$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft File: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft (raw, json) Hash identifier: /2EuJCvCSUq25yx2pjczLtyak/M3EfKDL11ENfOUKfk= Subject key identifier: 72:5A:69:11:17:5E:D5:B3:64:6B:FE:7C:BD:64:B6:50:C2:93:37:72 Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 Certificate issuer: /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft Manifest number: 01D4 Signing time: Wed 23 Sep 2026 03:47:10 +0000 Manifest this update: Wed 23 Sep 2026 03:47:09 +0000 Manifest next update: Wed 30 Sep 2026 03:47:09 +0000 Files and hashes: 1: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl (hash: 1TN568b51++EI4YCKDAROvJBYRK9oTJKhzfsfIeMtlA=) 2: FF233C70E62111EFACA87766C4F9AE02.roa (hash: l81QgUkAG3jb2K1eCkfJ4vvLxu4iwZrMMfKmrpOvZAc=) 3: 77E54B78C45111EF9D399128C4F9AE02.roa (hash: JwFEBQDBS2XvD+XrlUfnJ9Rr/0S0seAaVJadWlIPqzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAE0, serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Validity Not Before: Sep 23 03:47:09 2026 GMT Not After : Sep 30 03:47:09 2026 GMT Subject: CN=6ab34bbd-46a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3c:2e:94:00:7e:eb:f3:72:d5:d4:cf:f1:f0: 36:33:5f:f5:92:d4:e5:c5:d3:74:b7:50:c0:86:bf: 89:ab:b9:5c:1f:0d:13:be:fa:d3:3e:36:fd:ff:23: bb:4d:f3:f2:29:36:7e:74:c9:15:61:c5:0f:3e:5e: 55:71:3d:62:f0:5d:7a:b1:28:f8:77:ae:16:f8:fd: a4:d8:35:85:25:f2:cd:bf:4d:d1:bf:0e:d5:ac:52: 32:04:f4:f8:a9:51:82:cd:ad:08:ec:a0:72:21:97: 80:bc:70:b6:08:de:6f:c9:27:d7:f2:6e:da:a1:de: a8:18:c8:53:59:43:88:40:4e:71:2e:00:ce:da:37: 82:39:fa:96:67:e4:ab:b1:79:3a:e8:d7:b8:25:08: d5:a0:f1:ca:f9:c7:1a:bd:8b:69:e6:64:24:ed:6c: 87:ab:c1:b3:a5:15:48:5c:d5:9d:c7:bb:7b:7e:91: 0c:ca:c2:0d:98:3c:11:d4:a7:ce:98:7b:08:9f:b0: a7:5e:c0:9d:c9:19:21:ae:1b:75:38:be:44:7a:16: 7b:af:b2:26:53:d8:1a:45:e7:99:31:17:ee:7d:0f: 36:2d:70:f9:52:e5:1d:05:cf:e1:47:e7:83:a5:a6: ef:00:76:d9:82:91:d2:44:5e:55:7c:b9:50:5b:88: 08:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5A:69:11:17:5E:D5:B3:64:6B:FE:7C:BD:64:B6:50:C2:93:37:72 X509v3 Authority Key Identifier: keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:74:c4:c1:f8:27:c8:b4:14:55:f9:1c:ad:54:9a:4e:a5:fa: a4:47:0e:fc:23:53:99:36:32:62:66:0e:66:6d:0d:60:08:a7: c8:1c:34:8b:24:c1:8b:0c:cc:24:3d:f5:7c:e2:c8:a0:94:4e: 6c:9f:78:1a:41:ee:c6:c4:43:c6:65:f8:87:10:44:83:f4:dc: 56:15:26:2c:61:3a:76:9c:1d:5a:48:30:36:5e:78:e2:a4:25: 9c:17:3c:1b:30:a3:a4:a1:b8:ad:e8:79:ad:4e:e7:33:05:77: b8:1e:b7:14:e4:bc:1e:e1:93:bb:49:c2:fe:31:90:3a:88:aa: 28:73:f8:e7:40:f1:d1:10:1b:9b:d5:d3:d7:f6:cb:2d:1e:4c: d2:cc:e7:a9:7e:a6:6b:80:a2:46:31:07:87:53:3b:43:ec:bb: b8:3a:bf:84:e2:bb:b1:d9:6a:50:a4:99:6a:a7:83:3e:ef:b7: 27:35:d4:86:26:9f:14:78:3d:41:be:ac:96:3b:e2:66:e0:36: f4:5a:ac:b8:a5:f7:46:96:91:c5:72:4d:a3:8d:e3:92:59:6e: 84:e7:50:80:a1:26:00:d9:b9:66:1b:36:bb:e2:77:3d:b9:a3: e1:24:93:3b:6a:2c:dc:e1:71:44:c0:a8:0d:18:e6:f8:b1:ff: cb:95:56:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBRTAxMTAvBgNVBAUTKDlERjRGRURGRjkyQTlFN0Y2RTAyQkZDMDU0QUQzMzk4 NTNEOUREMzIwHhcNMjYwOTIzMDM0NzA5WhcNMjYwOTMwMDM0NzA5WjAYMRYwFAYD VQQDEw02YWIzNGJiZC00NmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDwulAB+6/Ny1dTP8fA2M1/1ktTlxdN0t1DAhr+Jq7lcHw0TvvrTPjb9/yO7 TfPyKTZ+dMkVYcUPPl5VcT1i8F16sSj4d64W+P2k2DWFJfLNv03Rvw7VrFIyBPT4 qVGCza0I7KByIZeAvHC2CN5vySfX8m7aod6oGMhTWUOIQE5xLgDO2jeCOfqWZ+Sr sXk66Ne4JQjVoPHK+ccavYtp5mQk7WyHq8GzpRVIXNWdx7t7fpEMysINmDwR1KfO mHsIn7CnXsCdyRkhrht1OL5EehZ7r7ImU9gaReeZMRfufQ82LXD5UuUdBc/hR+eD pabvAHbZgpHSRF5VfLlQW4gIlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJaaREX XtWzZGv+fL1ktlDCkzdyMB8GA1UdIwQYMBaAFJ30/t/5Kp5/bgK/wFStM5hT2d0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFFMC9BRUY2Mzc2MDE5 NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5uOXVBcl9BVkswem1GUFoz VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25mVC0zX2txbm45dUFyX0FWSzB6bUZQWjNUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFFMC9BRUY2Mzc2MDE5NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5u OXVBcl9BVkswem1GUFozVEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOHTEwfgnyLQUVfkcrVSaTqX6pEcO/CNTmTYyYmYOZm0NYAinyBw0iyTBiwzM JD31fOLIoJRObJ94GkHuxsRDxmX4hxBEg/TcVhUmLGE6dpwdWkgwNl544qQlnBc8 GzCjpKG4reh5rU7nMwV3uB63FOS8HuGTu0nC/jGQOoiqKHP450Dx0RAbm9XT1/bL LR5M0sznqX6ma4CiRjEHh1M7Q+y7uDq/hOK7sdlqUKSZaqeDPu+3JzXUhiafFHg9 Qb6sljviZuA29FqsuKX3RpaRxXJNo43jklluhOdQgKEmANm5Zhs2u+J3Pbmj4SST O2os3OFxRMCoDRjm+LH/y5VWqw== -----END CERTIFICATE-----Generated at Wed Sep 23 22:22:49 2026 by rpki-client