$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft File: nhw1MdAEXqOJtoz_koagj7y72L0.mft (raw, json) Hash identifier: 9TDb5oonnMf7qwkkPfIQ7dB9AhD9x1P+kaxHLc83lz4= Subject key identifier: D5:2B:52:66:C6:2D:8B:A0:1F:B0:99:50:46:B9:3D:6F:A7:2E:0F:C7 Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 2043 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft Manifest number: 1F3C Signing time: Mon 12 Oct 2026 16:06:40 +0000 Manifest this update: Mon 12 Oct 2026 16:06:40 +0000 Manifest next update: Mon 19 Oct 2026 16:06:40 +0000 Files and hashes: 1: nhw1MdAEXqOJtoz_koagj7y72L0.crl (hash: nYyhIOtfYiTvu0VwfGk/+fSucIiza3YCvwyvJ9R11yo=) 2: CC2D8BDE86EF11F19E006003A7EE528E.roa (hash: d4i+z1Mv2GtUqNC8gLCSYFchOfSALA1lnJbOM2UDKmA=) 3: C9E1BA1286EF11F19E006003A7EE528E.roa (hash: KeHkWNIoWYBYRdc3VPh8HjB66Rci2N2NvVGwtvQ9bgo=) 4: F42FB236896C11F1ABDFBC266B11F970.roa (hash: 7QqNy76CzIOhRtacRyoTS6R/J83/tPFS1SCpQHSPA5M=) 5: CB0B87D886EF11F19E006003A7EE528E.roa (hash: 01D0gNOrmeWfFnfKx9BZLWhsvfkWia8AUzDxIIpl65k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 16:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8259 (0x2043) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: Oct 12 16:06:40 2026 GMT Not After : Oct 19 16:06:40 2026 GMT Subject: CN=6acd0590-eb6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8f:48:69:bf:87:cd:cf:6f:c5:56:44:90:be: 1c:ac:c7:42:02:d6:88:b6:ba:4d:5e:4a:28:a1:9c: b2:7a:b7:83:c1:b7:ed:21:c9:92:c2:a8:04:39:58: 10:6a:88:00:ad:3a:8c:53:50:61:e4:a1:5f:c3:fc: e6:29:91:4b:73:e1:e7:4f:72:51:c4:ba:bf:08:f4: ad:b2:f9:6e:7c:b0:4b:4b:03:0b:46:be:83:85:10: 7b:68:0d:05:f7:b9:61:7c:5c:9b:c4:bd:52:b8:df: 23:c5:9a:28:85:55:80:76:21:02:01:6a:1b:83:aa: fd:c4:4a:64:26:c6:f1:93:b5:46:d4:d2:d4:ed:b8: 57:f8:56:50:38:11:e7:a5:3a:d4:10:93:7c:c9:02: cd:cc:5c:7e:36:3f:cf:40:4c:c0:1a:2d:33:3a:53: d4:1f:87:89:04:a5:9c:9e:41:0a:ed:9b:d0:19:8b: 36:eb:01:a7:52:1c:c4:83:62:a8:de:8d:45:c3:94: d3:e7:17:16:74:87:6b:68:89:32:f2:dd:b4:31:5f: 8a:f3:5e:5b:b7:7f:98:ec:6b:3f:25:a2:39:20:57: 57:15:ef:bf:d4:16:c2:3c:f1:a8:cd:b4:86:de:1f: 8c:61:8e:da:ca:52:bd:ee:31:db:ed:91:91:04:56: a9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2B:52:66:C6:2D:8B:A0:1F:B0:99:50:46:B9:3D:6F:A7:2E:0F:C7 X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:6c:eb:8f:0b:ce:63:89:d0:cf:9d:73:0c:ee:fa:bd:60:d1: f5:da:c3:57:5c:f7:5d:d0:06:9a:1f:6e:a5:5b:83:40:2c:eb: 31:34:1f:d3:cc:c4:13:34:c5:3c:90:24:c7:29:b3:cd:49:f8: 66:7a:e0:88:02:b2:5c:9e:b0:82:b9:5a:f6:a8:bc:92:31:b5: 5c:64:27:ae:b0:4c:6d:fc:16:8c:e9:b8:21:42:65:46:b4:30: 8c:1e:87:a7:d4:b4:62:19:90:f5:8b:a3:d4:30:fe:cc:51:83: d7:9b:a2:0b:a8:41:56:a8:e1:1a:41:05:08:e7:fb:64:9e:9d: e2:98:38:d5:32:0e:08:dc:7b:2e:21:41:14:43:e3:c9:b5:11: 37:7e:9d:66:75:42:01:24:12:0e:24:46:31:0d:af:65:95:87: a9:60:27:47:b5:99:54:15:c5:50:db:3a:0a:6b:74:f1:31:48: 37:2d:85:0c:fe:ef:43:bc:bc:d9:5d:05:73:2d:03:cb:69:68: e6:39:4a:32:a0:8b:1b:4c:74:4d:7d:4e:24:92:9c:bf:3d:51: 5a:67:dc:b8:49:e7:13:b7:42:0f:3b:d7:4d:99:47:bd:e2:35: c7:b0:3a:e6:4e:e9:24:db:6d:38:ef:e3:ac:21:89:2f:0d:30: b8:ca:85:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjYxMDEyMTYwNjQwWhcNMjYxMDE5MTYwNjQwWjAYMRYwFAYD VQQDEw02YWNkMDU5MC1lYjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Y9Iab+Hzc9vxVZEkL4crMdCAtaItrpNXkoooZyyereDwbftIcmSwqgEOVgQ aogArTqMU1Bh5KFfw/zmKZFLc+HnT3JRxLq/CPStsvlufLBLSwMLRr6DhRB7aA0F 97lhfFybxL1SuN8jxZoohVWAdiECAWobg6r9xEpkJsbxk7VG1NLU7bhX+FZQOBHn pTrUEJN8yQLNzFx+Nj/PQEzAGi0zOlPUH4eJBKWcnkEK7ZvQGYs26wGnUhzEg2Ko 3o1Fw5TT5xcWdIdraIky8t20MV+K815bt3+Y7Gs/JaI5IFdXFe+/1BbCPPGozbSG 3h+MYY7aylK97jHb7ZGRBFapbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNUrUmbG LYugH7CZUEa5PW+nLg/HMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC85OTNGMjA5MEFCQzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhx T0p0b3pfa29hZ2o3eTcyTDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVmzrjwvOY4nQz51zDO76vWDR9drDV1z3XdAGmh9upVuDQCzrMTQf08zEEzTF PJAkxymzzUn4ZnrgiAKyXJ6wgrla9qi8kjG1XGQnrrBMbfwWjOm4IUJlRrQwjB6H p9S0YhmQ9Yuj1DD+zFGD15uiC6hBVqjhGkEFCOf7ZJ6d4pg41TIOCNx7LiFBFEPj ybURN36dZnVCASQSDiRGMQ2vZZWHqWAnR7WZVBXFUNs6Cmt08TFINy2FDP7vQ7y8 2V0Fcy0Dy2lo5jlKMqCLG0x0TX1OJJKcvz1RWmfcuEnnE7dCDzvXTZlHveI1x7A6 5k7pJNttOO/jrCGJLw0wuMqFkw== -----END CERTIFICATE-----Generated at Wed Oct 14 17:44:40 2026 by rpki-client