$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft File: nkKx9pFGDihG-nHwbcib8sdB25o.mft (raw, json) Hash identifier: NrAM2kocPSUr1GrHLeIZjfqSbxbpB4NKy+YpOrIncDI= Subject key identifier: 4A:B6:53:44:24:C0:11:DF:CF:EF:9B:DA:A1:B5:C6:60:31:68:61:E4 Authority key identifier: 9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A Certificate issuer: /CN=A911BCDD/serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Certificate serial: 0220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft Manifest number: 021A Signing time: Sun 27 Sep 2026 03:16:32 +0000 Manifest this update: Sun 27 Sep 2026 03:16:31 +0000 Manifest next update: Sun 04 Oct 2026 03:16:31 +0000 Files and hashes: 1: nkKx9pFGDihG-nHwbcib8sdB25o.crl (hash: cYcwnH4SxfmHToj362sSBll6GIsH7XH2Dhq5Yb+BdzY=) 2: 5ED417AE869011EEA9011A36C4F9AE02.roa (hash: Qx6h3CTOkKIiFv1hoz1s6u5nieG3giT15j3ng44V7sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 03:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCDD, serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Validity Not Before: Sep 27 03:16:31 2026 GMT Not After : Oct 4 03:16:31 2026 GMT Subject: CN=6ab88a90-cf47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1f:26:cc:d2:f4:a9:8b:64:01:77:70:b1:a4: 05:8d:be:74:05:77:41:7d:7c:83:bf:39:7a:cf:f1: 44:b9:73:a3:36:01:ca:8b:cc:0b:01:b8:1d:e4:98: a8:5e:5a:90:9d:50:14:ba:04:f1:f8:b3:1d:4c:ef: 29:eb:51:19:7a:ee:d6:4e:7c:83:e1:80:61:d1:c5: 77:30:b5:01:ac:2e:e1:8b:92:e5:d1:f8:ca:ee:13: b7:7f:2e:49:59:21:d3:43:61:ef:a0:25:84:6b:07: f1:83:0d:75:4b:07:fe:02:7b:c8:d2:93:d6:11:a7: b8:bc:c5:b7:4a:45:40:18:f4:4a:d0:e9:ac:ed:54: 39:af:2a:4f:0d:45:d8:87:00:47:2d:c9:14:fb:af: 3d:68:e7:6d:ff:1d:9e:e5:47:3e:9c:cb:64:94:7b: 0f:45:9d:63:54:b8:13:95:03:1d:fe:cc:c7:31:89: f8:5a:74:f7:81:ea:34:47:b2:26:06:c0:9c:63:fe: 1e:ec:9c:0e:d4:bd:e5:79:ff:28:24:98:29:6d:0a: 58:ab:e9:4b:c1:4c:59:8a:a2:e1:7c:01:00:dd:4a: 27:f7:44:86:c1:d2:94:b7:10:27:37:63:5a:3c:9e: 2a:4c:01:d0:98:c6:ba:9f:06:36:c7:ed:57:9b:e8: 91:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B6:53:44:24:C0:11:DF:CF:EF:9B:DA:A1:B5:C6:60:31:68:61:E4 X509v3 Authority Key Identifier: keyid:9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:0c:ec:ea:44:7a:be:ec:a4:cd:ae:10:25:06:cf:63:81:91: 2e:5b:e8:4a:50:4c:a3:68:b3:cb:6d:b7:d3:f9:c2:d2:2d:18: 36:18:83:b5:bb:d8:9b:73:4f:04:af:63:89:e2:9f:54:9d:97: 90:03:86:f1:a8:f5:1e:57:d3:59:4c:c4:ae:3c:79:d0:a8:84: 49:9c:0b:71:a0:20:a2:db:01:52:1e:0e:23:fb:fc:8e:11:55: 9f:72:03:69:c1:bb:b1:5e:3a:be:3b:0b:36:2c:95:2c:b9:bd: 5c:aa:7d:28:22:d9:77:a2:ad:c3:8c:4a:45:01:5b:58:d9:30: 2c:0b:c2:1b:f7:60:bc:9b:01:16:c9:36:41:12:7a:d3:8e:e8: 3f:9f:c9:29:04:af:73:1a:84:3e:73:2e:79:b8:c9:b1:e7:72: 23:2a:3a:71:d7:cf:68:3a:49:fd:06:7c:6b:15:ee:5f:84:c4: 2b:13:86:00:60:eb:ee:61:34:10:39:98:78:d1:f0:6e:04:af: 15:40:20:17:18:0c:8e:09:d4:3c:b6:97:4d:fd:10:c4:f5:41: df:76:42:54:33:2b:5d:98:43:30:6f:4e:7a:87:8f:eb:c3:d6: 68:d7:f2:1b:14:87:41:6e:10:ae:5d:e4:ee:84:b4:d0:a2:c3: c6:12:1d:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDREQxMTAvBgNVBAUTKDlFNDJCMUY2OTE0NjBFMjg0NkZBNzFGMDZEQzg5QkYy Qzc0MURCOUEwHhcNMjYwOTI3MDMxNjMxWhcNMjYxMDA0MDMxNjMxWjAYMRYwFAYD VQQDEw02YWI4OGE5MC1jZjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4B8mzNL0qYtkAXdwsaQFjb50BXdBfXyDvzl6z/FEuXOjNgHKi8wLAbgd5Jio XlqQnVAUugTx+LMdTO8p61EZeu7WTnyD4YBh0cV3MLUBrC7hi5Ll0fjK7hO3fy5J WSHTQ2HvoCWEawfxgw11Swf+AnvI0pPWEae4vMW3SkVAGPRK0Oms7VQ5rypPDUXY hwBHLckU+689aOdt/x2e5Uc+nMtklHsPRZ1jVLgTlQMd/szHMYn4WnT3geo0R7Im BsCcY/4e7JwO1L3lef8oJJgpbQpYq+lLwUxZiqLhfAEA3Uon90SGwdKUtxAnN2Na PJ4qTAHQmMa6nwY2x+1Xm+iRfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEq2U0Qk wBHfz++b2qG1xmAxaGHkMB8GA1UdIwQYMBaAFJ5CsfaRRg4oRvpx8G3Im/LHQdua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNERC8zNDhBRDhBQzg2 MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0RpaEctbkh3YmNpYjhzZEIy NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25rS3g5cEZHRGloRy1uSHdiY2liOHNkQjI1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNERC8zNDhBRDhBQzg2MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0Rp aEctbkh3YmNpYjhzZEIyNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFQzs6kR6vuykza4QJQbPY4GRLlvoSlBMo2izy2230/nC0i0YNhiDtbvYm3NP BK9jieKfVJ2XkAOG8aj1HlfTWUzErjx50KiESZwLcaAgotsBUh4OI/v8jhFVn3ID acG7sV46vjsLNiyVLLm9XKp9KCLZd6Ktw4xKRQFbWNkwLAvCG/dgvJsBFsk2QRJ6 047oP5/JKQSvcxqEPnMuebjJsedyIyo6cdfPaDpJ/QZ8axXuX4TEKxOGAGDr7mE0 EDmYeNHwbgSvFUAgFxgMjgnUPLaXTf0QxPVB33ZCVDMrXZhDMG9OeoeP68PWaNfy GxSHQW4Qrl3k7oS00KLDxhId2A== -----END CERTIFICATE-----Generated at Mon Sep 28 12:32:58 2026 by rpki-client