$ rpki-client -vvvf rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft File: N9M3SYXzuqgtC-BMbYejoDXiDeo.mft (raw, json) Hash identifier: 88vYIp3jZdxBNzbtWTty2dKMNx+68ST5NanRHA4g6j4= Subject key identifier: CE:B6:A4:F5:04:C6:4F:DD:4E:A2:E6:98:F1:1B:DA:D5:D2:EC:9C:0A Authority key identifier: 37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA Certificate issuer: /CN=A91415FB/serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA Certificate serial: 1A89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft Manifest number: 1A66 Signing time: Mon 26 Oct 2026 16:18:56 +0000 Manifest this update: Mon 26 Oct 2026 16:18:56 +0000 Manifest next update: Mon 02 Nov 2026 16:18:56 +0000 Files and hashes: 1: N9M3SYXzuqgtC-BMbYejoDXiDeo.crl (hash: jD501YK5KLBXe2pSrZcLXReGEz6pDwHP6qg7L15aWuY=) 2: 8351896675D611E88AFEBA28C4F9AE02.roa (hash: zRlRK9BeH8fdXLqsfz/46RYZS4/HEzNIowRP+B9H4J4=) 3: 433F089AE49A11EB85874B74C4F9AE02.roa (hash: Y21EB5mcTdLJ+t1P6lpjNle0vO49vwuhzcqyBGhqfzk=) 4: 226DEC1275D511E88D5FDF24C4F9AE02.roa (hash: zKRxtwWLD/aVwZZeGl5qQOwJsbYCaLBjaAyISkZq1sA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:18:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6793 (0x1a89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415FB, serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA Validity Not Before: Oct 26 16:18:56 2026 GMT Not After : Nov 2 16:18:56 2026 GMT Subject: CN=6adf7d70-72c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bf:cf:b9:66:40:2d:4c:10:e0:77:aa:b9:44: 38:31:20:5c:de:b4:56:c8:00:ca:e0:af:e8:57:c9: c3:6e:77:94:3f:da:e5:58:dc:61:59:8a:3c:c1:80: e2:c9:2c:cb:2e:79:5a:eb:54:41:20:d6:7d:6d:5f: 93:f9:b9:46:bb:e5:b0:a3:54:56:d5:db:1a:c8:24: 6f:62:d4:84:e5:cc:29:66:bf:aa:c9:8e:d1:ef:aa: 1f:35:6b:f3:22:3e:e9:0b:7b:b3:51:1a:43:6b:fd: cb:66:0e:85:90:5f:35:66:ed:f5:bf:0f:f7:b4:9d: 41:94:92:02:8d:f1:54:6e:ee:7e:6b:2b:ce:ef:3a: e8:bc:62:25:ab:eb:bd:cc:8c:c3:01:01:22:84:79: 5e:f5:19:f4:73:46:4e:ca:ab:8c:3c:8d:1a:aa:14: 31:85:f1:a6:4a:29:42:91:60:f1:44:0b:b0:24:7f: 20:96:5c:a7:e6:0c:a2:70:e1:e8:b6:87:35:1e:1a: ba:59:57:98:d1:59:59:dd:22:9f:89:ec:f9:3a:63: 51:54:e7:bb:b5:eb:2b:7a:09:0f:e1:a6:8c:4a:79: 8c:65:72:6e:b7:85:17:54:4a:de:44:da:9c:ce:b8: 57:fb:90:ef:4f:e2:96:03:d0:91:9f:95:21:34:e5: 6a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B6:A4:F5:04:C6:4F:DD:4E:A2:E6:98:F1:1B:DA:D5:D2:EC:9C:0A X509v3 Authority Key Identifier: keyid:37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:2a:c9:4a:ca:37:64:2a:cc:76:3f:04:1a:cb:46:02:58:c0: 27:52:09:43:e1:0b:c7:df:31:17:63:1b:9a:d4:ea:a3:3a:48: a9:03:dc:ca:9a:43:97:ac:89:35:a5:67:17:e4:0d:33:66:b1: 84:3b:38:8b:6b:8e:8b:c5:79:59:b5:b6:99:62:32:51:73:5d: 7d:1c:61:2b:17:64:b3:60:6f:7b:40:00:27:b0:dd:2a:86:8d: 13:56:cf:19:73:13:f3:1d:20:53:a4:f9:12:d4:5b:e1:b7:00: 94:b7:87:ce:f6:47:39:33:f5:98:e5:bd:aa:56:54:db:54:e4: d9:3e:16:7a:c9:c2:f7:70:31:e7:0e:bb:39:40:56:a6:65:ff: 7b:b5:d7:97:15:9c:2b:61:10:2d:24:02:b9:f9:6b:1b:6a:6e: 90:d2:a0:65:31:d2:d7:4a:15:c7:9c:b7:20:69:31:cb:79:86: e1:41:4e:47:96:f9:4d:01:16:05:d6:f9:7c:86:69:fb:ba:7c: 6f:5a:74:43:55:1c:2f:79:d1:f2:67:db:76:c4:d5:40:98:7b: 90:b7:26:22:2d:e2:90:a7:60:9c:5a:bc:aa:db:9a:0a:77:dc: c8:d6:4a:ad:4b:a0:c7:ce:05:a6:c0:f5:6a:b7:0a:64:65:bc: 27:c6:ed:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1RkIxMTAvBgNVBAUTKDM3RDMzNzQ5ODVGM0JBQTgyRDBCRTA0QzZEODdBM0Ew MzVFMjBERUEwHhcNMjYxMDI2MTYxODU2WhcNMjYxMTAyMTYxODU2WjAYMRYwFAYD VQQDEw02YWRmN2Q3MC03MmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqb/PuWZALUwQ4HequUQ4MSBc3rRWyADK4K/oV8nDbneUP9rlWNxhWYo8wYDi ySzLLnla61RBINZ9bV+T+blGu+Wwo1RW1dsayCRvYtSE5cwpZr+qyY7R76ofNWvz Ij7pC3uzURpDa/3LZg6FkF81Zu31vw/3tJ1BlJICjfFUbu5+ayvO7zrovGIlq+u9 zIzDAQEihHle9Rn0c0ZOyquMPI0aqhQxhfGmSilCkWDxRAuwJH8gllyn5gyicOHo toc1Hhq6WVeY0VlZ3SKfiez5OmNRVOe7tesregkP4aaMSnmMZXJut4UXVEreRNqc zrhX+5DvT+KWA9CRn5UhNOVqlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM62pPUE xk/dTqLmmPEb2tXS7JwKMB8GA1UdIwQYMBaAFDfTN0mF87qoLQvgTG2Ho6A14g3q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVGQi83RjQ4ODk2ODcz NUQxMUU3ODhEQTRGMTRDNEY5QUUwMi9OOU0zU1lYenVxZ3RDLUJNYlllam9EWGlE ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL045TTNTWVh6dXFndEMtQk1iWWVqb0RYaURlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVGQi83RjQ4ODk2ODczNUQxMUU3ODhEQTRGMTRDNEY5QUUwMi9OOU0zU1lYenVx Z3RDLUJNYlllam9EWGlEZW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgSrJSso3ZCrMdj8EGstGAljAJ1IJQ+ELx98xF2MbmtTqozpIqQPcyppDl6yJ NaVnF+QNM2axhDs4i2uOi8V5WbW2mWIyUXNdfRxhKxdks2Bve0AAJ7DdKoaNE1bP GXMT8x0gU6T5EtRb4bcAlLeHzvZHOTP1mOW9qlZU21Tk2T4WesnC93Ax5w67OUBW pmX/e7XXlxWcK2EQLSQCuflrG2pukNKgZTHS10oVx5y3IGkxy3mG4UFOR5b5TQEW Bdb5fIZp+7p8b1p0Q1UcL3nR8mfbdsTVQJh7kLcmIi3ikKdgnFq8qtuaCnfcyNZK rUugx84FpsD1arcKZGW8J8btEQ== -----END CERTIFICATE-----Generated at Tue Oct 27 20:37:46 2026 by rpki-client