$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: ol6Hmg0eg8P4Gy9LVKD7i1vLwQ+krDGdDLytA7fHdMg= Subject key identifier: 9E:D2:EF:0C:E3:EA:AC:65:B1:AB:87:D5:C8:DA:A9:C9:2B:A6:AB:F9 Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 023B Signing time: Thu 01 Oct 2026 03:23:15 +0000 Manifest this update: Thu 01 Oct 2026 03:23:14 +0000 Manifest next update: Thu 08 Oct 2026 03:23:14 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: kWmhwfbTfu6tLEDt1XhDGno3N3pc+IseDdTAwDfgoaw=) 2: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: 5pAydkFPBG/xNuitrTpbftHSJib51VywK3J+r7VMLUg=) 3: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: 6ItTRA5BinCfkM/YDEDL4VrpFPkwwb1Q479PqDEMyKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 03:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: Oct 1 03:23:14 2026 GMT Not After : Oct 8 03:23:14 2026 GMT Subject: CN=6abdd222-d75b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6b:59:3f:60:a7:ea:9b:95:a9:28:dc:b2:d5: 4e:a1:7f:33:e7:0b:65:d0:4e:61:68:8c:6c:07:72: ea:2a:6a:4e:e5:72:b8:75:3a:36:d2:bb:82:1b:a2: 04:30:2d:c0:be:c9:09:62:8f:e9:9f:c9:29:83:89: f0:cd:80:54:9a:d9:87:f3:b1:96:f8:a8:91:f1:17: 04:ea:1b:c1:ed:69:46:59:96:d7:9b:a9:59:fa:b8: ef:f5:32:7a:72:a5:57:0e:c0:65:63:17:71:d1:8c: 9a:37:e1:25:be:0c:f6:4f:db:ab:ec:46:63:1d:b1: 0e:73:d6:4a:5a:5e:23:44:72:67:8a:63:87:f5:74: 88:b4:be:9a:b8:2c:79:d0:fe:9c:95:78:2b:da:ec: c1:88:e3:24:17:43:39:87:77:ad:59:78:93:f0:05: f2:ae:bd:b2:4d:4c:3a:9e:f7:4f:ab:77:6c:27:fb: f1:da:4c:fe:b6:11:a7:ce:bb:b7:c9:51:0c:d5:82: e1:6f:ea:15:f9:f2:af:93:bd:50:ff:a9:64:37:75: 14:bf:a5:aa:f0:0e:88:57:23:e8:8f:e1:70:81:a1: 78:46:86:1d:b5:f9:df:dc:69:27:18:5c:9a:8c:1b: f4:65:e6:93:6d:e9:f9:2a:0b:63:29:d9:2f:f7:2a: e4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D2:EF:0C:E3:EA:AC:65:B1:AB:87:D5:C8:DA:A9:C9:2B:A6:AB:F9 X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:42:57:0d:81:e2:1a:b6:3d:aa:3f:a5:6d:7a:ae:ff:4a:5e: 45:18:b3:55:ba:6a:1e:b0:a7:b3:bc:1b:4e:81:38:52:41:ff: e5:99:fd:ea:6f:88:86:bf:60:23:14:b0:41:e4:fb:47:dc:54: b9:75:ab:bb:f5:1c:ae:f5:40:f8:4d:81:27:d8:87:97:f8:ca: d2:67:50:6a:79:19:a2:4e:04:99:bb:61:cc:04:19:c5:4d:92: 03:0f:73:7c:99:52:bb:eb:d3:56:32:99:9d:f4:f5:20:7c:cf: 0b:17:fd:89:77:60:fc:d9:62:ca:f2:64:b4:1f:aa:0c:b0:94: ac:e5:2a:27:79:af:6b:07:78:59:65:43:30:d1:24:35:2b:30: 57:e9:c0:8c:17:74:1e:dd:2e:e0:e4:62:40:ca:39:47:9c:0d: 77:0e:c1:0f:34:6b:a1:16:a0:c3:e8:89:1b:a3:14:24:e7:8a: d5:e4:0b:86:13:d7:07:11:cd:e7:6f:ed:75:00:41:5d:9c:a8: 2b:3c:b7:e8:a3:3f:f7:b7:42:4b:6e:09:8c:2a:6a:46:21:11: 44:f1:80:1a:a6:99:52:ca:38:ad:96:fc:c0:16:e4:72:ec:6e: 75:70:f8:cb:9a:2f:54:14:9c:63:b3:61:c2:cc:44:91:4b:3e: bd:1f:d0:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjYxMDAxMDMyMzE0WhcNMjYxMDA4MDMyMzE0WjAYMRYwFAYD VQQDEw02YWJkZDIyMi1kNzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGtZP2Cn6puVqSjcstVOoX8z5wtl0E5haIxsB3LqKmpO5XK4dTo20ruCG6IE MC3AvskJYo/pn8kpg4nwzYBUmtmH87GW+KiR8RcE6hvB7WlGWZbXm6lZ+rjv9TJ6 cqVXDsBlYxdx0YyaN+Elvgz2T9ur7EZjHbEOc9ZKWl4jRHJnimOH9XSItL6auCx5 0P6clXgr2uzBiOMkF0M5h3etWXiT8AXyrr2yTUw6nvdPq3dsJ/vx2kz+thGnzru3 yVEM1YLhb+oV+fKvk71Q/6lkN3UUv6Wq8A6IVyPoj+FwgaF4RoYdtfnf3GknGFya jBv0ZeaTben5KgtjKdkv9yrkBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ7S7wzj 6qxlsauH1cjaqckrpqv5MB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwkJXDYHiGrY9qj+lbXqu/0peRRizVbpqHrCns7wbToE4UkH/5Zn96m+Ihr9g IxSwQeT7R9xUuXWru/UcrvVA+E2BJ9iHl/jK0mdQankZok4EmbthzAQZxU2SAw9z fJlSu+vTVjKZnfT1IHzPCxf9iXdg/NliyvJktB+qDLCUrOUqJ3mvawd4WWVDMNEk NSswV+nAjBd0Ht0u4ORiQMo5R5wNdw7BDzRroRagw+iJG6MUJOeK1eQLhhPXBxHN 52/tdQBBXZyoKzy36KM/97dCS24JjCpqRiERRPGAGqaZUso4rZb8wBbkcuxudXD4 y5ovVBScY7NhwsxEkUs+vR/Qjg== -----END CERTIFICATE-----Generated at Thu Oct 1 13:37:18 2026 by rpki-client