$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft File: nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft (raw, json) Hash identifier: QX8uBjJu9s5sGroqm87T0PtWv3EIOsqlhMQ0whN/NwE= Subject key identifier: 83:68:D6:39:53:35:B2:F3:89:5B:9A:D7:ED:0A:BF:D1:2F:C2:5B:4D Authority key identifier: 9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39 Certificate issuer: /CN=A91AE8D7/serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft Manifest number: 012B Signing time: Sun 11 Oct 2026 06:15:35 +0000 Manifest this update: Sun 11 Oct 2026 06:15:35 +0000 Manifest next update: Sun 18 Oct 2026 06:15:35 +0000 Files and hashes: 1: nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl (hash: w/bnis7aEn2MzQlSczFzX6RM0o7fvFsoEHqj5jmlhHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 06:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE8D7, serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39 Validity Not Before: Oct 11 06:15:35 2026 GMT Not After : Oct 18 06:15:35 2026 GMT Subject: CN=6acb2987-915d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e7:a6:a5:97:03:ca:7b:d6:bf:e9:e8:8d:8d: e9:5f:75:6b:a5:8f:ef:08:79:37:72:a9:e1:b3:18: b0:8a:bd:29:50:fc:11:ed:fd:08:5e:f3:c4:e3:c0: 76:98:32:97:17:ed:cc:d1:42:f3:7d:4a:9f:b8:73: b8:2c:fe:5b:35:85:65:a3:9c:e2:dd:b8:c5:b9:62: 30:e8:24:83:34:75:24:ec:60:2d:25:fb:6b:3f:d1: 8d:39:82:ff:df:01:fe:ab:17:bf:bc:05:31:84:3a: fc:6a:ce:3d:ab:1b:a9:d9:6b:fc:a9:89:54:57:93: a1:8c:c2:0c:18:86:d3:e9:29:6a:bd:48:ce:15:77: b2:04:30:d4:4e:23:ef:76:17:01:24:3e:8e:6e:41: ee:d6:b6:1a:c9:f7:05:ef:e1:eb:02:c7:8a:63:e1: 8a:fa:dd:1e:dc:7e:d1:34:bd:d7:d3:1f:d3:f2:3b: 73:75:9f:37:1d:3b:be:92:db:bd:80:11:9e:69:04: 6b:be:41:55:64:05:73:30:2f:3e:f5:a6:78:7e:4e: 84:67:fc:0a:84:28:ca:b6:a9:cd:52:b0:dc:38:53: 04:f2:87:9a:26:d5:70:09:27:5a:44:1d:26:46:42: 30:26:a5:e8:9e:e5:6d:5d:40:6f:5a:b8:d1:c6:3a: fe:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:68:D6:39:53:35:B2:F3:89:5B:9A:D7:ED:0A:BF:D1:2F:C2:5B:4D X509v3 Authority Key Identifier: keyid:9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:f0:38:c6:67:5a:cd:33:3c:12:e7:ee:fb:b1:7d:67:14:69: 72:c2:13:c5:7f:56:75:1a:4d:aa:8d:65:aa:6f:ee:02:92:57: d4:4f:03:aa:1b:87:76:a6:39:a5:e0:c6:35:88:73:72:53:d8: 03:ec:3a:4f:17:a3:f2:4a:a4:54:88:ac:12:28:08:a8:10:f4: cc:69:c3:26:b5:09:7b:2b:2a:4d:26:39:34:1f:cf:b1:21:44: 68:aa:f8:85:2f:dd:32:e7:b7:27:2c:e9:60:04:52:6a:4b:db: a7:09:f4:2b:99:b5:dc:c6:4f:f2:c4:fb:59:00:dc:3b:1b:3f: ee:30:32:b4:33:33:69:eb:89:4d:e2:60:0a:10:3a:64:d9:b0: 18:59:bf:7d:06:80:3a:6f:a2:2a:e0:db:c5:2c:93:3c:2e:c8: 03:53:5b:8c:43:b4:1b:59:8a:3d:0f:1a:8d:88:dd:6f:9e:4e: 4b:d5:05:d0:31:01:ca:d9:cd:49:4a:b1:fa:8a:62:8b:17:76: b6:25:fb:88:6e:a0:20:5c:6e:b1:10:2f:3c:2d:aa:fa:ab:25: d2:cd:0e:9f:38:23:28:9b:5d:1b:cf:8b:ee:9c:33:f7:97:6d: ed:3b:76:31:ee:a8:0a:fd:d9:a5:00:9b:8d:d2:38:fc:46:05: de:57:c1:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4RDcxMTAvBgNVBAUTKDlFNzFGQjcxQjY3MDBDNDA0NUE1QzM0MEMxOEYxMzBG MDg2MEFBMzkwHhcNMjYxMDExMDYxNTM1WhcNMjYxMDE4MDYxNTM1WjAYMRYwFAYD VQQDEw02YWNiMjk4Ny05MTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOempZcDynvWv+nojY3pX3VrpY/vCHk3cqnhsxiwir0pUPwR7f0IXvPE48B2 mDKXF+3M0ULzfUqfuHO4LP5bNYVlo5zi3bjFuWIw6CSDNHUk7GAtJftrP9GNOYL/ 3wH+qxe/vAUxhDr8as49qxup2Wv8qYlUV5OhjMIMGIbT6SlqvUjOFXeyBDDUTiPv dhcBJD6ObkHu1rYayfcF7+HrAseKY+GK+t0e3H7RNL3X0x/T8jtzdZ83HTu+ktu9 gBGeaQRrvkFVZAVzMC8+9aZ4fk6EZ/wKhCjKtqnNUrDcOFME8oeaJtVwCSdaRB0m RkIwJqXonuVtXUBvWrjRxjr+yQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFINo1jlT NbLziVua1+0Kv9EvwltNMB8GA1UdIwQYMBaAFJ5x+3G2cAxARaXDQMGPEw8IYKo5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRThENy81NDY2NkIzQ0Y5 M0YxMUVGQjdFQUI0MjVDNEY5QUUwMi9ubkg3Y2Jad0RFQkZwY05Bd1k4VER3aGdx amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25uSDdjYlp3REVCRnBjTkF3WThURHdoZ3Fqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RThENy81NDY2NkIzQ0Y5M0YxMUVGQjdFQUI0MjVDNEY5QUUwMi9ubkg3Y2Jad0RF QkZwY05Bd1k4VER3aGdxamsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqPA4xmdazTM8Eufu+7F9ZxRpcsITxX9WdRpNqo1lqm/uApJX1E8DqhuHdqY5 peDGNYhzclPYA+w6Txej8kqkVIisEigIqBD0zGnDJrUJeysqTSY5NB/PsSFEaKr4 hS/dMue3JyzpYARSakvbpwn0K5m13MZP8sT7WQDcOxs/7jAytDMzaeuJTeJgChA6 ZNmwGFm/fQaAOm+iKuDbxSyTPC7IA1NbjEO0G1mKPQ8ajYjdb55OS9UF0DEBytnN SUqx+opiixd2tiX7iG6gIFxusRAvPC2q+qsl0s0OnzgjKJtdG8+L7pwz95dt7Tt2 Me6oCv3ZpQCbjdI4/EYF3lfB1g== -----END CERTIFICATE-----Generated at Sun Oct 11 08:59:43 2026 by rpki-client