$ rpki-client -vvvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft File: nxsx-ncAt0WPwYibhiVBzp1IJMo.mft (raw, json) Hash identifier: L6YTtAiOQ5xgZAicA8CEsisHofmpFcLQvPpEPO1rrzk= Subject key identifier: BB:47:C5:DC:6C:09:5A:F8:2A:55:82:C8:4F:99:13:7C:D9:90:41:D2 Authority key identifier: 9F:1B:31:FA:77:00:B7:45:8F:C1:88:9B:86:25:41:CE:9D:48:24:CA Certificate issuer: /CN=A912963D/serialNumber=9F1B31FA7700B7458FC1889B862541CE9D4824CA Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft Manifest number: 10C2 Signing time: Tue 22 Sep 2026 17:21:27 +0000 Manifest this update: Tue 22 Sep 2026 17:21:26 +0000 Manifest next update: Tue 29 Sep 2026 17:21:26 +0000 Files and hashes: 1: nxsx-ncAt0WPwYibhiVBzp1IJMo.crl (hash: cX0OJxiVvWjjOzHVcnKigaRHgNcKiIwjstlRL4Mpj0A=) 2: B2F3EE3C12C911F1AFB167917BEE528E.roa (hash: rUVLvoA7SCWobHv8rQIiOZULoL/+BvRsb/mC77XzI5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.crl rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912963D, serialNumber=9F1B31FA7700B7458FC1889B862541CE9D4824CA Validity Not Before: Sep 22 17:21:26 2026 GMT Not After : Sep 29 17:21:26 2026 GMT Subject: CN=6ab2b917-d1f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:64:35:e4:be:b9:a2:39:d3:da:99:ca:c7:bb: e0:a2:70:e9:c9:8a:ed:fc:7d:a5:50:94:3c:69:cd: a9:2f:3d:0e:6b:d2:f2:ec:c4:ea:c2:7d:ca:8c:b2: a7:ad:fc:6f:12:1b:62:35:5e:b9:95:fe:b7:d0:cb: a2:b7:44:49:43:62:cb:a7:86:c6:81:38:c3:8f:f0: 30:07:32:c2:84:d6:c0:34:44:de:69:12:6d:0f:65: 37:6d:19:95:75:57:19:4a:8b:6d:9d:cf:c8:9d:e2: a8:0c:8d:4d:40:64:25:71:a2:52:43:26:f3:60:c0: 22:e3:d5:e6:c6:35:bc:5f:ae:ba:33:fb:57:43:f3: d6:60:3e:91:a8:56:e3:94:30:f1:ca:aa:3f:ad:db: 16:63:30:94:aa:28:56:a2:42:82:18:86:fd:98:98: 67:43:74:21:60:eb:14:8c:0e:15:8e:92:5e:57:61: 46:30:22:f6:c0:f4:df:56:b9:46:34:e7:98:bb:b5: 5a:ce:ea:83:24:b5:0c:a3:44:0a:59:52:ae:eb:a4: 7a:35:cb:6f:77:ef:44:f4:98:47:64:c0:dc:c4:f1: 1d:4b:79:80:35:a2:9e:25:8c:64:9b:51:0b:77:c1: c8:3c:b0:2b:10:85:96:cc:7d:20:40:a2:a9:8d:5c: 99:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:47:C5:DC:6C:09:5A:F8:2A:55:82:C8:4F:99:13:7C:D9:90:41:D2 X509v3 Authority Key Identifier: keyid:9F:1B:31:FA:77:00:B7:45:8F:C1:88:9B:86:25:41:CE:9D:48:24:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:f9:d2:03:13:91:62:d8:86:ad:85:ea:d5:f9:30:2f:e7:72: ec:35:6c:35:5e:09:07:02:68:71:6c:f7:26:dc:34:db:75:ad: 0a:ba:05:80:98:e4:56:d0:6e:f8:cf:58:b8:0d:64:eb:e1:12: 03:7b:43:70:7f:c1:bb:f2:b0:a7:0e:f7:da:95:52:87:42:0f: 7a:de:f8:e4:ad:5e:e7:bd:83:d5:c1:2a:a6:6f:af:a9:59:18: 91:dd:44:98:45:2e:66:bb:9f:1b:49:0b:51:a6:d2:15:45:35: 56:0c:79:64:8c:7a:4e:c7:26:05:c3:7c:32:7d:29:b4:ae:43: 31:6e:b4:25:4a:c8:da:0d:b3:40:c0:08:ad:82:0e:18:4c:a0: 8c:d5:94:6e:63:d6:81:c8:03:f9:81:96:e9:9f:71:0e:c4:f6: 58:af:9d:f7:7b:e0:57:7f:06:5c:22:f7:3f:e3:44:f9:46:f5: 13:ad:f7:48:cd:8e:4f:35:18:cb:9c:e8:13:dc:ac:ae:af:de: 2f:4a:6c:42:97:d9:02:a3:b0:58:53:5b:b0:fa:e3:65:32:4e: 08:f0:3d:35:77:b3:cb:42:be:e4:82:33:b7:e3:5a:14:2c:da: cc:eb:d4:c9:75:87:a3:1a:27:be:fc:a2:94:a7:9e:3d:07:62: 5e:19:65:ab -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTYzRDExMC8GA1UEBRMoOUYxQjMxRkE3NzAwQjc0NThGQzE4ODlCODYyNTQxQ0U5 RDQ4MjRDQTAeFw0yNjA5MjIxNzIxMjZaFw0yNjA5MjkxNzIxMjZaMBgxFjAUBgNV BAMTDTZhYjJiOTE3LWQxZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmZDXkvrmiOdPamcrHu+CicOnJiu38faVQlDxpzakvPQ5r0vLsxOrCfcqMsqet /G8SG2I1XrmV/rfQy6K3RElDYsunhsaBOMOP8DAHMsKE1sA0RN5pEm0PZTdtGZV1 VxlKi22dz8id4qgMjU1AZCVxolJDJvNgwCLj1ebGNbxfrroz+1dD89ZgPpGoVuOU MPHKqj+t2xZjMJSqKFaiQoIYhv2YmGdDdCFg6xSMDhWOkl5XYUYwIvbA9N9WuUY0 55i7tVrO6oMktQyjRApZUq7rpHo1y29370T0mEdkwNzE8R1LeYA1op4ljGSbUQt3 wcg8sCsQhZbMfSBAoqmNXJmdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUu0fF3GwJ WvgqVYLIT5kTfNmQQdIwHwYDVR0jBBgwFoAUnxsx+ncAt0WPwYibhiVBzp1IJMow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NjNEL0Y5Qzk3NjZDNzI2 NTExRTk4QjcxQkIzNEM0RjlBRTAyL254c3gtbmNBdDBXUHdZaWJoaVZCenAxSUpN by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnhzeC1uY0F0MFdQd1lpYmhpVkJ6cDFJSk1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 NjNEL0Y5Qzk3NjZDNzI2NTExRTk4QjcxQkIzNEM0RjlBRTAyL254c3gtbmNBdDBX UHdZaWJoaVZCenAxSUpNby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAo+dIDE5Fi2IatherV+TAv53LsNWw1XgkHAmhxbPcm3DTbda0KugWAmORW0G74 z1i4DWTr4RIDe0Nwf8G78rCnDvfalVKHQg963vjkrV7nvYPVwSqmb6+pWRiR3USY RS5mu58bSQtRptIVRTVWDHlkjHpOxyYFw3wyfSm0rkMxbrQlSsjaDbNAwAitgg4Y TKCM1ZRuY9aByAP5gZbpn3EOxPZYr533e+BXfwZcIvc/40T5RvUTrfdIzY5PNRjL nOgT3Kyur94vSmxCl9kCo7BYU1uw+uNlMk4I8D01d7PLQr7kgjO341oULNrM69TJ dYejGie+/KKUp549B2JeGWWr -----END CERTIFICATE-----Generated at Tue Sep 22 21:55:46 2026 by rpki-client