$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft File: NebIf2uhtlE6EnD23BNt23ETZFc.mft (raw, json) Hash identifier: SVuqlniNCfrXifGuo+KfCGRkv4ionWWXQa7Nv8hexNQ= Subject key identifier: 9E:B3:9D:21:9C:60:91:80:39:B1:F7:C6:F8:F3:93:7B:D2:47:53:93 Authority key identifier: 35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57 Certificate issuer: /CN=A91F9749/serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457 Certificate serial: 043D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft Manifest number: 0435 Signing time: Mon 21 Sep 2026 00:02:43 +0000 Manifest this update: Mon 21 Sep 2026 00:02:43 +0000 Manifest next update: Mon 28 Sep 2026 00:02:43 +0000 Files and hashes: 1: NebIf2uhtlE6EnD23BNt23ETZFc.crl (hash: ZU1IgfB/evRXloy7/JiWytrVd77T/qViU1A4h8w4Rmk=) 2: 97B81DD6BF9F11ECAB5B1239C4F9AE02.roa (hash: OhAzKBerxXTp038deHSgx6f20NkMAUKF1iAsoKTjbdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9749, serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457 Validity Not Before: Sep 21 00:02:43 2026 GMT Not After : Sep 28 00:02:43 2026 GMT Subject: CN=6ab07423-0d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c1:30:a6:47:82:8a:94:17:a2:e0:74:1f:c7: 54:47:71:44:07:80:bf:52:45:ee:92:57:27:56:dc: 99:0a:b7:cb:73:fb:13:05:0c:53:65:e8:79:ad:34: f8:3f:55:b2:72:22:2e:58:bf:0d:2a:a0:9b:90:0b: a3:cb:50:f1:53:4d:0c:da:d6:3c:83:06:52:d2:b8: 48:81:7d:c8:99:0d:96:ad:8c:4a:ca:fb:25:d7:d8: 55:ac:13:8f:00:61:8e:b8:a2:3c:29:94:3a:98:99: 00:1f:bf:d2:7a:59:0c:94:d6:b7:bf:0f:90:58:95: 0c:4b:17:73:cf:8c:47:88:7a:3f:66:77:59:3b:0d: 72:06:e7:9d:95:75:c6:2c:6c:00:73:f3:14:d1:3e: f7:fb:42:c1:bc:6c:ce:97:e2:51:c3:66:78:74:16: b6:1f:85:ef:e0:d0:c6:13:ec:cf:03:52:0c:87:a9: a5:ab:4f:ac:e9:4d:29:64:bb:bd:89:ed:6d:68:b3: e9:15:f0:bb:61:43:02:55:98:52:18:a0:24:76:5c: cb:6b:93:e7:6e:f2:6b:11:36:a2:6a:5e:9e:77:ec: 32:21:30:9b:92:75:7b:0b:bb:47:9d:4b:1c:a6:2d: 02:65:79:2e:0c:fc:c1:1e:72:2c:e0:16:58:b1:8a: ca:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B3:9D:21:9C:60:91:80:39:B1:F7:C6:F8:F3:93:7B:D2:47:53:93 X509v3 Authority Key Identifier: keyid:35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:24:4a:41:9b:e4:a1:67:5b:36:a9:b0:72:f9:8e:64:c7:17: 0e:3b:1e:bb:13:31:bc:56:ad:ac:7e:35:1c:51:a4:43:44:5b: 85:05:40:18:b2:46:c7:27:29:0e:03:1d:19:23:49:c2:34:94: e1:3e:eb:a8:08:0a:1d:80:1b:ce:ec:26:da:ed:da:b9:11:7e: 11:8e:89:f3:19:b4:3a:ff:18:46:6c:7a:7a:59:ee:ad:4a:bd: 9c:c2:e0:cb:7a:6c:14:ad:55:3b:0f:d9:de:29:b8:db:da:c2: 32:cd:b9:af:0e:1f:17:5d:2f:52:dc:6c:ed:ff:f9:30:64:c0: 9f:11:15:f3:77:28:a6:77:11:9a:64:4a:4e:13:32:56:80:a1: c3:5e:4d:10:d7:79:23:c5:0d:fd:1c:a3:79:1b:56:fb:ad:b3: 27:db:1b:2f:1d:d3:e3:3b:ca:ba:5a:00:b6:7f:00:e3:a0:98: 6b:46:bb:10:91:96:20:37:08:0c:7e:b7:e7:48:b8:e5:07:86: ba:94:e4:0e:96:5f:ee:1e:08:3c:84:50:f5:8f:76:31:a9:ae: d5:ff:2a:af:47:64:18:d4:ba:61:77:31:a4:dc:a8:4d:69:38: 9c:6f:c5:e2:39:e6:1b:02:80:7d:c6:ac:2a:8e:19:87:93:ac: 8a:2d:43:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk3NDkxMTAvBgNVBAUTKDM1RTZDODdGNkJBMUI2NTEzQTEyNzBGNkRDMTM2RERC NzExMzY0NTcwHhcNMjYwOTIxMDAwMjQzWhcNMjYwOTI4MDAwMjQzWjAYMRYwFAYD VQQDEw02YWIwNzQyMy0wZDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8EwpkeCipQXouB0H8dUR3FEB4C/UkXuklcnVtyZCrfLc/sTBQxTZeh5rTT4 P1WyciIuWL8NKqCbkAujy1DxU00M2tY8gwZS0rhIgX3ImQ2WrYxKyvsl19hVrBOP AGGOuKI8KZQ6mJkAH7/SelkMlNa3vw+QWJUMSxdzz4xHiHo/ZndZOw1yBuedlXXG LGwAc/MU0T73+0LBvGzOl+JRw2Z4dBa2H4Xv4NDGE+zPA1IMh6mlq0+s6U0pZLu9 ie1taLPpFfC7YUMCVZhSGKAkdlzLa5PnbvJrETaial6ed+wyITCbknV7C7tHnUsc pi0CZXkuDPzBHnIs4BZYsYrKbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ6znSGc YJGAObH3xvjzk3vSR1OTMB8GA1UdIwQYMBaAFDXmyH9robZROhJw9twTbdtxE2RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTc0OS85OUQxN0Q5NkJG OUIxMUVDQUQzQzBBMzBDNEY5QUUwMi9OZWJJZjJ1aHRsRTZFbkQyM0JOdDIzRVRa RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05lYklmMnVodGxFNkVuRDIzQk50MjNFVFpGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTc0OS85OUQxN0Q5NkJGOUIxMUVDQUQzQzBBMzBDNEY5QUUwMi9OZWJJZjJ1aHRs RTZFbkQyM0JOdDIzRVRaRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzCRKQZvkoWdbNqmwcvmOZMcXDjseuxMxvFatrH41HFGkQ0RbhQVAGLJGxycp DgMdGSNJwjSU4T7rqAgKHYAbzuwm2u3auRF+EY6J8xm0Ov8YRmx6elnurUq9nMLg y3psFK1VOw/Z3im429rCMs25rw4fF10vUtxs7f/5MGTAnxEV83copncRmmRKThMy VoChw15NENd5I8UN/RyjeRtW+62zJ9sbLx3T4zvKuloAtn8A46CYa0a7EJGWIDcI DH6350i45QeGupTkDpZf7h4IPIRQ9Y92Mamu1f8qr0dkGNS6YXcxpNyoTWk4nG/F 4jnmGwKAfcasKo4Zh5Osii1DjA== -----END CERTIFICATE-----Generated at Mon Sep 21 14:28:43 2026 by rpki-client