$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft File: nssirN4JZ6BYN-WPxzHTV-N2N_g.mft (raw, json) Hash identifier: WO43j8eAuui0ThPOgGJO+ty+Ied6z5tXPzxsli/3Rvo= Subject key identifier: 25:66:CC:03:39:4C:FE:A8:E4:E4:20:E1:E9:AE:C0:92:8A:BB:6F:EE Authority key identifier: 9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 Certificate issuer: /CN=A91C6B27/serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Certificate serial: 0C7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft Manifest number: 0C5E Signing time: Tue 22 Sep 2026 18:33:28 +0000 Manifest this update: Tue 22 Sep 2026 18:33:28 +0000 Manifest next update: Tue 29 Sep 2026 18:33:28 +0000 Files and hashes: 1: nssirN4JZ6BYN-WPxzHTV-N2N_g.crl (hash: WaPJWbXWWiOoR0IWWVq9uPbQy0ITkm3bacVTq8Lfndw=) 2: E4BB99E2336E11EA94623E18C4F9AE02.roa (hash: J0oU2FppnlReFBA754sQNYwJm5OEtnlNnJ9xN5pwhNU=) 3: E5675F48336E11EA94623E18C4F9AE02.roa (hash: rQw9zG+Y16msUrYZiSuHrHjmx364wl+z/+PI4vW3/Yo=) 4: 2B1D3BB2305811EA8D5B6479C4F9AE02.roa (hash: J7bgw3OjD+bEqGEXKo8Fs8Z0MR84T96zJE637Xnk50M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 18:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3196 (0xc7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6B27, serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Validity Not Before: Sep 22 18:33:28 2026 GMT Not After : Sep 29 18:33:28 2026 GMT Subject: CN=6ab2c9f8-d1bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7d:5c:f7:10:73:03:2d:20:77:62:e9:67:d9: 1b:da:c7:d5:05:fb:93:58:3d:10:8e:0e:e1:fc:f8: 84:41:23:af:35:90:09:3a:e2:3a:34:eb:bd:31:23: cc:6f:64:39:37:37:17:fc:9d:a3:f8:13:06:7a:46: a4:ad:ba:21:35:f3:2f:ad:8e:26:b7:18:bb:26:00: 5d:98:24:d8:e8:fa:a8:10:00:c5:d1:78:61:b3:5e: 85:aa:87:b0:94:f5:75:d5:dd:73:94:51:45:3a:e3: 75:7c:09:c3:d2:7a:22:36:45:86:43:69:38:07:95: 11:f8:a3:97:71:ef:30:0a:2d:75:fb:f1:08:9e:d7: 9b:60:c5:a9:4a:b7:61:05:08:6e:7e:d3:fe:a1:46: a2:c3:da:d2:71:9e:49:0d:f9:dc:8d:f0:d9:39:3d: 80:c7:0a:95:44:02:18:ed:22:c3:d0:6a:a3:12:66: 93:32:be:25:6a:db:bf:a8:2b:f3:eb:e8:45:0e:94: ff:84:4b:1f:9d:81:e3:30:e3:d7:4d:65:83:2a:bb: 19:2e:56:44:f8:a9:93:c2:b1:a6:16:fe:c2:82:14: 60:ed:86:25:82:2f:79:5a:20:a0:78:b2:f4:08:1b: 32:67:c4:b8:de:d2:d1:85:63:2a:99:76:d0:44:d0: 69:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:66:CC:03:39:4C:FE:A8:E4:E4:20:E1:E9:AE:C0:92:8A:BB:6F:EE X509v3 Authority Key Identifier: keyid:9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:18:0d:ff:39:c2:ee:4d:3e:16:55:5e:e8:70:8a:4d:32:e4: c8:1e:17:af:92:09:fd:40:27:d2:c1:1f:e5:6d:7f:74:af:fa: 09:1a:67:6f:da:4d:dd:d6:69:5d:bf:f7:0c:6f:d5:82:b5:c7: 2d:8d:3e:f9:32:9b:5c:36:1c:8e:9a:0a:e6:5a:f7:4b:4a:c1: a7:d5:92:ae:ef:5f:b1:30:94:53:7d:dd:bd:ae:cb:0e:ee:34: e2:45:f5:c6:6c:8e:a5:af:35:03:b5:67:3d:48:24:d3:1a:b9: 21:d8:fd:40:54:ad:35:f8:76:1c:7c:1d:79:ee:2e:ae:72:50: f4:da:f4:5e:49:0f:4b:1e:1e:01:a1:b5:17:a3:7a:5f:34:d7: 65:d0:09:dd:a2:76:3a:7f:9a:e2:81:fd:83:e5:5f:84:30:04: 15:37:15:1f:a4:fa:3f:9a:d9:c4:e8:2c:bd:00:66:16:6c:2b: b3:19:d8:bd:4a:87:35:b7:97:bd:6e:6a:3d:56:88:36:c4:8d: 16:c3:b2:4c:3d:b1:bc:5c:16:3f:35:f9:f2:c4:e3:4d:d7:1f: 0a:1a:35:95:03:3f:98:d2:e0:9e:5c:33:d3:00:63:81:51:10: df:ca:77:3a:58:f2:1f:90:dd:cf:d6:de:15:4d:dd:3c:f1:83: 18:22:c9:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCMjcxMTAvBgNVBAUTKDlFQ0IyMkFDREUwOTY3QTA1ODM3RTU4RkM3MzFEMzU3 RTM3NjM3RjgwHhcNMjYwOTIyMTgzMzI4WhcNMjYwOTI5MTgzMzI4WjAYMRYwFAYD VQQDEw02YWIyYzlmOC1kMWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlH1c9xBzAy0gd2LpZ9kb2sfVBfuTWD0Qjg7h/PiEQSOvNZAJOuI6NOu9MSPM b2Q5NzcX/J2j+BMGekakrbohNfMvrY4mtxi7JgBdmCTY6PqoEADF0Xhhs16Fqoew lPV11d1zlFFFOuN1fAnD0noiNkWGQ2k4B5UR+KOXce8wCi11+/EIntebYMWpSrdh BQhuftP+oUaiw9rScZ5JDfncjfDZOT2AxwqVRAIY7SLD0GqjEmaTMr4latu/qCvz 6+hFDpT/hEsfnYHjMOPXTWWDKrsZLlZE+KmTwrGmFv7CghRg7YYlgi95WiCgeLL0 CBsyZ8S43tLRhWMqmXbQRNBpewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCVmzAM5 TP6o5OQg4emuwJKKu2/uMB8GA1UdIwQYMBaAFJ7LIqzeCWegWDflj8cx01fjdjf4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkIyNy84MkJGMkJGNDMw NTQxMUVBQUZDOTExNkVDNEY5QUUwMi9uc3Npck40Slo2QllOLVdQeHpIVFYtTjJO X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25zc2lyTjRKWjZCWU4tV1B4ekhUVi1OMk5fZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkIyNy84MkJGMkJGNDMwNTQxMUVBQUZDOTExNkVDNEY5QUUwMi9uc3Npck40Slo2 QllOLVdQeHpIVFYtTjJOX2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGRgN/znC7k0+FlVe6HCKTTLkyB4Xr5IJ/UAn0sEf5W1/dK/6CRpnb9pN3dZp Xb/3DG/VgrXHLY0++TKbXDYcjpoK5lr3S0rBp9WSru9fsTCUU33dva7LDu404kX1 xmyOpa81A7VnPUgk0xq5Idj9QFStNfh2HHwdee4urnJQ9Nr0XkkPSx4eAaG1F6N6 XzTXZdAJ3aJ2On+a4oH9g+VfhDAEFTcVH6T6P5rZxOgsvQBmFmwrsxnYvUqHNbeX vW5qPVaINsSNFsOyTD2xvFwWPzX58sTjTdcfCho1lQM/mNLgnlwz0wBjgVEQ38p3 OljyH5Ddz9beFU3dPPGDGCLJUg== -----END CERTIFICATE-----Generated at Wed Sep 23 19:58:12 2026 by rpki-client