$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft File: nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft (raw, json) Hash identifier: KrcwQowDYCbvHupkIAVvdXK7zcd6SBYsc4kdLY6S0uk= Subject key identifier: 72:67:6C:44:78:C2:17:6C:A9:E8:79:E7:BE:C9:DB:C9:78:F0:F9:D9 Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 Certificate issuer: /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft Manifest number: 0202 Signing time: Mon 21 Sep 2026 03:18:10 +0000 Manifest this update: Mon 21 Sep 2026 03:18:09 +0000 Manifest next update: Mon 28 Sep 2026 03:18:09 +0000 Files and hashes: 1: nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl (hash: 4kAs9yBKwmmZ2OwM13uBw5Tdtar8IVmLNlfTgB43mOw=) 2: 51E59058921B11EFB656CB41C4F9AE02.roa (hash: gnfLlur8gPdUkwqDHn+eOeiErOoehQs7kmodfs4S4jc=) 3: 09E42D1E921B11EF829E0041C4F9AE02.roa (hash: j9PF6XHW/9cjHdZemEYcO4bIyJTkShVbfz28uJrkeSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CAF, serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Validity Not Before: Sep 21 03:18:09 2026 GMT Not After : Sep 28 03:18:09 2026 GMT Subject: CN=6ab0a1f1-dd5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f0:74:5d:80:92:e1:8b:52:8c:b0:29:da:92: 7d:14:3d:79:fc:4a:e5:80:d3:46:aa:42:c9:ea:62: 1c:d3:40:96:18:fb:b7:ad:60:57:36:49:0d:ec:12: d5:4e:88:0d:fd:cf:1b:63:85:ed:4a:f1:4f:d1:32: d7:35:3c:7a:9c:92:79:30:db:66:50:4c:ba:6b:13: 62:4f:14:29:78:64:45:15:54:58:32:53:68:70:cf: 54:1e:6a:8e:86:8e:b4:f6:10:ed:e8:d8:3c:13:e4: c8:28:59:f9:de:17:4e:56:03:76:25:78:89:e8:cf: 21:2e:33:d5:0a:1d:3e:ab:b4:87:4f:58:56:73:6d: 47:24:b5:72:56:e4:54:bc:e6:c6:d7:d9:bc:52:56: 54:c0:89:cf:64:25:da:af:0f:88:be:b7:36:4c:ac: ce:ef:a1:19:b6:4f:39:b3:39:f1:70:43:9b:55:f2: 98:69:d1:22:9a:a8:30:a0:6c:47:11:a0:e4:50:6b: d9:18:5d:10:d0:f9:d8:26:ee:b8:d8:12:fa:19:42: d4:11:e1:ab:9a:ba:80:77:a9:b3:b8:98:09:c1:e1: ce:d1:3a:95:1d:d5:d2:fe:c0:96:05:55:e4:5e:7f: a9:c0:0f:03:d8:49:56:ef:fd:83:5d:3d:df:6e:0a: 5d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:67:6C:44:78:C2:17:6C:A9:E8:79:E7:BE:C9:DB:C9:78:F0:F9:D9 X509v3 Authority Key Identifier: keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:a5:fc:c7:8a:1e:a2:0e:05:7d:35:89:db:2a:6b:89:63:73: c6:4b:66:75:1e:75:b1:2d:15:f3:a1:e3:25:3b:60:ec:03:fd: 4c:1f:e1:3a:24:d7:bf:66:f7:be:a4:15:5b:ec:af:56:90:cc: 2b:9f:c7:a4:68:0f:42:7b:68:8a:7c:76:06:43:9d:71:22:af: 94:3e:86:81:e2:69:aa:ca:a3:2f:e9:25:fa:6b:b8:25:df:9e: 24:ca:15:20:63:e8:58:48:d4:18:05:e6:47:3d:20:fb:3a:99: 0b:ff:41:77:a3:9d:d4:ae:1a:6e:d6:4f:81:e5:45:14:90:24: 69:10:c1:c2:9d:33:98:f9:81:18:90:54:a7:eb:fe:5f:27:ad: f1:4e:56:2e:14:a0:04:9e:2c:e1:42:08:7f:35:05:8c:c9:2b: fd:97:35:77:d3:7e:f0:c9:b4:36:29:fb:10:75:5f:86:1e:fb: 2e:22:43:ec:60:72:c6:d6:e2:68:f2:45:40:b8:ac:dc:e5:b7: 76:4d:03:e8:46:35:05:0a:51:5b:b7:7e:b9:b9:2c:d6:6b:4c: 0f:64:3b:ce:16:79:b3:94:69:61:b6:da:bd:6e:ab:19:75:ff: e5:11:08:60:a7:c3:a1:56:4d:c7:bc:65:3d:40:fa:44:13:c5: 25:70:f7:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQUYxMTAvBgNVBAUTKDlGMDJEQTNBQjVGQjQ1MzE3NTA3QzQ4MDIxQ0UwQThC OTM3MjU1QzkwHhcNMjYwOTIxMDMxODA5WhcNMjYwOTI4MDMxODA5WjAYMRYwFAYD VQQDEw02YWIwYTFmMS1kZDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfB0XYCS4YtSjLAp2pJ9FD15/ErlgNNGqkLJ6mIc00CWGPu3rWBXNkkN7BLV TogN/c8bY4XtSvFP0TLXNTx6nJJ5MNtmUEy6axNiTxQpeGRFFVRYMlNocM9UHmqO ho609hDt6Ng8E+TIKFn53hdOVgN2JXiJ6M8hLjPVCh0+q7SHT1hWc21HJLVyVuRU vObG19m8UlZUwInPZCXarw+Ivrc2TKzO76EZtk85sznxcEObVfKYadEimqgwoGxH EaDkUGvZGF0Q0PnYJu642BL6GULUEeGrmrqAd6mzuJgJweHO0TqVHdXS/sCWBVXk Xn+pwA8D2ElW7/2DXT3fbgpdIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJnbER4 whdsqeh5577J28l48PnZMB8GA1UdIwQYMBaAFJ8C2jq1+0UxdQfEgCHOCouTclXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNBRi9GM0UwRkFFNEI2 RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JURjFCOFNBSWM0S2k1TnlW Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL253TGFPclg3UlRGMUI4U0FJYzRLaTVOeVZjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNBRi9GM0UwRkFFNEI2RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JU RjFCOFNBSWM0S2k1TnlWY2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA3qX8x4oeog4FfTWJ2ypriWNzxktmdR51sS0V86HjJTtg7AP9TB/hOiTXv2b3 vqQVW+yvVpDMK5/HpGgPQntoinx2BkOdcSKvlD6GgeJpqsqjL+kl+mu4Jd+eJMoV IGPoWEjUGAXmRz0g+zqZC/9Bd6Od1K4abtZPgeVFFJAkaRDBwp0zmPmBGJBUp+v+ Xyet8U5WLhSgBJ4s4UIIfzUFjMkr/Zc1d9N+8Mm0Nin7EHVfhh77LiJD7GByxtbi aPJFQLis3OW3dk0D6EY1BQpRW7d+ubks1mtMD2Q7zhZ5s5RpYbbavW6rGXX/5REI YKfDoVZNx7xlPUD6RBPFJXD3nA== -----END CERTIFICATE-----Generated at Tue Sep 22 22:59:23 2026 by rpki-client