$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft File: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft (raw, json) Hash identifier: XnbZKuKNUfSCJp+LOVqTjskLt4fSy+eGFaqT6Dwcc1s= Subject key identifier: F7:25:A7:6A:27:7F:3B:BE:02:B6:CD:F7:D3:71:92:38:A0:CA:C0:4E Authority key identifier: 36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD Certificate issuer: /CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Certificate serial: 0359 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft Manifest number: 0348 Signing time: Sun 27 Sep 2026 01:02:47 +0000 Manifest this update: Sun 27 Sep 2026 01:02:47 +0000 Manifest next update: Sun 04 Oct 2026 01:02:47 +0000 Files and hashes: 1: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl (hash: xr0FNki0U6juIQNvwKeB8BcUAfi2ZXGRnYOA6gkayIk=) 2: 134B439A91B611ED8BA25C80C4F9AE02.roa (hash: W2elL5IfPSqn4ywyt6yNfSULfkUCxwa6QPF7Ucquq/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 01:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 857 (0x359) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F333, serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Validity Not Before: Sep 27 01:02:47 2026 GMT Not After : Oct 4 01:02:47 2026 GMT Subject: CN=6ab86b37-7f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bb:76:95:de:9f:66:9c:37:84:5e:b0:05:fa: 97:76:87:c3:5b:b8:37:79:7d:f2:f5:b8:c4:e2:af: a0:16:cd:b0:7f:bb:27:51:5e:c2:1c:81:9e:3b:04: 7c:d3:63:c0:ce:9c:a7:df:d2:4d:0b:47:07:5f:d5: 1f:ba:25:07:05:66:26:88:cb:17:6c:f6:80:14:8c: 40:65:58:88:7f:37:fd:19:9b:60:8a:a2:37:0c:21: 2f:42:5a:e8:ce:f9:bd:bc:c6:e2:6c:28:dd:0a:a4: 40:c8:cf:80:09:cf:35:7c:03:03:ba:d4:9b:50:ae: b2:87:01:39:8a:98:d0:b5:6d:bb:75:c7:98:66:17: 03:2a:c2:9f:7c:a5:5c:dd:b5:9c:2f:46:9f:29:15: 80:d8:66:be:33:5e:ad:ab:09:21:42:13:07:5b:4e: 8d:86:55:3f:5a:83:17:b9:5d:c2:a3:31:f9:ed:7f: a4:48:fd:65:e0:4d:bc:15:e6:17:ac:a6:19:73:2f: 1c:d6:d5:cb:2c:9c:74:ff:fb:3c:3e:67:df:4d:6a: a4:56:5a:79:7c:e4:9b:8e:d3:2e:cf:30:4b:a4:ee: 05:c3:aa:23:d5:67:c5:32:97:a6:3f:de:b4:52:a9: 1a:d5:12:b4:02:73:a4:72:22:05:21:c8:4e:57:15: cd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:25:A7:6A:27:7F:3B:BE:02:B6:CD:F7:D3:71:92:38:A0:CA:C0:4E X509v3 Authority Key Identifier: keyid:36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:4f:17:09:4b:26:07:aa:2d:b6:12:a2:91:e9:f6:ee:fd:fe: ec:c7:a1:22:d1:a5:20:23:36:1d:d2:4e:81:da:4d:e8:42:12: 24:04:cb:5c:22:65:19:a2:92:3c:e1:5e:be:7e:4a:fc:5d:d2: ca:39:98:21:03:56:e0:82:86:3b:f8:97:df:6a:cc:cb:9f:30: 68:72:fc:1e:9c:59:6f:14:8e:23:da:b2:19:74:ea:05:d2:28: e5:14:4a:dd:bd:f2:a4:6c:b4:12:4d:99:f5:0a:b6:6d:6d:2a: 88:1b:a5:f8:49:e8:10:ce:12:15:68:90:4b:2c:10:bb:3d:44: 32:6c:66:bd:00:a7:4b:77:fb:0c:6a:05:f9:08:c3:f6:d2:63: e7:2a:8d:f1:b4:f7:e4:9f:fd:56:28:3d:d9:fd:49:4e:10:29: cd:5b:1f:a8:8c:0a:15:74:8e:62:f9:35:96:aa:71:16:ba:59: 0a:9b:e4:35:ed:b0:56:30:c6:11:63:88:12:5e:4e:8d:b0:a4: 77:27:ca:ee:29:64:66:79:74:e8:67:1c:cb:87:fc:32:f1:e3: 68:d0:51:56:89:92:d2:ff:38:23:c0:10:c7:43:6a:72:07:3f: 20:2d:69:bf:72:65:d1:31:fa:6d:e3:52:b2:a5:3d:42:9f:56: 8a:52:ad:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YzMzMxMTAvBgNVBAUTKDM2NDA4QzExQzU0NzJCODIyNDhBRkZFQkVFREJCMjBF M0UwN0E2Q0QwHhcNMjYwOTI3MDEwMjQ3WhcNMjYxMDA0MDEwMjQ3WjAYMRYwFAYD VQQDEw02YWI4NmIzNy03ZjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7t2ld6fZpw3hF6wBfqXdofDW7g3eX3y9bjE4q+gFs2wf7snUV7CHIGeOwR8 02PAzpyn39JNC0cHX9UfuiUHBWYmiMsXbPaAFIxAZViIfzf9GZtgiqI3DCEvQlro zvm9vMbibCjdCqRAyM+ACc81fAMDutSbUK6yhwE5ipjQtW27dceYZhcDKsKffKVc 3bWcL0afKRWA2Ga+M16tqwkhQhMHW06NhlU/WoMXuV3CozH57X+kSP1l4E28FeYX rKYZcy8c1tXLLJx0//s8PmffTWqkVlp5fOSbjtMuzzBLpO4Fw6oj1WfFMpemP960 Uqka1RK0AnOkciIFIchOVxXN/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPclp2on fzu+ArbN99NxkjigysBOMB8GA1UdIwQYMBaAFDZAjBHFRyuCJIr/6+7bsg4+B6bN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjMzMy9ERUNCNjVBNDIz OTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0SWtpdl9yN3R1eURqNEhw czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rQ01FY1ZISzRJa2l2X3I3dHV5RGo0SHBzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjMzMy9ERUNCNjVBNDIzOTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0 SWtpdl9yN3R1eURqNEhwczAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACk8XCUsmB6otthKiken27v3+7MehItGlICM2HdJOgdpN6EISJATLXCJlGaKS POFevn5K/F3SyjmYIQNW4IKGO/iX32rMy58waHL8HpxZbxSOI9qyGXTqBdIo5RRK 3b3ypGy0Ek2Z9Qq2bW0qiBul+EnoEM4SFWiQSywQuz1EMmxmvQCnS3f7DGoF+QjD 9tJj5yqN8bT35J/9Vig92f1JThApzVsfqIwKFXSOYvk1lqpxFrpZCpvkNe2wVjDG EWOIEl5OjbCkdyfK7ilkZnl06Gccy4f8MvHjaNBRVomS0v84I8AQx0Nqcgc/IC1p v3Jl0TH6beNSsqU9Qp9WilKtjQ== -----END CERTIFICATE-----Generated at Mon Sep 28 18:15:12 2026 by rpki-client