$ rpki-client -vvvf rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.mft File: nxMMOdAwdvSok0-jNJXO2TfiMKs.mft (raw, json) Hash identifier: LVrckSMG4xTPW6Zow76waNwnim/nG9Av9JdpsihXJUE= Subject key identifier: 4D:B1:28:FF:F1:64:35:D6:06:BE:84:CA:4B:37:5E:FD:AA:C9:7D:C6 Authority key identifier: 9F:13:0C:39:D0:30:76:F4:A8:93:4F:A3:34:95:CE:D9:37:E2:30:AB Certificate issuer: /CN=A91430D6/serialNumber=9F130C39D03076F4A8934FA33495CED937E230AB Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxMMOdAwdvSok0-jNJXO2TfiMKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.mft Manifest number: FA Signing time: Tue 03 Nov 2026 07:17:11 +0000 Manifest this update: Tue 03 Nov 2026 07:17:10 +0000 Manifest next update: Tue 10 Nov 2026 07:17:10 +0000 Files and hashes: 1: nxMMOdAwdvSok0-jNJXO2TfiMKs.crl (hash: hk+WkXQwU259Bkd5gn4HIiLoI9WoBvU5JapuLdnWR/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.crl rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxMMOdAwdvSok0-jNJXO2TfiMKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 07:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91430D6, serialNumber=9F130C39D03076F4A8934FA33495CED937E230AB Validity Not Before: Nov 3 07:17:10 2026 GMT Not After : Nov 10 07:17:10 2026 GMT Subject: CN=6ae98a76-48d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b7:7b:74:95:9d:b9:3e:c1:3e:22:ec:34:7a: 75:b9:b6:66:b9:ec:52:80:2f:36:07:52:2d:cb:21: 43:e6:ea:1e:88:c4:4d:37:79:bb:ff:45:ce:b1:19: 04:d8:8a:04:07:27:ad:ff:a2:bb:75:80:2a:4a:c0: 45:ef:76:27:9f:37:0a:b1:43:72:fd:ec:9c:74:52: 50:b3:6a:21:ad:13:39:38:c5:f7:3e:97:51:dd:50: 5d:7b:dc:67:f8:a8:76:e8:21:e6:88:7c:29:d0:fd: c0:17:b2:80:05:89:33:1c:a0:fa:7a:ee:18:33:8a: 55:49:67:48:29:a4:d3:9f:43:95:83:33:9a:b8:41: 42:bf:dd:f3:e4:ce:92:ff:a9:87:43:bb:20:e7:d3: fc:bc:a9:8c:88:77:bb:a5:d4:4b:08:2f:cc:82:1e: 7f:11:bb:be:8a:18:8a:15:12:f1:7c:c0:8a:ea:6e: 46:db:c4:c0:2c:df:0d:cd:82:8b:9f:3d:50:5a:20: cf:1b:13:af:d3:e0:51:b7:f4:a7:e3:d9:f7:33:c3: eb:5b:30:00:d4:57:b0:c3:71:1e:74:1e:69:39:ca: 14:5e:76:f5:20:92:3f:4e:30:e2:87:3c:ef:76:b0: 08:b6:57:a6:da:12:80:b7:79:d3:39:f2:f4:65:ca: 90:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B1:28:FF:F1:64:35:D6:06:BE:84:CA:4B:37:5E:FD:AA:C9:7D:C6 X509v3 Authority Key Identifier: keyid:9F:13:0C:39:D0:30:76:F4:A8:93:4F:A3:34:95:CE:D9:37:E2:30:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxMMOdAwdvSok0-jNJXO2TfiMKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/20F9F3B05FE011F0B2FD8F57C4F9AE02/nxMMOdAwdvSok0-jNJXO2TfiMKs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:25:cc:36:80:5c:93:34:62:39:17:c9:70:19:4b:00:41:87: 84:be:75:f7:a4:e5:00:90:b6:79:53:9e:f2:81:0c:12:a8:8d: f6:f5:3d:04:30:3e:3c:12:9f:5e:28:7e:bc:04:0a:1e:d9:4a: 79:9d:76:4e:9d:7b:4d:83:c0:19:41:c2:8b:f3:34:9d:e1:ae: 27:a7:a5:09:e3:30:fa:2d:f0:a0:e1:c8:20:8a:fc:83:2b:e4: da:2c:53:04:86:25:9e:78:2b:56:c8:a7:7d:e0:3d:4f:c2:55: d2:e0:15:27:cd:ec:9c:f9:e5:3a:79:5a:eb:e5:37:cd:4a:81: 3e:e3:69:4a:02:b6:40:cc:39:81:59:c6:a7:19:ac:1f:f3:2d: b8:4a:ed:81:c4:87:8a:ea:ff:2b:c6:af:31:eb:7b:37:39:9d: e2:52:90:5c:90:84:ce:7c:bb:ed:14:b0:33:d6:98:3b:74:5f: a8:28:8c:fa:42:1e:1d:d8:a0:6a:fc:27:37:ce:0e:11:d4:5f: 33:e9:55:a7:de:11:5f:53:a0:67:d9:e2:a1:0d:a4:b1:96:e8: ca:85:8f:6e:98:d9:56:1b:16:ba:15:71:36:84:72:89:0d:e1: 64:00:54:3f:d4:08:28:02:64:81:11:9e:73:a8:2f:c1:c7:0b: ea:4d:14:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMwRDYxMTAvBgNVBAUTKDlGMTMwQzM5RDAzMDc2RjRBODkzNEZBMzM0OTVDRUQ5 MzdFMjMwQUIwHhcNMjYxMTAzMDcxNzEwWhcNMjYxMTEwMDcxNzEwWjAYMRYwFAYD VQQDEw02YWU5OGE3Ni00OGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjrd7dJWduT7BPiLsNHp1ubZmuexSgC82B1ItyyFD5uoeiMRNN3m7/0XOsRkE 2IoEByet/6K7dYAqSsBF73YnnzcKsUNy/eycdFJQs2ohrRM5OMX3PpdR3VBde9xn +Kh26CHmiHwp0P3AF7KABYkzHKD6eu4YM4pVSWdIKaTTn0OVgzOauEFCv93z5M6S /6mHQ7sg59P8vKmMiHe7pdRLCC/Mgh5/Ebu+ihiKFRLxfMCK6m5G28TALN8NzYKL nz1QWiDPGxOv0+BRt/Sn49n3M8PrWzAA1Feww3EedB5pOcoUXnb1IJI/TjDihzzv drAItlem2hKAt3nTOfL0ZcqQfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE2xKP/x ZDXWBr6Eyks3Xv2qyX3GMB8GA1UdIwQYMBaAFJ8TDDnQMHb0qJNPozSVztk34jCr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzBENi8yMEY5RjNCMDVG RTAxMUYwQjJGRDhGNTdDNEY5QUUwMi9ueE1NT2RBd2R2U29rMC1qTkpYTzJUZmlN S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL254TU1PZEF3ZHZTb2swLWpOSlhPMlRmaU1Lcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzBENi8yMEY5RjNCMDVGRTAxMUYwQjJGRDhGNTdDNEY5QUUwMi9ueE1NT2RBd2R2 U29rMC1qTkpYTzJUZmlNS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPCXMNoBckzRiORfJcBlLAEGHhL5196TlAJC2eVOe8oEMEqiN9vU9BDA+PBKf Xih+vAQKHtlKeZ12Tp17TYPAGUHCi/M0neGuJ6elCeMw+i3woOHIIIr8gyvk2ixT BIYlnngrVsinfeA9T8JV0uAVJ83snPnlOnla6+U3zUqBPuNpSgK2QMw5gVnGpxms H/MtuErtgcSHiur/K8avMet7Nzmd4lKQXJCEzny77RSwM9aYO3RfqCiM+kIeHdig avwnN84OEdRfM+lVp94RX1OgZ9nioQ2ksZboyoWPbpjZVhsWuhVxNoRyiQ3hZABU P9QIKAJkgRGec6gvwccL6k0U3w== -----END CERTIFICATE-----Generated at Thu Nov 5 09:18:29 2026 by rpki-client