$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft File: NcbYSDFsIdmTz25MBtYB3AXvxOE.mft (raw, json) Hash identifier: i5YdTzJ608doSZp7EmawdRZCX78Wv4NawRkZa/EaCBU= Subject key identifier: 29:F2:C6:56:25:40:19:B2:63:A6:33:93:C0:94:7A:27:7C:BA:5C:17 Authority key identifier: 35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1 Certificate issuer: /CN=A91F473F/serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1 Certificate serial: 025E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft Manifest number: 0257 Signing time: Wed 23 Sep 2026 02:09:34 +0000 Manifest this update: Wed 23 Sep 2026 02:09:33 +0000 Manifest next update: Wed 30 Sep 2026 02:09:33 +0000 Files and hashes: 1: NcbYSDFsIdmTz25MBtYB3AXvxOE.crl (hash: eTMCXNJt+4GA/Fraysy9SGUpYqTLn1OhHmqpZ6M02+w=) 2: C416FBB02D6F11EEAC755B42C4F9AE02.roa (hash: 4Pkta0WyXHD4LOC4U6l2zLHJ1Su7VpptVTs81fGPna4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 606 (0x25e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F473F, serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1 Validity Not Before: Sep 23 02:09:33 2026 GMT Not After : Sep 30 02:09:33 2026 GMT Subject: CN=6ab334de-3fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cf:3f:49:ff:0d:d9:25:e6:2c:b6:91:7c:7b: ad:28:a3:ea:55:58:39:9c:65:ff:11:b7:49:16:2d: 45:b9:8e:3d:f4:aa:9d:22:8b:76:48:c3:17:af:d2: 8d:12:4e:9b:05:2b:4d:ab:e7:f1:e5:c7:96:fd:be: d1:36:4e:07:e8:f2:e2:5b:8f:d8:31:2e:c1:c7:57: 9b:7f:2d:72:b1:ff:69:69:a1:72:0e:d4:f5:84:c5: cd:c4:22:fd:f4:c0:f4:dc:7b:77:2a:e2:0f:8e:80: 23:6a:97:da:ec:41:be:f4:e0:f9:93:00:d4:af:fd: c4:4e:45:ef:4c:a8:a9:32:d5:35:5b:46:9a:d3:e0: 22:a8:ba:72:b5:5b:9f:91:5c:66:b0:dd:93:49:40: f5:79:e0:1e:f1:e1:cd:50:07:a1:49:4b:d4:fa:33: b7:56:91:66:90:09:10:76:64:d4:74:4c:a9:f7:9c: 02:06:cb:e7:61:d7:86:67:9d:5d:4a:e6:20:bc:ef: a0:bd:0e:61:c2:1d:41:e4:a0:68:9b:88:b1:ce:fe: 11:a0:1c:e1:4b:64:05:45:75:ca:91:e1:99:e4:19: aa:43:f4:34:55:b9:01:63:91:ae:a6:49:4c:b1:ef: a7:79:ff:89:45:37:55:12:d7:e1:fe:5f:7d:f7:34: c1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F2:C6:56:25:40:19:B2:63:A6:33:93:C0:94:7A:27:7C:BA:5C:17 X509v3 Authority Key Identifier: keyid:35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:3e:64:1f:75:68:9a:d8:92:bc:83:3f:f6:fb:3c:4f:76:ea: 79:9f:30:3f:62:5e:b1:2f:c7:a1:fe:d2:a1:2c:33:6f:8e:c4: 70:76:ba:c2:d0:cf:cf:2b:b4:b9:de:2e:1d:fb:0e:0e:57:23: 98:47:ef:23:5a:d3:6d:c4:6b:d3:3e:5e:ef:cd:59:fc:e5:33: a1:c4:c8:89:6b:ba:ad:e1:e2:ca:4a:3b:46:7d:05:1c:d8:e6: 8a:ce:ad:ad:3e:e2:b7:98:a9:7e:38:0f:3f:7c:e8:95:18:46: c0:0f:32:ec:c9:48:d1:e4:9b:16:fd:8e:99:bd:89:39:96:97: 4f:c5:3a:b8:f2:f7:fc:ad:c4:24:ce:71:c4:39:92:94:6f:2b: d7:bd:f6:21:81:7a:6d:b6:af:d3:2f:13:35:14:ae:74:59:b1: 34:b7:ae:6f:30:06:ea:8b:09:9f:91:d6:1a:bb:87:bb:bb:96: 18:74:0a:64:23:41:95:ee:4c:26:e7:44:c8:71:14:38:14:ca: fc:4b:fa:ab:3e:08:09:08:8a:1b:ec:e1:c3:bb:77:aa:7f:50: 75:8d:61:0d:9c:5a:8a:9c:76:53:95:c9:fd:0f:34:36:51:35: 69:b1:e9:f1:29:38:79:f8:1b:bd:37:1b:f4:95:a8:9d:f6:f8: a6:17:c1:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ3M0YxMTAvBgNVBAUTKDM1QzZEODQ4MzE2QzIxRDk5M0NGNkU0QzA2RDYwMURD MDVFRkM0RTEwHhcNMjYwOTIzMDIwOTMzWhcNMjYwOTMwMDIwOTMzWjAYMRYwFAYD VQQDEw02YWIzMzRkZS0zZmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtc8/Sf8N2SXmLLaRfHutKKPqVVg5nGX/EbdJFi1FuY499KqdIot2SMMXr9KN Ek6bBStNq+fx5ceW/b7RNk4H6PLiW4/YMS7Bx1ebfy1ysf9paaFyDtT1hMXNxCL9 9MD03Ht3KuIPjoAjapfa7EG+9OD5kwDUr/3ETkXvTKipMtU1W0aa0+AiqLpytVuf kVxmsN2TSUD1eeAe8eHNUAehSUvU+jO3VpFmkAkQdmTUdEyp95wCBsvnYdeGZ51d SuYgvO+gvQ5hwh1B5KBom4ixzv4RoBzhS2QFRXXKkeGZ5BmqQ/Q0VbkBY5GupklM se+nef+JRTdVEtfh/l999zTBUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCnyxlYl QBmyY6Yzk8CUeid8ulwXMB8GA1UdIwQYMBaAFDXG2EgxbCHZk89uTAbWAdwF78Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDczRi8xRDE3RURCNDJC OTAxMUVFOEI1REU0NzBDNEY5QUUwMi9OY2JZU0RGc0lkbVR6MjVNQnRZQjNBWHZ4 T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05jYllTREZzSWRtVHoyNU1CdFlCM0FYdnhPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDczRi8xRDE3RURCNDJCOTAxMUVFOEI1REU0NzBDNEY5QUUwMi9OY2JZU0RGc0lk bVR6MjVNQnRZQjNBWHZ4T0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaD5kH3VomtiSvIM/9vs8T3bqeZ8wP2JesS/Hof7SoSwzb47EcHa6wtDPzyu0 ud4uHfsODlcjmEfvI1rTbcRr0z5e781Z/OUzocTIiWu6reHiyko7Rn0FHNjmis6t rT7it5ipfjgPP3zolRhGwA8y7MlI0eSbFv2Omb2JOZaXT8U6uPL3/K3EJM5xxDmS lG8r1732IYF6bbav0y8TNRSudFmxNLeubzAG6osJn5HWGruHu7uWGHQKZCNBle5M JudEyHEUOBTK/Ev6qz4ICQiKG+zhw7t3qn9QdY1hDZxaipx2U5XJ/Q80NlE1abHp 8Sk4efgbvTcb9JWonfb4phfBSQ== -----END CERTIFICATE-----Generated at Wed Sep 23 23:44:39 2026 by rpki-client