$ rpki-client -vvvf rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft File: NaA6oUeNBoHAZxl2yftD9pMTgr4.mft (raw, json) Hash identifier: bUVst/O+QlTKqwqH94XDuBcj6nmikGtCjofyT9TzLPo= Subject key identifier: DF:0F:84:16:AF:B4:6E:A8:57:D6:D2:C7:79:49:9F:0B:47:46:8C:EB Authority key identifier: 35:A0:3A:A1:47:8D:06:81:C0:67:19:76:C9:FB:43:F6:93:13:82:BE Certificate issuer: /CN=A91161EB/serialNumber=35A03AA1478D0681C0671976C9FB43F6931382BE Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft Manifest number: 58 Signing time: Fri 25 Sep 2026 08:19:00 +0000 Manifest this update: Fri 25 Sep 2026 08:18:59 +0000 Manifest next update: Fri 02 Oct 2026 08:18:59 +0000 Files and hashes: 1: NaA6oUeNBoHAZxl2yftD9pMTgr4.crl (hash: 9RqXm/LjhwT/5/hFsJ0KGoZRO7sUAdDiW01WejanluA=) 2: 3FAB1696ADA911F1A6606A8C6F11F970.roa (hash: Z1a/tuAmkiyt4Eq8nxykrWeYBIPm8sZY0IammJRdAN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.crl rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91161EB, serialNumber=35A03AA1478D0681C0671976C9FB43F6931382BE Validity Not Before: Sep 25 08:18:59 2026 GMT Not After : Oct 2 08:18:59 2026 GMT Subject: CN=6ab62e74-7446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:03:6e:94:74:49:b2:9e:a4:6b:4a:54:57:b4: ef:d5:1c:26:a7:b1:22:eb:29:e3:1c:28:5d:31:13: 67:0f:40:fe:38:2f:e4:8a:6a:ee:e4:63:fc:86:06: 66:b2:e6:b9:6d:0a:b0:09:06:a5:3a:d1:3e:d7:d7: 9c:87:8f:ed:3b:32:98:f7:24:5f:2f:4c:72:f4:ea: 84:00:90:88:d1:93:02:fd:b1:c3:70:8f:87:d8:73: ee:ef:0b:d7:1d:48:e8:92:5f:93:c2:78:9a:04:a5: b9:c0:54:4f:a2:61:3d:f8:e1:a7:b2:e3:b3:45:b3: 00:52:a0:71:7d:75:f5:06:4e:5c:cb:61:e4:56:b8: ec:ad:d5:38:b4:c8:34:ed:ec:73:17:a0:d8:75:86: 1e:45:4a:68:53:a3:b0:62:78:df:5c:1c:48:56:f0: 3a:9a:62:33:db:ae:31:01:85:f0:e1:a6:03:13:e0: 9a:14:39:95:90:99:11:61:a7:25:d0:79:6b:98:10: 06:93:e1:c1:ac:86:ed:c6:65:82:58:e8:26:1d:62: 1c:b0:aa:64:db:a2:fd:94:41:f1:96:6a:69:31:a0: fd:55:bd:ad:4b:83:a9:56:b2:50:e9:64:78:6a:92: 77:89:49:2c:4c:7a:27:e4:e7:56:17:80:67:8a:14: 0b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0F:84:16:AF:B4:6E:A8:57:D6:D2:C7:79:49:9F:0B:47:46:8C:EB X509v3 Authority Key Identifier: keyid:35:A0:3A:A1:47:8D:06:81:C0:67:19:76:C9:FB:43:F6:93:13:82:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:72:f1:af:c7:15:37:e7:45:4c:cf:41:58:28:af:fb:0e:d9: 78:8c:2c:d1:d4:39:88:7a:59:a8:70:5a:f5:53:8d:cf:30:16: bd:d9:1c:c4:cf:7b:cd:cc:4b:7b:9e:a5:24:82:64:a9:3d:9d: ad:4b:f3:63:57:36:85:6e:07:87:64:11:8c:ea:21:1d:26:10: d3:57:33:cd:55:0e:22:f5:57:d3:fd:91:9c:0c:b3:03:a7:a6: 21:c0:5f:11:4f:5a:1b:2a:02:65:f6:83:e5:37:7b:a2:c3:c7: af:42:4e:d7:eb:11:c7:f3:53:71:58:0e:84:5c:aa:2e:2a:7b: 15:97:d8:5c:d1:f2:15:0f:0e:17:89:44:f8:18:50:04:a5:e1: 7d:6f:82:7d:ae:72:72:bf:0a:26:ed:77:a0:e7:2d:10:3d:8b: 36:e1:88:a1:c8:80:fb:a4:cf:6d:91:50:30:49:42:7b:b6:98: 86:8e:71:3d:1d:cb:4d:66:fc:a5:ea:63:e6:f8:41:53:08:df: a5:79:a6:dd:3d:24:b1:cb:4b:65:09:a3:56:79:57:70:38:28: 46:22:42:91:66:f8:28:2b:7f:d2:1e:72:8c:f4:4b:e6:f7:99: c8:e1:e8:cd:a4:c7:65:47:e6:df:fa:27:90:19:25:0e:a8:61: a6:51:53:c1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjFFQjExMC8GA1UEBRMoMzVBMDNBQTE0NzhEMDY4MUMwNjcxOTc2QzlGQjQzRjY5 MzEzODJCRTAeFw0yNjA5MjUwODE4NTlaFw0yNjEwMDIwODE4NTlaMBgxFjAUBgNV BAMTDTZhYjYyZTc0LTc0NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKA26UdEmynqRrSlRXtO/VHCansSLrKeMcKF0xE2cPQP44L+SKau7kY/yGBmay 5rltCrAJBqU60T7X15yHj+07Mpj3JF8vTHL06oQAkIjRkwL9scNwj4fYc+7vC9cd SOiSX5PCeJoEpbnAVE+iYT344aey47NFswBSoHF9dfUGTlzLYeRWuOyt1Ti0yDTt 7HMXoNh1hh5FSmhTo7BieN9cHEhW8DqaYjPbrjEBhfDhpgMT4JoUOZWQmRFhpyXQ eWuYEAaT4cGshu3GZYJY6CYdYhywqmTbov2UQfGWamkxoP1Vva1Lg6lWslDpZHhq kneJSSxMeifk51YXgGeKFAtxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3w+EFq+0 bqhX1tLHeUmfC0dGjOswHwYDVR0jBBgwFoAUNaA6oUeNBoHAZxl2yftD9pMTgr4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2MUVCLzBBOTM4NUQwMzUw MjExRjFCMUZENkQ3NDlCODMzNzczL05hQTZvVWVOQm9IQVp4bDJ5ZnREOXBNVGdy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTmFBNm9VZU5Cb0hBWnhsMnlmdEQ5cE1UZ3I0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 MUVCLzBBOTM4NUQwMzUwMjExRjFCMUZENkQ3NDlCODMzNzczL05hQTZvVWVOQm9I QVp4bDJ5ZnREOXBNVGdyNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAccvGvxxU350VMz0FYKK/7Dtl4jCzR1DmIelmocFr1U43PMBa92RzEz3vNzEt7 nqUkgmSpPZ2tS/NjVzaFbgeHZBGM6iEdJhDTVzPNVQ4i9VfT/ZGcDLMDp6YhwF8R T1obKgJl9oPlN3uiw8evQk7X6xHH81NxWA6EXKouKnsVl9hc0fIVDw4XiUT4GFAE peF9b4J9rnJyvwom7Xeg5y0QPYs24YihyID7pM9tkVAwSUJ7tpiGjnE9HctNZvyl 6mPm+EFTCN+leabdPSSxy0tlCaNWeVdwOChGIkKRZvgoK3/SHnKM9Evm95nI4ejN pMdlR+bf+ieQGSUOqGGmUVPB -----END CERTIFICATE-----Generated at Fri Sep 25 19:51:38 2026 by rpki-client