$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft File: NSX5xUTpmw5jRgCZyS39lNSb9so.mft (raw, json) Hash identifier: wRvIaXQVC7VMnPDizYxzG8PYqqX8eENPfhk0kCsWhRA= Subject key identifier: 10:35:6A:44:8A:00:4C:D6:8F:94:6B:DA:2C:0D:EB:87:C4:3E:23:88 Authority key identifier: 35:25:F9:C5:44:E9:9B:0E:63:46:00:99:C9:2D:FD:94:D4:9B:F6:CA Certificate issuer: /CN=A91D9D7A/serialNumber=3525F9C544E99B0E63460099C92DFD94D49BF6CA Certificate serial: 0337 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft Manifest number: 0330 Signing time: Sun 27 Sep 2026 01:04:58 +0000 Manifest this update: Sun 27 Sep 2026 01:04:58 +0000 Manifest next update: Sun 04 Oct 2026 01:04:58 +0000 Files and hashes: 1: NSX5xUTpmw5jRgCZyS39lNSb9so.crl (hash: YlzC3KGYjNXCFNWV0ILQJ2BmUILB8QcKkhuWDG41Ltw=) 2: 81B7763C280211ED93948C10C4F9AE02.roa (hash: Fpwo9jD8mgQGYUfa+tB5R9PIcIcluQYUoxN2TJBXj7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.crl rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 01:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 823 (0x337) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9D7A, serialNumber=3525F9C544E99B0E63460099C92DFD94D49BF6CA Validity Not Before: Sep 27 01:04:58 2026 GMT Not After : Oct 4 01:04:58 2026 GMT Subject: CN=6ab86bba-cd32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7b:15:1b:03:c4:77:64:a3:7b:a8:33:c4:1f: 09:48:14:eb:a1:91:ce:37:34:10:17:fa:5a:5e:d8: 4b:2b:2c:64:76:2f:7f:f4:5b:67:bc:ce:9c:fe:e7: 0d:f8:69:bd:56:05:56:03:b4:6c:d2:57:6b:47:c4: 15:f8:6d:e2:b7:23:c3:51:bc:cd:16:8f:e6:a0:d5: ac:48:86:b0:c8:44:80:0e:da:bd:df:fb:77:5c:9a: db:16:7a:81:c5:43:32:9c:78:9e:9c:7d:19:2a:b4: c8:25:9b:e2:4b:62:c3:8c:77:4d:45:1d:2b:3b:14: a2:e0:a0:14:4c:a7:a4:86:ef:10:f5:38:b6:76:b7: 00:56:81:df:5b:08:c0:ac:38:dd:a8:7d:07:aa:30: 76:9f:80:f8:d2:0f:29:ff:9e:d1:ff:b1:2d:9a:0e: 50:ff:86:47:eb:be:44:f7:bb:62:cf:14:32:ca:5d: 31:90:33:4d:2f:8f:0f:47:48:e8:a1:5e:cc:df:1b: 50:19:28:69:a3:fa:2d:75:af:ca:e8:8e:c4:96:75: 6f:15:96:03:33:ed:59:9f:5b:42:bc:93:99:42:82: f0:21:6b:36:c2:24:6f:b3:64:0e:40:e6:68:68:12: a1:5c:f2:82:ba:24:f1:f4:a7:00:11:ce:5f:be:0f: de:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:35:6A:44:8A:00:4C:D6:8F:94:6B:DA:2C:0D:EB:87:C4:3E:23:88 X509v3 Authority Key Identifier: keyid:35:25:F9:C5:44:E9:9B:0E:63:46:00:99:C9:2D:FD:94:D4:9B:F6:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:20:6b:8b:f9:eb:8e:43:58:c8:95:7f:66:e7:26:fd:1b:1c: 3a:ca:11:3f:09:4e:80:26:60:b6:b3:8a:94:b6:89:44:85:91: b2:85:fc:17:61:8a:a3:66:e3:17:2c:71:79:ae:86:eb:e3:ee: 25:29:da:73:f5:d3:67:f1:dc:8b:d4:cd:70:ae:d7:ee:8f:6c: 8a:77:f0:67:48:a0:2c:92:f2:6f:e5:b9:1f:c8:76:28:4e:7e: fc:d7:56:7e:a8:68:03:a9:bc:86:c0:c4:05:13:b7:1f:2b:f9: 88:a6:cb:6a:b5:b4:fe:7b:47:99:08:a4:ee:16:f7:3b:cc:1d: 52:59:a6:4a:71:d7:ec:86:6a:9a:1c:f2:c7:21:b5:29:8d:81: ae:6b:0f:8d:d5:06:35:6f:9d:c4:f6:13:ef:3c:7f:54:ef:72: 96:d3:86:6e:bc:e4:80:21:b3:7a:42:8b:86:39:3a:3b:4f:d0: d0:ff:72:b8:c6:5e:1e:e1:65:fd:a2:c7:61:cd:ce:fe:ab:3c: 2c:30:d8:2f:fc:83:2d:de:45:75:48:ea:88:16:8f:7a:67:b2: 99:4d:00:96:da:b8:29:0c:50:45:f7:2c:8c:3e:e8:5d:de:16: 58:b4:bd:b8:87:4a:23:42:42:a2:c3:17:d4:ba:31:e4:67:aa: 77:52:d9:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlEN0ExMTAvBgNVBAUTKDM1MjVGOUM1NDRFOTlCMEU2MzQ2MDA5OUM5MkRGRDk0 RDQ5QkY2Q0EwHhcNMjYwOTI3MDEwNDU4WhcNMjYxMDA0MDEwNDU4WjAYMRYwFAYD VQQDEw02YWI4NmJiYS1jZDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXsVGwPEd2Sje6gzxB8JSBTroZHONzQQF/paXthLKyxkdi9/9FtnvM6c/ucN +Gm9VgVWA7Rs0ldrR8QV+G3ityPDUbzNFo/moNWsSIawyESADtq93/t3XJrbFnqB xUMynHienH0ZKrTIJZviS2LDjHdNRR0rOxSi4KAUTKekhu8Q9Ti2drcAVoHfWwjA rDjdqH0HqjB2n4D40g8p/57R/7Etmg5Q/4ZH675E97tizxQyyl0xkDNNL48PR0jo oV7M3xtQGShpo/otda/K6I7ElnVvFZYDM+1Zn1tCvJOZQoLwIWs2wiRvs2QOQOZo aBKhXPKCuiTx9KcAEc5fvg/eGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBA1akSK AEzWj5Rr2iwN64fEPiOIMB8GA1UdIwQYMBaAFDUl+cVE6ZsOY0YAmckt/ZTUm/bK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUQ3QS84OUE5QUEyNDI3 ODMxMUVEOUJBMDI0NTBDNEY5QUUwMi9OU1g1eFVUcG13NWpSZ0NaeVMzOWxOU2I5 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05TWDV4VVRwbXc1alJnQ1p5UzM5bE5TYjlzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUQ3QS84OUE5QUEyNDI3ODMxMUVEOUJBMDI0NTBDNEY5QUUwMi9OU1g1eFVUcG13 NWpSZ0NaeVMzOWxOU2I5c28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKSBri/nrjkNYyJV/Zucm/RscOsoRPwlOgCZgtrOKlLaJRIWRsoX8F2GKo2bj Fyxxea6G6+PuJSnac/XTZ/Hci9TNcK7X7o9sinfwZ0igLJLyb+W5H8h2KE5+/NdW fqhoA6m8hsDEBRO3Hyv5iKbLarW0/ntHmQik7hb3O8wdUlmmSnHX7IZqmhzyxyG1 KY2BrmsPjdUGNW+dxPYT7zx/VO9yltOGbrzkgCGzekKLhjk6O0/Q0P9yuMZeHuFl /aLHYc3O/qs8LDDYL/yDLd5FdUjqiBaPemeymU0Altq4KQxQRfcsjD7oXd4WWLS9 uIdKI0JCosMX1Lox5Geqd1LZew== -----END CERTIFICATE-----Generated at Sun Sep 27 08:38:32 2026 by rpki-client