$ rpki-client -vvvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft File: Nu6KQBMF6zjijYal2392KKq34k8.mft (raw, json) Hash identifier: rJgTBnSpv0pYb9G8mGVchB+/2uzMRVrR6HTVDhjoOGI= Subject key identifier: 50:D1:CC:2F:86:3F:7B:CF:28:B4:6A:12:5F:29:27:57:B9:8D:EF:A4 Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F Certificate issuer: /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F Certificate serial: 1221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft Manifest number: 11A1 Signing time: Mon 12 Oct 2026 17:15:52 +0000 Manifest this update: Mon 12 Oct 2026 17:15:51 +0000 Manifest next update: Mon 19 Oct 2026 17:15:51 +0000 Files and hashes: 1: Nu6KQBMF6zjijYal2392KKq34k8.crl (hash: uUKlmyyNlTbhJxX2D8h17TmmqZlZMrKjkXD6HdtjNt0=) 2: 8F5856362E9511E9896EFA1DC4F9AE02.roa (hash: fzVldj66k6KXtgIRLEaGb66ZtwgbJga1awvd7qMV8+I=) 3: 5870952EC53011EA98D1D651C4F9AE02.roa (hash: sm0eBXuJHpy/6GBiyFucIa3zwW7MRE4QJ04/eh2HAes=) 4: 8EA288F62E9511E9896EFA1DC4F9AE02.roa (hash: tCQBUtYFoGYz0mkeelr2MTFt0PRYSbZ9klpLIVmb1oc=) 5: 264DBA882E9411E9A7232A19C4F9AE02.roa (hash: bAw2DJ5Kd887dPCmMIgU3xUTOQCR/psfXJJs57GhqSk=) 6: 8D76CA462E9511E9896EFA1DC4F9AE02.roa (hash: lflQBr5KFU0YHST8ZC+CiZu1r2eTacXElo40hp/vo78=) 7: 53DFF8EC2E9111E999636910C4F9AE02.roa (hash: aOutH14XqTU7CvFjZF4RAhY9j2C5Nrg3m1MQwiLdC9E=) 8: 52685F222E9111E999636910C4F9AE02.roa (hash: 4Ei9jmJLAQOoAToGpIrcLdsdG3+i6HRC8BOB0H1zkBM=) 9: 8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa (hash: NHQV92FmnuARgeDDhUDewRl+rTj+thYHcs3GlrXraHk=) 10: 81CBCECA0BFF11EE9AE0F676C4F9AE02.roa (hash: 3JBN2jyg46LmYUyUHhEZh4IoQyWfFsojDUHEe85wv/g=) 11: 8CD1AEC62E9511E9896EFA1DC4F9AE02.roa (hash: R3UXvxLGuAsLaHQCcYjq4jsLIsHsiVoo5zau0vUpLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 17:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4641 (0x1221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709BC, serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F Validity Not Before: Oct 12 17:15:51 2026 GMT Not After : Oct 19 17:15:51 2026 GMT Subject: CN=6acd15c7-c7a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cc:33:aa:5a:67:1f:2a:84:ca:72:f1:6a:8d: 85:53:f8:9b:7e:80:df:82:4d:99:eb:d4:4b:5a:17: d1:78:19:de:d8:ff:0f:1e:50:02:3b:4e:6c:e5:51: 33:dd:25:31:d4:b1:b5:86:d7:fc:0e:b0:65:f7:83: 13:76:12:8c:00:ac:4d:d8:c9:dd:14:bd:f1:7b:91: 62:14:43:5d:11:ad:c6:57:48:51:0e:bd:47:55:2e: 56:d6:67:a5:f6:bc:fa:98:5d:3e:a5:1d:3c:3a:18: 96:16:31:3d:79:4a:83:df:cb:92:52:7b:a3:53:01: 91:93:17:85:97:99:0e:f2:c5:22:37:66:02:f6:39: 0c:df:d3:32:ea:15:1c:db:42:7f:8e:0c:52:21:54: 4e:be:e5:62:28:f2:c6:67:dd:c4:4a:58:a6:63:ea: b1:09:f4:d0:ee:a1:38:22:cb:05:11:cc:7c:be:8c: 2f:4b:97:e1:75:a5:6f:17:f0:4c:81:99:8e:a4:ff: 0c:27:ad:98:81:5c:56:3f:24:bb:0e:4f:d8:81:5d: 4e:61:b5:8e:34:24:e4:8e:9b:d6:47:3b:8f:19:22: cf:92:f6:09:90:7d:1c:43:4b:04:9f:01:62:ec:f4: c6:2a:6f:03:79:d6:c9:18:69:f9:f1:98:8c:fc:c0: 10:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D1:CC:2F:86:3F:7B:CF:28:B4:6A:12:5F:29:27:57:B9:8D:EF:A4 X509v3 Authority Key Identifier: keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:bf:c3:21:d8:a2:fa:a8:b8:99:37:a4:25:11:b3:2a:28:e8: fe:53:8b:fc:9e:e6:ce:92:c3:1a:4f:7c:a2:d7:9b:08:ed:43: df:b0:35:f6:4b:28:38:fc:ad:81:71:27:d4:67:48:44:38:1a: b8:85:06:5f:18:44:76:1c:1f:a3:fa:19:73:e2:15:5b:55:cd: 91:75:7b:27:d5:53:39:4e:06:48:aa:8a:9b:f2:39:5e:c7:f1: c0:0d:7b:38:38:fa:12:84:f2:44:21:9d:16:d9:c3:8e:2b:38: 83:9f:64:f0:09:db:06:8d:3c:b3:f7:5f:2d:69:4f:4d:74:e9: b7:9c:e8:8d:ba:bf:92:a9:20:31:a5:2b:ca:ff:4d:7e:00:c4: f2:10:bf:7c:ed:96:e2:fd:04:88:04:e2:69:c7:a5:66:6a:b8: 32:a9:5a:ff:1f:2e:06:b7:04:00:f2:1e:24:f9:eb:47:41:bf: 15:05:4b:39:bd:0d:51:ff:2c:c2:32:fc:1e:2a:df:f0:33:2b: 5f:03:c9:21:c1:a0:c8:31:1c:db:d1:0d:9c:f8:24:2d:e3:66: 1d:06:4c:ad:8e:28:e9:7f:13:67:01:64:34:2d:e8:b9:ff:7a: 02:41:59:5a:32:94:d4:c5:3c:69:e2:d4:0d:d6:c0:b4:0a:f4: 61:9f:33:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5QkMxMTAvBgNVBAUTKDM2RUU4QTQwMTMwNUVCMzhFMjhEODZBNURCN0Y3NjI4 QUFCN0UyNEYwHhcNMjYxMDEyMTcxNTUxWhcNMjYxMDE5MTcxNTUxWjAYMRYwFAYD VQQDEw02YWNkMTVjNy1jN2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMwzqlpnHyqEynLxao2FU/ibfoDfgk2Z69RLWhfReBne2P8PHlACO05s5VEz 3SUx1LG1htf8DrBl94MTdhKMAKxN2MndFL3xe5FiFENdEa3GV0hRDr1HVS5W1mel 9rz6mF0+pR08OhiWFjE9eUqD38uSUnujUwGRkxeFl5kO8sUiN2YC9jkM39My6hUc 20J/jgxSIVROvuViKPLGZ93ESlimY+qxCfTQ7qE4IssFEcx8vowvS5fhdaVvF/BM gZmOpP8MJ62YgVxWPyS7Dk/YgV1OYbWONCTkjpvWRzuPGSLPkvYJkH0cQ0sEnwFi 7PTGKm8DedbJGGn58ZiM/MAQJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFDRzC+G P3vPKLRqEl8pJ1e5je+kMB8GA1UdIwQYMBaAFDbuikATBes44o2Gpdt/diiqt+JP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlCQy84OTI4OTczMDJF OTAxMUU5OTE3Nzk2MEZDNEY5QUUwMi9OdTZLUUJNRjZ6amlqWWFsMjM5MktLcTM0 azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051NktRQk1GNnpqaWpZYWwyMzkyS0txMzRrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDlCQy84OTI4OTczMDJFOTAxMUU5OTE3Nzk2MEZDNEY5QUUwMi9OdTZLUUJNRjZ6 amlqWWFsMjM5MktLcTM0azgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADL/DIdii+qi4mTekJRGzKijo/lOL/J7mzpLDGk98otebCO1D37A19ksoOPyt gXEn1GdIRDgauIUGXxhEdhwfo/oZc+IVW1XNkXV7J9VTOU4GSKqKm/I5XsfxwA17 ODj6EoTyRCGdFtnDjis4g59k8AnbBo08s/dfLWlPTXTpt5zojbq/kqkgMaUryv9N fgDE8hC/fO2W4v0EiATiacelZmq4Mqla/x8uBrcEAPIeJPnrR0G/FQVLOb0NUf8s wjL8Hirf8DMrXwPJIcGgyDEc29ENnPgkLeNmHQZMrY4o6X8TZwFkNC3ouf96AkFZ WjKU1MU8aeLUDdbAtAr0YZ8zjQ== -----END CERTIFICATE-----Generated at Wed Oct 14 12:46:25 2026 by rpki-client