$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json) Hash identifier: rKmG1WMQnt1R1kKiHk+3qIvSPLSAvPGl3XNbVbo23LU= Subject key identifier: BA:05:8C:07:7D:77:82:B9:F4:62:14:69:F6:91:25:87:3F:C0:1C:58 Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft Manifest number: 0237 Signing time: Sun 27 Sep 2026 03:00:45 +0000 Manifest this update: Sun 27 Sep 2026 03:00:44 +0000 Manifest next update: Sun 04 Oct 2026 03:00:44 +0000 Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: I7OOc34kzO3lTwhBW2ndJsQ7oF38RjTzxrcGyJtbZZA=) 2: 36020660DD2411EF9F4FB925C4F9AE02.roa (hash: i1Pu+9UVIaU6wY+KGS3N0zfxP0rOfpHG8M6EeBicwr4=) 3: 0B421064DD2411EFA5DECA6CC4F9AE02.roa (hash: +S1F0zYbzMvWkIw6OtTYzr4kRvSGMZIIi7dYMQVKPYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 02:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD, serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: Sep 27 03:00:44 2026 GMT Not After : Oct 4 03:00:44 2026 GMT Subject: CN=6ab886dd-19b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:72:a6:ca:8c:68:23:7c:0e:79:9f:a4:11:28: ba:36:cf:c6:23:f2:4e:30:cc:4f:2f:97:08:68:0d: 70:60:60:f0:66:a7:ee:29:09:ef:b1:cb:31:5a:3c: 86:a5:03:f8:6b:31:1f:8d:ba:d7:28:8e:0f:c4:56: 6d:58:79:8c:3d:4e:a1:02:15:72:ec:c0:6f:84:bd: 42:3f:e9:8d:b0:b4:12:bc:90:e7:0e:ee:30:93:98: 09:a1:4b:26:87:59:4a:f8:fc:99:e0:fe:2f:18:c2: 1d:44:51:9a:11:d8:e7:14:b7:bd:48:bf:93:ee:f9: ac:24:73:24:e0:1a:8f:33:94:ae:c1:9d:81:05:f9: f1:31:31:bc:fd:24:61:a4:80:25:ca:bb:c1:df:7f: 05:d3:90:9a:45:58:62:82:34:97:29:05:42:b0:dc: 4a:34:6d:c4:1e:6c:7d:ef:5e:b4:e5:6b:24:be:6a: ee:48:d3:7e:b6:5e:24:f4:26:7f:25:f1:c1:37:a0: ab:c4:2b:af:18:46:75:c5:67:30:91:b6:f1:18:73: 5b:0c:38:b4:d3:fd:78:64:6c:17:29:1b:be:17:27: 2f:61:28:ce:6a:e6:54:db:94:3f:21:1e:9e:21:ac: fc:88:cd:2a:ea:b1:40:5a:3b:9c:02:75:d8:72:6d: d7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:05:8C:07:7D:77:82:B9:F4:62:14:69:F6:91:25:87:3F:C0:1C:58 X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:aa:a1:9d:2b:69:e4:d2:58:3c:a6:98:94:2c:94:96:38:50: 4c:1f:63:bc:72:9c:97:dd:ba:c7:5c:94:82:87:9e:0d:20:10: 19:c8:21:3c:5b:7f:38:e0:96:f2:e1:0d:d9:c1:4e:ce:64:ca: 7b:76:06:fe:56:1d:67:e7:86:e6:b8:9a:41:23:7b:a3:e8:17: c6:3e:b2:c8:85:f8:3c:d4:54:27:77:01:6e:c3:c5:6d:c9:f5: 34:03:74:1f:8f:d4:cd:f6:9b:c7:47:eb:22:25:47:f1:cb:12: c2:ef:a4:59:31:2f:a3:df:a2:62:0e:36:aa:26:72:0b:33:0d: ed:cf:98:51:61:ef:3f:e3:6e:7e:81:c1:96:38:af:65:bb:b4: d8:d2:35:21:57:87:fc:74:9e:94:6a:bf:f9:7e:b3:7d:16:1e: b6:51:ba:9c:20:41:d1:c7:63:bb:10:4a:91:79:ba:9f:75:ac: d0:29:e1:5a:5f:f5:90:76:29:3e:85:36:a6:f4:73:29:29:d5: 06:23:29:10:d4:b1:29:cf:e9:d8:b1:7f:cf:5a:7e:fa:85:cb: 5c:6a:83:97:c1:27:cc:14:7e:cf:0e:1d:1f:1d:b8:76:cf:d4: 52:57:2e:b4:99:a7:27:db:9d:a2:6f:8e:d4:dd:5b:7a:a3:a7: a3:80:dd:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjYwOTI3MDMwMDQ0WhcNMjYxMDA0MDMwMDQ0WjAYMRYwFAYD VQQDEw02YWI4ODZkZC0xOWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3KmyoxoI3wOeZ+kESi6Ns/GI/JOMMxPL5cIaA1wYGDwZqfuKQnvscsxWjyG pQP4azEfjbrXKI4PxFZtWHmMPU6hAhVy7MBvhL1CP+mNsLQSvJDnDu4wk5gJoUsm h1lK+PyZ4P4vGMIdRFGaEdjnFLe9SL+T7vmsJHMk4BqPM5SuwZ2BBfnxMTG8/SRh pIAlyrvB338F05CaRVhigjSXKQVCsNxKNG3EHmx971605WskvmruSNN+tl4k9CZ/ JfHBN6CrxCuvGEZ1xWcwkbbxGHNbDDi00/14ZGwXKRu+FycvYSjOauZU25Q/IR6e Iaz8iM0q6rFAWjucAnXYcm3XuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLoFjAd9 d4K59GIUafaRJYc/wBxYMB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzhGRC9BNUE2RjM3QTYxRjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFj NEZWYVlBc2hlU0RybmhyRTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABKqhnStp5NJYPKaYlCyUljhQTB9jvHKcl926x1yUgoeeDSAQGcghPFt/OOCW 8uEN2cFOzmTKe3YG/lYdZ+eG5riaQSN7o+gXxj6yyIX4PNRUJ3cBbsPFbcn1NAN0 H4/Uzfabx0frIiVH8csSwu+kWTEvo9+iYg42qiZyCzMN7c+YUWHvP+NufoHBljiv Zbu02NI1IVeH/HSelGq/+X6zfRYetlG6nCBB0cdjuxBKkXm6n3Ws0CnhWl/1kHYp PoU2pvRzKSnVBiMpENSxKc/p2LF/z1p++oXLXGqDl8EnzBR+zw4dHx24ds/UUlcu tJmnJ9udom+O1N1beqOno4Dd9Q== -----END CERTIFICATE-----Generated at Sun Sep 27 05:02:09 2026 by rpki-client