$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft File: -NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft (raw, json) Hash identifier: 3qZ7ScZgg4O0dKpEzmnoAFVa69XGIK7DBbT/RHOcYSI= Subject key identifier: 34:20:D2:CE:63:20:BA:E2:39:5B:6A:85:97:98:5A:B9:BA:EF:71:6B Authority key identifier: F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54 Certificate issuer: /CN=A91DC46A/serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54 Certificate serial: 1F3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft Manifest number: 1EF8 Signing time: Mon 12 Oct 2026 16:05:13 +0000 Manifest this update: Mon 12 Oct 2026 16:05:12 +0000 Manifest next update: Mon 19 Oct 2026 16:05:12 +0000 Files and hashes: 1: -NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl (hash: nxKZNNu0M10RB+q7sm5lMGCqRgcozDpvzOus9iqCmCA=) 2: BD6571EEC0AC11EF8F832C34C4F9AE02.roa (hash: LnqeCppjvfZw+kjrXoa/2ToWPDmJSTa9ohrJhVPCflE=) 3: C86831A80CB311EDB2750F60C4F9AE02.roa (hash: RsEExvcwJC5E9KwjY1oAwXxgW1IttoQBiLKiJe8oXuE=) 4: 527AA5C69F4F11EAA7970484C4F9AE02.roa (hash: cWHGKEyK1/n+XzphhsGriIZiXwfaKLq/Wm0XGKlIaZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 16:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7995 (0x1f3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC46A, serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54 Validity Not Before: Oct 12 16:05:12 2026 GMT Not After : Oct 19 16:05:12 2026 GMT Subject: CN=6acd0539-e46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3b:b9:59:31:9a:3e:3b:7e:30:81:8f:be:4f: 60:49:26:17:89:fd:5b:47:b9:c1:cc:fc:c5:10:03: d2:0e:87:0b:76:0d:7e:c4:84:f4:fa:f2:cb:02:04: e5:01:ea:49:e2:c3:ea:1b:0c:b5:1f:8a:a8:69:07: 45:40:69:b7:ea:16:ab:d8:92:dd:b7:34:13:15:29: 91:da:d1:a4:21:f4:0f:13:3a:b6:56:11:69:61:0a: e9:12:11:ab:ba:a1:c0:97:f9:56:a0:53:fb:ca:14: 43:93:02:37:56:da:44:5e:a9:31:63:db:46:91:5e: bb:42:97:63:27:0b:aa:57:99:16:cc:25:4a:ae:61: c4:b2:43:b2:23:47:24:ef:9e:72:ec:0f:0e:1f:25: 0a:24:95:c0:1f:71:aa:a1:97:8f:ac:39:74:87:03: c6:26:94:64:47:46:1b:66:fd:54:7e:3f:8a:30:f2: 85:eb:1a:7d:7d:d9:fb:2c:1d:10:5a:d0:86:84:e1: ac:d9:63:05:01:66:aa:dd:72:e8:24:bc:87:2a:bb: 26:88:5e:55:e6:55:f3:0e:52:0b:57:04:da:c2:1c: 01:5b:e9:81:90:f7:ac:be:6c:25:83:fe:9f:fe:18: 68:eb:79:26:c4:0d:42:7d:f9:e0:f2:85:b6:11:b0: 60:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:20:D2:CE:63:20:BA:E2:39:5B:6A:85:97:98:5A:B9:BA:EF:71:6B X509v3 Authority Key Identifier: keyid:F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:38:9b:c4:3a:d3:4e:37:cc:00:19:e0:a1:b5:99:32:9a:22: ec:fa:e9:3e:0e:04:88:9e:1a:65:cb:ae:af:05:1a:a8:31:6b: 3b:d2:bc:77:34:31:dc:4d:00:1f:55:07:1c:7e:4e:2a:6b:6f: 4b:25:33:05:d7:17:a7:d7:c6:0d:87:d7:3c:d7:54:21:7b:d3: 85:0a:4b:0b:d6:2a:87:e5:17:9d:d5:24:a8:9d:6e:75:78:7d: 74:48:d8:7d:db:3b:6d:27:c7:6e:97:ac:bb:f4:6c:be:b2:d8: e3:f2:ef:40:b5:0e:73:ad:a2:bd:89:fa:52:c2:bb:2d:2a:de: 86:4f:cb:d3:5b:8d:78:56:11:0a:04:03:ee:4a:7c:80:95:85: ee:0b:6c:10:7d:89:f3:da:42:7a:c8:40:5d:5f:e1:79:d1:10: f5:69:8f:c8:a9:05:8b:d4:8b:9c:ab:e9:9a:2b:b3:dc:46:25: 47:51:b2:54:56:18:50:35:76:18:8e:90:3b:fd:4e:ea:51:fd: cb:67:86:b1:8f:86:96:96:87:8b:af:ca:e8:7a:c2:a9:0d:49: 00:23:3c:5d:a3:98:35:a1:8c:38:74:41:da:14:3a:ae:30:76: 8b:27:69:61:43:5d:c7:1a:26:48:ae:46:cc:7c:58:63:c8:ee: f8:88:4c:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM0NkExMTAvBgNVBAUTKEY4RDRBNjMyRDA2OTk2NEM2MUEzM0U0MUQ2MjQzRDUz NUIwMDdENTQwHhcNMjYxMDEyMTYwNTEyWhcNMjYxMDE5MTYwNTEyWjAYMRYwFAYD VQQDEw02YWNkMDUzOS1lNDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxju5WTGaPjt+MIGPvk9gSSYXif1bR7nBzPzFEAPSDocLdg1+xIT0+vLLAgTl AepJ4sPqGwy1H4qoaQdFQGm36har2JLdtzQTFSmR2tGkIfQPEzq2VhFpYQrpEhGr uqHAl/lWoFP7yhRDkwI3VtpEXqkxY9tGkV67QpdjJwuqV5kWzCVKrmHEskOyI0ck 755y7A8OHyUKJJXAH3GqoZePrDl0hwPGJpRkR0YbZv1Ufj+KMPKF6xp9fdn7LB0Q WtCGhOGs2WMFAWaq3XLoJLyHKrsmiF5V5lXzDlILVwTawhwBW+mBkPesvmwlg/6f /hho63kmxA1Cffng8oW2EbBgjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDQg0s5j ILriOVtqhZeYWrm673FrMB8GA1UdIwQYMBaAFPjUpjLQaZZMYaM+QdYkPVNbAH1U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzQ2QS8wMDUwMDE2NDk0 MzIxMUU2OEMxQjgyNEFDNEY5QUUwMi8tTlNtTXRCcGxreGhvejVCMWlROVUxc0Fm VlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1OU21NdEJwbGt4aG96NUIxaVE5VTFzQWZWUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzQ2QS8wMDUwMDE2NDk0MzIxMUU2OEMxQjgyNEFDNEY5QUUwMi8tTlNtTXRCcGxr eGhvejVCMWlROVUxc0FmVlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkTibxDrTTjfMABngobWZMpoi7PrpPg4EiJ4aZcuurwUaqDFrO9K8dzQx3E0A H1UHHH5OKmtvSyUzBdcXp9fGDYfXPNdUIXvThQpLC9Yqh+UXndUkqJ1udXh9dEjY fds7bSfHbpesu/RsvrLY4/LvQLUOc62ivYn6UsK7LSrehk/L01uNeFYRCgQD7kp8 gJWF7gtsEH2J89pCeshAXV/hedEQ9WmPyKkFi9SLnKvpmiuz3EYlR1GyVFYYUDV2 GI6QO/1O6lH9y2eGsY+GlpaHi6/K6HrCqQ1JACM8XaOYNaGMOHRB2hQ6rjB2iydp YUNdxxomSK5GzHxYY8ju+IhMDQ== -----END CERTIFICATE-----Generated at Tue Oct 13 21:56:04 2026 by rpki-client