$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft File: NCaEGmQGa3hlW77KDAH9CfZXBTY.mft (raw, json) Hash identifier: xbkUidOHqvaaj0bvzv2R3MeuLW2QVkbdYmw3mzdmDr4= Subject key identifier: B0:5A:19:5F:95:B3:67:1D:7B:78:6D:0F:CF:84:F6:0C:8D:E4:90:50 Authority key identifier: 34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36 Certificate issuer: /CN=A9157DAE/serialNumber=3426841A64066B78655BBECA0C01FD09F6570536 Certificate serial: 028E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft Manifest number: 028E Signing time: Tue 22 Sep 2026 16:54:50 +0000 Manifest this update: Tue 22 Sep 2026 16:54:50 +0000 Manifest next update: Tue 29 Sep 2026 16:54:50 +0000 Files and hashes: 1: NCaEGmQGa3hlW77KDAH9CfZXBTY.crl (hash: j1CAi8hhSI6zpgjaFdMSQNJcy0Cdwdc/XIElcOR9X9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.crl rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 654 (0x28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=3426841A64066B78655BBECA0C01FD09F6570536 Validity Not Before: Sep 22 16:54:50 2026 GMT Not After : Sep 29 16:54:50 2026 GMT Subject: CN=6ab2b2da-6f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:47:d7:f2:7f:ca:d9:59:b8:c1:85:61:28:dc: 2a:07:ae:97:15:b3:a8:06:4b:28:19:7e:c7:35:bc: 2b:88:f9:14:f0:c5:e8:00:bd:b3:06:7c:2b:87:43: 52:5e:e0:2b:ba:42:1d:88:19:ff:f4:41:d8:19:a5: bb:3f:7d:ba:4d:76:26:22:4f:a8:c8:71:01:4b:47: b6:57:c0:57:f9:53:5c:a5:01:1e:09:c8:1a:6f:25: 16:62:f5:02:14:9d:90:1d:e6:08:1b:8d:3a:87:29: 9f:8c:48:58:69:cf:16:1f:4d:8c:64:a4:9d:46:40: 09:4f:ae:ab:b3:0a:de:9a:ba:06:c0:bc:f7:4f:8e: af:fe:dd:0f:f0:8c:05:9d:da:ca:48:cc:08:7c:35: af:a5:8d:b4:23:c1:c1:68:ce:02:17:19:d5:a6:01: 76:e0:87:b8:f4:79:97:de:54:59:f0:78:78:83:47: 58:a2:6b:82:79:4f:e7:b2:bd:8e:bb:37:5e:07:31: 33:ec:24:2f:67:7d:99:92:84:09:d8:49:29:b1:fa: 88:be:cc:9f:12:55:34:ea:5d:28:d1:1c:ab:6f:83: df:d9:d8:a5:41:1f:cb:38:ab:ef:27:a2:d8:ef:5b: 54:25:f4:dd:6e:74:3e:7d:41:39:7a:a6:03:db:19: fb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5A:19:5F:95:B3:67:1D:7B:78:6D:0F:CF:84:F6:0C:8D:E4:90:50 X509v3 Authority Key Identifier: keyid:34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:35:30:ea:73:87:d3:23:90:ff:66:c6:f7:48:5e:6a:c9:42: 87:c0:89:77:6f:d2:67:7e:e0:ec:da:e5:4a:01:7e:62:4b:a4: 99:15:25:34:5e:3e:79:ec:af:62:20:4e:53:64:09:25:be:44: 1f:4e:60:e9:b1:1d:22:74:9d:02:6e:a7:27:4f:d0:68:89:0c: 1c:29:3f:42:1f:03:e8:c8:32:ab:db:0a:4b:5d:d4:ff:e6:29: 0c:07:15:28:e4:80:a2:a0:2f:8e:52:d6:bd:f2:1a:f6:5f:25: 38:af:7a:dc:ae:99:13:ab:e4:53:d0:9e:35:16:14:ee:6a:66: 30:fc:ac:12:ef:6a:32:8c:e4:aa:2c:60:c5:eb:90:82:88:02: 10:44:19:00:19:bb:be:bc:da:2d:b5:bd:a2:87:52:02:61:80: 5d:02:83:60:69:6d:9a:57:46:2c:25:d3:7b:8a:31:d7:99:52: f0:ab:ec:4f:ba:c9:77:e0:4e:b9:5f:a7:05:1e:5c:4e:72:be: e7:37:89:d7:02:66:00:e6:fe:7e:31:92:04:c5:04:d6:1a:2f: cd:71:51:77:c7:8c:96:9b:7d:32:dc:ff:cf:1a:d5:c9:3b:e9: ef:2f:34:a6:56:db:42:1b:0f:87:d0:7b:02:4e:1c:28:12:6c: be:43:f2:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKDM0MjY4NDFBNjQwNjZCNzg2NTVCQkVDQTBDMDFGRDA5 RjY1NzA1MzYwHhcNMjYwOTIyMTY1NDUwWhcNMjYwOTI5MTY1NDUwWjAYMRYwFAYD VQQDEw02YWIyYjJkYS02ZjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlEfX8n/K2Vm4wYVhKNwqB66XFbOoBksoGX7HNbwriPkU8MXoAL2zBnwrh0NS XuArukIdiBn/9EHYGaW7P326TXYmIk+oyHEBS0e2V8BX+VNcpQEeCcgabyUWYvUC FJ2QHeYIG406hymfjEhYac8WH02MZKSdRkAJT66rswremroGwLz3T46v/t0P8IwF ndrKSMwIfDWvpY20I8HBaM4CFxnVpgF24Ie49HmX3lRZ8Hh4g0dYomuCeU/nsr2O uzdeBzEz7CQvZ32ZkoQJ2EkpsfqIvsyfElU06l0o0Ryrb4Pf2dilQR/LOKvvJ6LY 71tUJfTdbnQ+fUE5eqYD2xn7WwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLBaGV+V s2cde3htD8+E9gyN5JBQMB8GA1UdIwQYMBaAFDQmhBpkBmt4ZVu+ygwB/Qn2VwU2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS8xMDRBN0UxRURG QUQxMUVEOTUxNTNEMzFDNEY5QUUwMi9OQ2FFR21RR2EzaGxXNzdLREFIOUNmWlhC VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL05DYUVHbVFHYTNobFc3N0tEQUg5Q2ZaWEJUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0RBRS8xMDRBN0UxRURGQUQxMUVEOTUxNTNEMzFDNEY5QUUwMi9OQ2FFR21RR2Ez aGxXNzdLREFIOUNmWlhCVFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANjUw6nOH0yOQ/2bG90heaslCh8CJd2/SZ37g7NrlSgF+YkukmRUlNF4+eeyv YiBOU2QJJb5EH05g6bEdInSdAm6nJ0/QaIkMHCk/Qh8D6Mgyq9sKS13U/+YpDAcV KOSAoqAvjlLWvfIa9l8lOK963K6ZE6vkU9CeNRYU7mpmMPysEu9qMozkqixgxeuQ gogCEEQZABm7vrzaLbW9oodSAmGAXQKDYGltmldGLCXTe4ox15lS8KvsT7rJd+BO uV+nBR5cTnK+5zeJ1wJmAOb+fjGSBMUE1hovzXFRd8eMlpt9Mtz/zxrVyTvp7y80 plbbQhsPh9B7Ak4cKBJsvkPyjw== -----END CERTIFICATE-----Generated at Wed Sep 23 17:14:15 2026 by rpki-client