$ rpki-client -vvvf rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft File: nL4Q18HdRLflkLUHi_xPhs-Nslo.mft (raw, json) Hash identifier: tdIhIr8EGTdERsB6taOOF2PnYwNLL6IRyDNlCjGDlFI= Subject key identifier: 6A:C7:F7:06:AE:86:CF:F1:99:80:54:4A:E0:60:89:B7:1C:14:DF:8D Authority key identifier: 9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A Certificate issuer: /CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft Manifest number: 021E Signing time: Mon 21 Sep 2026 02:55:55 +0000 Manifest this update: Mon 21 Sep 2026 02:55:54 +0000 Manifest next update: Mon 28 Sep 2026 02:55:54 +0000 Files and hashes: 1: nL4Q18HdRLflkLUHi_xPhs-Nslo.crl (hash: abN2I71UiT4cVU3HJ7B2cjv/W8/6h+UUTN6FKvdU/IA=) 2: 43C5BAA282F411EE99AAAB12C4F9AE02.roa (hash: a1wzRh8XwhAFQd8Ja2EntSNyYcs9nQlwwooXA0U/t20=) 3: lr6ZVwc-F-j6SUvwWniTqpi4ZNo.asa (hash: whfRIjakXN7Z/G0/WZDeuoB+AZIDHhpbBnuPitzjaHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BCAC, serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Validity Not Before: Sep 21 02:55:54 2026 GMT Not After : Sep 28 02:55:54 2026 GMT Subject: CN=6ab09cbb-12fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ae:b5:b6:40:7f:b3:a2:54:21:8b:90:bb:b7: d2:27:cf:c1:dc:97:c2:9c:f4:5e:cb:84:bd:f9:5a: 06:6f:ee:0b:4d:90:5d:9a:48:5e:8d:ae:91:40:fa: 09:8b:0a:49:44:c3:ed:d1:cc:69:9b:92:c6:60:ba: 3c:57:c9:78:c3:ce:a0:3f:45:10:c3:f6:2e:02:c8: 15:21:ed:56:30:b5:3e:98:92:99:32:bf:2f:2d:49: 96:d1:f2:23:bc:b9:46:ba:1f:96:27:29:03:78:21: b6:d1:f0:ba:b9:0a:62:a1:64:15:b3:cd:8c:85:a6: 74:9e:65:9e:9d:01:f7:5b:eb:54:7b:a2:2d:2b:cf: c5:fd:1f:2b:a2:34:8b:a6:f8:0f:fa:74:2f:6c:59: 02:44:3e:b1:b7:33:f1:0d:18:38:62:d6:2b:9a:69: eb:20:71:11:76:c6:4c:bb:d8:6e:5c:6b:e9:7f:d4: 8a:0c:11:16:a8:fb:fe:1d:91:5d:ef:ba:5e:2a:ce: f5:6c:0e:be:37:23:e5:50:d7:19:f9:7a:94:f3:f7: ce:bf:3a:26:c6:46:1f:d9:75:11:93:ad:63:ef:6d: 19:39:27:11:26:c4:df:94:2a:65:5a:4e:c1:cf:24: 90:79:ff:bf:ff:be:3e:0a:46:1f:58:b8:1d:d1:23: a6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C7:F7:06:AE:86:CF:F1:99:80:54:4A:E0:60:89:B7:1C:14:DF:8D X509v3 Authority Key Identifier: keyid:9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e2:e4:fe:8c:1b:b8:3e:c5:93:f6:4a:88:7f:28:ba:01:d4: 6f:ef:40:17:4c:37:2e:a5:f1:2d:a2:06:5d:5f:0b:27:97:ab: ac:51:da:39:41:bb:40:42:1a:5a:76:d4:4b:e5:62:c3:d4:8f: a9:cd:66:a5:c2:03:0b:d1:eb:79:ab:15:f1:25:4b:70:f4:92: 47:67:82:e4:fd:bc:08:45:4d:69:e8:48:4e:09:7d:bb:61:a3: 86:7b:3b:2c:34:a9:7e:78:12:67:8f:3e:be:6a:fb:ba:a1:11: dd:e0:ca:50:48:ed:ae:c9:ee:e9:fb:e4:9d:01:d1:46:75:87: 8e:ba:76:98:9a:6d:f0:09:43:dd:fb:8e:c2:31:ea:51:6a:fc: c1:1f:82:62:57:27:9a:fd:64:12:bf:26:24:2b:e3:67:0e:4b: fc:1a:5d:e3:2e:50:48:72:59:7d:6a:42:ad:78:95:22:99:fe: d0:34:63:5c:17:4d:4b:7f:12:bf:d1:f1:c4:3a:af:58:8f:1f: 06:51:85:fd:6f:ee:5f:fd:c6:6f:35:3f:81:b5:07:ac:fa:80: 5d:a3:b2:c3:b0:93:89:63:04:9a:a2:ab:bd:da:5e:51:ec:f4: aa:e9:0c:96:61:bd:dc:e9:54:0a:38:59:51:3e:47:03:32:76: 75:f9:56:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJDQUMxMTAvBgNVBAUTKDlDQkUxMEQ3QzFERDQ0QjdFNTkwQjUwNzhCRkM0Rjg2 Q0Y4REIyNUEwHhcNMjYwOTIxMDI1NTU0WhcNMjYwOTI4MDI1NTU0WjAYMRYwFAYD VQQDEw02YWIwOWNiYi0xMmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArK61tkB/s6JUIYuQu7fSJ8/B3JfCnPRey4S9+VoGb+4LTZBdmkheja6RQPoJ iwpJRMPt0cxpm5LGYLo8V8l4w86gP0UQw/YuAsgVIe1WMLU+mJKZMr8vLUmW0fIj vLlGuh+WJykDeCG20fC6uQpioWQVs82MhaZ0nmWenQH3W+tUe6ItK8/F/R8rojSL pvgP+nQvbFkCRD6xtzPxDRg4YtYrmmnrIHERdsZMu9huXGvpf9SKDBEWqPv+HZFd 77peKs71bA6+NyPlUNcZ+XqU8/fOvzomxkYf2XURk61j720ZOScRJsTflCplWk7B zySQef+//74+CkYfWLgd0SOm/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGrH9wau hs/xmYBUSuBgibccFN+NMB8GA1UdIwQYMBaAFJy+ENfB3US35ZC1B4v8T4bPjbJa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkNBQy8wMTUyMjU4RTgy RjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJMZmxrTFVIaV94UGhzLU5z bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MNFExOEhkUkxmbGtMVUhpX3hQaHMtTnNsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkNBQy8wMTUyMjU4RTgyRjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJM ZmxrTFVIaV94UGhzLU5zbG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPeLk/owbuD7Fk/ZKiH8ougHUb+9AF0w3LqXxLaIGXV8LJ5errFHaOUG7QEIa WnbUS+Viw9SPqc1mpcIDC9HreasV8SVLcPSSR2eC5P28CEVNaehITgl9u2Gjhns7 LDSpfngSZ48+vmr7uqER3eDKUEjtrsnu6fvknQHRRnWHjrp2mJpt8AlD3fuOwjHq UWr8wR+CYlcnmv1kEr8mJCvjZw5L/Bpd4y5QSHJZfWpCrXiVIpn+0DRjXBdNS38S v9HxxDqvWI8fBlGF/W/uX/3GbzU/gbUHrPqAXaOyw7CTiWMEmqKrvdpeUez0qukM lmG93OlUCjhZUT5HAzJ2dflWBg== -----END CERTIFICATE-----Generated at Wed Sep 23 00:53:46 2026 by rpki-client