$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft File: NfIQw_y-8NYqPeiPXz-iThGTdEw.mft (raw, json) Hash identifier: g7oJ9yOnY/bWUOdylZfrXjfBaCFLqk7Z26j+34q2kwE= Subject key identifier: A7:ED:6E:57:74:9C:91:D7:ED:BC:99:4E:22:28:2D:B2:90:F1:C3:6A Authority key identifier: 35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C Certificate issuer: /CN=A91A1860/serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C Certificate serial: 02B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft Manifest number: 02AD Signing time: Sun 11 Oct 2026 01:52:49 +0000 Manifest this update: Sun 11 Oct 2026 01:52:49 +0000 Manifest next update: Sun 18 Oct 2026 01:52:49 +0000 Files and hashes: 1: NfIQw_y-8NYqPeiPXz-iThGTdEw.crl (hash: YxFQXhiu7NRBLsKDjzPkJb3owAVUKgHbS1R6SgyPX/Q=) 2: 832503DCAD0311ED8DFD5339C4F9AE02.roa (hash: DEHa9wU+Ix9r57aVN3GaYMWyOOaqTPBIMaPsZXZX4DU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 01:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 690 (0x2b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1860, serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C Validity Not Before: Oct 11 01:52:49 2026 GMT Not After : Oct 18 01:52:49 2026 GMT Subject: CN=6acaebf1-b14b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b5:72:99:35:67:9f:a1:6f:9f:34:00:f1:1f: 4c:16:1e:e2:13:39:a2:61:36:ce:df:02:77:9e:33: b7:1b:5e:02:35:cf:44:1d:58:4d:d5:4a:55:7d:9d: b9:56:f5:d1:08:37:09:5a:f5:7c:61:8f:8c:b3:aa: 81:38:02:3b:86:aa:70:e9:bd:17:9e:06:91:b8:9e: aa:1a:39:4a:1b:58:b3:59:e4:5b:1e:15:35:a0:99: a7:91:91:4b:fe:a8:78:20:98:da:ba:65:ce:74:43: 9c:e2:ee:20:61:37:a4:3b:6d:0b:4a:c6:d9:10:9d: ec:df:0a:3f:f1:e8:36:ab:13:aa:84:7c:4d:8e:56: ab:07:f5:74:b9:99:45:46:b3:e5:e8:cc:e9:6e:ab: 0d:95:da:2d:52:54:00:bd:c6:c7:72:aa:3f:e7:1d: 19:d7:f8:e9:1a:7f:c3:57:d4:49:0e:1e:74:14:b9: 0b:10:37:10:b7:8e:a4:b4:e5:d9:ee:f5:7a:9f:b9: 30:45:2a:71:fc:f7:2b:0a:cf:76:c3:82:4a:80:4e: f7:f5:7f:6f:11:7b:f9:aa:24:8e:c8:db:5a:42:2d: 11:5d:c8:db:9a:bd:e7:36:80:61:98:32:68:db:a6: dd:b2:58:80:17:ba:01:ee:81:3d:06:0c:72:40:2d: 7e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:ED:6E:57:74:9C:91:D7:ED:BC:99:4E:22:28:2D:B2:90:F1:C3:6A X509v3 Authority Key Identifier: keyid:35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:c2:8c:d9:e0:c2:4c:78:ab:04:96:fd:09:33:08:a5:39:5d: f7:19:7a:fa:8b:91:af:2f:20:fc:c3:f0:93:5b:47:c5:07:47: 58:57:39:1a:fe:fa:f3:52:3d:16:5c:72:04:11:0f:68:5f:d4: dd:39:f2:f9:af:e2:41:e9:90:81:ce:00:35:17:75:2e:24:d4: 7a:5b:dd:5a:0e:3c:fc:e3:39:73:72:e5:2e:e5:44:92:3b:ed: e0:a8:7e:8c:cb:7d:31:af:ba:06:e5:da:e6:44:58:24:99:76: e0:93:cc:b1:68:34:76:5d:8b:c3:98:3b:c9:ea:57:25:be:b2: 6c:85:ca:66:0c:6f:3c:9d:6a:b6:41:4d:b3:df:cc:28:cd:b1: 52:16:26:98:99:83:83:c5:a7:08:1e:0b:3e:0d:6b:f0:91:1d: 62:e2:8d:0e:38:2d:62:87:af:df:5d:e6:94:8a:4f:8f:96:07: 2b:44:9f:9e:49:89:f3:c1:12:f3:f6:f9:f6:e0:e2:7e:68:42: f3:54:4e:02:a8:6c:c1:c5:36:ba:dc:88:2f:b4:df:69:50:a0: e4:a7:c1:36:6f:d6:e2:08:b4:a9:c4:92:d9:9f:c8:57:64:9c: ef:fb:99:45:96:5c:a1:92:89:bd:d8:0f:bd:18:83:4d:d6:05: 6a:ba:35:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE4NjAxMTAvBgNVBAUTKDM1RjIxMEMzRkNCRUYwRDYyQTNERTg4RjVGM0ZBMjRF MTE5Mzc0NEMwHhcNMjYxMDExMDE1MjQ5WhcNMjYxMDE4MDE1MjQ5WjAYMRYwFAYD VQQDEw02YWNhZWJmMS1iMTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnbVymTVnn6FvnzQA8R9MFh7iEzmiYTbO3wJ3njO3G14CNc9EHVhN1UpVfZ25 VvXRCDcJWvV8YY+Ms6qBOAI7hqpw6b0XngaRuJ6qGjlKG1izWeRbHhU1oJmnkZFL /qh4IJjaumXOdEOc4u4gYTekO20LSsbZEJ3s3wo/8eg2qxOqhHxNjlarB/V0uZlF RrPl6MzpbqsNldotUlQAvcbHcqo/5x0Z1/jpGn/DV9RJDh50FLkLEDcQt46ktOXZ 7vV6n7kwRSpx/PcrCs92w4JKgE739X9vEXv5qiSOyNtaQi0RXcjbmr3nNoBhmDJo 26bdsliAF7oB7oE9BgxyQC1+iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKftbld0 nJHX7byZTiIoLbKQ8cNqMB8GA1UdIwQYMBaAFDXyEMP8vvDWKj3oj18/ok4Rk3RM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTg2MC80MjIyRTY2NEFD RkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThOWXFQZWlQWHotaVRoR1Rk RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mSVF3X3ktOE5ZcVBlaVBYei1pVGhHVGRFdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTg2MC80MjIyRTY2NEFDRkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThO WXFQZWlQWHotaVRoR1RkRXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANsKM2eDCTHirBJb9CTMIpTld9xl6+ouRry8g/MPwk1tHxQdHWFc5Gv7681I9 FlxyBBEPaF/U3Tny+a/iQemQgc4ANRd1LiTUelvdWg48/OM5c3LlLuVEkjvt4Kh+ jMt9Ma+6BuXa5kRYJJl24JPMsWg0dl2Lw5g7yepXJb6ybIXKZgxvPJ1qtkFNs9/M KM2xUhYmmJmDg8WnCB4LPg1r8JEdYuKNDjgtYoev313mlIpPj5YHK0SfnkmJ88ES 8/b59uDifmhC81ROAqhswcU2utyIL7TfaVCg5KfBNm/W4gi0qcSS2Z/IV2Sc7/uZ RZZcoZKJvdgPvRiDTdYFaro15w== -----END CERTIFICATE-----Generated at Sun Oct 11 16:39:52 2026 by rpki-client