$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft File: nZwAihKi96YP7_liJmsFAqHKC6I.mft (raw, json) Hash identifier: zNSae1SWXxuFZrGhL6EvKdOrByoGb1Ff9JR2I69COdY= Subject key identifier: 92:70:C6:C7:64:C7:BF:03:30:64:06:96:47:20:31:45:FD:F3:B6:43 Authority key identifier: 9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 Certificate issuer: /CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Certificate serial: 0623 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft Manifest number: 0612 Signing time: Fri 18 Sep 2026 22:46:18 +0000 Manifest this update: Fri 18 Sep 2026 22:46:18 +0000 Manifest next update: Fri 25 Sep 2026 22:46:18 +0000 Files and hashes: 1: nZwAihKi96YP7_liJmsFAqHKC6I.crl (hash: uA4NmVTtXPOfLsrjuR/PyKuJEJzJJfiZx2e/OLnJn94=) 2: 460AA4AE03CF11ECA480B07CC4F9AE02.roa (hash: lwBd5Cu3FrXZsvsaCtwRFnBd3GgAPC6R4lTlq4TEtoA=) 3: 46A2104603CF11ECA480B07CC4F9AE02.roa (hash: 61lj5wie+0pD8A1NUVTU2Hvwb8qw4LnkXn9K+pXfJqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1571 (0x623) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB85A, serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Validity Not Before: Sep 18 22:46:18 2026 GMT Not After : Sep 25 22:46:18 2026 GMT Subject: CN=6aadbf3a-052c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b5:bb:97:7b:f2:f7:e2:90:3b:c0:7f:25:b0: 99:68:6d:d2:90:1f:38:8d:df:e0:7c:ab:1b:2a:93: 37:35:97:88:24:68:1f:b1:9e:f1:54:4a:3a:e0:1f: 3f:2c:50:b8:d9:bd:7c:15:f3:30:f5:00:f3:6c:34: b6:d4:34:ac:64:d7:7c:9c:40:40:30:e6:e0:fa:86: 95:fa:4b:8f:86:cb:c6:03:f5:cf:8d:fe:d7:1a:15: 58:f4:ea:5b:86:57:34:34:24:c6:cd:53:24:1a:86: 18:9e:ec:64:47:5c:fe:24:a7:30:9a:b7:b3:b6:0d: 30:2b:2e:59:84:74:1d:1e:05:69:fa:7e:fd:35:d3: e2:99:23:90:6d:fd:d2:99:2b:e9:01:99:77:79:26: 9c:c2:4e:1e:8c:b1:b3:09:ea:a9:ff:9a:74:aa:16: 5d:7b:44:fb:31:69:09:be:20:4d:cc:18:88:a3:c9: a0:b5:96:db:7d:b4:01:03:36:8c:c4:42:f5:be:78: 89:e1:96:de:fe:c3:93:ae:88:49:36:18:b3:f3:e3: 5b:35:5c:5d:7b:27:5b:e7:8e:91:54:d3:05:e8:80: 26:bf:a0:67:b3:61:17:39:13:24:c1:b9:75:41:09: 99:0c:f0:fb:c6:b3:d7:c6:a1:f4:31:38:ba:12:d5: 61:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:70:C6:C7:64:C7:BF:03:30:64:06:96:47:20:31:45:FD:F3:B6:43 X509v3 Authority Key Identifier: keyid:9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:f6:a2:0b:76:60:f0:35:3a:4e:95:6f:1b:72:52:4a:de:f2: ad:df:e9:1b:97:b5:dd:3d:6f:ac:5a:bc:37:26:9d:83:97:93: 1d:8a:d7:7f:e6:71:30:1b:4b:56:09:49:48:0c:36:05:94:1f: 59:fc:ea:e1:12:17:fd:c7:dd:26:05:fe:90:96:54:2f:f9:1e: bc:2b:c9:70:a9:32:27:d2:01:e0:1d:ad:ec:79:71:d0:e8:b9: bb:19:02:37:c6:5c:4d:44:4a:8e:76:12:8c:17:cc:f5:bc:cc: d9:91:aa:c0:2d:51:a0:30:13:d0:4f:55:22:90:5b:8d:df:f2: 28:c0:f3:35:cd:8b:bf:10:07:44:5c:59:24:eb:bc:2a:44:3f: 82:29:2c:e4:34:33:04:ac:bf:9a:f8:0a:49:7e:8a:e5:05:d5: 44:a1:35:90:4e:91:a8:69:9f:82:a4:3d:e5:15:7a:88:27:9c: 5a:72:10:70:b8:b0:0e:20:dd:c6:27:59:2f:08:1a:83:12:7a: 9b:b2:2e:0f:a8:ec:6b:24:a9:56:e0:33:b2:de:6b:cb:18:99: c4:61:97:af:0a:be:e4:c4:18:73:fa:5a:1d:37:1f:dc:83:7b: 4f:ee:54:92:5d:88:bc:8b:55:32:b6:c5:92:9f:f9:73:8b:22: 42:15:54:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI4NUExMTAvBgNVBAUTKDlEOUMwMDhBMTJBMkY3QTYwRkVGRjk2MjI2NkIwNTAy QTFDQTBCQTIwHhcNMjYwOTE4MjI0NjE4WhcNMjYwOTI1MjI0NjE4WjAYMRYwFAYD VQQDEw02YWFkYmYzYS0wNTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLW7l3vy9+KQO8B/JbCZaG3SkB84jd/gfKsbKpM3NZeIJGgfsZ7xVEo64B8/ LFC42b18FfMw9QDzbDS21DSsZNd8nEBAMObg+oaV+kuPhsvGA/XPjf7XGhVY9Opb hlc0NCTGzVMkGoYYnuxkR1z+JKcwmreztg0wKy5ZhHQdHgVp+n79NdPimSOQbf3S mSvpAZl3eSacwk4ejLGzCeqp/5p0qhZde0T7MWkJviBNzBiIo8mgtZbbfbQBAzaM xEL1vniJ4Zbe/sOTrohJNhiz8+NbNVxdeydb546RVNMF6IAmv6Bns2EXORMkwbl1 QQmZDPD7xrPXxqH0MTi6EtVh9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJJwxsdk x78DMGQGlkcgMUX987ZDMB8GA1UdIwQYMBaAFJ2cAIoSovemD+/5YiZrBQKhygui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjg1QS8xODVDMzlCNjAz Q0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2WVA3X2xpSm1zRkFxSEtD NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25ad0FpaEtpOTZZUDdfbGlKbXNGQXFIS0M2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjg1QS8xODVDMzlCNjAzQ0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2 WVA3X2xpSm1zRkFxSEtDNkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk/aiC3Zg8DU6TpVvG3JSSt7yrd/pG5e13T1vrFq8Nyadg5eTHYrXf+ZxMBtL VglJSAw2BZQfWfzq4RIX/cfdJgX+kJZUL/kevCvJcKkyJ9IB4B2t7Hlx0Oi5uxkC N8ZcTURKjnYSjBfM9bzM2ZGqwC1RoDAT0E9VIpBbjd/yKMDzNc2LvxAHRFxZJOu8 KkQ/giks5DQzBKy/mvgKSX6K5QXVRKE1kE6RqGmfgqQ95RV6iCecWnIQcLiwDiDd xidZLwgagxJ6m7IuD6jsaySpVuAzst5ryxiZxGGXrwq+5MQYc/paHTcf3IN7T+5U kl2IvItVMrbFkp/5c4siQhVUOg== -----END CERTIFICATE-----Generated at Sun Sep 20 21:55:39 2026 by rpki-client