$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft File: NfWNhhxBvf6ka4xykLGqxnDnzBs.mft (raw, json) Hash identifier: rG8bUpuhokfTcWOkFzwkN02zVd/sq9XppIzhbYJP5rE= Subject key identifier: 96:D7:F0:3B:59:DE:F5:24:C4:76:C9:A9:56:1A:5C:77:70:32:7B:91 Authority key identifier: 35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B Certificate issuer: /CN=A91B35BB/serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Certificate serial: 0C43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft Manifest number: 0C30 Signing time: Fri 16 Oct 2026 18:56:09 +0000 Manifest this update: Fri 16 Oct 2026 18:56:09 +0000 Manifest next update: Fri 23 Oct 2026 18:56:09 +0000 Files and hashes: 1: NfWNhhxBvf6ka4xykLGqxnDnzBs.crl (hash: 0qkmc8i/J4nnITMbdQbVeX2RgO0Xx7Q6hmzXV4wv2yk=) 2: 8F9F2F823C0111EAB6CB9936C4F9AE02.roa (hash: zrbEpdPJC+D2d8+tTb0MQGcYEqeI6Y60eS+Lp/wlgrg=) 3: 902F47663C0111EAB6CB9936C4F9AE02.roa (hash: Gs/OJqCKd+Z2MrNkjskkMTrkotmVzq3GXlJl1vTfx3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Oct 2026 18:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3139 (0xc43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B35BB, serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Validity Not Before: Oct 16 18:56:09 2026 GMT Not After : Oct 23 18:56:09 2026 GMT Subject: CN=6ad27349-a177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ba:03:19:79:7a:4e:74:1e:4c:86:74:02:20: fe:ec:28:b0:b7:cc:b2:fa:2a:0b:c3:79:c1:f8:0c: f4:17:c8:41:e6:c7:d1:83:93:56:42:26:2d:e8:f6: 6a:b0:85:83:af:ff:b7:bf:96:ca:90:6d:52:f5:b1: ee:44:ac:9b:0a:d6:e7:7b:16:48:d8:0c:1a:42:77: e5:07:c5:1c:43:4f:52:e7:19:02:c3:d5:12:63:71: 02:f9:8a:8d:33:5f:45:76:d3:3e:8b:dc:db:9b:a1: aa:4d:2e:b4:22:16:46:a1:54:40:f6:11:fb:d9:0a: d6:ab:6a:86:1c:c4:a1:d1:49:60:77:a0:04:63:33: 19:cd:26:20:db:99:8d:5e:a6:a5:1c:85:a6:dc:05: ab:cb:3b:b4:16:d8:39:63:b8:5b:98:1f:6f:db:e6: fc:2b:5e:ff:7d:0c:02:8b:1e:3d:a3:1e:63:a7:08: 1c:87:cf:6b:5b:25:4f:e6:1a:f7:cf:45:b7:e6:1c: a1:93:37:67:d4:07:c5:fc:f6:c9:6c:ac:0e:d0:33: 6a:60:c7:39:29:6a:14:0a:20:9c:7c:20:a1:69:5c: 37:a3:fb:7c:1a:65:b0:d0:f5:e0:37:07:6f:0b:49: c5:80:e5:00:95:67:65:17:c9:e0:b3:b5:b5:10:e6: d5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D7:F0:3B:59:DE:F5:24:C4:76:C9:A9:56:1A:5C:77:70:32:7B:91 X509v3 Authority Key Identifier: keyid:35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a1:b6:87:be:49:3f:5a:10:98:c5:54:d6:9b:ff:11:87:26: 26:38:c6:26:fb:46:e0:6e:c6:06:76:79:58:0e:37:9f:9c:67: ff:86:91:d7:1a:3d:c6:f2:73:62:99:e3:f0:98:c7:5c:75:d2: 68:22:ed:b9:6a:6a:9c:60:bd:f6:38:26:a6:d9:5d:dc:3c:ef: 79:60:70:4b:d7:8f:b1:69:b9:78:89:36:b2:b2:13:66:25:72: f9:62:60:69:83:ca:d3:e9:e6:45:1a:a2:48:9b:95:ca:cf:4e: f3:1a:2f:fe:4b:0d:aa:a0:c1:87:b3:ca:03:82:a5:5b:60:81: 86:0c:d7:ea:bb:bc:18:9d:f5:4d:e5:d0:8b:83:e9:b0:4a:49: 90:ac:74:11:71:73:4e:c5:87:40:10:7b:d1:f5:a5:3c:16:a5: 2b:2f:a1:cf:92:5a:f4:3e:ff:a4:37:d6:3a:60:8a:8e:5c:0c: ec:0f:cc:17:1b:54:9f:8e:7c:6c:e4:33:b1:e7:a7:f0:5f:53: 1f:d0:69:e3:a3:7b:0c:95:46:4b:cc:37:e0:38:eb:d1:69:6f: 63:14:2a:1a:06:a9:23:e2:28:32:e0:c6:55:67:fc:13:9c:20: 24:db:f1:b2:7a:97:5e:f6:89:03:a3:18:9e:2b:51:6c:9e:02: f1:48:2c:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1QkIxMTAvBgNVBAUTKDM1RjU4RDg2MUM0MUJERkVBNDZCOEM3MjkwQjFBQUM2 NzBFN0NDMUIwHhcNMjYxMDE2MTg1NjA5WhcNMjYxMDIzMTg1NjA5WjAYMRYwFAYD VQQDEw02YWQyNzM0OS1hMTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLoDGXl6TnQeTIZ0AiD+7Ciwt8yy+ioLw3nB+Az0F8hB5sfRg5NWQiYt6PZq sIWDr/+3v5bKkG1S9bHuRKybCtbnexZI2AwaQnflB8UcQ09S5xkCw9USY3EC+YqN M19FdtM+i9zbm6GqTS60IhZGoVRA9hH72QrWq2qGHMSh0Ulgd6AEYzMZzSYg25mN XqalHIWm3AWryzu0Ftg5Y7hbmB9v2+b8K17/fQwCix49ox5jpwgch89rWyVP5hr3 z0W35hyhkzdn1AfF/PbJbKwO0DNqYMc5KWoUCiCcfCChaVw3o/t8GmWw0PXgNwdv C0nFgOUAlWdlF8ngs7W1EObVpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJbX8DtZ 3vUkxHbJqVYaXHdwMnuRMB8GA1UdIwQYMBaAFDX1jYYcQb3+pGuMcpCxqsZw58wb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzVCQi81Nzg5QjFBNDND MDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZmNmthNHh5a0xHcXhuRG56 QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mV05oaHhCdmY2a2E0eHlrTEdxeG5EbnpCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzVCQi81Nzg5QjFBNDNDMDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZm NmthNHh5a0xHcXhuRG56QnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfKG2h75JP1oQmMVU1pv/EYcmJjjGJvtG4G7GBnZ5WA43n5xn/4aR1xo9xvJz Ypnj8JjHXHXSaCLtuWpqnGC99jgmptld3DzveWBwS9ePsWm5eIk2srITZiVy+WJg aYPK0+nmRRqiSJuVys9O8xov/ksNqqDBh7PKA4KlW2CBhgzX6ru8GJ31TeXQi4Pp sEpJkKx0EXFzTsWHQBB70fWlPBalKy+hz5Ja9D7/pDfWOmCKjlwM7A/MFxtUn458 bOQzseen8F9TH9Bp46N7DJVGS8w34Djr0WlvYxQqGgapI+IoMuDGVWf8E5wgJNvx snqXXvaJA6MYnitRbJ4C8Ugs0g== -----END CERTIFICATE-----Generated at Sun Oct 18 02:27:47 2026 by rpki-client