$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft File: NM2mWwLxdr_CSHhNqprIp74WU9s.mft (raw, json) Hash identifier: tw1S/7BuwmTliO3/p3rRhxQ3KZZ5e3bdt2/zX7cH8EA= Subject key identifier: E4:4A:9D:AB:74:D5:24:40:A5:7A:32:47:57:C7:EC:26:D5:2C:0D:B2 Authority key identifier: 34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB Certificate issuer: /CN=A91E3DDB/serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft Manifest number: F9 Signing time: Wed 23 Sep 2026 06:08:31 +0000 Manifest this update: Wed 23 Sep 2026 06:08:31 +0000 Manifest next update: Wed 30 Sep 2026 06:08:31 +0000 Files and hashes: 1: NM2mWwLxdr_CSHhNqprIp74WU9s.crl (hash: gsJRShk9vHlVrlOyRMKjds3+3sILyL+jQ2w99lsbXoE=) 2: nx7eVc-UExQZGlYBARTk5qPuTDk.asa (hash: Bq94qwwPBfBx/AnREmDcpg5o5aSHJ6zt+H4qiLs5gGg=) 3: B24F568A4C7A11F09CF1A77BC4F9AE02.roa (hash: n7sRPa6I69j+h39GN76+PY3SuYecQbYjjiiW9wMz2wU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.crl rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3DDB, serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB Validity Not Before: Sep 23 06:08:31 2026 GMT Not After : Sep 30 06:08:31 2026 GMT Subject: CN=6ab36cdf-2dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c5:b4:a2:91:3a:ac:08:c8:90:3a:7b:57:1f: 6d:8c:d7:d5:18:6e:13:ae:1f:68:da:53:e2:d2:b7: 38:8f:d9:f9:fb:77:5a:95:a1:31:4e:31:d9:63:05: ee:d8:c0:55:8f:1d:39:61:0f:36:bc:0b:4a:4c:2f: 77:5b:e2:39:7f:4c:29:5d:e2:38:e9:b7:d7:da:f4: 21:f6:1a:87:88:a3:23:1b:d1:bb:d7:1e:7e:bf:2d: 25:59:b9:39:e6:6e:87:d1:c6:2d:15:66:41:92:51: e5:87:b3:c6:5a:86:69:62:d4:7a:ac:dd:3c:88:b5: 7d:bd:5d:ab:d4:c9:97:4f:f8:a9:6b:d8:ce:19:a6: 7e:45:68:8d:79:28:38:98:dc:ef:f0:c4:d7:9c:46: 04:b6:e1:a2:64:56:c7:a8:e0:52:8d:a8:76:bc:39: a5:be:ce:45:50:c9:11:8a:7f:12:f5:9b:40:ad:58: bd:77:6e:0b:57:c1:82:cb:7e:7f:14:c6:05:91:77: 0e:1f:ff:15:40:ce:31:97:a4:3a:f2:fa:e7:03:e0: 8e:82:9b:99:3d:5d:0a:02:9f:02:05:c2:c7:30:5c: 67:38:b4:a6:11:54:1f:5e:3f:92:ca:98:f6:26:18: 5d:31:4d:d7:49:2c:98:31:07:9b:69:54:ab:72:66: 15:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4A:9D:AB:74:D5:24:40:A5:7A:32:47:57:C7:EC:26:D5:2C:0D:B2 X509v3 Authority Key Identifier: keyid:34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:ad:9f:18:ba:97:6c:c4:d7:1a:10:82:e7:3d:7c:60:c1:f1: 65:af:5d:f2:d2:49:e3:bd:2b:b9:d6:5d:8b:62:56:b0:ad:6a: bd:22:e3:cb:25:2f:df:f8:7e:96:b3:21:94:b0:33:37:38:fd: 8e:f0:e3:c4:6e:5d:24:cf:c1:3f:05:0f:84:3e:92:0f:5b:2d: bb:ed:20:38:ef:0f:f7:0a:97:0e:9e:2c:ae:0a:22:2c:6b:18: 1a:01:6f:88:e9:3f:d3:ba:99:1e:4f:69:f4:3e:c6:52:cb:21: f6:e6:0c:de:ac:6e:5b:a0:f9:e8:d9:ab:75:69:9c:09:37:d6: 32:16:53:45:29:dd:31:e9:cb:6f:42:94:a7:7d:a0:47:cf:60: 20:11:ba:28:cf:d1:90:a2:93:ea:57:20:85:f3:4f:ab:c3:4b: 1f:27:16:b9:7f:d8:c8:8d:69:a4:0f:b3:23:f1:99:88:01:56: d7:6d:1a:df:1e:4e:fc:1e:70:dd:62:a8:c1:a1:48:4e:9d:f4: d5:9e:65:42:ff:c1:f7:d3:2a:56:e3:d4:5e:ac:f9:dd:c0:fa: d0:6d:06:f2:96:50:93:db:f2:b1:1d:71:ed:ad:28:86:9a:f0: 40:6d:3a:f9:08:4f:d1:34:47:3a:b9:57:a9:2d:d6:24:3c:83: 5f:8d:65:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNEREIxMTAvBgNVBAUTKDM0Q0RBNjVCMDJGMTc2QkZDMjQ4Nzg0REFBOUFDOEE3 QkUxNjUzREIwHhcNMjYwOTIzMDYwODMxWhcNMjYwOTMwMDYwODMxWjAYMRYwFAYD VQQDEw02YWIzNmNkZi0yZGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcW0opE6rAjIkDp7Vx9tjNfVGG4Trh9o2lPi0rc4j9n5+3dalaExTjHZYwXu 2MBVjx05YQ82vAtKTC93W+I5f0wpXeI46bfX2vQh9hqHiKMjG9G71x5+vy0lWbk5 5m6H0cYtFWZBklHlh7PGWoZpYtR6rN08iLV9vV2r1MmXT/ipa9jOGaZ+RWiNeSg4 mNzv8MTXnEYEtuGiZFbHqOBSjah2vDmlvs5FUMkRin8S9ZtArVi9d24LV8GCy35/ FMYFkXcOH/8VQM4xl6Q68vrnA+COgpuZPV0KAp8CBcLHMFxnOLSmEVQfXj+Sypj2 JhhdMU3XSSyYMQebaVSrcmYVnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFORKnat0 1SRApXoyR1fH7CbVLA2yMB8GA1UdIwQYMBaAFDTNplsC8Xa/wkh4TaqayKe+FlPb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0REQi8wRTNCREFFQzQ3 MjQxMUYwOTVGOTFCMjNDNEY5QUUwMi9OTTJtV3dMeGRyX0NTSGhOcXBySXA3NFdV OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05NMm1Xd0x4ZHJfQ1NIaE5xcHJJcDc0V1U5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0REQi8wRTNCREFFQzQ3MjQxMUYwOTVGOTFCMjNDNEY5QUUwMi9OTTJtV3dMeGRy X0NTSGhOcXBySXA3NFdVOXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV62fGLqXbMTXGhCC5z18YMHxZa9d8tJJ470rudZdi2JWsK1qvSLjyyUv3/h+ lrMhlLAzNzj9jvDjxG5dJM/BPwUPhD6SD1stu+0gOO8P9wqXDp4srgoiLGsYGgFv iOk/07qZHk9p9D7GUssh9uYM3qxuW6D56NmrdWmcCTfWMhZTRSndMenLb0KUp32g R89gIBG6KM/RkKKT6lcghfNPq8NLHycWuX/YyI1ppA+zI/GZiAFW120a3x5O/B5w 3WKowaFITp301Z5lQv/B99MqVuPUXqz53cD60G0G8pZQk9vysR1x7a0ohprwQG06 +QhP0TRHOrlXqS3WJDyDX41lRQ== -----END CERTIFICATE-----Generated at Thu Sep 24 17:35:09 2026 by rpki-client