$ rpki-client -vvvf rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft File: nberk64z9kYWgi3wP_2Bd2jx6Y8.mft (raw, json) Hash identifier: rYw9vww4cYTS3Yb/kobEImaEEAHCNzMfoYk/9cQJazY= Subject key identifier: C3:F8:A1:45:8F:6B:FB:AA:9A:7C:3D:E5:C4:87:6C:7C:D5:31:9F:7F Authority key identifier: 9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F Certificate issuer: /CN=A91810E3/serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F Certificate serial: 0236 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft Manifest number: 0229 Signing time: Fri 25 Sep 2026 02:50:16 +0000 Manifest this update: Fri 25 Sep 2026 02:50:16 +0000 Manifest next update: Fri 02 Oct 2026 02:50:16 +0000 Files and hashes: 1: nberk64z9kYWgi3wP_2Bd2jx6Y8.crl (hash: bzxVck+cxHK33bxXIkL4oZ6I/o40sHRWTvbqgIWoVJk=) 2: 497917BA719B11EEA5D8F416C4F9AE02.roa (hash: 4mOEHeBhGChXkeLtaY3MjKqXMs560mEi/SBozflvvQE=) 3: A56F3A8A718811EEADDA430AC4F9AE02.roa (hash: L4AZBH5lKNpdo+3dcVKjGvlldW+516nYY3afGRte0nU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91810E3, serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F Validity Not Before: Sep 25 02:50:16 2026 GMT Not After : Oct 2 02:50:16 2026 GMT Subject: CN=6ab5e168-f063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f4:f1:04:4d:f7:e5:92:c9:63:4e:51:51:98: ae:43:a4:31:b4:a5:00:23:17:d3:48:dd:8b:0b:d4: bd:70:70:73:cf:83:39:c3:1e:18:25:ee:98:49:b8: c5:d1:82:6a:d9:75:07:1c:f1:53:7c:01:89:d9:49: 0d:bf:3b:4d:07:a4:9c:84:90:67:d2:85:0b:a2:79: 86:3c:e2:77:42:e0:44:90:fb:44:0b:c7:13:87:b1: 9f:1f:6e:5e:8f:38:10:e1:de:31:1e:7f:af:8b:1c: 9a:2d:23:8f:c6:2e:ce:6b:34:15:6f:df:2f:a8:2b: da:4e:47:52:fa:24:31:04:d3:97:e9:ee:d1:31:8e: 45:af:56:80:e0:b7:da:93:ff:32:02:9e:54:4b:47: f1:69:8b:08:db:c5:fe:83:09:8c:62:13:8b:ef:66: 64:20:e6:a1:1c:eb:0f:d1:69:c8:e8:7b:de:6f:3e: bd:97:0c:d5:55:be:6c:99:cb:d3:c9:8c:b5:9b:05: 16:1e:c8:b5:8b:96:00:6e:0c:3a:54:1f:43:9e:32: e8:f7:37:b7:87:8d:e7:40:ac:45:88:b5:52:e1:72: c1:1a:e3:18:5f:74:df:e5:fb:e1:2c:75:fe:c1:a7: aa:74:d5:72:00:7c:46:95:b6:a2:a4:fe:55:81:57: c7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F8:A1:45:8F:6B:FB:AA:9A:7C:3D:E5:C4:87:6C:7C:D5:31:9F:7F X509v3 Authority Key Identifier: keyid:9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c5:c5:ab:30:9a:7a:8b:5b:75:74:0c:fc:36:b4:06:3a:51: 61:ed:96:42:45:5d:db:4d:dd:bd:11:27:31:ef:6b:c7:0a:67: b2:13:33:f7:57:ce:29:96:1a:1b:03:21:d9:89:bb:3f:79:68: 5a:0d:c5:da:5b:34:7e:ee:9b:b8:36:d8:74:8b:36:8b:04:29: fc:b2:4d:da:05:d5:7a:55:30:0e:5c:27:92:96:3c:15:bf:c8: ee:01:38:fb:42:fb:d2:57:9f:40:b6:05:1e:b4:d1:4e:e9:c4: 32:09:c2:49:98:56:81:d4:dc:57:ce:37:b5:37:5e:82:8e:b7: 97:0e:1a:05:1a:44:39:b3:8b:80:a8:b5:a4:df:6a:9e:64:6d: 7f:63:60:ce:8d:90:ea:07:9f:6e:b0:98:49:f4:7e:8c:b9:82: 93:9e:e0:59:24:20:0b:63:27:83:d0:09:e0:e1:7d:1f:8d:48: d5:9f:34:bd:1c:f1:c4:1e:e7:29:e4:3f:7b:db:46:c0:13:4d: 40:43:00:d8:51:16:f3:ef:63:ef:df:3f:5f:0e:78:44:15:fc: a1:1e:98:09:59:bf:9c:07:c0:9d:0b:c8:4d:3c:b0:d6:67:f1: d2:2f:5c:a9:6e:99:b2:3f:a9:31:65:41:b4:ab:06:77:ff:2c: 46:ce:94:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEwRTMxMTAvBgNVBAUTKDlEQjdBQjkzQUUzM0Y2NDYxNjgyMkRGMDNGRkQ4MTc3 NjhGMUU5OEYwHhcNMjYwOTI1MDI1MDE2WhcNMjYxMDAyMDI1MDE2WjAYMRYwFAYD VQQDEw02YWI1ZTE2OC1mMDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5fTxBE335ZLJY05RUZiuQ6QxtKUAIxfTSN2LC9S9cHBzz4M5wx4YJe6YSbjF 0YJq2XUHHPFTfAGJ2UkNvztNB6SchJBn0oULonmGPOJ3QuBEkPtEC8cTh7GfH25e jzgQ4d4xHn+vixyaLSOPxi7OazQVb98vqCvaTkdS+iQxBNOX6e7RMY5Fr1aA4Lfa k/8yAp5US0fxaYsI28X+gwmMYhOL72ZkIOahHOsP0WnI6Hvebz69lwzVVb5smcvT yYy1mwUWHsi1i5YAbgw6VB9DnjLo9ze3h43nQKxFiLVS4XLBGuMYX3Tf5fvhLHX+ waeqdNVyAHxGlbaipP5VgVfHKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMP4oUWP a/uqmnw95cSHbHzVMZ9/MB8GA1UdIwQYMBaAFJ23q5OuM/ZGFoIt8D/9gXdo8emP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTBFMy8zMzkzMTRDODcx N0QxMUVFODlFRjYyMzZDNEY5QUUwMi9uYmVyazY0ejlrWVdnaTN3UF8yQmQyang2 WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25iZXJrNjR6OWtZV2dpM3dQXzJCZDJqeDZZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTBFMy8zMzkzMTRDODcxN0QxMUVFODlFRjYyMzZDNEY5QUUwMi9uYmVyazY0ejlr WVdnaTN3UF8yQmQyang2WTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAesXFqzCaeotbdXQM/Da0BjpRYe2WQkVd203dvREnMe9rxwpnshMz91fOKZYa GwMh2Ym7P3loWg3F2ls0fu6buDbYdIs2iwQp/LJN2gXVelUwDlwnkpY8Fb/I7gE4 +0L70lefQLYFHrTRTunEMgnCSZhWgdTcV843tTdego63lw4aBRpEObOLgKi1pN9q nmRtf2Ngzo2Q6gefbrCYSfR+jLmCk57gWSQgC2Mng9AJ4OF9H41I1Z80vRzxxB7n KeQ/e9tGwBNNQEMA2FEW8+9j798/Xw54RBX8oR6YCVm/nAfAnQvITTyw1mfx0i9c qW6Zsj+pMWVBtKsGd/8sRs6Uug== -----END CERTIFICATE-----Generated at Fri Sep 25 09:24:06 2026 by rpki-client