$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft File: nEKLhAc-vngu7TP5LkDdc2GgnKo.mft (raw, json) Hash identifier: 4C0yGMkYx1OGrSpw2s9wcfQQKJvIOTX8M2yQWD6Hf7g= Subject key identifier: 96:47:60:68:9C:25:FB:73:09:DA:EE:A8:B9:59:FA:DA:B7:B5:DF:1F Authority key identifier: 9C:42:8B:84:07:3E:BE:78:2E:ED:33:F9:2E:40:DD:73:61:A0:9C:AA Certificate issuer: /CN=A91D8B6F/serialNumber=9C428B84073EBE782EED33F92E40DD7361A09CAA Certificate serial: 096E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft Manifest number: 0964 Signing time: Sun 20 Sep 2026 20:01:25 +0000 Manifest this update: Sun 20 Sep 2026 20:01:24 +0000 Manifest next update: Sun 27 Sep 2026 20:01:24 +0000 Files and hashes: 1: nEKLhAc-vngu7TP5LkDdc2GgnKo.crl (hash: +XwpqvdDfUTTX22rCbG2Qhgi+/jius6KkGL5BdNTATU=) 2: C592AFD286F111F19E006003A7EE528E.roa (hash: tDKWwcpnaZY1Mze9WS4S7X4lHgZRsJdlm83QRVgSUNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.crl rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2414 (0x96e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B6F, serialNumber=9C428B84073EBE782EED33F92E40DD7361A09CAA Validity Not Before: Sep 20 20:01:24 2026 GMT Not After : Sep 27 20:01:24 2026 GMT Subject: CN=6ab03b95-6ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3b:a7:34:9b:e1:ae:dd:df:f3:e8:eb:83:81: b3:df:97:7d:d8:83:3a:be:d3:fb:56:86:c5:7d:f3: 17:66:e2:a6:98:17:97:a4:36:a8:e7:e4:e9:12:3b: 5e:bb:fc:53:fb:64:a3:7f:be:0b:eb:ab:c0:83:9b: ee:77:12:21:23:b6:7a:2b:36:90:70:95:2c:0a:53: 09:dc:b9:33:d7:5f:dc:c8:75:27:55:1d:dc:1f:ff: 63:10:81:95:f7:c0:fe:a7:3d:d8:be:43:e5:1d:96: ce:46:a7:10:a9:ac:6d:9f:5a:c4:3e:fd:c8:9a:4b: 3c:bf:14:ae:c7:02:e4:9f:94:3f:73:10:b2:6a:48: ab:cb:f8:1a:36:b3:4a:27:5e:c0:09:fe:22:10:25: 3d:48:06:0c:6c:95:62:f9:50:e2:64:7d:e7:37:48: 3d:79:3d:50:7b:56:a5:60:0a:94:55:b5:7a:2b:98: c1:a1:b8:e1:3f:08:98:54:8f:9f:9c:3a:38:25:0a: 16:fd:e3:4b:62:29:55:bd:a7:40:54:94:8c:91:67: c8:f5:3b:ff:69:64:5a:a6:a3:8f:89:2f:03:85:b7: 73:31:6c:59:c4:52:55:63:d3:ce:14:74:1f:35:4c: e3:6d:78:cc:f5:ce:08:1c:e7:8c:7f:ac:8b:4d:2b: a2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:47:60:68:9C:25:FB:73:09:DA:EE:A8:B9:59:FA:DA:B7:B5:DF:1F X509v3 Authority Key Identifier: keyid:9C:42:8B:84:07:3E:BE:78:2E:ED:33:F9:2E:40:DD:73:61:A0:9C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:28:df:14:15:9a:d4:a1:47:2b:5c:0f:26:db:d2:c4:81:75: 58:14:46:31:a9:d7:ab:25:bf:ea:6d:4e:90:62:5f:6a:65:dc: 84:30:d7:cb:65:fa:4a:7b:bf:d1:27:ae:c5:25:6b:61:9a:90: 19:ef:fb:65:54:5f:a6:f6:cf:06:a3:14:88:04:88:9f:d8:fb: df:56:52:24:4c:85:7c:e9:d4:a3:ab:89:09:54:2f:91:df:71: f5:06:17:bb:43:9a:2f:77:ed:fa:99:22:fd:5d:40:9d:35:5e: df:b7:c5:25:1d:98:9e:b0:1b:e0:0e:61:74:8e:da:a1:32:b6: fa:87:fe:ce:a8:43:d3:b4:b9:f5:97:88:ab:7f:7f:f8:77:5a: 98:65:d1:c6:07:a5:f5:56:2c:0a:0d:8a:73:c1:bc:80:a3:fd: bc:1b:73:57:38:cb:d5:f9:1d:d3:24:a8:bf:1b:d7:29:69:7e: 28:75:2b:e5:72:7f:03:88:f9:1b:ac:90:a6:a6:34:e9:5e:0c: e0:d0:6c:89:d3:5d:4b:c9:95:38:30:9f:3e:b8:02:4b:f1:4f: 63:b2:c8:89:09:1a:cb:d6:c8:80:5b:07:51:7d:2a:73:dd:b3: 10:e5:42:ce:69:1b:a4:fb:cc:08:cc:24:ac:e1:0e:fd:bd:2a: d9:34:ca:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCNkYxMTAvBgNVBAUTKDlDNDI4Qjg0MDczRUJFNzgyRUVEMzNGOTJFNDBERDcz NjFBMDlDQUEwHhcNMjYwOTIwMjAwMTI0WhcNMjYwOTI3MjAwMTI0WjAYMRYwFAYD VQQDEw02YWIwM2I5NS02Y2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozunNJvhrt3f8+jrg4Gz35d92IM6vtP7VobFffMXZuKmmBeXpDao5+TpEjte u/xT+2Sjf74L66vAg5vudxIhI7Z6KzaQcJUsClMJ3Lkz11/cyHUnVR3cH/9jEIGV 98D+pz3YvkPlHZbORqcQqaxtn1rEPv3Imks8vxSuxwLkn5Q/cxCyakiry/gaNrNK J17ACf4iECU9SAYMbJVi+VDiZH3nN0g9eT1Qe1alYAqUVbV6K5jBobjhPwiYVI+f nDo4JQoW/eNLYilVvadAVJSMkWfI9Tv/aWRapqOPiS8DhbdzMWxZxFJVY9POFHQf NUzjbXjM9c4IHOeMf6yLTSuiBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJZHYGic JftzCdruqLlZ+tq3td8fMB8GA1UdIwQYMBaAFJxCi4QHPr54Lu0z+S5A3XNhoJyq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEI2Ri9FNDQ4QkYxOEM0 RUYxMUVBODdGNDM4MTBDNEY5QUUwMi9uRUtMaEFjLXZuZ3U3VFA1TGtEZGMyR2du S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25FS0xoQWMtdm5ndTdUUDVMa0RkYzJHZ25Lby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEI2Ri9FNDQ4QkYxOEM0RUYxMUVBODdGNDM4MTBDNEY5QUUwMi9uRUtMaEFjLXZu Z3U3VFA1TGtEZGMyR2duS28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyCjfFBWa1KFHK1wPJtvSxIF1WBRGManXqyW/6m1OkGJfamXchDDXy2X6Snu/ 0SeuxSVrYZqQGe/7ZVRfpvbPBqMUiASIn9j731ZSJEyFfOnUo6uJCVQvkd9x9QYX u0OaL3ft+pki/V1AnTVe37fFJR2YnrAb4A5hdI7aoTK2+of+zqhD07S59ZeIq39/ +HdamGXRxgel9VYsCg2Kc8G8gKP9vBtzVzjL1fkd0ySovxvXKWl+KHUr5XJ/A4j5 G6yQpqY06V4M4NBsidNdS8mVODCfPrgCS/FPY7LIiQkay9bIgFsHUX0qc92zEOVC zmkbpPvMCMwkrOEO/b0q2TTKRw== -----END CERTIFICATE-----Generated at Tue Sep 22 08:58:54 2026 by rpki-client