$ rpki-client -vvvf rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft File: NkbrHzcLfmPR823rNsJHbJbmuug.mft (raw, json) Hash identifier: Jny1FYW50/mUQ7ABfHD2byZlmLfGiI2EbyUmPjVQ9DE= Subject key identifier: B6:87:AB:A5:E3:B0:5A:5C:CD:F5:F5:7A:48:F6:97:50:97:D3:4B:7E Authority key identifier: 36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 Certificate issuer: /CN=A9113BE5/serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Certificate serial: 03D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft Manifest number: 03C0 Signing time: Wed 23 Sep 2026 00:11:53 +0000 Manifest this update: Wed 23 Sep 2026 00:11:52 +0000 Manifest next update: Wed 30 Sep 2026 00:11:52 +0000 Files and hashes: 1: NkbrHzcLfmPR823rNsJHbJbmuug.crl (hash: 0zbCWQjno33pAzPryoBNLwgwgDPKzbrKls2K8zxyG2E=) 2: F3B00CD2666C11EEB1B4711CC4F9AE02.roa (hash: GEMe9ump7DziyClNxc0hJy5hK+NWLlXJWoTI2Zbh1v0=) 3: 627A6758DF2A11EEBC440C5EC4F9AE02.roa (hash: 5OUj2P3cZH3wkGmc2rAIZUnruDYVCrQATzxWwxl+fw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 978 (0x3d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BE5, serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Validity Not Before: Sep 23 00:11:52 2026 GMT Not After : Sep 30 00:11:52 2026 GMT Subject: CN=6ab31948-49a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b4:ef:c0:64:c8:95:8a:16:f2:d3:06:90:8d: c8:f9:c8:5a:fc:a0:f6:29:a1:de:7e:4e:a6:c1:6f: 0e:e8:f7:ad:31:be:42:15:61:b2:0b:ac:ca:ac:17: 90:97:86:e8:8c:67:41:b0:28:25:3d:df:7f:7e:19: 4b:81:a8:24:50:ad:73:3d:46:e9:a3:f1:b1:d9:71: 81:d7:46:75:a5:0b:00:70:c6:20:b8:3f:11:c7:7e: d0:ff:c2:de:f2:58:58:30:7c:a2:34:1f:65:ff:01: 2d:f5:b5:60:88:86:77:5b:95:e9:0d:6b:44:70:75: cb:2d:a4:88:25:00:38:0b:ae:41:0d:d4:2d:d9:01: ee:1f:3d:b2:9a:e7:c5:19:93:1e:29:98:06:31:78: 5e:58:cf:6e:f1:b2:db:04:c7:32:e0:36:e8:de:e1: 46:29:40:4b:a8:43:89:61:ee:45:1e:a2:2e:c4:0a: d0:b7:89:2a:2b:8d:4a:77:9d:e7:c0:43:c6:dd:47: 50:79:85:0c:a9:a4:14:31:56:e4:3f:0f:bf:86:94: 09:cf:1e:06:1e:2e:9b:b9:e5:14:c3:db:a1:a8:d0: 86:f5:c0:2e:4d:76:a0:cb:35:df:64:2a:ca:78:ef: e6:b2:14:ff:a1:14:46:cd:6d:a7:a0:26:f8:e6:46: 23:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:87:AB:A5:E3:B0:5A:5C:CD:F5:F5:7A:48:F6:97:50:97:D3:4B:7E X509v3 Authority Key Identifier: keyid:36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:3f:17:ac:4c:25:b2:ac:e7:10:68:b2:9a:ea:a8:e7:b9:2b: 64:de:ee:d2:a6:95:1e:8d:b4:61:2f:c7:ea:41:2d:a3:36:08: 5d:65:71:a9:6c:86:d8:5c:14:12:76:a5:ec:75:7e:02:23:6f: d8:d4:bd:e7:fb:ae:23:df:2e:d5:fc:78:4f:69:ee:b3:fc:c1: 3d:d9:63:73:23:72:ad:7f:38:cb:c6:c7:08:40:41:9f:d5:0b: 42:d6:1d:fa:d5:c6:1d:92:62:9d:1e:23:0a:b7:d2:fe:b1:8d: d6:fd:70:64:37:73:aa:e3:63:2a:45:e8:bf:de:93:25:9d:e6: c3:1c:fd:12:ec:3e:6b:37:78:e4:02:71:2d:a3:74:7f:cf:4c: 21:44:62:22:de:cc:81:53:8f:7f:97:1c:33:bf:72:79:ce:f3: 9b:7d:ce:ea:20:6e:6b:8c:d1:3c:2f:8d:cf:16:40:18:55:1f: d5:bf:c6:95:31:44:11:87:29:f8:17:f8:36:44:56:f8:ed:e5: 8d:97:12:95:29:bc:15:ef:32:7a:f8:32:8b:fb:e4:0d:61:7c: be:ae:24:7e:88:5a:88:0b:d8:60:ce:40:e8:74:58:da:10:a1: f1:37:4f:ff:48:b8:e7:21:91:fd:ae:a4:88:e7:b2:02:9f:fa: 58:56:7b:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCRTUxMTAvBgNVBAUTKDM2NDZFQjFGMzcwQjdFNjNEMUYzNkRFQjM2QzI0NzZD OTZFNkJBRTgwHhcNMjYwOTIzMDAxMTUyWhcNMjYwOTMwMDAxMTUyWjAYMRYwFAYD VQQDEw02YWIzMTk0OC00OWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAirTvwGTIlYoW8tMGkI3I+cha/KD2KaHefk6mwW8O6PetMb5CFWGyC6zKrBeQ l4bojGdBsCglPd9/fhlLgagkUK1zPUbpo/Gx2XGB10Z1pQsAcMYguD8Rx37Q/8Le 8lhYMHyiNB9l/wEt9bVgiIZ3W5XpDWtEcHXLLaSIJQA4C65BDdQt2QHuHz2ymufF GZMeKZgGMXheWM9u8bLbBMcy4Dbo3uFGKUBLqEOJYe5FHqIuxArQt4kqK41Kd53n wEPG3UdQeYUMqaQUMVbkPw+/hpQJzx4GHi6bueUUw9uhqNCG9cAuTXagyzXfZCrK eO/mshT/oRRGzW2noCb45kYjqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLaHq6Xj sFpczfX1ekj2l1CX00t+MB8GA1UdIwQYMBaAFDZG6x83C35j0fNt6zbCR2yW5rro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0JFNS82MTFDNTEyQ0Yw RjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZtUFI4MjNyTnNKSGJKYm11 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rYnJIemNMZm1QUjgyM3JOc0pIYkpibXV1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0JFNS82MTFDNTEyQ0YwRjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZt UFI4MjNyTnNKSGJKYm11dWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuT8XrEwlsqznEGiymuqo57krZN7u0qaVHo20YS/H6kEtozYIXWVxqWyG2FwU Enal7HV+AiNv2NS95/uuI98u1fx4T2nus/zBPdljcyNyrX84y8bHCEBBn9ULQtYd +tXGHZJinR4jCrfS/rGN1v1wZDdzquNjKkXov96TJZ3mwxz9Euw+azd45AJxLaN0 f89MIURiIt7MgVOPf5ccM79yec7zm33O6iBua4zRPC+NzxZAGFUf1b/GlTFEEYcp +Bf4NkRW+O3ljZcSlSm8Fe8yevgyi/vkDWF8vq4kfohaiAvYYM5A6HRY2hCh8TdP /0i45yGR/a6kiOeyAp/6WFZ7yg== -----END CERTIFICATE-----Generated at Wed Sep 23 05:43:21 2026 by rpki-client