$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft File: nssirN4JZ6BYN-WPxzHTV-N2N_g.mft (raw, json) Hash identifier: YIQHw1dg4RtYUJnCuiLIh2T+BNnQ2vdtOSlMlj+st3E= Subject key identifier: 47:04:A5:D4:AD:16:C2:2E:56:A2:A5:4D:5C:38:62:4B:E7:F2:E5:B8 Authority key identifier: 9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 Certificate issuer: /CN=A91C6B27/serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Certificate serial: 0C88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft Manifest number: 0C6A Signing time: Fri 16 Oct 2026 18:49:56 +0000 Manifest this update: Fri 16 Oct 2026 18:49:56 +0000 Manifest next update: Fri 23 Oct 2026 18:49:56 +0000 Files and hashes: 1: nssirN4JZ6BYN-WPxzHTV-N2N_g.crl (hash: zVpRIXJLSeojWAHHwYwLeuLReAfdw6FosLJmY3mTQw0=) 2: 2B1D3BB2305811EA8D5B6479C4F9AE02.roa (hash: J7bgw3OjD+bEqGEXKo8Fs8Z0MR84T96zJE637Xnk50M=) 3: E4BB99E2336E11EA94623E18C4F9AE02.roa (hash: J0oU2FppnlReFBA754sQNYwJm5OEtnlNnJ9xN5pwhNU=) 4: E5675F48336E11EA94623E18C4F9AE02.roa (hash: rQw9zG+Y16msUrYZiSuHrHjmx364wl+z/+PI4vW3/Yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Oct 2026 18:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3208 (0xc88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6B27, serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Validity Not Before: Oct 16 18:49:56 2026 GMT Not After : Oct 23 18:49:56 2026 GMT Subject: CN=6ad271d4-c31d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:81:cf:7b:cf:83:09:d0:7c:89:53:c6:08:72: 6d:5e:6f:1c:56:93:78:84:71:68:24:ee:ea:a8:28: 42:b4:17:f0:47:1c:a5:f7:81:80:7a:d2:e6:38:f8: 09:31:1f:df:bb:76:32:4a:d8:c7:b2:fa:a2:01:39: 8f:0d:65:46:e2:48:72:b6:48:ab:60:dd:33:68:98: ab:6b:04:de:18:03:17:54:77:e6:c6:5e:d2:98:f2: da:c0:18:ef:cc:b5:94:1b:12:cd:9d:82:31:5f:51: 79:99:ab:08:6f:2a:10:3f:06:ad:ee:26:62:e4:79: 70:be:7f:cf:ed:5e:a3:73:ba:33:b4:68:e9:b4:4f: e1:a1:bc:74:68:ed:e1:5f:09:e5:c6:0a:67:1d:25: bd:9e:fc:37:90:43:8d:29:ae:b8:e6:e6:f8:21:ee: 02:b5:10:74:e8:d5:f8:9e:fa:e0:2c:9c:2e:ce:c5: 6c:6d:92:59:46:be:80:fd:e5:77:e9:f6:da:ad:13: 39:3d:a5:1f:19:32:32:15:a0:df:3d:42:f2:88:2e: 46:63:85:45:5d:b3:06:ec:72:c1:6b:56:98:e7:aa: b0:c1:a4:75:9f:a1:04:4d:0f:fa:24:4c:d9:db:62: 84:12:df:6d:6c:86:94:29:ea:20:9f:9f:30:ae:d2: fa:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:04:A5:D4:AD:16:C2:2E:56:A2:A5:4D:5C:38:62:4B:E7:F2:E5:B8 X509v3 Authority Key Identifier: keyid:9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:c9:8d:4d:9c:50:10:d7:80:07:e3:81:dd:bd:2e:b8:85:97: 22:23:31:d8:32:48:e9:78:80:a7:9b:a9:03:d6:00:a6:98:76: ac:87:f1:f1:fb:13:ad:38:0e:02:18:01:a3:a0:1b:f5:06:96: 26:e5:53:42:86:30:9a:0f:bf:3a:0a:72:0c:47:c6:40:7a:9d: 50:70:06:7d:06:d4:04:75:87:42:77:3b:b1:3e:5e:ef:25:b3: 36:27:54:f0:22:5c:2b:f0:c1:e4:25:f9:0a:c7:c3:eb:ab:f9: be:7d:71:7b:25:d3:12:9f:e2:9f:a8:d2:bb:bf:57:ed:03:76: fb:a8:38:d2:1e:aa:49:98:87:cb:8b:9f:8f:e4:63:e9:52:8d: 4b:67:2a:dc:b4:69:70:b1:7f:82:fe:1b:66:00:72:aa:83:a5: a8:4b:22:1a:ba:eb:85:b4:94:f6:71:74:75:8a:cb:9a:1d:78: a9:a5:46:9e:0b:1d:c5:d6:f5:5e:85:1b:eb:5b:93:69:7e:ae: 55:cf:83:c4:60:b1:3d:6a:30:fb:6d:7d:89:a4:ff:18:e9:cb: 10:56:84:d4:7c:2e:c8:c8:a1:5c:37:1f:6c:38:21:fd:c1:0a: 87:3f:a2:e7:b0:df:e2:b7:0d:69:d6:02:1a:d9:89:a0:d2:01: 3b:23:81:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCMjcxMTAvBgNVBAUTKDlFQ0IyMkFDREUwOTY3QTA1ODM3RTU4RkM3MzFEMzU3 RTM3NjM3RjgwHhcNMjYxMDE2MTg0OTU2WhcNMjYxMDIzMTg0OTU2WjAYMRYwFAYD VQQDEw02YWQyNzFkNC1jMzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4HPe8+DCdB8iVPGCHJtXm8cVpN4hHFoJO7qqChCtBfwRxyl94GAetLmOPgJ MR/fu3YyStjHsvqiATmPDWVG4khytkirYN0zaJirawTeGAMXVHfmxl7SmPLawBjv zLWUGxLNnYIxX1F5masIbyoQPwat7iZi5Hlwvn/P7V6jc7oztGjptE/hobx0aO3h XwnlxgpnHSW9nvw3kEONKa645ub4Ie4CtRB06NX4nvrgLJwuzsVsbZJZRr6A/eV3 6fbarRM5PaUfGTIyFaDfPULyiC5GY4VFXbMG7HLBa1aY56qwwaR1n6EETQ/6JEzZ 22KEEt9tbIaUKeogn58wrtL6zwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEcEpdSt FsIuVqKlTVw4Ykvn8uW4MB8GA1UdIwQYMBaAFJ7LIqzeCWegWDflj8cx01fjdjf4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkIyNy84MkJGMkJGNDMw NTQxMUVBQUZDOTExNkVDNEY5QUUwMi9uc3Npck40Slo2QllOLVdQeHpIVFYtTjJO X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25zc2lyTjRKWjZCWU4tV1B4ekhUVi1OMk5fZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkIyNy84MkJGMkJGNDMwNTQxMUVBQUZDOTExNkVDNEY5QUUwMi9uc3Npck40Slo2 QllOLVdQeHpIVFYtTjJOX2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgMmNTZxQENeAB+OB3b0uuIWXIiMx2DJI6XiAp5upA9YApph2rIfx8fsTrTgO AhgBo6Ab9QaWJuVTQoYwmg+/OgpyDEfGQHqdUHAGfQbUBHWHQnc7sT5e7yWzNidU 8CJcK/DB5CX5CsfD66v5vn1xeyXTEp/in6jSu79X7QN2+6g40h6qSZiHy4ufj+Rj 6VKNS2cq3LRpcLF/gv4bZgByqoOlqEsiGrrrhbSU9nF0dYrLmh14qaVGngsdxdb1 XoUb61uTaX6uVc+DxGCxPWow+219iaT/GOnLEFaE1HwuyMihXDcfbDgh/cEKhz+i 57Df4rcNadYCGtmJoNIBOyOBIA== -----END CERTIFICATE-----Generated at Sat Oct 17 13:03:54 2026 by rpki-client