$ rpki-client -vvvf rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.mft File: NXoXnN0K-aP7A-F31qQ_uKV3VOA.mft (raw, json) Hash identifier: 9cDbfAr3cinu5EsVvn8GpSyzXBuBnSzGEYiMTbg/j2s= Subject key identifier: 03:0E:09:C7:FE:38:E0:F0:51:BC:0C:CF:70:ED:60:04:64:28:BF:5C Authority key identifier: 35:7A:17:9C:DD:0A:F9:A3:FB:03:E1:77:D6:A4:3F:B8:A5:77:54:E0 Certificate issuer: /CN=A9166AFF/serialNumber=357A179CDD0AF9A3FB03E177D6A43FB8A57754E0 Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NXoXnN0K-aP7A-F31qQ_uKV3VOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.mft Manifest number: 01E4 Signing time: Wed 23 Sep 2026 03:27:11 +0000 Manifest this update: Wed 23 Sep 2026 03:27:11 +0000 Manifest next update: Wed 30 Sep 2026 03:27:11 +0000 Files and hashes: 1: NXoXnN0K-aP7A-F31qQ_uKV3VOA.crl (hash: C1yifDKIU/6RR9x1ZQ1bZ905bAW0kug36b1EI5ETTxo=) 2: 8109B4CA9DF211F0B1ED220FC4F9AE02.roa (hash: 3F15rH6YOfm7yUgvAU7B83xmF5fOsfIgjewKISbkfSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.crl rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NXoXnN0K-aP7A-F31qQ_uKV3VOA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166AFF, serialNumber=357A179CDD0AF9A3FB03E177D6A43FB8A57754E0 Validity Not Before: Sep 23 03:27:11 2026 GMT Not After : Sep 30 03:27:11 2026 GMT Subject: CN=6ab3470f-0628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:22:2d:e6:d0:41:53:c4:85:84:23:c9:50:7b: 84:25:d0:7d:7e:bf:8a:99:45:a3:6b:8e:8d:94:bd: 61:91:44:13:28:d8:6a:03:69:46:f8:53:f7:0d:fd: 4e:72:f1:14:4e:0c:a2:cc:fc:06:b3:28:f3:ff:d8: cc:98:65:3e:24:a1:d7:13:4e:e2:ba:b4:c9:01:e1: 2e:65:73:ec:17:f1:02:68:41:d9:64:32:ec:b5:f0: e7:49:17:e0:f1:56:03:5f:1f:ba:00:00:c4:94:ef: 1d:e4:0d:36:29:62:08:96:19:3a:4f:67:36:13:cd: c4:f3:d2:65:ad:3f:f9:09:f6:ba:3a:2a:39:39:72: ec:11:e6:5b:1b:ba:79:9a:e5:9c:45:0d:99:85:de: 1c:96:1b:a4:4f:17:e4:e5:96:c9:a9:11:d8:f4:3d: bf:2f:b4:ed:4d:e3:28:7a:f9:2e:ea:8a:e0:96:f0: 7d:6f:15:e4:63:57:f5:a1:7c:b3:a4:20:36:52:e2: 18:20:71:e5:d6:f5:66:14:c2:22:6e:42:a5:dc:87: be:8e:6b:57:7e:59:63:f1:8c:53:c0:86:f2:5e:cb: fc:aa:d5:a9:cd:bb:c7:c2:15:5d:bd:ee:d3:82:f9: ed:8d:ec:4c:7f:39:36:1f:c7:f3:78:c5:f8:d9:f5: b1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0E:09:C7:FE:38:E0:F0:51:BC:0C:CF:70:ED:60:04:64:28:BF:5C X509v3 Authority Key Identifier: keyid:35:7A:17:9C:DD:0A:F9:A3:FB:03:E1:77:D6:A4:3F:B8:A5:77:54:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NXoXnN0K-aP7A-F31qQ_uKV3VOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:66:54:16:cd:b2:05:02:0f:4d:2a:10:1c:46:5b:88:fe:b0: cd:07:14:dd:07:1b:1b:fb:f9:49:6b:50:fd:1c:af:e4:d8:86: dd:81:3a:15:3a:7b:66:d9:63:a9:3d:65:f7:83:66:2c:69:7a: 01:b3:3f:4e:7d:dd:3e:ac:52:d0:31:7e:49:b8:0b:38:89:87: 01:07:be:07:28:1c:ee:ce:f0:48:eb:66:7a:3f:ef:da:7a:97: 84:b6:20:7c:0c:bb:f7:cd:c2:e8:e2:c0:ed:a6:9a:75:6b:0d: c5:bb:00:9a:1d:2b:97:2e:10:5f:9a:6e:69:2b:65:6c:90:53: 56:65:f0:9c:24:a8:0b:a0:5d:9f:ed:1f:ed:99:76:03:eb:aa: be:4c:b6:ae:88:50:82:ff:97:39:5c:cd:68:4a:50:f0:df:b4: 79:76:34:ff:c0:b7:1d:1d:27:0f:69:cf:72:c5:03:88:36:43: cf:ba:24:62:6f:c6:3f:0c:11:d3:a0:d7:99:b6:44:4e:02:5a: 21:69:75:e4:51:6f:ca:ba:89:9d:b7:70:fe:fd:26:78:7f:2f: d7:09:d4:92:03:9c:d3:b5:a8:30:ab:3b:7d:9b:ab:03:7f:4e: cd:f4:4f:7a:b8:c1:0d:37:ec:05:84:13:25:c3:39:e3:72:ed: 96:cf:52:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZBRkYxMTAvBgNVBAUTKDM1N0ExNzlDREQwQUY5QTNGQjAzRTE3N0Q2QTQzRkI4 QTU3NzU0RTAwHhcNMjYwOTIzMDMyNzExWhcNMjYwOTMwMDMyNzExWjAYMRYwFAYD VQQDEw02YWIzNDcwZi0wNjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmiIt5tBBU8SFhCPJUHuEJdB9fr+KmUWja46NlL1hkUQTKNhqA2lG+FP3Df1O cvEUTgyizPwGsyjz/9jMmGU+JKHXE07iurTJAeEuZXPsF/ECaEHZZDLstfDnSRfg 8VYDXx+6AADElO8d5A02KWIIlhk6T2c2E83E89JlrT/5Cfa6Oio5OXLsEeZbG7p5 muWcRQ2Zhd4clhukTxfk5ZbJqRHY9D2/L7TtTeMoevku6orglvB9bxXkY1f1oXyz pCA2UuIYIHHl1vVmFMIibkKl3Ie+jmtXfllj8YxTwIbyXsv8qtWpzbvHwhVdve7T gvntjexMfzk2H8fzeMX42fWxkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAMOCcf+ OODwUbwMz3DtYARkKL9cMB8GA1UdIwQYMBaAFDV6F5zdCvmj+wPhd9akP7ild1Tg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkFGRi80MENEMUI1NEU1 MDIxMUVFOUFCRjc2NTVDNEY5QUUwMi9OWG9Ybk4wSy1hUDdBLUYzMXFRX3VLVjNW T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Yb1huTjBLLWFQN0EtRjMxcVFfdUtWM1ZPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkFGRi80MENEMUI1NEU1MDIxMUVFOUFCRjc2NTVDNEY5QUUwMi9OWG9Ybk4wSy1h UDdBLUYzMXFRX3VLVjNWT0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ2ZUFs2yBQIPTSoQHEZbiP6wzQcU3QcbG/v5SWtQ/Ryv5NiG3YE6FTp7Ztlj qT1l94NmLGl6AbM/Tn3dPqxS0DF+SbgLOImHAQe+Bygc7s7wSOtmej/v2nqXhLYg fAy7983C6OLA7aaadWsNxbsAmh0rly4QX5puaStlbJBTVmXwnCSoC6Bdn+0f7Zl2 A+uqvky2rohQgv+XOVzNaEpQ8N+0eXY0/8C3HR0nD2nPcsUDiDZDz7okYm/GPwwR 06DXmbZETgJaIWl15FFvyrqJnbdw/v0meH8v1wnUkgOc07WoMKs7fZurA39OzfRP erjBDTfsBYQTJcM543Ltls9SQw== -----END CERTIFICATE-----Generated at Wed Sep 23 10:50:36 2026 by rpki-client