$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft File: nOkX3Drgxboud8t3WjrZnGhcQGs.mft (raw, json) Hash identifier: gmCNWuh4n+u8TE0ko7OANNWHuRVkmixdHj58a3wy+rM= Subject key identifier: 8F:7B:38:28:A8:58:F9:4B:ED:40:CF:32:DF:4F:E3:96:90:CA:8E:CA Authority key identifier: 9C:E9:17:DC:3A:E0:C5:BA:2E:77:CB:77:5A:3A:D9:9C:68:5C:40:6B Certificate issuer: /CN=A9161F3E/serialNumber=9CE917DC3AE0C5BA2E77CB775A3AD99C685C406B Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft Manifest number: 011F Signing time: Thu 15 Oct 2026 06:49:55 +0000 Manifest this update: Thu 15 Oct 2026 06:49:55 +0000 Manifest next update: Thu 22 Oct 2026 06:49:55 +0000 Files and hashes: 1: nOkX3Drgxboud8t3WjrZnGhcQGs.crl (hash: LXY+7Im/ZE5aGG/JDBdUrod3YQirGayC+lLiO29nVuA=) 2: 4A3C802012A711F099020A73C4F9AE02.roa (hash: iEuV0+5znqF8f5T5Ps6WIUoKRiKa2jw2dHDVVLuYtWU=) 3: 49DEAEDC12A711F099020A73C4F9AE02.roa (hash: 73STUG9MRsTj+UMDTuA4X0z5fGUTYqhKS5W5S7xFgxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.crl rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 06:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161F3E, serialNumber=9CE917DC3AE0C5BA2E77CB775A3AD99C685C406B Validity Not Before: Oct 15 06:49:55 2026 GMT Not After : Oct 22 06:49:55 2026 GMT Subject: CN=6ad07793-46a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:00:d6:24:20:da:98:b2:d5:93:39:f6:61:0c: 0e:8f:1d:5d:a6:14:5a:a0:e2:4f:11:81:4b:57:1e: ff:04:67:e9:da:6b:73:29:5f:1d:1e:31:85:f0:fd: c2:19:23:b5:44:f1:75:a7:e7:71:62:3f:9c:b5:c8: da:4b:e4:39:c6:89:15:35:3e:c2:ba:ed:1c:bd:88: ca:1f:59:47:b4:f2:00:39:8d:17:c1:df:c1:9f:38: ec:fc:af:9d:31:ce:89:60:fc:da:e1:12:7e:27:98: 30:e3:e3:5b:df:8f:b6:bd:f0:b0:12:ed:74:08:4f: 75:f8:78:36:20:b8:a4:95:a1:ea:59:9f:d6:af:d8: 4d:ad:61:a4:04:e2:a7:c3:e9:c7:e3:60:65:62:4e: fe:bd:7c:ba:8f:e2:d8:32:a8:48:77:d4:24:a0:13: bb:f7:61:16:e4:6a:8b:91:bd:fe:f0:e3:9c:5b:2f: e2:cd:e1:90:a9:43:df:e6:e4:12:06:79:e1:70:bb: 14:3a:63:98:4d:62:3c:52:7e:9c:5d:fb:1c:3a:70: 7c:07:b9:a0:54:c3:3f:fd:a3:08:9b:b6:79:e4:83: c2:a6:11:d2:9a:ca:0f:1d:b5:ef:cd:f2:c0:4c:3e: 55:04:e0:13:5b:6e:17:52:31:91:36:c3:77:77:b1: 63:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7B:38:28:A8:58:F9:4B:ED:40:CF:32:DF:4F:E3:96:90:CA:8E:CA X509v3 Authority Key Identifier: keyid:9C:E9:17:DC:3A:E0:C5:BA:2E:77:CB:77:5A:3A:D9:9C:68:5C:40:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:48:94:4f:61:8b:f1:33:ca:4b:79:8e:d3:0d:ee:99:4a:87: fd:6d:8d:c3:09:4b:34:be:80:b4:77:f6:38:c5:42:66:d7:b9: e5:65:2a:89:26:e3:50:ec:61:c5:99:c0:3c:d7:b9:26:d1:14: 9d:eb:97:a6:ca:23:eb:1d:b9:ff:d1:ec:e9:a3:31:05:5c:a5: cd:0e:6c:41:0d:d4:1f:26:cb:09:c3:d0:89:48:4c:b8:75:3a: 0e:16:99:e6:5c:18:7c:1a:ce:96:c4:17:72:1c:1c:ac:8c:35: 33:29:05:54:e7:b0:67:da:f4:5b:7a:f7:1d:27:1b:6c:ba:6b: 8d:e1:96:1f:16:db:51:2d:ed:8b:37:e2:f5:17:d4:ea:80:5f: fa:9a:f6:5e:89:d3:96:43:b4:4a:25:02:af:7f:40:ab:24:a6: ad:00:ed:59:07:98:b8:e2:39:9f:fd:61:ef:bc:73:9e:d5:e9: b8:06:02:95:25:39:40:93:ea:8c:7c:a0:55:3a:43:ff:e9:94: 59:0e:87:f8:00:e0:ce:41:8b:f0:f7:fe:fe:87:71:ae:42:e9: 8d:ea:03:df:29:96:f6:17:28:3c:48:4f:de:d3:eb:85:3e:89: 87:7a:4d:8e:3e:00:d0:ea:6a:ff:db:64:a6:2a:f9:38:12:52: bd:4a:cb:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGM0UxMTAvBgNVBAUTKDlDRTkxN0RDM0FFMEM1QkEyRTc3Q0I3NzVBM0FEOTlD Njg1QzQwNkIwHhcNMjYxMDE1MDY0OTU1WhcNMjYxMDIyMDY0OTU1WjAYMRYwFAYD VQQDEw02YWQwNzc5My00NmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlQDWJCDamLLVkzn2YQwOjx1dphRaoOJPEYFLVx7/BGfp2mtzKV8dHjGF8P3C GSO1RPF1p+dxYj+ctcjaS+Q5xokVNT7Cuu0cvYjKH1lHtPIAOY0Xwd/Bnzjs/K+d Mc6JYPza4RJ+J5gw4+Nb34+2vfCwEu10CE91+Hg2ILiklaHqWZ/Wr9hNrWGkBOKn w+nH42BlYk7+vXy6j+LYMqhId9QkoBO792EW5GqLkb3+8OOcWy/izeGQqUPf5uQS BnnhcLsUOmOYTWI8Un6cXfscOnB8B7mgVMM//aMIm7Z55IPCphHSmsoPHbXvzfLA TD5VBOATW24XUjGRNsN3d7Fj/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI97OCio WPlL7UDPMt9P45aQyo7KMB8GA1UdIwQYMBaAFJzpF9w64MW6LnfLd1o62ZxoXEBr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUYzRS8zMzlFREU2ODEw RTQxMUYwQjc1QjgxNjZDNEY5QUUwMi9uT2tYM0RyZ3hib3VkOHQzV2pyWm5HaGNR R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25Pa1gzRHJneGJvdWQ4dDNXanJabkdoY1FHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUYzRS8zMzlFREU2ODEwRTQxMUYwQjc1QjgxNjZDNEY5QUUwMi9uT2tYM0RyZ3hi b3VkOHQzV2pyWm5HaGNRR3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfUiUT2GL8TPKS3mO0w3umUqH/W2NwwlLNL6AtHf2OMVCZte55WUqiSbjUOxh xZnAPNe5JtEUneuXpsoj6x25/9Hs6aMxBVylzQ5sQQ3UHybLCcPQiUhMuHU6DhaZ 5lwYfBrOlsQXchwcrIw1MykFVOewZ9r0W3r3HScbbLprjeGWHxbbUS3tizfi9RfU 6oBf+pr2XonTlkO0SiUCr39AqySmrQDtWQeYuOI5n/1h77xzntXpuAYClSU5QJPq jHygVTpD/+mUWQ6H+ADgzkGL8Pf+/odxrkLpjeoD3ymW9hcoPEhP3tPrhT6Jh3pN jj4A0Opq/9tkpir5OBJSvUrL3w== -----END CERTIFICATE-----Generated at Thu Oct 15 21:01:37 2026 by rpki-client