$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft File: nhW8ueM67e2saArIyYFuEVkFyiw.mft (raw, json) Hash identifier: 4VVpDa7oCvzLxpbsVNBYLV1DngJawRZgLj2l/gPnixw= Subject key identifier: 4C:AC:09:DD:8E:8E:B7:FD:ED:A6:AF:D4:EB:7F:6D:F8:87:C0:B1:8F Authority key identifier: 9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C Certificate issuer: /CN=A91F9B3A/serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C Certificate serial: 17E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft Manifest number: 17D0 Signing time: Tue 22 Sep 2026 16:29:49 +0000 Manifest this update: Tue 22 Sep 2026 16:29:49 +0000 Manifest next update: Tue 29 Sep 2026 16:29:49 +0000 Files and hashes: 1: nhW8ueM67e2saArIyYFuEVkFyiw.crl (hash: y5yWp7wB6+TuZTmxvuX7G1W3n1gFbtV5GCAHP932L24=) 2: 7A7A6AC6234311EA90D15227C4F9AE02.roa (hash: pOUuDNhh+S+06YvmHHO2sLszLURz3ht9lYFbPAGfK8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:29:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6112 (0x17e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9B3A, serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C Validity Not Before: Sep 22 16:29:49 2026 GMT Not After : Sep 29 16:29:49 2026 GMT Subject: CN=6ab2acfd-21a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9c:6b:8f:98:94:e8:f4:d4:3e:0c:85:b3:ee: 1c:e4:f5:c1:bb:d2:4c:6d:44:64:7d:5b:61:62:e4: 63:20:55:d7:78:12:df:28:9a:29:01:ed:67:e3:8c: 0c:c4:0f:0b:35:31:cd:d3:01:64:8b:07:58:30:e3: a1:b1:bc:4a:15:a9:76:e9:9e:d9:08:da:ab:f8:08: db:f1:c1:6d:f8:90:68:23:c7:ff:8b:55:0f:0e:0e: 6d:97:6e:20:d0:bb:61:40:69:f3:56:93:db:91:5d: 8a:90:a5:9c:9a:79:7a:60:02:15:a5:4c:3e:be:3b: dd:19:80:1a:10:4f:8a:6d:d3:a3:b7:92:f4:28:a0: 2b:d1:aa:20:ce:a1:af:77:e3:73:87:01:1a:59:27: 35:48:5d:aa:cb:8e:7c:4c:10:b7:67:52:3b:87:65: 6e:aa:59:ce:fc:48:e5:77:96:e3:8f:16:90:3d:43: ce:d9:2d:69:a1:38:c0:80:9b:c0:6c:e8:8d:43:ad: 31:3d:93:72:e7:8f:6f:be:ac:27:12:04:f2:10:49: 1d:f7:69:27:d1:23:c7:f8:ea:21:7f:d3:c1:c9:fa: 19:27:c6:ac:4d:b1:61:0b:e8:0a:ad:c7:e3:cf:9d: c9:61:fc:12:72:c6:f6:6f:fd:44:c9:49:6b:a3:2c: 3c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AC:09:DD:8E:8E:B7:FD:ED:A6:AF:D4:EB:7F:6D:F8:87:C0:B1:8F X509v3 Authority Key Identifier: keyid:9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:88:b5:5d:03:9b:fd:19:21:dc:e5:46:d6:a4:05:c6:47:b9: 81:87:a9:d4:8a:4a:2f:6d:67:0a:36:02:62:30:9c:7d:1f:f1: 93:7d:86:d9:fb:57:2a:eb:40:ae:33:f0:ef:7e:b7:13:00:da: 85:ff:45:25:d7:4a:94:38:89:72:76:7a:03:1e:1b:ce:3b:2a: 2e:ef:41:75:a1:81:0a:03:e0:4e:ce:53:4d:b9:c4:cc:7a:4a: 62:df:97:4d:f6:fd:7d:c1:50:37:1a:54:10:3b:1a:a7:fd:4a: 41:53:34:df:5c:ef:b5:a8:30:5a:7e:1e:dc:1d:cf:09:13:f4: 67:62:83:49:e5:30:40:cc:62:5c:bd:08:d0:c1:44:3b:49:24: 87:89:30:9e:91:14:fe:34:88:71:05:96:10:6d:a7:e9:4f:7c: c4:8e:60:4d:34:da:0e:af:9f:1e:db:b2:3e:9c:48:f9:58:e2: 8d:b4:a6:89:68:97:ca:ee:ea:76:90:a2:0c:2b:2e:71:c0:18: 8f:95:a2:02:9c:ba:4d:4e:bd:2a:92:1d:d4:68:2d:5a:ff:7c: 03:b4:5c:ee:28:2b:44:ee:ad:8b:84:f9:d2:31:d5:95:d4:a1: 12:36:97:f7:47:0c:87:3b:31:0c:d5:f4:19:6a:2f:14:1c:d9: 14:07:eb:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCM0ExMTAvBgNVBAUTKDlFMTVCQ0I5RTMzQUVERURBQzY4MEFDOEM5ODE2RTEx NTkwNUNBMkMwHhcNMjYwOTIyMTYyOTQ5WhcNMjYwOTI5MTYyOTQ5WjAYMRYwFAYD VQQDEw02YWIyYWNmZC0yMWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkpxrj5iU6PTUPgyFs+4c5PXBu9JMbURkfVthYuRjIFXXeBLfKJopAe1n44wM xA8LNTHN0wFkiwdYMOOhsbxKFal26Z7ZCNqr+Ajb8cFt+JBoI8f/i1UPDg5tl24g 0LthQGnzVpPbkV2KkKWcmnl6YAIVpUw+vjvdGYAaEE+KbdOjt5L0KKAr0aogzqGv d+NzhwEaWSc1SF2qy458TBC3Z1I7h2VuqlnO/Ejld5bjjxaQPUPO2S1poTjAgJvA bOiNQ60xPZNy549vvqwnEgTyEEkd92kn0SPH+Oohf9PByfoZJ8asTbFhC+gKrcfj z53JYfwScsb2b/1EyUlroyw8HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEysCd2O jrf97aav1Ot/bfiHwLGPMB8GA1UdIwQYMBaAFJ4VvLnjOu3trGgKyMmBbhFZBcos MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUIzQS83REVBRTczNEYz QTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdlMnNhQXJJeVlGdUVWa0Z5 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25oVzh1ZU02N2Uyc2FBckl5WUZ1RVZrRnlpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUIzQS83REVBRTczNEYzQTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdl MnNhQXJJeVlGdUVWa0Z5aXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR4i1XQOb/Rkh3OVG1qQFxke5gYep1IpKL21nCjYCYjCcfR/xk32G2ftXKutA rjPw7363EwDahf9FJddKlDiJcnZ6Ax4bzjsqLu9BdaGBCgPgTs5TTbnEzHpKYt+X Tfb9fcFQNxpUEDsap/1KQVM031zvtagwWn4e3B3PCRP0Z2KDSeUwQMxiXL0I0MFE O0kkh4kwnpEU/jSIcQWWEG2n6U98xI5gTTTaDq+fHtuyPpxI+VjijbSmiWiXyu7q dpCiDCsuccAYj5WiApy6TU69KpId1GgtWv98A7Rc7igrRO6ti4T50jHVldShEjaX 90cMhzsxDNX0GWovFBzZFAfrqA== -----END CERTIFICATE-----Generated at Wed Sep 23 11:47:01 2026 by rpki-client