$ rpki-client -vvvf rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft File: nL4Q18HdRLflkLUHi_xPhs-Nslo.mft (raw, json) Hash identifier: L5zjo3r4Pjqg0K9AtsHmgrsxCpwq1tEiozW/CUQ0lhs= Subject key identifier: C1:D3:0C:50:2D:02:40:62:FC:7B:DF:33:0A:06:67:4D:9B:67:98:17 Authority key identifier: 9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A Certificate issuer: /CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Certificate serial: 0230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft Manifest number: 0224 Signing time: Sat 03 Oct 2026 03:29:17 +0000 Manifest this update: Sat 03 Oct 2026 03:29:17 +0000 Manifest next update: Sat 10 Oct 2026 03:29:17 +0000 Files and hashes: 1: nL4Q18HdRLflkLUHi_xPhs-Nslo.crl (hash: 4cUhs8blS1uuQynY5Mqto6w85Ai031OKkiK2LhmJJ9o=) 2: 43C5BAA282F411EE99AAAB12C4F9AE02.roa (hash: a1wzRh8XwhAFQd8Ja2EntSNyYcs9nQlwwooXA0U/t20=) 3: lr6ZVwc-F-j6SUvwWniTqpi4ZNo.asa (hash: whfRIjakXN7Z/G0/WZDeuoB+AZIDHhpbBnuPitzjaHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 03:29:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BCAC, serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Validity Not Before: Oct 3 03:29:17 2026 GMT Not After : Oct 10 03:29:17 2026 GMT Subject: CN=6ac0768d-8bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:86:7b:40:40:b5:fe:ac:35:8f:78:d3:62:c8: c1:e3:52:a7:3f:8d:5f:2a:7e:70:06:c9:55:26:e5: 46:f7:67:23:94:27:42:cf:c3:8b:42:d4:b8:1a:eb: fb:1b:2f:76:c5:29:e3:2c:7b:4b:ea:0e:c4:be:6d: 74:a0:9b:eb:0e:38:10:84:ba:a2:4b:96:af:43:b9: 9f:14:d1:c4:c9:62:b1:e3:5c:67:2b:4a:18:ac:f8: 20:81:46:ad:ff:bc:03:f0:2c:63:13:d6:75:b2:f9: dc:35:8b:65:d3:bb:c3:07:d4:d9:d2:70:43:82:93: 93:b4:9e:09:7e:bc:4c:99:4d:4a:08:7f:d1:9b:13: ec:9a:7e:71:ca:6a:a4:31:80:05:5c:1b:6d:9e:00: fb:fc:93:c0:a7:e0:10:96:d6:e4:8a:4b:12:d2:fc: d8:4d:d3:e0:e1:6e:38:74:83:26:40:4a:a9:a8:ad: 1a:fc:b9:9a:88:60:72:ea:fd:18:90:ca:d6:ad:d3: a1:5a:a8:be:5a:37:d5:65:a5:32:0d:f0:db:9c:e4: ac:01:e5:70:ea:f4:d4:0b:7c:af:bf:ae:28:a7:14: 1d:a8:46:4d:7c:bd:4b:81:f3:4a:7e:0e:a1:c0:7a: dc:ac:c3:84:b8:03:52:cd:30:cd:06:1c:1c:8f:8a: 88:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D3:0C:50:2D:02:40:62:FC:7B:DF:33:0A:06:67:4D:9B:67:98:17 X509v3 Authority Key Identifier: keyid:9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:8a:c1:7d:3b:17:b6:08:59:9d:34:6d:a3:44:d0:6c:aa:e0: 79:00:45:92:b2:2b:98:90:bf:4e:2f:6f:3d:c9:48:d3:53:8c: 25:87:fb:cf:5a:91:f0:60:24:7b:a4:2c:1d:b3:03:c3:c4:fd: 48:42:13:11:ae:5f:da:40:aa:2b:22:7d:72:75:b3:f2:2f:62: b9:26:33:d0:a5:1b:51:ad:6d:67:9c:48:f8:d7:99:e9:63:2d: 1b:f2:5a:3c:72:a4:c8:b9:5f:ca:62:fc:24:4f:e1:10:fe:ce: d8:ec:57:76:2a:f0:de:30:c2:b8:04:5e:90:50:8c:bc:8a:52: bd:2c:e6:51:d1:ac:da:80:c3:8f:d0:cc:da:7b:14:c2:3c:8d: 54:90:b1:a8:6a:b4:90:ee:52:8f:37:94:72:0e:c5:00:c7:1e: 47:b7:2e:1d:b7:91:6c:46:0f:d0:69:83:7e:69:3d:62:03:b1: d1:44:e5:cc:ee:80:cf:05:ff:1f:dc:78:ac:87:49:83:12:61: b3:64:62:7f:e1:3a:e5:c4:17:67:29:c9:4a:1e:48:1a:94:ac: f8:39:57:13:32:aa:4c:40:4f:54:ad:d2:83:18:bf:3a:dc:3c: aa:d7:fb:9c:26:38:bf:dd:24:4e:50:02:58:1b:12:7e:61:30: a4:19:f2:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJDQUMxMTAvBgNVBAUTKDlDQkUxMEQ3QzFERDQ0QjdFNTkwQjUwNzhCRkM0Rjg2 Q0Y4REIyNUEwHhcNMjYxMDAzMDMyOTE3WhcNMjYxMDEwMDMyOTE3WjAYMRYwFAYD VQQDEw02YWMwNzY4ZC04YmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooZ7QEC1/qw1j3jTYsjB41KnP41fKn5wBslVJuVG92cjlCdCz8OLQtS4Guv7 Gy92xSnjLHtL6g7Evm10oJvrDjgQhLqiS5avQ7mfFNHEyWKx41xnK0oYrPgggUat /7wD8CxjE9Z1svncNYtl07vDB9TZ0nBDgpOTtJ4JfrxMmU1KCH/RmxPsmn5xymqk MYAFXBttngD7/JPAp+AQltbkiksS0vzYTdPg4W44dIMmQEqpqK0a/LmaiGBy6v0Y kMrWrdOhWqi+WjfVZaUyDfDbnOSsAeVw6vTUC3yvv64opxQdqEZNfL1LgfNKfg6h wHrcrMOEuANSzTDNBhwcj4qI3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMHTDFAt AkBi/HvfMwoGZ02bZ5gXMB8GA1UdIwQYMBaAFJy+ENfB3US35ZC1B4v8T4bPjbJa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkNBQy8wMTUyMjU4RTgy RjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJMZmxrTFVIaV94UGhzLU5z bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MNFExOEhkUkxmbGtMVUhpX3hQaHMtTnNsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkNBQy8wMTUyMjU4RTgyRjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJM ZmxrTFVIaV94UGhzLU5zbG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASorBfTsXtghZnTRto0TQbKrgeQBFkrIrmJC/Ti9vPclI01OMJYf7z1qR8GAk e6QsHbMDw8T9SEITEa5f2kCqKyJ9cnWz8i9iuSYz0KUbUa1tZ5xI+NeZ6WMtG/Ja PHKkyLlfymL8JE/hEP7O2OxXdirw3jDCuARekFCMvIpSvSzmUdGs2oDDj9DM2nsU wjyNVJCxqGq0kO5SjzeUcg7FAMceR7cuHbeRbEYP0GmDfmk9YgOx0UTlzO6AzwX/ H9x4rIdJgxJhs2Rif+E65cQXZynJSh5IGpSs+DlXEzKqTEBPVK3Sgxi/Otw8qtf7 nCY4v90kTlACWBsSfmEwpBnyBw== -----END CERTIFICATE-----Generated at Sun Oct 4 17:38:31 2026 by rpki-client