X0NTSGhOcXBySXA3NFdVOXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAePAvzdhY3O9rbgvE1faKNlTC0AZgwJ8geKRLIUzvympGbXN3Bo185xkW4+Ey vSZdqg+oyOgHWkMm9+Ui2Ums+OBbsMnIEvWRHpVkX52XdnTUjWb8QtlesgGaVuYP BGaTool/n4Wzeo5k+2gzA15h+lIx39u1o23ZLPar2G9m6aPNO1CESMmXn5rykJUf hP1cjQKvFIeKKjmqsrsJrdF+yS+s114yywWGu1zqJH9S9uG9eoetyyAdCrs5sANQ 9T4Q3mWU/cRC20g07frgc/T9upEFZWQfD2n4qIJiNJmjxPq2nqiGw8SUygFGpj8j N3eIOvYst7BVkqdDyl1ilN2y6Q== -----END CERTIFICATE-----Generated at Tue Sep 22 00:43:48 2026 by rpki-client