$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft File: nAcegU2AsQ4sofcemy5TXDkFy2U.mft (raw, json) Hash identifier: PhatHzux5VrDuQSPZMQIgWaQs/rrxLNPiybXZpGOEUE= Subject key identifier: BC:8D:7B:32:47:E6:47:ED:75:FC:06:74:7D:C4:AF:7E:48:DB:A9:4C Authority key identifier: 9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65 Certificate issuer: /CN=A91A998A/serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft Manifest number: 018A Signing time: Wed 23 Sep 2026 04:32:52 +0000 Manifest this update: Wed 23 Sep 2026 04:32:52 +0000 Manifest next update: Wed 30 Sep 2026 04:32:52 +0000 Files and hashes: 1: nAcegU2AsQ4sofcemy5TXDkFy2U.crl (hash: WPCm9f25xfZ+YGFtY43wPncLOe6ufyVc9Rz0GUdX9x8=) 2: B6DE83747AE811EF94E01B38C4F9AE02.roa (hash: /Mfb+/GCj01R9lifsGJinmVrLBP5+B8J3/UWQZMFbAU=) 3: F60E5BC87C8711EFB9EB5F5FC4F9AE02.roa (hash: YSZYviBTPxtzDHVeHnT8ow3/nXxU9t04H0K+ZmSVj7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 04:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A998A, serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65 Validity Not Before: Sep 23 04:32:52 2026 GMT Not After : Sep 30 04:32:52 2026 GMT Subject: CN=6ab35674-5033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c8:91:7e:19:b2:b4:f0:19:09:3d:4a:f8:90: 5e:42:2f:02:e8:f5:8f:34:6d:ba:81:36:32:7f:ec: 1d:60:86:c5:2e:2b:3b:44:34:d0:4a:29:db:b7:cf: 87:6f:39:1e:e5:dd:d1:26:34:bc:af:fd:da:13:86: d2:b8:c0:19:cc:71:85:c5:cc:68:c4:69:64:a9:ed: 00:c0:42:4d:3f:e7:bd:b9:8e:ef:1e:a8:6c:8e:e1: 6b:95:02:4d:cd:63:42:8a:7d:3d:db:3c:f6:d4:d7: a7:e1:41:62:cc:e9:e2:4c:bf:f5:2c:12:16:fb:76: 2d:82:62:32:e3:7a:30:f1:e9:61:c6:7a:16:7d:a0: 76:9d:d6:07:81:85:cd:e6:f2:00:73:e8:1d:0b:a4: 89:30:b3:e8:27:9d:89:82:34:0c:51:45:8f:8c:80: 91:be:85:1c:9a:ba:42:19:30:ae:e5:ed:72:15:7f: 70:d0:9f:d1:2a:42:fa:b2:fa:27:1c:45:cf:df:3a: f8:fa:7c:b4:00:7f:ee:88:54:26:2f:06:1c:d1:61: a9:79:5d:2e:2d:81:13:b1:eb:70:2b:6e:3a:c5:43: 6e:9e:ff:45:89:0d:b2:3f:77:c2:18:da:68:9e:19: a1:b4:fe:2c:30:ae:1c:a1:a1:5a:72:78:e9:e7:3b: 59:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:8D:7B:32:47:E6:47:ED:75:FC:06:74:7D:C4:AF:7E:48:DB:A9:4C X509v3 Authority Key Identifier: keyid:9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:22:c6:a3:83:aa:1e:15:7f:0f:90:a9:7d:57:97:51:6e:6f: c0:8d:45:8a:d7:d6:d0:47:0c:40:05:c1:8a:cf:d6:1f:be:26: d8:86:9c:70:02:1a:4b:d7:d7:6c:c7:4f:e4:9e:00:dc:f6:9b: 9a:2d:50:09:3c:ca:cc:d1:81:01:79:7c:73:14:bc:f7:8d:f1: 42:95:38:77:2f:c9:86:18:1d:3a:aa:1d:bb:59:bb:4e:6e:bf: 0d:9b:80:7a:cf:44:b1:c8:97:a8:67:69:b7:bc:f6:be:ab:30: e1:0c:c1:c6:c0:fe:61:8e:5d:2a:49:e1:36:2f:f7:6f:c2:33: af:59:92:40:b3:8f:2d:b9:5e:48:d6:b7:a5:eb:bb:88:ff:69: eb:b4:dc:a1:69:97:b5:22:aa:ae:0c:0d:12:7e:25:10:04:61: 6c:dc:a5:6c:85:19:8f:46:b8:c3:45:c3:62:a5:c5:3b:48:b1: 44:f7:b3:03:13:b0:a1:6c:57:6f:50:25:03:09:41:2d:56:a7: 18:8d:c7:a8:a1:22:de:06:57:86:c0:17:b5:95:2c:c7:0c:93: dc:04:43:7e:40:e0:1b:2f:fb:19:fa:b2:f1:f6:97:e8:2b:ac: bd:c0:fe:f9:33:4f:57:89:dc:66:d7:75:03:80:44:17:16:7f: f8:a9:9f:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk5OEExMTAvBgNVBAUTKDlDMDcxRTgxNEQ4MEIxMEUyQ0ExRjcxRTlCMkU1MzVD MzkwNUNCNjUwHhcNMjYwOTIzMDQzMjUyWhcNMjYwOTMwMDQzMjUyWjAYMRYwFAYD VQQDEw02YWIzNTY3NC01MDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm8iRfhmytPAZCT1K+JBeQi8C6PWPNG26gTYyf+wdYIbFLis7RDTQSinbt8+H bzke5d3RJjS8r/3aE4bSuMAZzHGFxcxoxGlkqe0AwEJNP+e9uY7vHqhsjuFrlQJN zWNCin092zz21Nen4UFizOniTL/1LBIW+3YtgmIy43ow8elhxnoWfaB2ndYHgYXN 5vIAc+gdC6SJMLPoJ52JgjQMUUWPjICRvoUcmrpCGTCu5e1yFX9w0J/RKkL6svon HEXP3zr4+ny0AH/uiFQmLwYc0WGpeV0uLYETsetwK246xUNunv9FiQ2yP3fCGNpo nhmhtP4sMK4coaFacnjp5ztZfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLyNezJH 5kftdfwGdH3Er35I26lMMB8GA1UdIwQYMBaAFJwHHoFNgLEOLKH3HpsuU1w5Bctl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTk4QS81MjJDQjczNDdB RTgxMUVGOUE0QTQ3MzdDNEY5QUUwMi9uQWNlZ1UyQXNRNHNvZmNlbXk1VFhEa0Z5 MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BY2VnVTJBc1E0c29mY2VteTVUWERrRnkyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTk4QS81MjJDQjczNDdBRTgxMUVGOUE0QTQ3MzdDNEY5QUUwMi9uQWNlZ1UyQXNR NHNvZmNlbXk1VFhEa0Z5MlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYyLGo4OqHhV/D5CpfVeXUW5vwI1FitfW0EcMQAXBis/WH74m2IaccAIaS9fX bMdP5J4A3Pabmi1QCTzKzNGBAXl8cxS8943xQpU4dy/JhhgdOqodu1m7Tm6/DZuA es9EsciXqGdpt7z2vqsw4QzBxsD+YY5dKknhNi/3b8Izr1mSQLOPLbleSNa3peu7 iP9p67TcoWmXtSKqrgwNEn4lEARhbNylbIUZj0a4w0XDYqXFO0ixRPezAxOwoWxX b1AlAwlBLVanGI3HqKEi3gZXhsAXtZUsxwyT3ARDfkDgGy/7Gfqy8faX6CusvcD+ +TNPV4ncZtd1A4BEFxZ/+KmfBQ== -----END CERTIFICATE-----Generated at Wed Sep 23 21:16:58 2026 by rpki-client