$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft File: nLpHShuO1MGFZBkQLgnuXvUcSaU.mft (raw, json) Hash identifier: AxrMUaJNVE9xwphEF2vQMT3bS/c+Vpe8LkpPLOve+58= Subject key identifier: 03:2A:68:C7:81:D8:51:01:84:64:92:AF:CE:C1:E1:47:1F:31:68:1A Authority key identifier: 9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5 Certificate issuer: /CN=A91D9B75/serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5 Certificate serial: 065A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft Manifest number: 0642 Signing time: Sun 20 Sep 2026 22:35:02 +0000 Manifest this update: Sun 20 Sep 2026 22:35:02 +0000 Manifest next update: Sun 27 Sep 2026 22:35:02 +0000 Files and hashes: 1: nLpHShuO1MGFZBkQLgnuXvUcSaU.crl (hash: RWLrpJoyI0GNa02MrO8xsiwRRGOeZHk1e8v09cSMz+A=) 2: F1C60FA653DC11EC90927C4DC4F9AE02.roa (hash: kd4W++lLTGLrW1TRbIqGEK/K3cCDQGLohESs97YdNDw=) 3: 5C5F31B09A2A11ECAEE8C819C4F9AE02.roa (hash: ps3uP3bdfTWHCJtuqapXsSdfwHZEG6iHNID4DsV8ynw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1626 (0x65a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9B75, serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5 Validity Not Before: Sep 20 22:35:02 2026 GMT Not After : Sep 27 22:35:02 2026 GMT Subject: CN=6ab05f96-fd72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:eb:fb:32:e2:d5:81:0f:bc:76:c5:bf:d6:9f: 89:bb:08:95:6a:9f:92:79:b4:16:c3:0a:91:43:9e: fe:b2:ac:da:91:96:2d:45:30:66:5e:98:62:13:e4: 0c:68:74:8d:44:c8:00:30:ec:45:fa:32:0c:0d:87: b3:bc:9e:c0:0a:07:85:4a:58:7b:8d:19:0c:51:92: f3:67:52:e0:04:45:64:71:8a:18:ce:19:30:ce:48: a6:0a:5d:95:73:55:65:bb:18:94:68:12:b3:a1:96: e3:76:be:c6:a5:2c:da:a6:df:7d:ca:ce:fb:f2:12: d8:18:82:ac:95:ec:7d:91:3b:02:bf:56:f6:85:56: 2c:84:c1:bb:56:04:33:75:e8:93:14:4e:b3:d3:8b: 90:4a:40:b9:19:f7:62:5b:fc:1e:9b:fe:eb:1c:7b: 2f:4e:fc:9b:fd:67:c1:95:f0:a9:47:15:56:ea:2c: af:52:44:b9:d3:73:d2:08:e9:47:fd:9b:f9:9b:26: 49:1d:b3:74:a1:97:9e:a0:99:20:b1:b4:44:e2:25: b2:af:e4:98:c3:88:d1:01:4a:28:34:ce:37:bc:35: 0a:2f:4b:e3:e5:e0:20:a7:c1:d4:d1:15:b5:57:29: 0c:04:79:b9:ea:18:d8:44:93:72:b0:40:73:25:ba: d7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2A:68:C7:81:D8:51:01:84:64:92:AF:CE:C1:E1:47:1F:31:68:1A X509v3 Authority Key Identifier: keyid:9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:92:73:40:ca:08:99:c5:5c:ff:3f:86:ec:31:35:8d:47:ae: 0c:0e:a1:b6:42:6a:56:d0:3c:4c:d6:b3:5c:0a:d8:89:43:e9: 9d:ae:0d:df:09:23:e1:b4:f2:8f:8f:e7:d5:a4:99:d6:71:ce: 77:3c:d8:42:c2:d2:44:2e:f7:da:d3:f6:b5:01:01:fc:f0:6a: 0c:09:31:69:9b:de:f4:19:de:1f:f1:1d:fc:f2:e4:4f:ab:82: e4:ca:9a:87:1a:37:83:b5:4d:af:dc:df:02:6b:51:32:4d:0c: 75:37:b0:8a:95:a0:76:89:5c:37:86:bf:e1:d5:fa:4a:6e:e8: 46:89:8d:6c:2b:6b:a1:8e:ed:73:b7:45:6b:40:89:fa:18:c4: 44:a5:c8:b2:86:97:3c:a0:c2:09:55:71:52:50:93:0d:87:70: ca:86:9d:6a:f8:2a:7a:b4:10:82:bd:71:78:3d:00:bf:f7:a8: e7:b6:b8:db:fc:90:2b:e7:c8:5d:aa:82:f0:84:d2:cd:bb:18: cc:18:47:9d:e9:51:2f:60:e8:2d:1b:cc:12:6c:79:31:94:b9: a3:ee:b8:f9:97:ee:df:f4:f0:87:67:ec:fd:59:11:56:a7:d2: af:ce:17:c1:d3:fa:2b:f1:41:68:88:77:98:9f:ed:82:2e:4b: 99:31:75:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlCNzUxMTAvBgNVBAUTKDlDQkE0NzRBMUI4RUQ0QzE4NTY0MTkxMDJFMDlFRTVF RjUxQzQ5QTUwHhcNMjYwOTIwMjIzNTAyWhcNMjYwOTI3MjIzNTAyWjAYMRYwFAYD VQQDEw02YWIwNWY5Ni1mZDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+v7MuLVgQ+8dsW/1p+JuwiVap+SebQWwwqRQ57+sqzakZYtRTBmXphiE+QM aHSNRMgAMOxF+jIMDYezvJ7ACgeFSlh7jRkMUZLzZ1LgBEVkcYoYzhkwzkimCl2V c1VluxiUaBKzoZbjdr7GpSzapt99ys778hLYGIKslex9kTsCv1b2hVYshMG7VgQz deiTFE6z04uQSkC5GfdiW/wem/7rHHsvTvyb/WfBlfCpRxVW6iyvUkS503PSCOlH /Zv5myZJHbN0oZeeoJkgsbRE4iWyr+SYw4jRAUooNM43vDUKL0vj5eAgp8HU0RW1 VykMBHm56hjYRJNysEBzJbrX3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAMqaMeB 2FEBhGSSr87B4UcfMWgaMB8GA1UdIwQYMBaAFJy6R0objtTBhWQZEC4J7l71HEml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUI3NS85QzAwMjAyRUY0 ODgxMUVCQThEQjdEMENDNEY5QUUwMi9uTHBIU2h1TzFNR0ZaQmtRTGdudVh2VWNT YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25McEhTaHVPMU1HRlpCa1FMZ251WHZVY1NhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUI3NS85QzAwMjAyRUY0ODgxMUVCQThEQjdEMENDNEY5QUUwMi9uTHBIU2h1TzFN R0ZaQmtRTGdudVh2VWNTYVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMZJzQMoImcVc/z+G7DE1jUeuDA6htkJqVtA8TNazXArYiUPpna4N3wkj4bTy j4/n1aSZ1nHOdzzYQsLSRC732tP2tQEB/PBqDAkxaZve9BneH/Ed/PLkT6uC5Mqa hxo3g7VNr9zfAmtRMk0MdTewipWgdolcN4a/4dX6Sm7oRomNbCtroY7tc7dFa0CJ +hjERKXIsoaXPKDCCVVxUlCTDYdwyoadavgqerQQgr1xeD0Av/eo57a42/yQK+fI XaqC8ITSzbsYzBhHnelRL2DoLRvMEmx5MZS5o+64+Zfu3/Twh2fs/VkRVqfSr84X wdP6K/FBaIh3mJ/tgi5LmTF18Q== -----END CERTIFICATE-----Generated at Mon Sep 21 17:36:47 2026 by rpki-client