$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft File: nxlDAU2jmDwfXHj3bM8tpWpKNro.mft (raw, json) Hash identifier: x7hJEmZo5IffDyI9xgpXTXkwv2TDtiqnoG2Uzy8dMCc= Subject key identifier: B6:4D:D2:C5:BD:8F:95:22:C4:9B:D2:77:88:4C:B2:3D:C2:EF:D9:93 Authority key identifier: 9F:19:43:01:4D:A3:98:3C:1F:5C:78:F7:6C:CF:2D:A5:6A:4A:36:BA Certificate issuer: /CN=A912E3B6/serialNumber=9F1943014DA3983C1F5C78F76CCF2DA56A4A36BA Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft Manifest number: 64 Signing time: Wed 23 Sep 2026 07:48:23 +0000 Manifest this update: Wed 23 Sep 2026 07:48:22 +0000 Manifest next update: Wed 30 Sep 2026 07:48:22 +0000 Files and hashes: 1: nxlDAU2jmDwfXHj3bM8tpWpKNro.crl (hash: HlKTB0FVIdPEbhkLvDUI+h6QuezbhfpqlipGk8yNXk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.crl rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:48:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E3B6, serialNumber=9F1943014DA3983C1F5C78F76CCF2DA56A4A36BA Validity Not Before: Sep 23 07:48:22 2026 GMT Not After : Sep 30 07:48:22 2026 GMT Subject: CN=6ab38447-0e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:99:83:76:0e:cf:48:65:0f:2f:44:82:67:ff: dc:7f:21:52:42:9c:46:62:c4:b3:d8:0b:4b:be:5e: 1b:ab:91:ff:54:36:3b:92:12:5e:69:70:28:a6:c7: 37:20:1c:ac:a6:f7:60:52:e4:a9:ca:a9:26:cb:53: bc:93:48:af:30:ad:ae:75:07:72:b8:2c:8a:ec:32: 93:16:bd:a2:4c:22:75:91:82:c0:a9:58:7d:d8:e8: 2a:c9:2b:c9:0d:ad:d3:ad:42:53:93:11:bc:3f:0c: c3:cc:0b:c3:25:6d:8b:8d:c1:64:55:98:72:c6:3f: 33:88:92:e3:df:f6:ea:f4:12:6e:24:55:8c:7f:e9: 68:53:85:04:60:ce:b6:89:62:d9:a7:05:f5:92:4f: 42:52:68:9d:0f:b1:82:85:e1:5b:61:ae:0c:02:fc: 9d:32:02:c7:7c:16:b9:33:1b:fc:35:95:6c:a2:e9: 8f:9e:e5:d4:70:bf:41:d3:b4:36:77:67:55:15:97: de:45:1f:79:1e:62:dd:51:ce:5b:43:4b:df:97:3c: ad:52:8c:9f:f6:a3:ba:df:0d:d2:4e:04:85:d0:01: 65:c4:3d:ff:04:e7:98:6a:6e:49:b5:a8:6b:d9:4e: d7:e8:93:c6:50:1d:10:54:6f:fa:ba:af:77:93:16: a0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4D:D2:C5:BD:8F:95:22:C4:9B:D2:77:88:4C:B2:3D:C2:EF:D9:93 X509v3 Authority Key Identifier: keyid:9F:19:43:01:4D:A3:98:3C:1F:5C:78:F7:6C:CF:2D:A5:6A:4A:36:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:b5:c5:fd:f0:a1:8c:37:03:47:95:45:63:42:79:32:5f:d1: 39:cf:12:c8:cf:38:19:8b:07:0e:ac:97:bf:03:74:d6:cf:7c: 27:4b:13:64:56:1d:2a:26:64:58:d7:8b:f3:64:7f:fa:52:96: 37:a4:32:7b:0e:61:85:3a:65:e0:2b:57:35:66:e8:68:f7:84: f6:ad:42:e0:44:cd:bc:4e:15:7f:dc:f4:ec:57:f9:b3:2a:28: 28:a0:63:cc:00:fd:7a:f7:86:83:ac:89:2b:39:fb:f0:32:a4: f3:07:57:0f:a1:85:82:40:bf:fc:6f:78:3e:31:17:3b:f1:d0: 64:c6:b6:1b:a2:ed:c1:d9:c7:b1:1b:c9:b7:04:0a:48:f0:07: e6:27:ce:1f:e0:1f:ff:5e:bf:c0:d2:4d:e7:36:8b:52:5f:c3: 71:31:f0:1a:a8:7a:21:85:86:77:bd:94:0b:e3:a6:3f:1f:82: 34:0d:f0:fd:0e:81:b4:2b:3f:a7:02:c1:da:45:45:55:db:2e: 7f:fc:85:08:b3:15:7f:07:69:56:b8:ec:c9:27:94:aa:d9:3d: 66:71:ad:0d:69:28:fd:95:9f:15:1e:65:93:77:b5:3e:a0:82: cb:05:c7:f4:1d:e5:5f:a3:c4:b9:fa:b4:f6:3e:e5:cf:13:66: d4:c6:a1:eb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RTNCNjExMC8GA1UEBRMoOUYxOTQzMDE0REEzOTgzQzFGNUM3OEY3NkNDRjJEQTU2 QTRBMzZCQTAeFw0yNjA5MjMwNzQ4MjJaFw0yNjA5MzAwNzQ4MjJaMBgxFjAUBgNV BAMTDTZhYjM4NDQ3LTBlMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClmYN2Ds9IZQ8vRIJn/9x/IVJCnEZixLPYC0u+Xhurkf9UNjuSEl5pcCimxzcg HKym92BS5KnKqSbLU7yTSK8wra51B3K4LIrsMpMWvaJMInWRgsCpWH3Y6CrJK8kN rdOtQlOTEbw/DMPMC8MlbYuNwWRVmHLGPzOIkuPf9ur0Em4kVYx/6WhThQRgzraJ YtmnBfWST0JSaJ0PsYKF4VthrgwC/J0yAsd8FrkzG/w1lWyi6Y+e5dRwv0HTtDZ3 Z1UVl95FH3keYt1RzltDS9+XPK1SjJ/2o7rfDdJOBIXQAWXEPf8E55hqbkm1qGvZ Ttfok8ZQHRBUb/q6r3eTFqAtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtk3Sxb2P lSLEm9J3iEyyPcLv2ZMwHwYDVR0jBBgwFoAUnxlDAU2jmDwfXHj3bM8tpWpKNrow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFM0I2L0MxNDc2OTk2MUVD MjExRjFBRjU2RDdCODI0M0Q4QzY3L254bERBVTJqbUR3ZlhIajNiTTh0cFdwS05y by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvbnhsREFVMmptRHdmWEhqM2JNOHRwV3BLTnJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF M0I2L0MxNDc2OTk2MUVDMjExRjFBRjU2RDdCODI0M0Q4QzY3L254bERBVTJqbUR3 ZlhIajNiTTh0cFdwS05yby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAUtcX98KGMNwNHlUVjQnkyX9E5zxLIzzgZiwcOrJe/A3TWz3wnSxNkVh0qJmRY 14vzZH/6UpY3pDJ7DmGFOmXgK1c1Zuho94T2rULgRM28ThV/3PTsV/mzKigooGPM AP1694aDrIkrOfvwMqTzB1cPoYWCQL/8b3g+MRc78dBkxrYbou3B2cexG8m3BApI 8AfmJ84f4B//Xr/A0k3nNotSX8NxMfAaqHohhYZ3vZQL46Y/H4I0DfD9DoG0Kz+n AsHaRUVV2y5//IUIsxV/B2lWuOzJJ5Sq2T1mca0NaSj9lZ8VHmWTd7U+oILLBcf0 HeVfo8S5+rT2PuXPE2bUxqHr -----END CERTIFICATE-----Generated at Wed Sep 23 21:40:56 2026 by rpki-client