$ rpki-client -vvvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft File: NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft (raw, json) Hash identifier: 8cV+9ShBfQ2n30pGpXspnMtUTRbcIuyh34gP5dTs1hg= Subject key identifier: 90:80:51:07:43:34:54:07:D5:91:F5:30:69:BC:63:FE:C2:94:D7:41 Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D Certificate issuer: /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Certificate serial: 022B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft Manifest number: 0223 Signing time: Wed 23 Sep 2026 02:43:12 +0000 Manifest this update: Wed 23 Sep 2026 02:43:12 +0000 Manifest next update: Wed 30 Sep 2026 02:43:12 +0000 Files and hashes: 1: NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl (hash: UJjy2YFJtJuhe+Q+YztgqJCu556amhce6qIDFYHucDg=) 2: 2C4CD10078C011EE90D36F13C4F9AE02.roa (hash: /FvIDYbl/mVf08+fKbfi2snHOASjdNbVb4Yy2Ni1NGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Validity Not Before: Sep 23 02:43:12 2026 GMT Not After : Sep 30 02:43:12 2026 GMT Subject: CN=6ab33cc0-4fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5a:8e:af:fd:3d:28:1a:54:70:13:69:84:44: 86:e5:8d:1f:63:62:db:49:83:8a:13:67:b2:af:1b: a0:99:e5:61:74:f0:11:14:41:54:da:df:52:a5:ec: c5:7e:a1:a6:f9:cb:8d:4c:a1:04:35:9b:32:2c:87: 5e:39:14:05:b4:39:e3:6f:32:3c:53:f1:4e:52:f4: 63:e7:49:24:93:f7:79:46:6a:4e:68:b1:9d:60:e3: 38:8c:61:69:b6:d7:73:68:32:09:6f:c5:8d:88:0c: 76:44:29:ad:05:b2:73:be:e2:b2:8f:9a:a5:a0:88: 38:2e:e3:a8:8a:5e:d9:4d:fc:cf:4f:a4:c7:e2:4f: 32:9c:d2:ee:4f:42:63:dc:1e:94:5a:78:19:17:3f: 77:dd:82:f2:bd:8b:fb:42:c6:63:07:48:4b:8a:c0: 72:62:ca:66:a8:4c:a8:a3:eb:a9:37:ac:d8:34:6a: c1:a9:c5:f5:0e:4a:5f:a6:7c:4d:84:1a:03:a5:38: 95:8b:31:56:18:08:6e:40:bf:68:40:cc:85:17:61: b8:54:30:2e:47:7a:6f:57:9f:ba:0c:06:67:ec:fa: ee:2f:e4:e9:e2:39:57:50:bf:9f:89:11:20:aa:4d: a3:e2:a8:c6:60:b6:56:34:6c:b3:f2:b0:2d:b2:93: 2c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:80:51:07:43:34:54:07:D5:91:F5:30:69:BC:63:FE:C2:94:D7:41 X509v3 Authority Key Identifier: keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:a5:dd:14:76:e9:15:21:a0:5a:93:3b:2b:58:0a:ec:04:bf: 89:d6:90:65:ee:7d:34:0b:d7:61:e8:47:45:3a:5d:0e:7a:48: 10:f5:47:10:43:46:61:fb:48:54:1d:33:45:3e:ff:60:dc:82: 57:ac:32:7b:21:59:cd:84:96:71:b5:88:10:ee:69:50:f4:f2: d9:4c:db:84:46:a9:62:db:cc:b6:41:6f:52:47:36:8d:b1:a9: 30:24:6d:b6:02:ff:b6:45:ef:dc:f1:f8:35:dd:3a:42:bc:01: 8a:fb:40:3d:db:38:b1:15:96:df:bd:a0:16:89:a8:2a:3a:d6: cf:ce:2f:3f:e4:4a:5a:0f:d5:15:e7:af:3e:32:89:2e:68:ef: f8:b8:a0:6c:9c:1f:04:86:c3:70:68:c2:c3:91:b7:a1:1a:40: 6c:c4:12:4b:bc:f0:c3:b0:e5:ca:16:8e:e1:c2:80:da:8d:97: 7f:18:ff:29:5f:da:c4:93:5d:00:65:6d:ad:83:9b:14:e7:36: 69:a0:c1:ff:c3:14:b7:22:13:eb:f5:46:54:3b:41:38:10:17: 21:20:09:79:df:b4:8c:47:b9:82:ce:a3:5d:a7:29:87:24:29: 27:ae:b0:20:00:2b:5c:e6:f6:c4:eb:18:83:a3:5d:ca:9a:fa: b7:56:8d:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI1RDIxMTAvBgNVBAUTKDM0NTE3Q0MyOUY3NDE2OUZENzM2QTJDMjQwNjE5RjhC MzMwRkREOUQwHhcNMjYwOTIzMDI0MzEyWhcNMjYwOTMwMDI0MzEyWjAYMRYwFAYD VQQDEw02YWIzM2NjMC00ZmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4VqOr/09KBpUcBNphESG5Y0fY2LbSYOKE2eyrxugmeVhdPARFEFU2t9SpezF fqGm+cuNTKEENZsyLIdeORQFtDnjbzI8U/FOUvRj50kkk/d5RmpOaLGdYOM4jGFp ttdzaDIJb8WNiAx2RCmtBbJzvuKyj5qloIg4LuOoil7ZTfzPT6TH4k8ynNLuT0Jj 3B6UWngZFz933YLyvYv7QsZjB0hLisByYspmqEyoo+upN6zYNGrBqcX1DkpfpnxN hBoDpTiVizFWGAhuQL9oQMyFF2G4VDAuR3pvV5+6DAZn7PruL+Tp4jlXUL+fiREg qk2j4qjGYLZWNGyz8rAtspMsnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJCAUQdD NFQH1ZH1MGm8Y/7ClNdBMB8GA1UdIwQYMBaAFDRRfMKfdBaf1zaiwkBhn4szD92d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjVEMi82REY2MDJEMDc4 QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZwX1hOcUxDUUdHZml6TVAz WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GRjh3cDkwRnBfWE5xTENRR0dmaXpNUDNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjVEMi82REY2MDJEMDc4QkYxMUVFOTNGRkI3NjRDNEY5QUUwMi9ORkY4d3A5MEZw X1hOcUxDUUdHZml6TVAzWjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYKXdFHbpFSGgWpM7K1gK7AS/idaQZe59NAvXYehHRTpdDnpIEPVHEENGYftI VB0zRT7/YNyCV6wyeyFZzYSWcbWIEO5pUPTy2UzbhEapYtvMtkFvUkc2jbGpMCRt tgL/tkXv3PH4Nd06QrwBivtAPds4sRWW372gFomoKjrWz84vP+RKWg/VFeevPjKJ Lmjv+LigbJwfBIbDcGjCw5G3oRpAbMQSS7zww7DlyhaO4cKA2o2Xfxj/KV/axJNd AGVtrYObFOc2aaDB/8MUtyIT6/VGVDtBOBAXISAJed+0jEe5gs6jXacphyQpJ66w IAArXOb2xOsYg6Ndypr6t1aNDA== -----END CERTIFICATE-----Generated at Wed Sep 23 22:15:17 2026 by rpki-client