$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft File: NebIf2uhtlE6EnD23BNt23ETZFc.mft (raw, json) Hash identifier: rm+t7Y1ra41gi1conKYhAHK8vja0nWK8E3wM8axuw6w= Subject key identifier: 0F:53:76:E6:36:03:90:04:81:47:DF:08:98:51:C5:8A:71:1B:15:47 Authority key identifier: 35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57 Certificate issuer: /CN=A91F9749/serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457 Certificate serial: 043E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft Manifest number: 0436 Signing time: Tue 22 Sep 2026 23:51:31 +0000 Manifest this update: Tue 22 Sep 2026 23:51:31 +0000 Manifest next update: Tue 29 Sep 2026 23:51:31 +0000 Files and hashes: 1: NebIf2uhtlE6EnD23BNt23ETZFc.crl (hash: 5rwXPxUM6RWWUvgvDyWPHCR15KLjG4FOlT+465jfktQ=) 2: 97B81DD6BF9F11ECAB5B1239C4F9AE02.roa (hash: OhAzKBerxXTp038deHSgx6f20NkMAUKF1iAsoKTjbdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1086 (0x43e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9749, serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457 Validity Not Before: Sep 22 23:51:31 2026 GMT Not After : Sep 29 23:51:31 2026 GMT Subject: CN=6ab31483-d3fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f7:36:73:60:54:9a:9a:8f:62:33:5d:3f:7d: 48:54:d6:70:66:a6:82:bb:be:b6:d2:9e:59:fa:34: 8d:fd:36:b5:8d:20:da:d4:ae:86:45:6b:3c:85:ad: a0:d3:e6:83:63:c2:02:94:84:d9:11:fd:c3:37:47: 69:4f:2b:fa:c8:f3:40:df:3b:d9:51:4c:52:96:7f: 0d:8a:39:df:ba:e8:48:72:bc:07:61:07:08:d5:b8: 7b:32:58:a6:1d:91:8c:f3:80:2d:8f:0d:6f:3a:28: dd:93:bc:21:3b:0b:61:cb:e7:43:75:fc:5c:99:e3: 09:1a:17:20:ae:5a:ba:13:b1:0d:bb:2a:ce:19:02: f4:ca:a2:2b:e7:f5:e3:6a:6c:37:2a:56:a7:b3:31: f0:b3:d4:de:29:f6:e2:b2:2b:52:e3:f3:aa:fb:41: 8f:87:0f:03:7a:c1:ab:8a:c9:59:4f:c0:57:e6:72: b7:4d:bb:c7:97:3d:97:8a:1b:a7:98:7e:b5:f9:46: 18:60:31:f8:a7:d8:43:d7:80:78:76:52:52:b5:6b: 88:33:e7:2b:dc:9f:d2:42:3a:83:f0:d5:6d:59:73: 94:76:d3:7e:10:2f:6c:a4:21:68:40:a8:11:aa:3f: 8f:d8:6f:ab:51:f3:3d:ca:c2:96:00:56:d8:16:1d: 7c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:53:76:E6:36:03:90:04:81:47:DF:08:98:51:C5:8A:71:1B:15:47 X509v3 Authority Key Identifier: keyid:35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:49:0d:87:01:14:fa:84:fe:43:fe:18:e7:a5:03:18:38:d2: 6d:6b:e6:ba:3e:08:60:6d:c0:02:5f:88:da:76:c1:c2:99:1a: 0d:b3:8b:56:b9:c6:2b:0f:6c:ed:e3:c3:22:97:1a:72:a0:a8: db:16:77:36:66:18:41:9c:2f:d0:7a:1c:e7:08:d9:9c:cd:5d: b4:72:92:95:d5:d8:2c:22:31:c5:44:c3:11:a4:b3:e9:06:7c: df:81:75:e2:59:2e:29:95:77:8a:21:95:92:e3:84:6c:47:62: b6:ef:bd:d5:31:c1:98:15:e5:87:90:5c:4d:ac:55:3f:00:b2: 8a:c9:fd:ca:2e:b0:78:8b:1d:6c:6e:74:85:ba:eb:16:26:07: 30:21:ae:8e:27:a7:58:a4:6a:4c:ab:f0:03:9d:3b:8f:b3:65: 65:87:93:a1:9a:57:d5:bc:68:28:4d:2b:12:87:8f:64:9f:e3: e0:19:b0:e9:fb:c3:5d:61:55:1d:db:8b:5c:77:6e:bc:32:44: 1e:cb:2d:9b:16:f6:06:e7:95:62:81:59:03:91:45:ce:5c:ec: 0d:7d:56:b3:4d:c7:b4:9c:f0:ad:8e:58:7b:86:f0:ac:41:06: cb:75:ee:56:f3:70:8a:5a:bd:f1:4d:fc:80:f5:5f:e9:5e:02: 82:4e:02:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk3NDkxMTAvBgNVBAUTKDM1RTZDODdGNkJBMUI2NTEzQTEyNzBGNkRDMTM2RERC NzExMzY0NTcwHhcNMjYwOTIyMjM1MTMxWhcNMjYwOTI5MjM1MTMxWjAYMRYwFAYD VQQDEw02YWIzMTQ4My1kM2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfc2c2BUmpqPYjNdP31IVNZwZqaCu7620p5Z+jSN/Ta1jSDa1K6GRWs8ha2g 0+aDY8IClITZEf3DN0dpTyv6yPNA3zvZUUxSln8NijnfuuhIcrwHYQcI1bh7Mlim HZGM84Atjw1vOijdk7whOwthy+dDdfxcmeMJGhcgrlq6E7ENuyrOGQL0yqIr5/Xj amw3KlanszHws9TeKfbisitS4/Oq+0GPhw8DesGrislZT8BX5nK3TbvHlz2Xihun mH61+UYYYDH4p9hD14B4dlJStWuIM+cr3J/SQjqD8NVtWXOUdtN+EC9spCFoQKgR qj+P2G+rUfM9ysKWAFbYFh18YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA9TduY2 A5AEgUffCJhRxYpxGxVHMB8GA1UdIwQYMBaAFDXmyH9robZROhJw9twTbdtxE2RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTc0OS85OUQxN0Q5NkJG OUIxMUVDQUQzQzBBMzBDNEY5QUUwMi9OZWJJZjJ1aHRsRTZFbkQyM0JOdDIzRVRa RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05lYklmMnVodGxFNkVuRDIzQk50MjNFVFpGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTc0OS85OUQxN0Q5NkJGOUIxMUVDQUQzQzBBMzBDNEY5QUUwMi9OZWJJZjJ1aHRs RTZFbkQyM0JOdDIzRVRaRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVUkNhwEU+oT+Q/4Y56UDGDjSbWvmuj4IYG3AAl+I2nbBwpkaDbOLVrnGKw9s 7ePDIpcacqCo2xZ3NmYYQZwv0Hoc5wjZnM1dtHKSldXYLCIxxUTDEaSz6QZ834F1 4lkuKZV3iiGVkuOEbEditu+91THBmBXlh5BcTaxVPwCyisn9yi6weIsdbG50hbrr FiYHMCGujienWKRqTKvwA507j7NlZYeToZpX1bxoKE0rEoePZJ/j4Bmw6fvDXWFV HduLXHduvDJEHsstmxb2BueVYoFZA5FFzlzsDX1Ws03HtJzwrY5Ye4bwrEEGy3Xu VvNwilq98U38gPVf6V4Cgk4CyA== -----END CERTIFICATE-----Generated at Thu Sep 24 00:52:04 2026 by rpki-client