$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.mft File: NpGJraGZWwIPq4bXdZjGDCl0d1U.mft (raw, json) Hash identifier: R3kmgqy8CC1zNB3ysz0ywHL2hsnt/R5bCQ765tFCP+8= Subject key identifier: BD:A7:FD:D5:1B:A5:3A:D4:DA:0A:40:63:F1:CE:D9:1B:32:24:AF:57 Authority key identifier: 36:91:89:AD:A1:99:5B:02:0F:AB:86:D7:75:98:C6:0C:29:74:77:55 Certificate issuer: /CN=A91EC167/serialNumber=369189ADA1995B020FAB86D77598C60C29747755 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpGJraGZWwIPq4bXdZjGDCl0d1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.mft Manifest number: 37 Signing time: Mon 21 Sep 2026 10:32:01 +0000 Manifest this update: Mon 21 Sep 2026 10:32:01 +0000 Manifest next update: Mon 28 Sep 2026 10:32:01 +0000 Files and hashes: 1: NpGJraGZWwIPq4bXdZjGDCl0d1U.crl (hash: OEJ8tKSWaXMLJXHcMnXUzRubNknqsLgVuzhjhwMWl3M=) 2: Gr4xftVKE6s0qdLHDlwR7N4W_6U.asa (hash: P4s/wKlAjE/PKk3Z6XhL8VaLXUEKsYBzm4BegO1b8WM=) 3: B88C85348C0411F196792E7B4011F970.roa (hash: og2FsMI+6JRvqJvW9dRUgtuwJbUJvfXWEyBkZvtW874=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.crl rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpGJraGZWwIPq4bXdZjGDCl0d1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 10:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC167, serialNumber=369189ADA1995B020FAB86D77598C60C29747755 Validity Not Before: Sep 21 10:32:01 2026 GMT Not After : Sep 28 10:32:01 2026 GMT Subject: CN=6ab107a1-8e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:83:dd:a8:52:9b:02:da:01:7c:20:1e:3b:4b: 59:6d:ae:2f:75:08:f5:bc:97:06:42:4a:53:48:59: 22:d1:90:d7:2e:f7:0d:b5:a3:1e:3e:77:01:43:de: d3:3e:bf:e3:f5:db:e8:d0:95:fb:a5:88:e0:ab:85: 23:b0:36:52:f2:aa:04:d7:12:8d:68:b5:e1:38:0d: 18:69:a1:b0:72:0c:4e:12:19:d6:5f:e9:ad:83:f7: 2d:95:26:61:98:6d:aa:db:76:c0:aa:aa:51:81:74: bd:6c:e6:9a:14:3e:9c:51:ae:47:70:08:c8:89:d0: 16:f9:05:99:fe:77:5a:00:c1:36:00:db:86:8c:4a: 76:ef:18:29:2e:8d:3b:19:bb:c2:83:52:ad:e5:53: f4:48:50:42:44:6a:c3:13:34:37:cf:8c:75:13:61: 9f:f5:22:f8:d5:c6:dc:c9:92:53:6f:38:77:2b:01: 95:4a:10:f9:bb:d1:cc:23:e1:22:41:ce:dc:80:c6: 2f:9b:a0:85:10:a4:0d:f2:c9:aa:da:69:20:3f:e9: ff:1e:73:41:18:bc:c2:47:17:1e:52:4b:d1:61:ce: 64:01:56:83:fb:bf:02:ad:b4:78:22:0f:8c:3e:c7: cc:b4:e9:7b:fd:89:d0:d0:16:f2:9f:82:34:05:93: 7a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A7:FD:D5:1B:A5:3A:D4:DA:0A:40:63:F1:CE:D9:1B:32:24:AF:57 X509v3 Authority Key Identifier: keyid:36:91:89:AD:A1:99:5B:02:0F:AB:86:D7:75:98:C6:0C:29:74:77:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpGJraGZWwIPq4bXdZjGDCl0d1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:d2:bf:0a:7f:7d:56:2f:23:d7:13:df:b2:04:37:8a:4f:76: de:58:6e:8c:30:bb:03:d9:d3:c0:28:15:b7:97:88:a2:36:fc: 60:9e:7c:16:1b:b2:70:ba:77:51:08:01:dc:81:d7:b5:73:89: 23:ab:a4:58:3b:ae:91:bf:21:9b:af:89:8d:1b:c9:90:3d:33: 87:34:c4:dd:31:ac:b5:21:ac:a2:b0:e1:10:87:be:1c:4b:8b: 1b:dc:a5:6a:0f:b2:2d:99:83:f3:15:10:5f:6c:8b:17:e0:61: 71:dc:fc:25:09:2f:c6:37:f9:82:89:82:18:32:80:d6:fc:8f: 6b:d0:69:f9:18:52:a4:c3:64:02:25:0c:d5:88:86:af:55:0e: 7d:cd:8d:d7:f9:dc:ed:6b:78:b9:de:55:eb:8e:f5:96:cb:51: 61:91:e7:f6:e8:00:a3:54:11:d8:62:e8:80:86:08:3c:1b:9d: 0f:71:76:9e:57:d4:64:76:a4:1f:28:76:52:a6:96:c3:78:37: f7:82:57:f9:21:bb:be:1e:21:1d:e0:84:ab:26:29:56:58:29: 45:ad:66:f1:dd:c0:25:f0:6a:9f:ea:0a:95:28:6e:af:67:af: 69:0c:7e:7b:43:36:2b:ad:12:7c:b1:2d:aa:18:66:f9:10:dc: 04:4a:58:cb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzE2NzExMC8GA1UEBRMoMzY5MTg5QURBMTk5NUIwMjBGQUI4NkQ3NzU5OEM2MEMy OTc0Nzc1NTAeFw0yNjA5MjExMDMyMDFaFw0yNjA5MjgxMDMyMDFaMBgxFjAUBgNV BAMTDTZhYjEwN2ExLThlMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDig92oUpsC2gF8IB47S1ltri91CPW8lwZCSlNIWSLRkNcu9w21ox4+dwFD3tM+ v+P12+jQlfuliOCrhSOwNlLyqgTXEo1oteE4DRhpobByDE4SGdZf6a2D9y2VJmGY barbdsCqqlGBdL1s5poUPpxRrkdwCMiJ0Bb5BZn+d1oAwTYA24aMSnbvGCkujTsZ u8KDUq3lU/RIUEJEasMTNDfPjHUTYZ/1IvjVxtzJklNvOHcrAZVKEPm70cwj4SJB ztyAxi+boIUQpA3yyaraaSA/6f8ec0EYvMJHFx5SS9FhzmQBVoP7vwKttHgiD4w+ x8y06Xv9idDQFvKfgjQFk3rJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvaf91Rul OtTaCkBj8c7ZGzIkr1cwHwYDVR0jBBgwFoAUNpGJraGZWwIPq4bXdZjGDCl0d1Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDMTY3L0IyREY4MjJBNkYw RTExRjE5NjhFN0M0ODgzQTMwRkJDL05wR0pyYUdaV3dJUHE0YlhkWmpHRENsMGQx VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnBHSnJhR1pXd0lQcTRiWGRaakdEQ2wwZDFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD MTY3L0IyREY4MjJBNkYwRTExRjE5NjhFN0M0ODgzQTMwRkJDL05wR0pyYUdaV3dJ UHE0YlhkWmpHRENsMGQxVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAz0r8Kf31WLyPXE9+yBDeKT3beWG6MMLsD2dPAKBW3l4iiNvxgnnwWG7JwundR CAHcgde1c4kjq6RYO66RvyGbr4mNG8mQPTOHNMTdMay1IayisOEQh74cS4sb3KVq D7ItmYPzFRBfbIsX4GFx3PwlCS/GN/mCiYIYMoDW/I9r0Gn5GFKkw2QCJQzViIav VQ59zY3X+dzta3i53lXrjvWWy1Fhkef26ACjVBHYYuiAhgg8G50PcXaeV9RkdqQf KHZSppbDeDf3glf5Ibu+HiEd4ISrJilWWClFrWbx3cAl8Gqf6gqVKG6vZ69pDH57 QzYrrRJ8sS2qGGb5ENwESljL -----END CERTIFICATE-----Generated at Tue Sep 22 01:06:08 2026 by rpki-client