$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft File: NHTJTDbo-aDToNIuHdoQjNNAqyg.mft (raw, json) Hash identifier: tDI9wv9dDsMfgRK+himqhncXWwY3JsDeYeL1EkcJly4= Subject key identifier: 4D:E9:7D:03:B3:AE:2E:D5:A9:F9:E1:8E:96:52:8F:4B:D7:8B:11:96 Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Certificate serial: 10C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft Manifest number: 1089 Signing time: Mon 26 Oct 2026 17:22:28 +0000 Manifest this update: Mon 26 Oct 2026 17:22:27 +0000 Manifest next update: Mon 02 Nov 2026 17:22:27 +0000 Files and hashes: 1: NHTJTDbo-aDToNIuHdoQjNNAqyg.crl (hash: wjZ/eb/P7jyY2YRqM0UHRRO2Dw94a0ugNOZM9X8WxLo=) 2: A7BDC50C7A4811EBA907BB5BC4F9AE02.roa (hash: C6eN/HRJOvECjn0iUsrFGGsR84yYAYigU79dZHsh6MA=) 3: B3682FEC21D711EB9CFAC46EC4F9AE02.roa (hash: WYFWGdkdelXl0XhClCR56TxX5kk6w/e/4RLmS9XXch4=) 4: B2B24A4221D711EB9CFAC46EC4F9AE02.roa (hash: UFtgLJp8H69yZx4HPXt6+xleZLi+o5QDWEezYOkAgV8=) 5: 5E0253B6232111EB9896B783C4F9AE02.roa (hash: hR7qWV21WghiAL874Cg5BXLrN5Vzk7yXJRBqbiJ44Rg=) 6: 08CD1510027011EB98FEC44BC4F9AE02.roa (hash: +IMdgWTdcA1g1fqND4+7nCJIPD1lLydbWWaRQ1akOWM=) 7: B47C278021D711EB9CFAC46EC4F9AE02.roa (hash: YAVJ3KSJGZy5BW+wsOCfkHC/9utYf+L5rdo1d3HvAbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 14:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4292 (0x10c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131690, serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Validity Not Before: Oct 26 17:22:27 2026 GMT Not After : Nov 2 17:22:27 2026 GMT Subject: CN=6adf8c54-b5bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7f:d7:37:03:bd:92:72:bc:a7:55:e3:94:4d: 24:74:30:3d:7f:19:41:e0:68:6b:c1:4a:9b:86:bf: 3e:47:00:77:8b:35:ef:2e:31:d7:14:95:b9:26:3b: 32:e3:03:42:26:12:da:27:0a:ec:fb:83:8e:cc:a8: 49:22:1f:d5:15:24:94:90:1f:db:5e:e3:e9:4c:f3: 13:86:c7:79:c8:e8:0a:a6:4b:75:08:51:16:29:69: 96:ce:89:15:d7:42:a4:91:cb:62:40:37:d4:c6:f3: f6:11:c8:f2:ed:f8:6d:27:4f:94:71:5b:b9:e5:f4: a7:ec:5d:71:d8:56:fb:22:f3:9c:14:f0:0c:c4:6a: 5a:b0:ba:75:16:64:18:6b:50:96:59:86:ac:ee:99: ec:36:16:20:c8:21:86:ff:8b:f4:c9:2a:66:ad:45: b0:a9:92:55:8a:76:15:60:0c:db:94:e4:d0:5f:57: bb:32:d0:69:0a:49:59:86:52:b0:e5:b8:97:74:8c: 4f:da:eb:1e:1e:22:27:33:75:8c:22:fd:86:17:0b: 6b:70:5a:6f:30:4e:f4:71:01:b9:51:df:03:9e:07: 53:b4:1c:89:2c:f9:30:58:4b:bc:ea:b2:ba:b4:04: ea:3a:17:23:03:6b:ff:ec:4a:e7:1a:2f:46:ae:0f: 4e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E9:7D:03:B3:AE:2E:D5:A9:F9:E1:8E:96:52:8F:4B:D7:8B:11:96 X509v3 Authority Key Identifier: keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:46:87:f8:0d:48:84:b4:24:74:30:ab:df:54:31:9a:95:b2: 13:e0:8a:e7:f1:78:e0:d6:84:a0:a3:14:b1:6d:0d:d3:14:ef: 66:be:e2:29:53:c8:a5:ec:af:7c:fd:11:a4:73:a8:40:1a:60: 2b:b9:b7:a7:db:96:7d:68:93:5f:6c:cd:61:81:3b:2b:ea:e7: aa:12:1a:f1:2c:7a:77:55:f4:82:32:4b:66:33:8c:31:16:cb: 77:4e:39:bb:ea:84:d4:5c:ae:a9:ad:1a:fb:e0:d7:e6:8d:82: 0f:43:87:ba:14:22:a0:92:fc:88:4e:e8:70:6a:45:13:39:16: a3:ed:2f:7e:17:99:3a:f3:b2:a1:90:82:b9:46:2d:0e:27:14: b6:03:34:93:35:ee:d4:a4:ca:9e:72:89:84:dd:7a:f3:07:46: 7e:50:34:57:e4:68:ca:72:e2:10:cd:3f:9f:f7:9c:9f:f2:29: 9d:ef:f8:66:2d:83:4f:34:14:9f:21:99:31:81:f8:fe:b0:00: 01:a1:ba:fa:94:7a:d0:37:aa:41:4b:1f:52:0d:86:f9:fc:78: c0:28:73:14:98:68:9b:d0:7a:5e:51:7e:50:f4:da:10:ee:27: e8:d9:11:39:fe:69:d5:86:0f:e0:9d:8f:1d:2b:f7:97:17:42: 1c:c6:ee:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2OTAxMTAvBgNVBAUTKDM0NzRDOTRDMzZFOEY5QTBEM0EwRDIyRTFEREExMDhD RDM0MEFCMjgwHhcNMjYxMDI2MTcyMjI3WhcNMjYxMTAyMTcyMjI3WjAYMRYwFAYD VQQDEw02YWRmOGM1NC1iNWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzH/XNwO9knK8p1XjlE0kdDA9fxlB4GhrwUqbhr8+RwB3izXvLjHXFJW5Jjsy 4wNCJhLaJwrs+4OOzKhJIh/VFSSUkB/bXuPpTPMThsd5yOgKpkt1CFEWKWmWzokV 10KkkctiQDfUxvP2Ecjy7fhtJ0+UcVu55fSn7F1x2Fb7IvOcFPAMxGpasLp1FmQY a1CWWYas7pnsNhYgyCGG/4v0ySpmrUWwqZJVinYVYAzblOTQX1e7MtBpCklZhlKw 5biXdIxP2useHiInM3WMIv2GFwtrcFpvME70cQG5Ud8DngdTtByJLPkwWEu86rK6 tATqOhcjA2v/7ErnGi9Grg9OYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE3pfQOz ri7VqfnhjpZSj0vXixGWMB8GA1UdIwQYMBaAFDR0yUw26Pmg06DSLh3aEIzTQKso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTY5MC8xNUI0MUI4ODYz RjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1hRFRvTkl1SGRvUWpOTkFx eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IVEpURGJvLWFEVG9OSXVIZG9Rak5OQXF5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTY5MC8xNUI0MUI4ODYzRjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1h RFRvTkl1SGRvUWpOTkFxeWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANkaH+A1IhLQkdDCr31QxmpWyE+CK5/F44NaEoKMUsW0N0xTvZr7iKVPIpeyv fP0RpHOoQBpgK7m3p9uWfWiTX2zNYYE7K+rnqhIa8Sx6d1X0gjJLZjOMMRbLd045 u+qE1Fyuqa0a++DX5o2CD0OHuhQioJL8iE7ocGpFEzkWo+0vfheZOvOyoZCCuUYt DicUtgM0kzXu1KTKnnKJhN168wdGflA0V+RoynLiEM0/n/ecn/Ipne/4Zi2DTzQU nyGZMYH4/rAAAaG6+pR60DeqQUsfUg2G+fx4wChzFJhom9B6XlF+UPTaEO4n6NkR Of5p1YYP4J2PHSv3lxdCHMbuwQ== -----END CERTIFICATE-----Generated at Mon Oct 26 23:13:46 2026 by rpki-client