$ rpki-client -vvvf rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft File: nB5FqAhMMR3VAEShc2BejuPEzJU.mft (raw, json) Hash identifier: vrhDCVclvH+NOLyLhjxMgGi2vbl+hm6yX3uGbpJpWHs= Subject key identifier: 5C:14:3E:EA:78:11:3B:2C:8A:2A:9F:88:3E:99:5B:B5:A4:E9:AB:45 Authority key identifier: 9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95 Certificate issuer: /CN=A91491CC/serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft Manifest number: C7 Signing time: Tue 13 Oct 2026 07:30:20 +0000 Manifest this update: Tue 13 Oct 2026 07:30:20 +0000 Manifest next update: Tue 20 Oct 2026 07:30:20 +0000 Files and hashes: 1: nB5FqAhMMR3VAEShc2BejuPEzJU.crl (hash: /yYguPOi4tSARq6vV8cVEBkdUM+ZzD9VaTZvMuCPde0=) 2: 31E9004E9A0F11F0BC057E7DC4F9AE02.roa (hash: tljjskEzluOLyfM+jOhLD+OSuutF6Ym7Br+LWf9TkKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 05:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91491CC, serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95 Validity Not Before: Oct 13 07:30:20 2026 GMT Not After : Oct 20 07:30:20 2026 GMT Subject: CN=6acdde0c-91aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a0:79:4f:37:dc:ae:44:4b:30:f6:cb:e9:2c: 07:5e:ef:e1:a8:f7:e8:b1:49:f9:3d:db:b5:cb:31: 81:b2:be:aa:b8:27:04:08:f4:7e:57:73:a0:f5:cf: b5:e7:99:23:91:d2:38:d0:0f:cf:24:bf:f9:3f:0d: 68:fe:13:20:3d:99:dc:41:8c:e9:d5:91:18:89:46: ce:fb:bc:f5:a3:67:5d:67:81:b8:48:dc:92:9a:aa: b3:67:b9:c6:14:c8:b4:d5:89:86:c1:e3:a2:87:be: 2e:27:d9:a7:e5:c9:7b:9b:ed:ea:ed:02:1d:20:f8: c3:cb:6f:78:b2:51:73:a9:d8:b1:07:0d:ef:c2:df: 00:e0:e6:f8:a4:e7:b1:f4:8a:7e:1f:6b:60:d6:73: 56:1a:0b:2e:b9:88:bc:1e:e8:7b:75:f8:ec:b8:7a: 93:96:72:e9:eb:a1:cd:15:cf:1b:03:97:b4:f5:b9: 86:45:97:65:8d:49:ba:59:8f:6d:9d:cf:fc:1a:7a: ba:a8:79:6d:21:4d:09:48:29:91:a1:f8:a1:12:ff: 26:5b:8f:1f:87:c5:98:c5:74:4b:61:64:1e:89:9e: be:b8:5f:48:47:2d:73:0d:02:5a:c1:d0:96:db:3d: 52:91:ca:de:4c:43:bf:e6:c6:eb:1d:a7:03:a3:b7: d7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:14:3E:EA:78:11:3B:2C:8A:2A:9F:88:3E:99:5B:B5:A4:E9:AB:45 X509v3 Authority Key Identifier: keyid:9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:c3:8b:18:9a:c6:fd:0f:9e:d9:61:20:ea:2e:1e:96:ff:b3: 7d:c2:a7:23:fc:2c:6d:69:7b:23:c0:63:5f:39:00:44:e3:b2: c6:16:8f:aa:f4:ae:2f:68:7f:28:72:aa:c2:ff:df:8a:a2:27: fd:50:6c:1e:36:2c:2d:f1:ad:44:91:15:19:5f:a8:c5:de:bf: 0f:f0:df:5f:cb:be:35:3a:08:fd:45:46:c9:7c:09:55:f9:47: fa:30:c4:16:87:31:25:c1:4f:0b:b3:bc:41:39:60:4a:0e:1f: 51:12:64:67:9a:e8:6b:aa:7c:21:7d:0c:8f:0e:f5:d7:94:ee: 7f:94:6d:b9:44:46:e3:5b:7c:96:b8:33:16:0f:6f:62:f1:3d: 1e:37:b1:12:9d:13:db:b7:ce:e9:55:b7:d7:7f:7d:21:d4:49: d1:fc:c6:67:e4:94:3b:da:ae:fb:30:b4:6b:83:e5:b2:bd:33: f0:ee:88:05:b4:d9:99:44:01:d5:ee:54:a1:d8:c9:ac:35:33: 77:fa:2a:11:9a:a8:be:0b:f8:d9:ea:ef:f5:f2:87:d7:be:00: 05:84:79:e4:1f:dc:81:2c:3f:17:21:0a:21:8e:13:a7:dd:e1: 7c:7a:a9:94:16:59:67:ce:5b:cb:2d:fd:6f:bb:32:fc:27:03: 14:3b:44:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkxQ0MxMTAvBgNVBAUTKDlDMUU0NUE4MDg0QzMxMURENTAwNDRBMTczNjA1RThF RTNDNENDOTUwHhcNMjYxMDEzMDczMDIwWhcNMjYxMDIwMDczMDIwWjAYMRYwFAYD VQQDEw02YWNkZGUwYy05MWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApqB5TzfcrkRLMPbL6SwHXu/hqPfosUn5Pdu1yzGBsr6quCcECPR+V3Og9c+1 55kjkdI40A/PJL/5Pw1o/hMgPZncQYzp1ZEYiUbO+7z1o2ddZ4G4SNySmqqzZ7nG FMi01YmGweOih74uJ9mn5cl7m+3q7QIdIPjDy294slFzqdixBw3vwt8A4Ob4pOex 9Ip+H2tg1nNWGgsuuYi8Huh7dfjsuHqTlnLp66HNFc8bA5e09bmGRZdljUm6WY9t nc/8Gnq6qHltIU0JSCmRofihEv8mW48fh8WYxXRLYWQeiZ6+uF9IRy1zDQJawdCW 2z1SkcreTEO/5sbrHacDo7fX1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFwUPup4 ETssiiqfiD6ZW7Wk6atFMB8GA1UdIwQYMBaAFJweRagITDEd1QBEoXNgXo7jxMyV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTFDQy85REYwN0U0NDlB MEUxMUYwODlDODhCN0NDNEY5QUUwMi9uQjVGcUFoTU1SM1ZBRVNoYzJCZWp1UEV6 SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25CNUZxQWhNTVIzVkFFU2hjMkJlanVQRXpKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTFDQy85REYwN0U0NDlBMEUxMUYwODlDODhCN0NDNEY5QUUwMi9uQjVGcUFoTU1S M1ZBRVNoYzJCZWp1UEV6SlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOcOLGJrG/Q+e2WEg6i4elv+zfcKnI/wsbWl7I8BjXzkAROOyxhaPqvSuL2h/ KHKqwv/fiqIn/VBsHjYsLfGtRJEVGV+oxd6/D/DfX8u+NToI/UVGyXwJVflH+jDE FocxJcFPC7O8QTlgSg4fURJkZ5roa6p8IX0Mjw7115Tuf5RtuURG41t8lrgzFg9v YvE9HjexEp0T27fO6VW31399IdRJ0fzGZ+SUO9qu+zC0a4Plsr0z8O6IBbTZmUQB 1e5UodjJrDUzd/oqEZqovgv42erv9fKH174ABYR55B/cgSw/FyEKIY4Tp93hfHqp lBZZZ85byy39b7sy/CcDFDtElQ== -----END CERTIFICATE-----Generated at Tue Oct 13 15:04:21 2026 by rpki-client