$ rpki-client -vvvf rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft File: NaA6oUeNBoHAZxl2yftD9pMTgr4.mft (raw, json) Hash identifier: nb2+2L/dnfvwb1WrZxBNX9Y7CuuQUEhFJMXupuw0mpI= Subject key identifier: 3F:D0:D0:9A:2F:EC:34:58:1F:1E:5F:60:E6:C5:56:D3:73:D0:AF:29 Authority key identifier: 35:A0:3A:A1:47:8D:06:81:C0:67:19:76:C9:FB:43:F6:93:13:82:BE Certificate issuer: /CN=A91161EB/serialNumber=35A03AA1478D0681C0671976C9FB43F6931382BE Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft Manifest number: 64 Signing time: Mon 19 Oct 2026 08:46:50 +0000 Manifest this update: Mon 19 Oct 2026 08:46:50 +0000 Manifest next update: Mon 26 Oct 2026 08:46:50 +0000 Files and hashes: 1: NaA6oUeNBoHAZxl2yftD9pMTgr4.crl (hash: gsQuyc0BcNDrPeUiGR7An++yhfW6gAFXX4HstTBivNU=) 2: 3FAB1696ADA911F1A6606A8C6F11F970.roa (hash: Z1a/tuAmkiyt4Eq8nxykrWeYBIPm8sZY0IammJRdAN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.crl rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 08:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91161EB, serialNumber=35A03AA1478D0681C0671976C9FB43F6931382BE Validity Not Before: Oct 19 08:46:50 2026 GMT Not After : Oct 26 08:46:50 2026 GMT Subject: CN=6ad5d8fa-1007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:79:3b:f3:52:d9:e3:9b:c9:f4:7c:ba:94:44: f1:94:69:01:70:81:5f:05:44:70:64:93:b2:59:a1: a0:39:fb:d3:9c:7f:31:b3:48:38:8c:da:98:14:8a: 7f:ea:fa:b8:03:5f:44:c3:c5:aa:48:27:e1:13:07: a7:7a:ee:0b:20:fa:80:ba:a7:9d:bf:7c:16:87:96: 74:52:02:41:72:d9:2a:e6:05:d0:ff:a1:e9:ba:d6: 8d:2d:a3:67:00:f5:10:e7:75:73:53:72:08:4c:a7: ac:80:94:a9:3f:0c:19:a4:cd:00:5f:b9:e0:69:d1: fd:ff:67:41:1e:22:19:12:ea:a5:3c:0c:20:9b:5d: ff:a3:2f:92:42:dd:6e:3c:5b:3d:b3:8e:f0:8f:d3: ce:63:4e:23:82:ea:87:9c:4f:e4:64:13:c3:e1:dd: b7:f4:59:ae:ec:a7:4a:17:fc:50:35:f5:69:d9:a1: 1d:87:5d:a5:0c:a8:1f:30:7c:80:14:24:9a:a6:52: b0:5e:d9:48:db:a5:3a:c6:f5:82:94:dc:d1:7a:ca: 7f:da:03:08:9e:fa:24:ac:8c:87:fd:23:69:87:4c: 7a:2a:30:44:4c:69:17:bd:14:4d:9a:0d:7d:88:99: f2:18:f9:1d:8d:13:6a:55:2f:5c:38:3a:ce:fa:c9: dc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D0:D0:9A:2F:EC:34:58:1F:1E:5F:60:E6:C5:56:D3:73:D0:AF:29 X509v3 Authority Key Identifier: keyid:35:A0:3A:A1:47:8D:06:81:C0:67:19:76:C9:FB:43:F6:93:13:82:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:56:b0:39:56:04:9c:56:d5:58:72:2e:c3:87:92:6d:6d:73: 47:33:b1:08:16:25:3a:6e:02:b2:e8:73:01:36:6a:ad:be:e1: 48:3d:3f:82:ca:4b:39:e7:ad:92:8a:66:d9:a5:ac:03:ce:04: c4:52:dc:c7:0c:4c:1d:9a:da:be:8a:75:58:9c:18:9c:9f:5b: 4e:11:17:2b:db:f6:c2:ff:84:36:af:f9:76:0e:e5:38:ec:d5: 79:f2:44:e9:dc:ab:d1:8e:76:2c:e8:33:de:05:42:57:fd:6b: 53:da:b5:fe:46:5e:cb:bf:40:a6:56:9f:81:ba:e5:07:da:bd: e1:d6:96:81:0d:88:ca:02:ea:6d:0e:c4:8b:21:22:65:5d:e3: 8f:4e:f9:25:fd:81:d3:d1:b0:1b:39:ec:88:2d:b4:fb:09:c3: cb:28:2a:40:25:01:d5:7e:80:39:74:41:09:0a:e9:61:d3:d1: 23:ac:06:6a:27:a9:8a:bd:f8:e8:e0:2f:e2:d3:a4:a6:74:cf: c1:2f:18:dd:ae:7f:35:be:c0:85:b8:da:13:b2:10:6c:e2:7e: 26:4a:2a:f5:81:03:24:d0:39:9c:ce:d0:a6:6d:57:be:ab:5d: e7:fd:07:ea:24:03:53:4d:c7:a2:d2:fc:68:cb:72:e9:87:bb: a4:ac:ae:0a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjFFQjExMC8GA1UEBRMoMzVBMDNBQTE0NzhEMDY4MUMwNjcxOTc2QzlGQjQzRjY5 MzEzODJCRTAeFw0yNjEwMTkwODQ2NTBaFw0yNjEwMjYwODQ2NTBaMBgxFjAUBgNV BAMTDTZhZDVkOGZhLTEwMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIeTvzUtnjm8n0fLqURPGUaQFwgV8FRHBkk7JZoaA5+9OcfzGzSDiM2pgUin/q +rgDX0TDxapIJ+ETB6d67gsg+oC6p52/fBaHlnRSAkFy2SrmBdD/oem61o0to2cA 9RDndXNTcghMp6yAlKk/DBmkzQBfueBp0f3/Z0EeIhkS6qU8DCCbXf+jL5JC3W48 Wz2zjvCP085jTiOC6oecT+RkE8Ph3bf0Wa7sp0oX/FA19WnZoR2HXaUMqB8wfIAU JJqmUrBe2UjbpTrG9YKU3NF6yn/aAwie+iSsjIf9I2mHTHoqMERMaRe9FE2aDX2I mfIY+R2NE2pVL1w4Os76ydyxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUP9DQmi/s NFgfHl9g5sVW03PQrykwHwYDVR0jBBgwFoAUNaA6oUeNBoHAZxl2yftD9pMTgr4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2MUVCLzBBOTM4NUQwMzUw MjExRjFCMUZENkQ3NDlCODMzNzczL05hQTZvVWVOQm9IQVp4bDJ5ZnREOXBNVGdy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTmFBNm9VZU5Cb0hBWnhsMnlmdEQ5cE1UZ3I0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 MUVCLzBBOTM4NUQwMzUwMjExRjFCMUZENkQ3NDlCODMzNzczL05hQTZvVWVOQm9I QVp4bDJ5ZnREOXBNVGdyNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBPVrA5VgScVtVYci7Dh5JtbXNHM7EIFiU6bgKy6HMBNmqtvuFIPT+Cyks5562S imbZpawDzgTEUtzHDEwdmtq+inVYnBicn1tOERcr2/bC/4Q2r/l2DuU47NV58kTp 3KvRjnYs6DPeBUJX/WtT2rX+Rl7Lv0CmVp+BuuUH2r3h1paBDYjKAuptDsSLISJl XeOPTvkl/YHT0bAbOeyILbT7CcPLKCpAJQHVfoA5dEEJCulh09EjrAZqJ6mKvfjo 4C/i06SmdM/BLxjdrn81vsCFuNoTshBs4n4mSir1gQMk0DmcztCmbVe+q13n/Qfq JANTTcei0vxoy3Lph7ukrK4K -----END CERTIFICATE-----Generated at Mon Oct 19 22:44:37 2026 by rpki-client