$ rpki-client -vvvf rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft File: NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft (raw, json) Hash identifier: /JL8OYZTehxlhBGLz5wPk1HKXm+n8WImQmTnvR5UKEY= Subject key identifier: B5:4D:33:28:2B:46:6E:58:85:6C:96:BA:3F:3C:5F:83:3C:9C:BC:3A Authority key identifier: 34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 Certificate issuer: /CN=A911408F/serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Certificate serial: 0D8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft Manifest number: 0D60 Signing time: Thu 24 Sep 2026 18:11:28 +0000 Manifest this update: Thu 24 Sep 2026 18:11:28 +0000 Manifest next update: Thu 01 Oct 2026 18:11:28 +0000 Files and hashes: 1: NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl (hash: akL40zqrAvwbUXA+s1HY2JBTC0LSNBxmvzSVPgpKsKg=) 2: 8186EA3008A211EA83441161C4F9AE02.roa (hash: 6v7Fso9OTCe2JXGJRIvWJbjMtISjEaVVYIy2xiWn/Hc=) 3: yIB9b-7IQedz2Ir4NUU447Ph2xQ.asa (hash: woLCqJtF8ilPGR69+fi8ee4G1gz/4MJFgr7mLTDyLW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3471 (0xd8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911408F, serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Validity Not Before: Sep 24 18:11:28 2026 GMT Not After : Oct 1 18:11:28 2026 GMT Subject: CN=6ab567d0-7419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:80:17:28:32:06:e5:78:73:b5:cb:eb:45:d9: ca:3f:0c:f7:5b:62:ab:ba:ee:67:00:00:9d:45:f8: 98:33:49:13:c9:36:03:58:2d:0b:3d:6e:b4:eb:8c: 6e:4c:af:8d:aa:08:4f:d5:cd:d9:6a:9a:8f:7b:0d: c8:e2:35:84:0a:03:98:7a:e8:31:1f:d1:8d:62:88: af:32:07:f8:89:1c:a8:3b:e2:d0:f3:dd:ec:3d:0c: 4a:86:18:5e:13:60:94:c1:fa:24:ca:94:c3:81:05: a6:8c:37:67:60:55:0c:a6:2c:7f:a5:e6:f8:6e:4f: 22:56:5d:d1:1c:d2:4c:d5:51:58:4d:bc:34:20:81: 74:4b:e1:9a:43:53:56:ba:2a:06:8e:e3:76:a8:b3: fe:32:ae:8c:37:a8:f5:51:57:80:c1:4e:d8:c2:1e: 20:c7:83:9a:7a:48:23:e4:1c:1e:5b:80:a7:c7:d4: 3d:00:d2:cd:5c:db:23:0a:12:da:8f:57:bf:f6:94: 75:23:ce:4d:53:ab:89:67:18:22:c7:de:1a:35:4f: 2a:66:7d:a4:61:7b:e8:b4:00:8f:51:97:e8:35:e0: 9a:d2:a8:c0:c0:97:78:64:15:a9:4e:65:79:cc:70: 84:1a:60:17:62:de:0e:56:bb:64:70:7b:b6:bb:1f: 74:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4D:33:28:2B:46:6E:58:85:6C:96:BA:3F:3C:5F:83:3C:9C:BC:3A X509v3 Authority Key Identifier: keyid:34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:46:bf:79:df:26:b2:b8:4c:70:3f:80:49:72:f2:01:ee:40: fe:ab:73:05:25:9f:50:b3:77:f7:5a:e2:a6:99:5f:a3:2e:32: b2:f6:52:b9:8a:82:c4:ab:89:8e:d2:b1:c6:f4:1b:36:5b:0d: 9b:0a:bc:af:78:97:02:29:af:8e:c5:ac:fc:6d:19:42:07:13: ef:35:b1:01:be:da:0b:71:45:3a:7c:3c:ce:f5:93:49:f7:05: 6a:e7:dd:a9:cb:a6:c7:5c:fa:ce:8e:e8:65:41:15:09:ef:68: 76:4a:db:e6:8f:9c:61:6e:cb:00:8b:30:37:d0:fe:5e:07:1e: 9f:bf:71:1d:4a:0f:79:49:35:ca:6f:ef:d7:57:a2:75:52:c7: 55:cc:45:86:65:85:06:26:b7:82:58:a8:74:b2:13:82:37:74: 18:f2:b6:19:82:a5:ce:64:17:35:43:b1:b6:07:39:bb:0c:d2: fd:9c:50:4c:71:ea:c0:32:dd:26:db:21:db:a8:73:86:c9:92: 64:7e:d7:3b:a9:36:71:7d:87:3b:2a:90:fe:3c:90:7e:7b:8d: 6b:4d:33:8c:da:09:d3:d5:34:c5:87:15:c9:b6:0f:5d:cc:ee: 33:8f:55:6d:d7:2f:fb:be:c8:51:8a:b8:65:be:87:89:84:5f: 19:86:3f:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQwOEYxMTAvBgNVBAUTKDM0MDg5MEZBMjAyN0M1NDY5REEwQzVGRDgzNzQ4RjY2 QTg4OTJFQjcwHhcNMjYwOTI0MTgxMTI4WhcNMjYxMDAxMTgxMTI4WjAYMRYwFAYD VQQDEw02YWI1NjdkMC03NDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYAXKDIG5XhztcvrRdnKPwz3W2Kruu5nAACdRfiYM0kTyTYDWC0LPW6064xu TK+NqghP1c3ZapqPew3I4jWECgOYeugxH9GNYoivMgf4iRyoO+LQ893sPQxKhhhe E2CUwfokypTDgQWmjDdnYFUMpix/peb4bk8iVl3RHNJM1VFYTbw0IIF0S+GaQ1NW uioGjuN2qLP+Mq6MN6j1UVeAwU7Ywh4gx4Oaekgj5BweW4Cnx9Q9ANLNXNsjChLa j1e/9pR1I85NU6uJZxgix94aNU8qZn2kYXvotACPUZfoNeCa0qjAwJd4ZBWpTmV5 zHCEGmAXYt4OVrtkcHu2ux90nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLVNMygr Rm5YhWyWuj88X4M8nLw6MB8GA1UdIwQYMBaAFDQIkPogJ8VGnaDF/YN0j2aoiS63 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDA4Ri9BQTYwNEQ0QTA4 QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhVYWRvTVg5ZzNTUFpxaUpM cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BaVEtaUFueFVhZG9NWDlnM1NQWnFpSkxyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDA4Ri9BQTYwNEQ0QTA4QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhV YWRvTVg5ZzNTUFpxaUpMcmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfka/ed8msrhMcD+ASXLyAe5A/qtzBSWfULN391ripplfoy4ysvZSuYqCxKuJ jtKxxvQbNlsNmwq8r3iXAimvjsWs/G0ZQgcT7zWxAb7aC3FFOnw8zvWTSfcFaufd qcumx1z6zo7oZUEVCe9odkrb5o+cYW7LAIswN9D+Xgcen79xHUoPeUk1ym/v11ei dVLHVcxFhmWFBia3gliodLITgjd0GPK2GYKlzmQXNUOxtgc5uwzS/ZxQTHHqwDLd Jtsh26hzhsmSZH7XO6k2cX2HOyqQ/jyQfnuNa00zjNoJ09U0xYcVybYPXczuM49V bdcv+77IUYq4Zb6HiYRfGYY/Bw== -----END CERTIFICATE-----Generated at Sat Sep 26 07:59:29 2026 by rpki-client