$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft File: nflMM9P2R649kTYeHxcsIGhvWYk.mft (raw, json) Hash identifier: idEJn/rhIZEY3maSZR+3h5O680J5QMpRWmsg4ZMwx3U= Subject key identifier: AD:8D:3D:CC:5B:C9:D6:79:5A:2B:35:E3:3E:BF:5D:46:86:1A:80:EA Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 Certificate issuer: /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Certificate serial: 0F04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft Manifest number: 0ED1 Signing time: Fri 02 Oct 2026 17:53:13 +0000 Manifest this update: Fri 02 Oct 2026 17:53:12 +0000 Manifest next update: Fri 09 Oct 2026 17:53:12 +0000 Files and hashes: 1: nflMM9P2R649kTYeHxcsIGhvWYk.crl (hash: ZDwo/pl7FfSa/K2q2VK6nbFsdbWQVrgSaDs57mFJ5mw=) 2: 47E67066B82A11E9843DEE0AC4F9AE02.roa (hash: XtIYLVIsFd92F+p6CIOS0j9rYdWtMLDPAZSaa/r7k1Q=) 3: 9F8B79C2C78E11EBB4983F5BC4F9AE02.roa (hash: 8rNs0gdQKATTtaV4qHkPv78bMS5t2h1ASUQBEQU8So0=) 4: 46B27CC6B82A11E9843DEE0AC4F9AE02.roa (hash: k+9XCl9+aXReTnmVjtn9Atb7JQmlEuxt5sdI8xbLjQo=) 5: 9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (hash: 618LqzTl8LQhJtXSV7A+T4nSgtmL+eUdYuuSmJB8P+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 17:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3844 (0xf04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B4, serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Validity Not Before: Oct 2 17:53:12 2026 GMT Not After : Oct 9 17:53:12 2026 GMT Subject: CN=6abfef89-0676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ee:bc:70:28:54:cd:6f:22:05:f2:b4:57:49: a8:74:2a:86:ee:bb:3b:52:a2:e0:00:12:9f:b9:74: 8f:5d:02:15:ac:b5:50:6c:4d:4e:d2:ad:a0:08:eb: 6a:5c:a3:a2:5c:3b:2d:ce:94:5e:2d:a5:7e:1a:8d: 93:ed:38:60:5c:d1:7a:9a:50:8a:1c:11:95:b4:9d: 70:e0:91:9f:14:b7:19:a6:c6:db:b6:48:a9:c9:2f: 7a:0b:14:64:fc:31:c0:2d:fe:7a:f3:16:de:83:42: 61:15:8a:9a:1a:da:8f:14:54:f1:2c:9c:70:11:f0: 9a:1a:54:a1:48:d4:43:05:c5:9d:ee:4b:1f:c4:30: 58:b6:54:29:7b:f5:cf:7f:f9:bc:bf:10:b5:24:52: f7:ea:66:bf:bc:05:04:90:d0:20:8d:ae:17:f5:23: ca:82:40:6d:c8:bb:51:1c:a8:bf:ba:52:89:6c:8e: 4b:be:74:31:7a:ad:02:72:48:dc:0d:7a:6e:8f:0c: 1d:87:cd:06:c4:18:ec:d7:fb:51:7b:79:43:54:72: d6:4d:20:7c:c9:d1:88:6f:75:46:1c:a2:26:24:c7: fa:35:df:31:04:7e:22:1b:50:1e:3a:9b:82:05:d3: ba:15:f7:78:32:62:f9:23:2d:15:20:62:5c:8e:98: 2c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8D:3D:CC:5B:C9:D6:79:5A:2B:35:E3:3E:BF:5D:46:86:1A:80:EA X509v3 Authority Key Identifier: keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:fa:97:11:0b:e9:ba:ef:cf:3b:70:c5:ca:55:d6:3f:59:e4: 52:d8:05:10:24:6f:c5:2e:05:50:97:01:4a:c0:a5:bc:c3:16: 45:44:09:48:8f:62:40:d4:e4:44:75:a8:48:0f:bd:81:cf:d6: 27:8c:1b:99:ce:67:d2:b0:a7:4a:63:7d:5d:f5:8c:a1:4c:27: 41:07:48:c9:55:54:d8:71:c3:2c:9a:2d:a7:55:c3:e1:e6:a7: 73:60:47:62:c0:7c:62:09:cd:5b:b0:85:98:00:80:a0:3a:28: e6:40:ef:66:be:7e:5e:90:64:54:43:cf:71:9e:03:f6:d8:48: 0a:b0:29:d3:db:07:ed:ff:46:f8:d4:34:4a:1b:91:71:b3:64: 62:df:fe:4a:50:bd:a1:bf:b3:09:26:d1:0a:e4:0a:42:d7:60: 38:ba:59:36:a1:c5:69:d1:ed:64:74:f0:d5:0d:3b:b4:0b:8d: e0:d8:c3:39:b9:04:ea:ba:91:2b:4d:da:e9:c0:df:09:48:68: 0c:68:06:34:01:a2:ea:da:d4:9d:07:88:c8:8c:01:7b:0d:1b: 44:cc:20:17:00:2f:28:7e:0e:ec:c0:34:f3:2f:d7:03:3c:a2: 5a:ae:26:e2:32:53:fa:dc:24:ea:35:88:eb:c6:33:a4:71:b5: 36:83:0e:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjQxMTAvBgNVBAUTKDlERjk0QzMzRDNGNjQ3QUUzRDkxMzYxRTFGMTcyQzIw Njg2RjU5ODkwHhcNMjYxMDAyMTc1MzEyWhcNMjYxMDA5MTc1MzEyWjAYMRYwFAYD VQQDEw02YWJmZWY4OS0wNjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwO68cChUzW8iBfK0V0modCqG7rs7UqLgABKfuXSPXQIVrLVQbE1O0q2gCOtq XKOiXDstzpReLaV+Go2T7ThgXNF6mlCKHBGVtJ1w4JGfFLcZpsbbtkipyS96CxRk /DHALf568xbeg0JhFYqaGtqPFFTxLJxwEfCaGlShSNRDBcWd7ksfxDBYtlQpe/XP f/m8vxC1JFL36ma/vAUEkNAgja4X9SPKgkBtyLtRHKi/ulKJbI5LvnQxeq0Cckjc DXpujwwdh80GxBjs1/tRe3lDVHLWTSB8ydGIb3VGHKImJMf6Nd8xBH4iG1AeOpuC BdO6Ffd4MmL5Iy0VIGJcjpgsowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK2NPcxb ydZ5Wis14z6/XUaGGoDqMB8GA1UdIwQYMBaAFJ35TDPT9keuPZE2Hh8XLCBob1mJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCNC83MDlGN0EyNkI4 MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2NDlrVFllSHhjc0lHaHZX WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25mbE1NOVAyUjY0OWtUWWVIeGNzSUdodldZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVCNC83MDlGN0EyNkI4MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2 NDlrVFllSHhjc0lHaHZXWWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcPqXEQvpuu/PO3DFylXWP1nkUtgFECRvxS4FUJcBSsClvMMWRUQJSI9iQNTk RHWoSA+9gc/WJ4wbmc5n0rCnSmN9XfWMoUwnQQdIyVVU2HHDLJotp1XD4eanc2BH YsB8YgnNW7CFmACAoDoo5kDvZr5+XpBkVEPPcZ4D9thICrAp09sH7f9G+NQ0ShuR cbNkYt/+SlC9ob+zCSbRCuQKQtdgOLpZNqHFadHtZHTw1Q07tAuN4NjDObkE6rqR K03a6cDfCUhoDGgGNAGi6trUnQeIyIwBew0bRMwgFwAvKH4O7MA08y/XAzyiWq4m 4jJT+twk6jWI68YzpHG1NoMOmA== -----END CERTIFICATE-----Generated at Sun Oct 4 05:33:59 2026 by rpki-client