$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft File: neeKCQtuCCyfsAyqXiyRMlbDyHY.mft (raw, json) Hash identifier: abcLPZhX6Ske5sJIhLj+j7YVLRm/gNQkxCLfEQIoYnA= Subject key identifier: F6:FD:31:09:73:5C:A3:85:52:B5:70:72:A3:40:33:75:46:1C:86:E0 Authority key identifier: 9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 Certificate issuer: /CN=A91B3AD7/serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Certificate serial: 0D49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft Manifest number: 0D33 Signing time: Sat 26 Sep 2026 18:23:17 +0000 Manifest this update: Sat 26 Sep 2026 18:23:17 +0000 Manifest next update: Sat 03 Oct 2026 18:23:17 +0000 Files and hashes: 1: neeKCQtuCCyfsAyqXiyRMlbDyHY.crl (hash: +qnADXM3d1yuEn0NRtiqwKpzD+d0/FViWZEYViqCqME=) 2: 8DBBDE9C5DEF11F18C01C64FBD833773.roa (hash: 7b/Lfw2aHzuIkV4xitvizUnPInwhgKAGehvAixn2H/E=) 3: F208B4B05DEF11F187405161BD833773.roa (hash: ZWgiWF4CXCt37kranqZqOv/FlMQUzVgBnDh5EhOP1cI=) 4: 656EC012543511F1885A5D83A2833773.roa (hash: YJg5JVgAKS5b1sOp/0Se1nfEITh91JRbPpTZBCAp67I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 18:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3401 (0xd49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3AD7, serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Validity Not Before: Sep 26 18:23:17 2026 GMT Not After : Oct 3 18:23:17 2026 GMT Subject: CN=6ab80d95-f76e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:40:10:67:4f:65:62:de:f3:0c:42:2e:43:36: 29:e3:c3:58:a5:57:c1:1f:5a:f6:43:ab:c0:4a:73: 9e:af:33:42:95:0b:ca:63:32:aa:d4:0c:58:cd:84: 42:5b:3f:e6:c5:e2:19:73:b4:9c:a7:77:88:ba:6f: 31:59:d2:e1:e4:f2:c8:85:57:54:1b:26:8a:5d:55: a9:0f:cb:98:bb:af:2d:2b:48:c1:be:59:3a:b6:1b: b6:22:ba:02:aa:bc:8d:43:48:f6:59:b3:da:95:fc: da:f4:74:29:1c:22:29:c7:45:11:cd:88:31:c5:0e: 1b:c6:ea:6f:7a:62:9c:36:6e:d3:f9:51:65:e6:82: 49:7b:bd:a2:e5:b9:b9:7f:96:a1:5b:fd:80:38:ee: f2:49:ca:24:53:1a:4f:d2:85:81:d3:d7:c9:18:ae: 44:3c:1c:df:ff:33:22:1e:b4:0d:84:cd:8d:92:1c: 04:7f:72:c4:79:5a:1f:43:62:28:d2:46:16:4c:e5: c9:e7:d8:ef:f0:5b:72:5d:6a:b0:2b:fb:af:98:e8: 09:e9:54:70:44:bc:43:b2:7b:79:72:1f:f5:ef:d9: 56:a5:f8:02:07:5a:ea:aa:0f:9a:f6:eb:b3:74:cc: cf:e0:60:0b:f4:3d:c8:54:8d:13:d3:d4:7a:e1:3b: 15:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:FD:31:09:73:5C:A3:85:52:B5:70:72:A3:40:33:75:46:1C:86:E0 X509v3 Authority Key Identifier: keyid:9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:e8:87:3c:e7:45:fd:00:13:8f:0b:0c:f4:d8:ce:09:35:71: 18:ed:4d:d6:a6:54:ba:76:cf:80:1a:d3:2a:00:97:a7:7d:24: 28:76:85:f4:f7:36:e7:3d:6f:0e:51:58:f6:dc:d7:3a:13:36: de:c6:85:69:ae:a7:60:97:b5:c0:32:4d:e0:03:f7:cd:ac:32: 88:21:b7:0c:74:ed:d8:25:02:5e:42:f3:e7:44:24:9a:6a:17: 2e:16:3c:80:c4:3d:53:d8:a8:91:27:99:d0:40:16:a8:82:f7: 5c:74:52:d2:0b:de:65:00:9a:ca:20:f0:4d:ac:34:8c:4b:c7: 25:3e:73:fb:8a:69:b3:25:12:93:8e:83:d7:74:c2:bc:aa:b8: b1:a2:46:58:8e:2a:e5:15:f6:b6:e0:d9:56:54:0f:9e:25:aa: 5b:a2:01:7d:44:69:70:03:d9:5f:de:5f:dd:c3:f5:22:74:61: a1:cd:be:a2:d5:54:05:23:b3:c6:fb:b9:6f:01:b5:7f:dd:4c: 47:c0:16:32:e5:0e:73:01:a8:c0:58:27:9e:6a:7b:9d:77:83: 36:e6:d5:ec:d3:29:1c:ea:54:89:0c:ac:49:fe:4f:a6:b9:10: 41:c0:8e:c2:d3:58:f3:33:db:ff:08:31:85:25:80:25:87:6c: 96:f3:cf:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNBRDcxMTAvBgNVBAUTKDlERTc4QTA5MEI2RTA4MkM5RkIwMENBQTVFMkM5MTMy NTZDM0M4NzYwHhcNMjYwOTI2MTgyMzE3WhcNMjYxMDAzMTgyMzE3WjAYMRYwFAYD VQQDEw02YWI4MGQ5NS1mNzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkAQZ09lYt7zDEIuQzYp48NYpVfBH1r2Q6vASnOerzNClQvKYzKq1AxYzYRC Wz/mxeIZc7Scp3eIum8xWdLh5PLIhVdUGyaKXVWpD8uYu68tK0jBvlk6thu2IroC qryNQ0j2WbPalfza9HQpHCIpx0URzYgxxQ4bxupvemKcNm7T+VFl5oJJe72i5bm5 f5ahW/2AOO7yScokUxpP0oWB09fJGK5EPBzf/zMiHrQNhM2NkhwEf3LEeVofQ2Io 0kYWTOXJ59jv8FtyXWqwK/uvmOgJ6VRwRLxDsnt5ch/179lWpfgCB1rqqg+a9uuz dMzP4GAL9D3IVI0T09R64TsVZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPb9MQlz XKOFUrVwcqNAM3VGHIbgMB8GA1UdIwQYMBaAFJ3nigkLbggsn7AMql4skTJWw8h2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0FENy8wN0NGOEQ3QTBC ODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUNDeWZzQXlxWGl5Uk1sYkR5 SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lZUtDUXR1Q0N5ZnNBeXFYaXlSTWxiRHlIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0FENy8wN0NGOEQ3QTBCODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUND eWZzQXlxWGl5Uk1sYkR5SFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAleiHPOdF/QATjwsM9NjOCTVxGO1N1qZUunbPgBrTKgCXp30kKHaF9Pc25z1v DlFY9tzXOhM23saFaa6nYJe1wDJN4AP3zawyiCG3DHTt2CUCXkLz50QkmmoXLhY8 gMQ9U9iokSeZ0EAWqIL3XHRS0gveZQCayiDwTaw0jEvHJT5z+4ppsyUSk46D13TC vKq4saJGWI4q5RX2tuDZVlQPniWqW6IBfURpcAPZX95f3cP1InRhoc2+otVUBSOz xvu5bwG1f91MR8AWMuUOcwGowFgnnmp7nXeDNubV7NMpHOpUiQysSf5PprkQQcCO wtNY8zPb/wgxhSWAJYdslvPPjw== -----END CERTIFICATE-----Generated at Mon Sep 28 12:17:19 2026 by rpki-client