$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft File: nJSl3M9qZbaJhscEOEbHIb0zvpk.mft (raw, json) Hash identifier: a9kdt24l61qEtNANM5qg25WmN0jQDXR4Jl6RYBnsuiY= Subject key identifier: C4:72:C9:24:E7:0A:E9:D0:68:4B:13:2B:D5:66:5A:20:84:88:31:B8 Authority key identifier: 9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99 Certificate issuer: /CN=A91D66A0/serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99 Certificate serial: 0E3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft Manifest number: 0E21 Signing time: Tue 06 Oct 2026 17:54:12 +0000 Manifest this update: Tue 06 Oct 2026 17:54:11 +0000 Manifest next update: Tue 13 Oct 2026 17:54:11 +0000 Files and hashes: 1: nJSl3M9qZbaJhscEOEbHIb0zvpk.crl (hash: dwzIyJybMpswpQSlFPK+3FDmBWTZpvANcVweUA/E2Ko=) 2: 2B17862A82EE11EAB170FD4BC4F9AE02.roa (hash: z7n2Ro4Gkp0kvswymZ3NmSJNOHu0kHCX/BYv3spailI=) 3: 064D129A56EA11EA84DC982BC4F9AE02.roa (hash: /XXsn5P+CzGOi6w4JWRUAkj1a3bzJJfkjs3Rtf98gFg=) 4: 2BABEEB482EE11EAB170FD4BC4F9AE02.roa (hash: CG6vYgZ1e3/8dZN64pHrnStSPG3URxAwT0J40lVEYis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 17:54:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3645 (0xe3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D66A0, serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99 Validity Not Before: Oct 6 17:54:11 2026 GMT Not After : Oct 13 17:54:11 2026 GMT Subject: CN=6ac535c4-5d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:04:31:30:ed:42:6c:dc:9b:be:f7:f2:1f:af: 4e:78:8b:4b:75:c0:77:3c:03:c2:0c:e9:cd:62:01: 50:76:89:a8:89:54:ce:8c:ab:01:6c:ee:2b:ab:bc: 91:35:1d:26:52:94:60:45:19:bd:11:b6:fe:6d:37: 04:41:72:33:a9:52:74:13:37:19:9a:f3:d2:cb:1b: 93:26:b3:5d:67:6e:01:d2:99:f3:f9:45:6e:84:21: c5:e3:8b:ef:75:ec:51:d9:12:9d:90:0b:eb:f8:38: d8:bb:7d:2d:7b:01:d2:0f:a5:15:bd:ed:00:5f:ad: 96:d2:07:6a:d9:36:30:5e:44:f2:52:7c:68:21:e1: 61:50:c5:a4:ea:f0:e7:76:e1:27:ff:5d:48:c0:7e: c3:71:de:63:78:3c:ae:d0:24:0f:37:09:cc:ce:09: 08:b5:9b:34:c2:02:af:23:56:21:4a:ac:9a:b2:10: 3e:cf:1d:eb:d1:97:21:98:9d:2e:31:87:4f:5d:2c: 97:c0:18:03:e3:b3:fb:9a:59:f8:bf:f4:52:e4:ea: b7:07:df:24:dd:a4:ce:f3:85:fb:52:4d:19:d6:98: 4c:37:5d:7a:8b:b2:3d:b1:ef:dd:78:f5:7e:ef:68: b7:c6:3d:ae:4b:cb:0e:f1:b2:d4:fa:59:be:a3:1f: 6e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:72:C9:24:E7:0A:E9:D0:68:4B:13:2B:D5:66:5A:20:84:88:31:B8 X509v3 Authority Key Identifier: keyid:9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:0f:bf:43:01:99:2d:df:70:f4:30:75:2b:c5:f8:1a:9b:bf: 2c:e6:54:ed:98:85:d6:b0:7f:73:6d:00:84:67:74:67:8c:a7: 9b:6a:2e:d1:aa:40:b1:cc:9d:2c:24:dc:0d:24:45:93:58:01: 69:94:6e:f3:e0:cb:6b:f7:a9:ed:d8:28:9c:44:c3:a6:29:49: ea:5c:63:83:e2:ca:78:df:96:30:c8:7c:6c:ad:57:cc:ba:0c: 7a:55:19:f9:85:d4:99:72:30:d7:8d:7d:e4:09:b6:a3:21:69: 51:34:75:f8:59:bb:2f:cc:a4:16:68:62:2a:46:41:74:cb:11: 54:ee:ad:74:bf:46:7b:fe:c7:7d:18:de:4a:6d:9c:92:17:86: c5:e5:73:ed:27:30:6f:e3:74:48:87:a6:54:6f:5e:e0:66:2b: 87:90:b5:2d:96:e3:c7:38:04:bf:06:4f:79:e0:10:f6:4f:95: 24:4c:ba:57:b2:35:a8:67:59:c9:5d:72:cd:90:03:2d:16:17: d1:39:1e:24:a6:cd:ba:26:1d:ba:b2:ac:41:40:9e:5e:2c:d9: c6:a3:62:79:5b:2f:9a:0a:fb:68:78:29:73:7e:b6:79:98:d6: d2:23:46:a3:01:a8:93:30:62:50:c7:4d:5e:82:ec:5e:50:1f: a5:a5:d4:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY2QTAxMTAvBgNVBAUTKDlDOTRBNURDQ0Y2QTY1QjY4OTg2QzcwNDM4NDZDNzIx QkQzM0JFOTkwHhcNMjYxMDA2MTc1NDExWhcNMjYxMDEzMTc1NDExWjAYMRYwFAYD VQQDEw02YWM1MzVjNC01ZDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkQQxMO1CbNybvvfyH69OeItLdcB3PAPCDOnNYgFQdomoiVTOjKsBbO4rq7yR NR0mUpRgRRm9Ebb+bTcEQXIzqVJ0EzcZmvPSyxuTJrNdZ24B0pnz+UVuhCHF44vv dexR2RKdkAvr+DjYu30tewHSD6UVve0AX62W0gdq2TYwXkTyUnxoIeFhUMWk6vDn duEn/11IwH7Dcd5jeDyu0CQPNwnMzgkItZs0wgKvI1YhSqyashA+zx3r0ZchmJ0u MYdPXSyXwBgD47P7mln4v/RS5Oq3B98k3aTO84X7Uk0Z1phMN116i7I9se/dePV+ 72i3xj2uS8sO8bLU+lm+ox9uuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMRyySTn CunQaEsTK9VmWiCEiDG4MB8GA1UdIwQYMBaAFJyUpdzPamW2iYbHBDhGxyG9M76Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjZBMC82MjVGRjcyNkQ5 RTcxMUU5ODgwNTQwMTZDNEY5QUUwMi9uSlNsM005cVpiYUpoc2NFT0ViSEliMHp2 cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25KU2wzTTlxWmJhSmhzY0VPRWJISWIwenZway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjZBMC82MjVGRjcyNkQ5RTcxMUU5ODgwNTQwMTZDNEY5QUUwMi9uSlNsM005cVpi YUpoc2NFT0ViSEliMHp2cGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbQ+/QwGZLd9w9DB1K8X4Gpu/LOZU7ZiF1rB/c20AhGd0Z4ynm2ou0apAscyd LCTcDSRFk1gBaZRu8+DLa/ep7dgonETDpilJ6lxjg+LKeN+WMMh8bK1XzLoMelUZ +YXUmXIw14195Am2oyFpUTR1+Fm7L8ykFmhiKkZBdMsRVO6tdL9Ge/7HfRjeSm2c kheGxeVz7Scwb+N0SIemVG9e4GYrh5C1LZbjxzgEvwZPeeAQ9k+VJEy6V7I1qGdZ yV1yzZADLRYX0TkeJKbNuiYdurKsQUCeXizZxqNieVsvmgr7aHgpc362eZjW0iNG owGokzBiUMdNXoLsXlAfpaXUwQ== -----END CERTIFICATE-----Generated at Thu Oct 8 10:52:59 2026 by rpki-client