$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft File: nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json) Hash identifier: GEM5pdtk/s5FYL2Y3Ih2VuUIMI4r4p87F02ip/h0MKI= Subject key identifier: 4D:7F:52:1F:E7:A1:47:DD:1F:F7:0A:D9:1D:F2:17:94:76:2E:F8:7F Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: 0270 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft Manifest number: 0231 Signing time: Wed 23 Sep 2026 02:58:05 +0000 Manifest this update: Wed 23 Sep 2026 02:58:04 +0000 Manifest next update: Wed 30 Sep 2026 02:58:04 +0000 Files and hashes: 1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: LIKCnFs/8mdQyyUUTOKChGL6UWNlwlq++6zkWi/FYmM=) 2: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: cMO5zU9AD/RoFLcnPT+DXNczqdbBJpb9yT+lZHAEick=) 3: 551036FCF1CA11EFA1495230C4F9AE02.roa (hash: ph9mjxQXcLl4fEECl4pEGWMTp7mLbB/lR7kFkW96rzY=) 4: CA364B681A1711F0A1D93523C4F9AE02.roa (hash: VMXxFIYcOcmwdzE0TfKotJbGv4ASOkRQEsgw2BaIwTw=) 5: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: RuIzPpPmU5SYBxbzVmTPm1exsa1irL+SD8QrPzFj6WU=) 6: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: BmXwbaUB2PnwCtWWwqTCrL/Z4ZUCXb6in34aW4SAhII=) 7: 3C880EBABEEF11EF9178186BC4F9AE02.roa (hash: gDBNV8FCQoQRlF4+Z0of3x2gK+wLXaHl7XFSFbaKadM=) 8: 31C9441E68ED11F0BA447B41C4F9AE02.roa (hash: Tw/mmccci9TsCg4wjjeIfCh0v/cTONBZG05kzKfAujc=) 9: 908E69B20D4311F0B83AB36BC4F9AE02.roa (hash: 0rCihLa1R/JwK4jlGINRooaKzW7UBmX+YQfpTQsJlgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 624 (0x270) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Validity Not Before: Sep 23 02:58:04 2026 GMT Not After : Sep 30 02:58:04 2026 GMT Subject: CN=6ab3403c-89e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:27:36:c1:67:76:50:7a:8d:5e:70:cb:3c:e5: 93:e5:80:33:f9:77:15:22:8a:eb:aa:c6:4d:3d:4c: 4d:83:21:f6:5d:42:9a:42:c4:80:13:03:b6:47:cc: da:8e:cb:2b:22:cc:1a:1a:44:a4:90:68:0e:6a:81: 73:bf:7d:50:c2:f7:06:4c:35:58:00:16:52:e1:18: 00:55:6b:21:ce:80:0e:1b:c2:3d:0b:d8:e5:0c:67: 9f:e4:a0:8d:61:52:5b:29:c7:7b:ad:bc:1e:fc:45: 61:09:c3:73:89:bc:5a:18:9a:81:0b:4f:a9:a0:24: 0c:b5:d3:ce:7e:2d:03:e4:9a:b9:14:27:5c:b3:2a: db:71:1f:34:f6:32:61:e2:0c:1b:db:f0:1c:3f:47: be:cf:84:31:15:93:89:99:86:dd:44:95:69:fa:b5: e8:d6:ee:1a:2b:87:ee:a1:72:9f:26:82:97:3d:4b: ea:1a:c5:c8:e5:f6:c9:75:b7:83:35:b7:b6:07:6f: f8:23:ac:07:f2:e7:8f:eb:4f:6c:9e:ba:31:54:6e: 26:0f:1d:36:e6:16:86:e8:0e:ea:27:c7:87:cd:f5: 1f:55:88:18:94:44:72:c9:01:4b:1c:84:00:43:61: 00:a8:a9:58:d1:7d:fc:24:5c:0b:24:e3:55:43:6b: bb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7F:52:1F:E7:A1:47:DD:1F:F7:0A:D9:1D:F2:17:94:76:2E:F8:7F X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:f6:4a:fa:3a:6a:e9:c2:f0:63:08:3c:dd:c2:62:49:54:84: 73:63:f7:11:44:07:90:62:67:a3:03:08:6d:bc:46:34:6e:a2: 9c:94:d5:10:2d:42:8f:0d:6e:e2:ee:19:3a:02:20:85:52:77: 6a:e0:d9:d3:d4:a0:a7:74:0e:a6:69:7f:1a:5f:2d:96:48:e0: 3f:a9:cb:b6:73:07:4f:6f:d2:92:c1:14:b1:60:73:ea:2c:55: 06:8c:70:c8:99:b2:76:59:0a:c5:79:76:7e:c9:03:f1:6a:95: 8b:e4:91:b5:8f:18:5d:55:5e:9e:0a:94:24:2c:88:01:71:e4: fa:79:96:e5:ca:fe:1b:90:55:c4:c5:cb:46:93:f1:2f:92:9d: ab:cf:69:44:3d:0e:4d:54:5d:cc:39:a2:2d:b1:fc:91:6a:5b: 55:f7:f5:6b:ba:c7:b8:5e:66:03:06:bc:00:fa:f7:e7:97:6d: 99:c4:b4:bc:ce:bb:92:14:4f:0f:43:67:f1:b1:dd:ec:cc:44: f2:ac:43:42:a9:80:dd:51:72:55:05:46:a3:69:4c:cf:b6:38: 44:17:40:0d:a4:be:0b:8f:6a:7a:70:d9:69:29:29:ae:1a:a0: 97:b1:c8:a2:ad:a3:a5:77:1a:ec:0c:14:32:e6:07:f5:d1:2a: 93:3d:86:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjYwOTIzMDI1ODA0WhcNMjYwOTMwMDI1ODA0WjAYMRYwFAYD VQQDEw02YWIzNDAzYy04OWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoyc2wWd2UHqNXnDLPOWT5YAz+XcVIorrqsZNPUxNgyH2XUKaQsSAEwO2R8za jssrIswaGkSkkGgOaoFzv31QwvcGTDVYABZS4RgAVWshzoAOG8I9C9jlDGef5KCN YVJbKcd7rbwe/EVhCcNzibxaGJqBC0+poCQMtdPOfi0D5Jq5FCdcsyrbcR809jJh 4gwb2/AcP0e+z4QxFZOJmYbdRJVp+rXo1u4aK4fuoXKfJoKXPUvqGsXI5fbJdbeD Nbe2B2/4I6wH8ueP609snroxVG4mDx025haG6A7qJ8eHzfUfVYgYlERyyQFLHIQA Q2EAqKlY0X38JFwLJONVQ2u7NwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE1/Uh/n oUfdH/cK2R3yF5R2Lvh/MB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUQyQy8wMDM3M0M2QzlCQkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0 OVJMekJmS3MyMFBONmVUUkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZvZK+jpq6cLwYwg83cJiSVSEc2P3EUQHkGJnowMIbbxGNG6inJTVEC1Cjw1u 4u4ZOgIghVJ3auDZ09Sgp3QOpml/Gl8tlkjgP6nLtnMHT2/SksEUsWBz6ixVBoxw yJmydlkKxXl2fskD8WqVi+SRtY8YXVVengqUJCyIAXHk+nmW5cr+G5BVxMXLRpPx L5Kdq89pRD0OTVRdzDmiLbH8kWpbVff1a7rHuF5mAwa8APr355dtmcS0vM67khRP D0Nn8bHd7MxE8qxDQqmA3VFyVQVGo2lMz7Y4RBdADaS+C49qenDZaSkprhqgl7HI oq2jpXca7AwUMuYH9dEqkz2Gwg== -----END CERTIFICATE-----Generated at Wed Sep 23 21:49:30 2026 by rpki-client