$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft File: NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft (raw, json) Hash identifier: r4IkG/QzovsZbWRqukQaymJmEnwOzgmoxyPL6HJPnUY= Subject key identifier: BB:A9:43:0A:7A:36:D9:3E:79:3F:6E:EE:7F:EF:04:30:7D:37:5E:C4 Authority key identifier: 34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5 Certificate issuer: /CN=A9148DB2/serialNumber=34ABEF846474BBDA0C556465DD7E9EC0FA674BB5 Certificate serial: 03C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft Manifest number: 03B9 Signing time: Wed 21 Oct 2026 00:43:11 +0000 Manifest this update: Wed 21 Oct 2026 00:43:10 +0000 Manifest next update: Wed 28 Oct 2026 00:43:10 +0000 Files and hashes: 1: NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl (hash: Kmf9Lufogzhi0NlvgBvbVR0H7rVqXt9zJuLlBV7mz9k=) 2: F343C4ECF93911ECBD1E663DC4F9AE02.roa (hash: QwQkgtoePZKxFtkm4cXFgAdorKM4wsMJHhlleIVTFws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 00:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 961 (0x3c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148DB2, serialNumber=34ABEF846474BBDA0C556465DD7E9EC0FA674BB5 Validity Not Before: Oct 21 00:43:10 2026 GMT Not After : Oct 28 00:43:10 2026 GMT Subject: CN=6ad80a9f-a821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4b:a4:24:ec:51:57:c4:58:07:51:8a:b7:fa: 29:03:96:72:77:73:46:08:35:52:bd:3b:44:13:47: 29:93:67:64:dc:2d:e0:d9:ff:a7:59:97:42:fd:2e: 7a:e2:65:d7:25:86:c5:c6:63:97:ea:25:49:b1:76: 37:06:d3:bc:fd:7c:30:14:48:df:b8:2c:03:83:f5: 9d:b7:f3:e6:5d:e4:8f:b7:aa:07:f4:b0:73:b3:db: d0:05:df:1e:60:04:ff:7c:b6:b1:c8:01:8b:3f:c1: fc:41:76:f3:ec:2f:38:aa:b9:3f:18:48:7d:30:a4: 97:a3:6f:37:9d:fc:a5:cc:57:16:76:0c:62:d7:4b: 73:f4:32:fe:2d:0c:db:bc:a9:22:1b:36:c0:b0:30: ed:24:c2:c5:f0:10:f6:7c:98:a7:36:32:22:75:09: a1:9d:99:0f:ae:53:fa:a6:4b:1f:07:b6:c5:9a:c3: c8:23:a8:3f:30:cf:32:bd:1b:0b:a8:96:b1:29:65: 0d:d7:91:a7:f5:ef:f2:51:54:39:7e:c0:ba:12:96: 3c:00:4d:d5:d2:bd:32:52:fb:91:0f:a0:13:f8:5c: 52:0e:a8:5b:ab:41:fc:6e:b2:5a:61:27:2d:37:5f: b2:d5:aa:90:1b:2c:ff:e9:25:19:3d:b5:47:21:db: 75:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A9:43:0A:7A:36:D9:3E:79:3F:6E:EE:7F:EF:04:30:7D:37:5E:C4 X509v3 Authority Key Identifier: keyid:34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:38:25:1b:ba:04:f6:34:0a:81:b3:20:75:10:18:0c:04:00: fa:a9:b2:98:33:bb:1f:ed:5f:b6:54:7b:b8:c3:95:0a:da:88: 91:73:44:b3:31:df:fa:e8:6e:e9:4e:77:c6:fb:f4:6a:b0:4f: e5:9c:e9:5b:6a:df:1c:79:bc:87:74:97:0f:ea:10:d5:d2:f9: 97:fa:f8:1b:2c:63:a8:30:8c:2c:8d:27:de:a8:81:69:7f:14: d6:f0:0e:8b:58:6a:4a:0c:57:68:ac:08:3a:f9:2a:5c:c6:5a: a2:4e:1a:3d:84:86:5f:f7:cb:54:fa:65:88:41:a9:f3:5f:7d: fa:ed:1d:9f:03:46:87:a0:b1:e1:6f:78:a1:ce:36:f8:eb:20: 1e:93:fe:a9:a1:0c:77:e3:7b:58:e4:2c:48:5c:ef:60:ce:09: cd:79:5a:5e:99:8d:07:20:4f:36:f4:ad:4f:ae:b2:02:c0:de: 9d:10:f8:eb:cd:ec:bf:92:1f:e6:44:c3:d2:cd:da:4d:1f:76: a3:46:ed:e2:38:62:32:7e:31:4a:59:80:ad:68:4e:50:4e:7c: 13:66:cb:29:34:82:22:fb:8e:b7:59:da:27:81:b7:af:44:93: b6:9c:15:4d:86:bf:1b:35:b3:a2:db:13:f6:2a:59:22:54:93: a5:da:fa:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhEQjIxMTAvBgNVBAUTKDM0QUJFRjg0NjQ3NEJCREEwQzU1NjQ2NUREN0U5RUMw RkE2NzRCQjUwHhcNMjYxMDIxMDA0MzEwWhcNMjYxMDI4MDA0MzEwWjAYMRYwFAYD VQQDEw02YWQ4MGE5Zi1hODIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUukJOxRV8RYB1GKt/opA5Zyd3NGCDVSvTtEE0cpk2dk3C3g2f+nWZdC/S56 4mXXJYbFxmOX6iVJsXY3BtO8/XwwFEjfuCwDg/Wdt/PmXeSPt6oH9LBzs9vQBd8e YAT/fLaxyAGLP8H8QXbz7C84qrk/GEh9MKSXo283nfylzFcWdgxi10tz9DL+LQzb vKkiGzbAsDDtJMLF8BD2fJinNjIidQmhnZkPrlP6pksfB7bFmsPII6g/MM8yvRsL qJaxKWUN15Gn9e/yUVQ5fsC6EpY8AE3V0r0yUvuRD6AT+FxSDqhbq0H8brJaYSct N1+y1aqQGyz/6SUZPbVHIdt1+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLupQwp6 Ntk+eT9u7n/vBDB9N17EMB8GA1UdIwQYMBaAFDSr74RkdLvaDFVkZd1+nsD6Z0u1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OERCMi8wNDdEQzM4OEY5 MzYxMUVDOTIxQjgxMEVDNEY5QUUwMi9OS3Z2aEdSMHU5b01WV1JsM1g2ZXdQcG5T N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LdnZoR1IwdTlvTVZXUmwzWDZld1BwblM3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OERCMi8wNDdEQzM4OEY5MzYxMUVDOTIxQjgxMEVDNEY5QUUwMi9OS3Z2aEdSMHU5 b01WV1JsM1g2ZXdQcG5TN1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzzglG7oE9jQKgbMgdRAYDAQA+qmymDO7H+1ftlR7uMOVCtqIkXNEszHf+uhu 6U53xvv0arBP5ZzpW2rfHHm8h3SXD+oQ1dL5l/r4GyxjqDCMLI0n3qiBaX8U1vAO i1hqSgxXaKwIOvkqXMZaok4aPYSGX/fLVPpliEGp8199+u0dnwNGh6Cx4W94oc42 +OsgHpP+qaEMd+N7WOQsSFzvYM4JzXlaXpmNByBPNvStT66yAsDenRD4683sv5If 5kTD0s3aTR92o0bt4jhiMn4xSlmArWhOUE58E2bLKTSCIvuOt1naJ4G3r0STtpwV TYa/GzWzotsT9ipZIlSTpdr6OA== -----END CERTIFICATE-----Generated at Thu Oct 22 11:59:11 2026 by rpki-client