$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft File: -NaTomlkzTxaGZ0sJu0iZHog534.mft (raw, json) Hash identifier: NWqKQdzJws2ZqPXyZV2E1cYY8QIFwVHEWYFS0d8H5ic= Subject key identifier: 6C:E9:BA:70:5C:DF:4B:89:51:EC:72:39:12:51:4E:51:DC:ED:FA:FD Authority key identifier: F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E Certificate issuer: /CN=A919EF67/serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E Certificate serial: 0319 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft Manifest number: 0304 Signing time: Mon 05 Oct 2026 01:13:23 +0000 Manifest this update: Mon 05 Oct 2026 01:13:22 +0000 Manifest next update: Mon 12 Oct 2026 01:13:22 +0000 Files and hashes: 1: -NaTomlkzTxaGZ0sJu0iZHog534.crl (hash: Qt14gBbrSp5UDTUV4khdgWkhSP1Pyw08qw4f2Lj2r2A=) 2: ZS-ppPjt8opYJHcdG7fYKHkDkZo.asa (hash: MLD41Ka89WGkgVftoVmQ8WO7uVk8k1eWEGfBvHuaahM=) 3: 256273EE355011EEBCB7D945C4F9AE02.roa (hash: d181Z1DYLcItp5l9IsZ1mcEBRFCLJxml8DnOv1hi/n0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 01:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 793 (0x319) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF67, serialNumber=F8D693A26964CD3C5A199D2C26ED22647A20E77E Validity Not Before: Oct 5 01:13:22 2026 GMT Not After : Oct 12 01:13:22 2026 GMT Subject: CN=6ac2f9b3-6d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:38:c2:e7:fe:90:43:7e:a9:9c:a6:1f:fc:ea: 1d:45:0c:cd:18:cb:46:77:46:a0:4b:31:b0:94:3e: e7:3a:2e:f9:7a:6a:5d:61:39:14:d2:75:a9:12:74: af:10:23:96:a7:f2:e5:95:a4:02:27:90:a8:3c:ec: fe:cb:40:30:83:fa:38:be:39:53:a4:c1:4b:c2:cc: d6:e9:0d:f2:8c:1f:14:9f:09:29:6c:95:e9:90:d3: 3b:d9:91:57:ca:5b:bf:f2:40:f8:11:49:68:65:3a: 2d:15:b4:d4:2b:a8:5c:66:d1:8d:8e:db:57:e2:3b: c2:c7:8e:07:27:4c:9b:84:2a:37:71:d2:2a:14:ab: bf:e3:af:3d:ce:67:fd:5a:77:16:c1:93:f5:e1:29: fb:8a:90:8a:cd:23:b7:59:d0:00:e2:57:6a:c4:f6: 8d:71:3e:60:1e:ca:ff:bc:fc:35:d6:c0:39:fe:86: 5f:12:0d:02:99:fb:ec:76:42:b9:50:47:5c:59:48: 20:97:6a:18:df:5f:f0:57:0c:01:cb:61:2b:25:e1: fd:d0:6a:c8:de:40:9e:61:24:b4:22:b6:d0:d4:3f: d8:5a:23:83:27:33:de:c8:75:90:18:e9:5a:41:99: 51:40:c4:21:cb:9d:47:39:d2:61:27:ac:9e:c7:38: 2d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E9:BA:70:5C:DF:4B:89:51:EC:72:39:12:51:4E:51:DC:ED:FA:FD X509v3 Authority Key Identifier: keyid:F8:D6:93:A2:69:64:CD:3C:5A:19:9D:2C:26:ED:22:64:7A:20:E7:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NaTomlkzTxaGZ0sJu0iZHog534.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF67/12CE58C04BCB11EDBBE5925EC4F9AE02/-NaTomlkzTxaGZ0sJu0iZHog534.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ad:0a:55:85:1b:62:42:0f:7b:e5:f7:8e:e8:d6:7e:07:0f: 30:de:3d:6b:39:bf:8d:be:8e:bd:b8:a5:b7:6e:0c:d6:4b:de: 36:68:ab:6e:a5:89:a0:8a:d2:be:53:74:2e:66:56:73:ab:1f: 24:97:09:ee:33:35:ea:5d:17:32:b9:a7:c0:29:19:bf:17:a1: fb:53:21:1b:a0:cd:a2:c8:e8:ea:4d:4e:23:ac:a4:2b:fb:83: ed:27:4b:57:50:4a:b5:99:fc:ae:7c:cf:30:08:4d:7d:b1:08: ba:fe:3e:1e:90:19:0e:50:45:1e:6e:87:33:ca:17:e9:b8:fd: ee:fe:8b:94:a0:98:4c:aa:4b:82:e8:30:ab:a7:12:03:16:33: 13:75:06:73:15:19:64:fb:f6:2a:fe:1a:15:94:15:f6:05:ac: af:cd:16:0e:dd:7d:70:aa:a0:2b:eb:07:89:61:7f:67:01:2c: 02:7d:6f:6a:17:fd:85:26:aa:5d:06:8c:20:3e:0f:a0:eb:dd: 14:0f:f3:64:20:d9:fe:a4:86:36:22:b4:54:df:79:41:d5:4a: c1:af:86:96:c0:b7:c8:bd:75:68:2e:aa:8d:c5:1d:0d:6d:61: b9:e6:d4:62:c6:83:dc:94:b5:7b:e6:97:57:80:29:63:a0:fc: b8:6e:4f:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNjcxMTAvBgNVBAUTKEY4RDY5M0EyNjk2NENEM0M1QTE5OUQyQzI2RUQyMjY0 N0EyMEU3N0UwHhcNMjYxMDA1MDExMzIyWhcNMjYxMDEyMDExMzIyWjAYMRYwFAYD VQQDEw02YWMyZjliMy02ZDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTjC5/6QQ36pnKYf/OodRQzNGMtGd0agSzGwlD7nOi75empdYTkU0nWpEnSv ECOWp/LllaQCJ5CoPOz+y0Awg/o4vjlTpMFLwszW6Q3yjB8UnwkpbJXpkNM72ZFX ylu/8kD4EUloZTotFbTUK6hcZtGNjttX4jvCx44HJ0ybhCo3cdIqFKu/4689zmf9 WncWwZP14Sn7ipCKzSO3WdAA4ldqxPaNcT5gHsr/vPw11sA5/oZfEg0CmfvsdkK5 UEdcWUggl2oY31/wVwwBy2ErJeH90GrI3kCeYSS0IrbQ1D/YWiODJzPeyHWQGOla QZlRQMQhy51HOdJhJ6yexzgtPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGzpunBc 30uJUexyORJRTlHc7fr9MB8GA1UdIwQYMBaAFPjWk6JpZM08WhmdLCbtImR6IOd+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY2Ny8xMkNFNThDMDRC Q0IxMUVEQkJFNTkyNUVDNEY5QUUwMi8tTmFUb21sa3pUeGFHWjBzSnUwaVpIb2c1 MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1OYVRvbWxrelR4YUdaMHNKdTBpWkhvZzUzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUY2Ny8xMkNFNThDMDRCQ0IxMUVEQkJFNTkyNUVDNEY5QUUwMi8tTmFUb21sa3pU eGFHWjBzSnUwaVpIb2c1MzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT60KVYUbYkIPe+X3jujWfgcPMN49azm/jb6Ovbilt24M1kveNmirbqWJoIrS vlN0LmZWc6sfJJcJ7jM16l0XMrmnwCkZvxeh+1MhG6DNosjo6k1OI6ykK/uD7SdL V1BKtZn8rnzPMAhNfbEIuv4+HpAZDlBFHm6HM8oX6bj97v6LlKCYTKpLgugwq6cS AxYzE3UGcxUZZPv2Kv4aFZQV9gWsr80WDt19cKqgK+sHiWF/ZwEsAn1vahf9hSaq XQaMID4PoOvdFA/zZCDZ/qSGNiK0VN95QdVKwa+GlsC3yL11aC6qjcUdDW1huebU YsaD3JS1e+aXV4ApY6D8uG5POQ== -----END CERTIFICATE-----Generated at Tue Oct 6 20:26:25 2026 by rpki-client