$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft File: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft (raw, json) Hash identifier: U3fh+kAdoOIa/+C4lUmIgVJFo/Jco+LQnDeq+6LALwU= Subject key identifier: 5E:D5:39:01:D4:F8:9D:A0:3B:33:6E:41:87:25:67:23:1E:FB:31:AB Authority key identifier: 9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 Certificate issuer: /CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Certificate serial: 08FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft Manifest number: 08EF Signing time: Tue 22 Sep 2026 20:08:51 +0000 Manifest this update: Tue 22 Sep 2026 20:08:50 +0000 Manifest next update: Tue 29 Sep 2026 20:08:50 +0000 Files and hashes: 1: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl (hash: CA2NHBX9t4dDMZP/p80n3wtWcWkHKCevl41mQy9I/0w=) 2: 0BC9660CE3AC11EAAAC85761C4F9AE02.roa (hash: g2COT7RPieke6fn1mIweQAMXMPjqkWRMy/0gtbJP0o0=) 3: 0C5564C2E3AC11EAAAC85761C4F9AE02.roa (hash: q5Y0uGRmUCg4iSbCFOqAPFa+DSzHUTjKsRs6A7GCSWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2303 (0x8ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9702, serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Validity Not Before: Sep 22 20:08:50 2026 GMT Not After : Sep 29 20:08:50 2026 GMT Subject: CN=6ab2e053-3e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3f:37:8f:74:45:07:5c:00:b1:69:b9:f2:25: bd:c8:cb:c6:45:54:ac:33:36:fb:25:3d:04:7b:f8: b8:a6:3c:51:f4:9b:c6:f8:60:0e:e6:d7:84:97:94: 2c:0a:c5:8e:1f:0f:49:77:2b:3b:d6:b3:c1:36:77: eb:5d:a0:eb:ee:cd:37:69:89:fb:ed:67:8e:49:47: 50:3c:eb:62:b6:63:08:a6:e8:18:8f:82:0f:6b:35: 2a:4d:70:f4:f7:bb:d8:6a:b0:95:e4:5d:94:91:19: fa:9e:20:fb:9f:e4:10:2b:74:5d:0b:b6:87:e8:63: b6:87:0d:28:40:c2:69:3d:d8:39:82:73:52:22:d6: 59:d7:d8:55:3d:cd:f5:76:bb:22:78:29:5c:95:bd: c9:3c:7b:63:e3:6a:90:23:10:c9:b7:8e:bf:ce:fa: d5:fc:a3:42:4f:8c:f7:e7:37:71:d6:59:af:02:fb: e1:4f:2f:7a:f4:42:62:8d:a3:bc:58:e5:8a:d9:f4: 0e:ea:3b:c7:dd:e0:72:58:e0:c8:3f:2c:d5:28:29: 99:f9:4f:16:5d:45:f9:35:db:f2:5d:7a:f9:83:61: 73:8a:dd:d0:78:2d:22:37:48:09:7e:fe:6a:c4:b7: 6f:65:c1:ae:f8:f9:68:74:6b:28:7f:32:6a:44:08: 14:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D5:39:01:D4:F8:9D:A0:3B:33:6E:41:87:25:67:23:1E:FB:31:AB X509v3 Authority Key Identifier: keyid:9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:43:66:57:aa:36:93:b3:40:35:4f:ae:aa:78:cf:59:4b:6f: b4:9f:2a:56:03:93:d5:31:bb:7f:20:1b:0f:9b:07:af:9d:76: 24:c6:2c:6f:e8:2b:62:14:9b:ee:fb:9f:e2:43:4f:84:86:b3: 44:7e:58:48:93:ab:eb:fc:90:fc:52:1f:7b:e0:31:a0:d8:87: a8:df:1e:58:50:32:88:05:4f:b3:14:b6:5b:eb:0e:6f:1f:39: 1f:a0:18:08:bd:be:0c:15:89:44:54:2c:86:be:74:0b:40:08: b5:41:3e:be:40:27:e1:ef:04:ca:1f:dc:58:ab:d7:25:ec:93: e5:ac:22:6e:7f:c8:1f:53:67:37:83:1c:91:c1:3e:23:04:ad: 01:51:f0:48:cd:ca:02:e2:50:b9:9b:85:9a:3f:a3:a3:81:9b: a6:27:80:38:21:51:fe:c5:c4:00:70:a3:36:35:64:6e:67:d7: 5f:f3:0c:42:23:29:b6:8e:13:1b:1a:67:e1:2b:f7:f1:4a:c5: a2:e5:cb:44:d5:e9:1a:df:24:87:b8:06:aa:12:18:9a:45:fe: 92:99:b8:57:3c:59:1f:7d:60:7b:c5:7d:d5:86:21:34:c3:d6: 98:60:8d:f3:49:84:a4:8c:82:07:0a:8a:86:3e:d8:02:aa:cb: e1:e2:39:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk3MDIxMTAvBgNVBAUTKDlFNjM3NkE1RjJBQTNFMkM3RkY1NTJBRkI4QUY1MERB QzEzRDQ5QjcwHhcNMjYwOTIyMjAwODUwWhcNMjYwOTI5MjAwODUwWjAYMRYwFAYD VQQDEw02YWIyZTA1My0zZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsD83j3RFB1wAsWm58iW9yMvGRVSsMzb7JT0Ee/i4pjxR9JvG+GAO5teEl5Qs CsWOHw9Jdys71rPBNnfrXaDr7s03aYn77WeOSUdQPOtitmMIpugYj4IPazUqTXD0 97vYarCV5F2UkRn6niD7n+QQK3RdC7aH6GO2hw0oQMJpPdg5gnNSItZZ19hVPc31 drsieClclb3JPHtj42qQIxDJt46/zvrV/KNCT4z35zdx1lmvAvvhTy969EJijaO8 WOWK2fQO6jvH3eByWODIPyzVKCmZ+U8WXUX5NdvyXXr5g2Fzit3QeC0iN0gJfv5q xLdvZcGu+PlodGsofzJqRAgU6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF7VOQHU +J2gOzNuQYclZyMe+zGrMB8GA1UdIwQYMBaAFJ5jdqXyqj4sf/VSr7ivUNrBPUm3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTcwMi9FRjkxM0QyNkUz QUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBpeF85Vkt2dUs5UTJzRTlT YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tTjJwZktxUGl4XzlWS3Z1SzlRMnNFOVNiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTcwMi9FRjkxM0QyNkUzQUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBp eF85Vkt2dUs5UTJzRTlTYmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd0NmV6o2k7NANU+uqnjPWUtvtJ8qVgOT1TG7fyAbD5sHr512JMYsb+grYhSb 7vuf4kNPhIazRH5YSJOr6/yQ/FIfe+AxoNiHqN8eWFAyiAVPsxS2W+sObx85H6AY CL2+DBWJRFQshr50C0AItUE+vkAn4e8Eyh/cWKvXJeyT5awibn/IH1NnN4MckcE+ IwStAVHwSM3KAuJQuZuFmj+jo4GbpieAOCFR/sXEAHCjNjVkbmfXX/MMQiMpto4T Gxpn4Sv38UrFouXLRNXpGt8kh7gGqhIYmkX+kpm4VzxZH31ge8V91YYhNMPWmGCN 80mEpIyCBwqKhj7YAqrL4eI5Ow== -----END CERTIFICATE-----Generated at Wed Sep 23 02:59:07 2026 by rpki-client