$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft File: NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft (raw, json) Hash identifier: oH1lgb9Hb34upm6rQkNJXJd8TEg8bMJqjU2lOYOR+x0= Subject key identifier: 9F:B0:96:FB:38:F7:41:4D:52:FC:2B:F0:FE:21:B1:8A:AC:E2:EF:67 Authority key identifier: 34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA Certificate issuer: /CN=A91C99B4/serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA Certificate serial: 0834 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft Manifest number: 0801 Signing time: Mon 12 Oct 2026 21:32:16 +0000 Manifest this update: Mon 12 Oct 2026 21:32:15 +0000 Manifest next update: Mon 19 Oct 2026 21:32:15 +0000 Files and hashes: 1: NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl (hash: ko8Tw3sKTlMt/MejG803DwZAGo+Ss9wUXSnzHoB0f/A=) 2: F3BEC03CE13B11F090F650ED6F6F56BC.roa (hash: 73pAfLSC8B0XWc6KcAo6RSi0u4KosXge+3h5CVJGLfw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 21:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2100 (0x834) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C99B4, serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA Validity Not Before: Oct 12 21:32:15 2026 GMT Not After : Oct 19 21:32:15 2026 GMT Subject: CN=6acd51e0-5d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:f2:ac:3d:85:c2:32:82:3c:ed:f3:21:a3: 67:0f:ff:50:da:bb:28:e3:0f:aa:08:03:11:39:d4: 29:8b:1c:40:42:eb:dd:be:ab:26:81:e3:ad:97:9c: f2:58:e5:ec:2b:db:cc:c1:51:47:96:16:e5:f2:2b: e0:9f:5e:0b:3d:25:77:93:ac:56:c3:d6:81:7d:fb: 58:ce:61:2f:1e:5c:94:d8:c7:ed:b1:37:55:8f:18: b7:72:6f:47:0e:02:53:2b:8e:1c:a7:9c:e8:d9:d9: 8a:da:92:34:ea:da:72:40:13:50:59:64:1f:1d:15: 64:14:d7:c2:b7:93:dd:2d:74:32:5d:74:ca:31:9a: 78:24:3a:15:1c:64:b5:13:a3:9b:33:d9:a5:57:d8: d4:6c:cf:06:8f:f5:91:b8:a6:e7:ee:92:5a:d3:32: f3:f0:6d:31:3c:d1:dd:92:52:4a:30:45:c9:49:4a: 72:8d:cd:da:86:a6:73:76:0d:9a:ad:3a:bd:db:fc: e2:82:01:91:45:12:7f:23:f0:2f:e3:78:01:d7:f3: 2b:67:2b:97:f9:06:31:7c:72:96:e5:48:a9:a1:db: 8e:f1:2f:86:29:2b:74:64:ca:9a:ee:07:79:99:e2: 9c:08:20:d1:c9:9f:ee:dc:3d:9d:ba:5a:71:16:81: eb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B0:96:FB:38:F7:41:4D:52:FC:2B:F0:FE:21:B1:8A:AC:E2:EF:67 X509v3 Authority Key Identifier: keyid:34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:dc:ba:c7:1c:4c:5e:75:f8:fc:ae:4a:a0:c3:b0:ae:76:41: 24:05:ea:3d:10:d5:fb:3f:0b:62:0a:99:0c:a0:2c:79:81:1d: 62:b5:8b:97:32:6a:b7:a1:76:62:86:5e:68:90:45:c1:c0:27: fd:43:33:da:b1:27:3b:30:b6:1d:7c:c4:78:9a:b9:83:5e:89: 77:9e:5b:5c:8e:cd:71:32:fe:a8:0c:5c:bd:20:25:04:f9:20: 12:0c:0c:2a:0c:71:4f:9e:bb:e9:81:d5:7f:70:ed:0d:0c:7e: d8:84:fb:66:d3:3f:01:48:51:74:12:8f:40:15:2a:d8:06:c7: 4a:d4:cb:fd:1a:cf:f7:6a:f9:33:ef:11:50:bf:5e:e1:8d:de: 0d:92:1c:4f:e9:9a:bb:bd:40:e2:ab:f0:6e:14:ea:0f:30:a3: 23:0c:38:7f:04:ce:55:8e:f2:9c:72:66:e8:1f:48:8d:f6:53: 7d:ca:3c:2f:f4:c8:5f:5e:32:ec:d8:76:44:05:dc:35:45:55: 59:4b:d2:ed:a3:69:19:36:28:21:ff:39:b2:57:7f:18:04:b5: 6a:20:3c:bb:00:ed:b3:0f:3b:3d:8b:85:82:1f:20:17:f9:1e: e5:5d:4a:ed:ca:7e:df:fc:f4:bd:a7:4e:6b:f6:8b:ee:37:59: 56:98:8a:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5QjQxMTAvBgNVBAUTKDM0OEJFNjY5NEVENzA0MUFBRjI4RDBFQzhDNkM2NTY1 NTkxRjJEREEwHhcNMjYxMDEyMjEzMjE1WhcNMjYxMDE5MjEzMjE1WjAYMRYwFAYD VQQDEw02YWNkNTFlMC01ZDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttnyrD2FwjKCPO3zIaNnD/9Q2rso4w+qCAMROdQpixxAQuvdvqsmgeOtl5zy WOXsK9vMwVFHlhbl8ivgn14LPSV3k6xWw9aBfftYzmEvHlyU2MftsTdVjxi3cm9H DgJTK44cp5zo2dmK2pI06tpyQBNQWWQfHRVkFNfCt5PdLXQyXXTKMZp4JDoVHGS1 E6ObM9mlV9jUbM8Gj/WRuKbn7pJa0zLz8G0xPNHdklJKMEXJSUpyjc3ahqZzdg2a rTq92/ziggGRRRJ/I/Av43gB1/MrZyuX+QYxfHKW5UipoduO8S+GKSt0ZMqa7gd5 meKcCCDRyZ/u3D2dulpxFoHrWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ+wlvs4 90FNUvwr8P4hsYqs4u9nMB8GA1UdIwQYMBaAFDSL5mlO1wQaryjQ7IxsZWVZHy3a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTlCNC81REU1OTY5NjU5 NDkxMUVCQTQ4Qzc4NzFDNEY5QUUwMi9OSXZtYVU3WEJCcXZLTkRzakd4bFpWa2ZM ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Jdm1hVTdYQkJxdktORHNqR3hsWlZrZkxkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTlCNC81REU1OTY5NjU5NDkxMUVCQTQ4Qzc4NzFDNEY5QUUwMi9OSXZtYVU3WEJC cXZLTkRzakd4bFpWa2ZMZG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYNy6xxxMXnX4/K5KoMOwrnZBJAXqPRDV+z8LYgqZDKAseYEdYrWLlzJqt6F2 YoZeaJBFwcAn/UMz2rEnOzC2HXzEeJq5g16Jd55bXI7NcTL+qAxcvSAlBPkgEgwM KgxxT5676YHVf3DtDQx+2IT7ZtM/AUhRdBKPQBUq2AbHStTL/RrP92r5M+8RUL9e 4Y3eDZIcT+mau71A4qvwbhTqDzCjIww4fwTOVY7ynHJm6B9IjfZTfco8L/TIX14y 7Nh2RAXcNUVVWUvS7aNpGTYoIf85sld/GAS1aiA8uwDtsw87PYuFgh8gF/ke5V1K 7cp+3/z0vadOa/aL7jdZVpiKhQ== -----END CERTIFICATE-----Generated at Tue Oct 13 09:00:56 2026 by rpki-client