$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft File: NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft (raw, json) Hash identifier: 1XjiSqysntapxx+aSK4AhRqkCTCrGBiCvsavlm6KX2w= Subject key identifier: 8C:38:B0:C8:48:5D:BD:70:27:9E:F8:F2:3F:57:45:0A:EB:07:E8:65 Authority key identifier: 35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85 Certificate issuer: /CN=A91E2EFF/serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft Manifest number: F2 Signing time: Fri 25 Sep 2026 06:25:04 +0000 Manifest this update: Fri 25 Sep 2026 06:25:04 +0000 Manifest next update: Fri 02 Oct 2026 06:25:04 +0000 Files and hashes: 1: NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl (hash: Ilp5zTvHUifebtk1at5kmRp5jAXXb3pv9KtkmRvftS0=) 2: 370DA046484A11F0B96B9D10C4F9AE02.roa (hash: jnh0hd9BJeU6DriRSa5jcG1pBk63GyyVkCh16HHy3wA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 06:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EFF, serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385 Validity Not Before: Sep 25 06:25:04 2026 GMT Not After : Oct 2 06:25:04 2026 GMT Subject: CN=6ab613c0-556c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ab:38:b1:7b:4c:5a:1c:d3:b4:22:59:9f:0c: c8:f8:12:19:14:d1:50:55:20:38:66:3b:7d:16:a5: b9:04:f5:a6:bf:7e:59:17:cb:6e:fc:17:6e:0e:8c: e3:dd:34:f0:41:c5:9e:2d:c1:4d:17:ac:6f:a7:c6: 46:85:ad:ce:de:9f:2e:7f:45:de:e0:72:a5:d5:b8: 1b:3f:f3:d0:00:76:8c:6c:a7:49:16:78:93:b4:7d: 0b:2f:16:a7:4d:4f:5e:f8:c6:43:ce:77:a8:a2:aa: b7:f9:52:6e:45:93:ae:63:c7:72:b9:82:03:70:04: 3e:42:b4:2a:8a:88:89:5a:7a:67:eb:26:77:2f:b9: ae:b3:f8:19:bc:61:f8:8c:fc:8c:d9:f9:7d:6b:b0: b6:8e:fd:7d:0e:14:67:c6:15:9c:cb:d0:29:09:6d: 08:ca:8c:35:e6:eb:8d:b4:91:ff:8c:c0:52:6d:ee: a7:38:b1:3e:a3:b0:ce:6e:cc:15:39:ab:08:49:76: 4d:90:4a:a7:a5:89:d4:01:0c:c9:5f:e7:53:de:57: 02:27:4e:f0:c0:9e:eb:3a:54:dc:a2:40:09:7d:f3: 95:d0:76:2c:37:bb:ca:50:8a:07:5f:0c:c2:02:62: 6f:a3:6d:23:a9:5b:3a:eb:fd:ab:ac:00:39:2d:c6: cd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:38:B0:C8:48:5D:BD:70:27:9E:F8:F2:3F:57:45:0A:EB:07:E8:65 X509v3 Authority Key Identifier: keyid:35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:8b:bd:e1:06:f1:c5:44:75:a8:88:b6:02:55:f5:ee:cd:4c: f1:1d:e8:14:ed:5e:53:ef:18:8e:f5:01:99:1b:df:79:ed:a9: 27:2c:41:67:f3:7f:c6:b6:ff:15:4f:e0:0e:15:86:77:47:e4: 9c:b1:04:56:43:e7:71:2f:18:6f:76:31:1e:93:29:fd:fd:f9: 39:77:cc:19:e3:fa:7d:53:df:e3:a4:b9:65:89:98:4e:df:28: 14:9e:5a:34:fd:2e:e1:7a:c8:bb:9e:ca:3a:89:a4:e1:63:4c: 08:86:8c:5b:83:a0:3a:51:91:df:9b:c9:4b:c1:b9:6f:f2:67: 28:c7:57:a4:24:f8:6d:cc:a0:e0:cf:3e:3d:dd:5d:43:59:9b: 3c:79:a2:d4:2e:a5:d8:2d:d8:e6:60:58:39:1b:9b:a9:07:30: ce:96:38:e9:6a:33:d5:5b:3b:8e:ba:8a:d8:4a:24:4c:69:04: df:32:eb:c3:4a:d7:59:c3:d2:fb:d5:79:0b:4d:df:68:18:4e: 63:f1:22:4d:c8:7e:63:93:25:00:68:09:8a:7a:4b:ac:23:9f: 73:4e:b9:2b:e2:64:24:cb:00:df:66:f6:14:cf:1d:11:d3:b5: ff:71:15:57:b6:00:2e:8c:4e:45:51:3b:4a:d8:27:19:6e:67: 60:d4:5f:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFRkYxMTAvBgNVBAUTKDM1NDMzQzlFQzQwODA5OUY3MDE4QkM1MTQ0MUQyMkM0 QzExRkMzODUwHhcNMjYwOTI1MDYyNTA0WhcNMjYxMDAyMDYyNTA0WjAYMRYwFAYD VQQDEw02YWI2MTNjMC01NTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKs4sXtMWhzTtCJZnwzI+BIZFNFQVSA4Zjt9FqW5BPWmv35ZF8tu/BduDozj 3TTwQcWeLcFNF6xvp8ZGha3O3p8uf0Xe4HKl1bgbP/PQAHaMbKdJFniTtH0LLxan TU9e+MZDzneooqq3+VJuRZOuY8dyuYIDcAQ+QrQqioiJWnpn6yZ3L7mus/gZvGH4 jPyM2fl9a7C2jv19DhRnxhWcy9ApCW0Iyow15uuNtJH/jMBSbe6nOLE+o7DObswV OasISXZNkEqnpYnUAQzJX+dT3lcCJ07wwJ7rOlTcokAJffOV0HYsN7vKUIoHXwzC AmJvo20jqVs66/2rrAA5LcbNbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIw4sMhI Xb1wJ5748j9XRQrrB+hlMB8GA1UdIwQYMBaAFDVDPJ7ECAmfcBi8UUQdIsTBH8OF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkVGRi9BQjk3NUJDRTQ4 NDkxMUYwQkYwNzAzNzBDNEY5QUUwMi9OVU04bnNRSUNaOXdHTHhSUkIwaXhNRWZ3 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05VTThuc1FJQ1o5d0dMeFJSQjBpeE1FZnc0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkVGRi9BQjk3NUJDRTQ4NDkxMUYwQkYwNzAzNzBDNEY5QUUwMi9OVU04bnNRSUNa OXdHTHhSUkIwaXhNRWZ3NFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE4u94QbxxUR1qIi2AlX17s1M8R3oFO1eU+8YjvUBmRvfee2pJyxBZ/N/xrb/ FU/gDhWGd0fknLEEVkPncS8Yb3YxHpMp/f35OXfMGeP6fVPf46S5ZYmYTt8oFJ5a NP0u4XrIu57KOomk4WNMCIaMW4OgOlGR35vJS8G5b/JnKMdXpCT4bcyg4M8+Pd1d Q1mbPHmi1C6l2C3Y5mBYORubqQcwzpY46Woz1Vs7jrqK2EokTGkE3zLrw0rXWcPS +9V5C03faBhOY/EiTch+Y5MlAGgJinpLrCOfc065K+JkJMsA32b2FM8dEdO1/3EV V7YALoxORVE7StgnGW5nYNRfWQ== -----END CERTIFICATE-----Generated at Fri Sep 25 23:12:46 2026 by rpki-client