$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft File: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft (raw, json) Hash identifier: LyM+P1fw4t90tWD+5VTU67gnzS1Ne0BCltOpbbKzWIo= Subject key identifier: 49:6A:86:92:C9:F1:25:52:30:46:02:D6:C8:48:29:7E:A2:0B:7D:C5 Authority key identifier: 35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 Certificate issuer: /CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Certificate serial: 1A32 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft Manifest number: 4C30 Signing time: Thu 24 Sep 2026 15:19:06 +0000 Manifest this update: Thu 24 Sep 2026 15:19:06 +0000 Manifest next update: Thu 01 Oct 2026 15:19:06 +0000 Files and hashes: 1: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl (hash: HGYTE7r0XmmfUcPlvhY3bz0z+mf05WM7vJ4nq1M4Rho=) 2: F22C58CEE69611EAA594260CC4F9AE02.roa (hash: gEyD44KlU7kGIP6KThcKtoihoaJv7b+z5iLc4Ql5KJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 15:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6706 (0x1a32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Validity Not Before: Sep 24 15:19:06 2026 GMT Not After : Oct 1 15:19:06 2026 GMT Subject: CN=6ab53f6a-07ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:83:90:2a:fe:f5:d3:c9:00:8f:0b:c1:31:2b: e7:e4:2b:97:93:d5:a3:70:8f:48:16:d4:c5:ef:f6: 1c:14:58:de:ed:a2:94:da:5c:d4:e7:25:99:04:9a: 85:6f:85:9a:9a:e6:ec:7d:8f:81:25:fa:f8:98:d3: 54:05:0e:61:e8:bd:b3:13:f0:ca:49:3a:ca:99:e3: d4:e2:7e:9d:d2:30:c6:51:37:6a:1d:e6:61:1e:e4: 28:ed:73:51:75:3b:ca:d4:ca:ec:55:fc:09:08:11: 5b:f2:35:07:2d:c1:b1:40:e9:80:96:e4:50:4d:61: 76:d6:b5:bf:08:cb:62:5e:69:2c:2f:9c:cf:cb:6a: ba:72:7d:48:9c:ef:a1:1b:b5:bb:da:b2:e2:95:0d: d4:7c:88:be:19:95:5c:9e:a3:87:79:ba:8b:45:d9: c9:7a:b8:7b:66:11:9d:48:56:72:f2:5f:6d:a6:bd: 1b:98:7c:23:32:ca:05:36:3c:fb:53:46:6a:7f:46: 8d:c9:1c:df:70:25:dc:13:6c:8b:96:95:a4:53:6e: 5d:eb:e6:53:1a:50:bb:43:75:88:f2:51:f7:ae:01: 3a:40:00:f0:5c:cb:0d:d9:d9:df:fd:7a:e4:69:0f: d6:a9:49:e1:ed:1c:5f:e4:c4:ec:4e:0f:c4:af:a3: c8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6A:86:92:C9:F1:25:52:30:46:02:D6:C8:48:29:7E:A2:0B:7D:C5 X509v3 Authority Key Identifier: keyid:35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:17:d9:b2:16:95:b2:0c:8f:03:2e:57:8d:5b:6e:8d:3d:64: 88:5d:e8:27:81:de:43:fb:97:29:00:20:6d:de:d9:ab:a0:7b: 8a:24:e3:82:f7:91:ee:89:28:05:d8:3f:48:8a:43:75:2f:d6: f6:8c:98:c9:e0:3f:d5:4d:25:f4:d1:21:9d:4b:ba:35:55:bb: 43:e9:73:d3:87:bd:7f:35:86:b2:83:c7:f5:89:5b:29:24:a0: d6:67:0d:28:9b:87:71:76:b8:26:47:48:f2:96:f8:f3:50:f7: b9:0a:b6:1d:cb:68:b3:bb:2f:04:bd:32:ef:1a:68:ec:b9:bb: bb:05:d4:59:26:cb:ab:29:82:2a:b8:1f:6c:21:77:d9:37:90: 6a:d0:bd:fd:85:00:7e:29:4d:8e:a9:f1:c7:33:62:3d:d9:39: 29:fd:a6:e0:e7:e8:a8:0f:2e:89:7b:1a:d5:94:cb:73:e7:d4: 9e:46:d7:0e:f0:30:28:84:b6:f6:7f:d0:2d:3f:a4:e3:e2:95: 98:c9:13:2a:99:fe:40:76:3d:9d:f9:b8:8a:b5:30:a8:70:bb: 18:96:06:53:cc:c8:e4:87:c9:2d:c0:e5:87:07:43:0a:a7:58: c1:11:bd:96:27:9b:1b:69:19:91:3c:e6:d7:00:15:8e:ea:d5: c6:91:d1:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDM1QTNGNjFGQzVERkYxOTJDMUQ5MEM3NEFCODJDN0Ey NUQ3RTE2RDgwHhcNMjYwOTI0MTUxOTA2WhcNMjYxMDAxMTUxOTA2WjAYMRYwFAYD VQQDEw02YWI1M2Y2YS0wN2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7YOQKv7108kAjwvBMSvn5CuXk9WjcI9IFtTF7/YcFFje7aKU2lzU5yWZBJqF b4WamubsfY+BJfr4mNNUBQ5h6L2zE/DKSTrKmePU4n6d0jDGUTdqHeZhHuQo7XNR dTvK1MrsVfwJCBFb8jUHLcGxQOmAluRQTWF21rW/CMtiXmksL5zPy2q6cn1InO+h G7W72rLilQ3UfIi+GZVcnqOHebqLRdnJerh7ZhGdSFZy8l9tpr0bmHwjMsoFNjz7 U0Zqf0aNyRzfcCXcE2yLlpWkU25d6+ZTGlC7Q3WI8lH3rgE6QADwXMsN2dnf/Xrk aQ/WqUnh7Rxf5MTsTg/Er6PIgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFElqhpLJ 8SVSMEYC1shIKX6iC33FMB8GA1UdIwQYMBaAFDWj9h/F3/GSwdkMdKuCx6JdfhbY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8wREYzQjI1RTcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjhaTEIyUXgwcTRMSG9sMS1G dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL05hUDJIOFhmOFpMQjJReDBxNExIb2wxLUZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RURCMi8wREYzQjI1RTcwRTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjha TEIyUXgwcTRMSG9sMS1GdGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuBfZshaVsgyPAy5XjVtujT1kiF3oJ4HeQ/uXKQAgbd7Zq6B7iiTjgveR7oko Bdg/SIpDdS/W9oyYyeA/1U0l9NEhnUu6NVW7Q+lz04e9fzWGsoPH9YlbKSSg1mcN KJuHcXa4JkdI8pb481D3uQq2Hctos7svBL0y7xpo7Lm7uwXUWSbLqymCKrgfbCF3 2TeQatC9/YUAfilNjqnxxzNiPdk5Kf2m4OfoqA8uiXsa1ZTLc+fUnkbXDvAwKIS2 9n/QLT+k4+KVmMkTKpn+QHY9nfm4irUwqHC7GJYGU8zI5IfJLcDlhwdDCqdYwRG9 liebG2kZkTzm1wAVjurVxpHRpw== -----END CERTIFICATE-----Generated at Fri Sep 25 17:00:03 2026 by rpki-client