$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft File: Njjfo7mFahWtnVQwa1v3BjD2NkY.mft (raw, json) Hash identifier: ZwP+1wUfISBRLd/5Nadm3gUk67CiZjixhql9tD7on4o= Subject key identifier: 4C:D5:DA:AC:30:C0:CE:98:73:6C:B5:7B:65:F6:23:A3:D2:EF:23:C0 Authority key identifier: 36:38:DF:A3:B9:85:6A:15:AD:9D:54:30:6B:5B:F7:06:30:F6:36:46 Certificate issuer: /CN=A9151932/serialNumber=3638DFA3B9856A15AD9D54306B5BF70630F63646 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft Manifest number: A7 Signing time: Sun 25 Oct 2026 04:53:43 +0000 Manifest this update: Sun 25 Oct 2026 04:53:43 +0000 Manifest next update: Sun 01 Nov 2026 04:53:43 +0000 Files and hashes: 1: Njjfo7mFahWtnVQwa1v3BjD2NkY.crl (hash: NltpooR4iUfZlk5KLohCTHLCenD/p/kZS6Qd0TXeCyQ=) 2: 8C622D46DF0811F0A8BEBB315D6F56BC.roa (hash: s6ItR4GAFh5V6QZ9xwhi/KLNmnv+40ltWMg6bqrSWHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.crl rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 04:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151932, serialNumber=3638DFA3B9856A15AD9D54306B5BF70630F63646 Validity Not Before: Oct 25 04:53:43 2026 GMT Not After : Nov 1 04:53:43 2026 GMT Subject: CN=6add8b57-dca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a3:6f:b8:63:97:91:9f:cd:b0:da:15:17:c6: 14:e6:8e:10:d2:3c:7a:25:18:6f:50:30:ba:cd:9d: a7:51:d3:25:f3:9c:86:d6:d8:20:0a:90:b2:2b:45: 2d:28:d7:00:ae:08:79:cc:a4:2c:7b:66:5c:4d:32: 44:99:da:8f:e8:77:0b:b1:c6:62:25:7c:f8:02:5f: 3c:30:f9:b0:f2:23:f4:d8:ac:e5:f9:ac:70:b8:0a: a1:25:36:89:13:8e:73:38:3e:0c:55:6c:f5:71:c9: 38:08:8d:f6:d9:c2:99:27:51:f1:4c:47:34:3c:11: 7d:fc:86:48:b1:4e:89:1e:af:8a:b6:08:54:6d:9b: 1a:a5:49:bc:3b:a2:7a:c0:ab:9c:cb:60:f0:e0:89: a8:fc:aa:01:a3:ba:82:35:b5:81:07:a6:f6:a3:bb: d2:9a:5d:2d:3f:11:ae:55:66:0e:c7:8e:7a:62:2a: c5:5a:9b:3c:0c:ee:6b:b9:e9:8b:d2:e1:cf:c3:ca: 92:ca:76:89:50:0c:03:4b:52:0c:f8:96:ee:2d:07: 8c:c5:18:b7:2d:38:3c:e2:f4:c6:25:bd:24:2a:f4: 76:93:a5:dd:a0:ed:92:35:fe:9f:b5:61:c5:60:9b: fa:fe:d6:62:1d:30:84:a6:11:42:24:66:90:36:96: c1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D5:DA:AC:30:C0:CE:98:73:6C:B5:7B:65:F6:23:A3:D2:EF:23:C0 X509v3 Authority Key Identifier: keyid:36:38:DF:A3:B9:85:6A:15:AD:9D:54:30:6B:5B:F7:06:30:F6:36:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:bf:80:08:7f:5d:37:c2:4f:76:e0:84:a2:d6:76:dc:23:04: 1f:d3:48:e0:31:f0:aa:86:51:e7:3c:18:a2:f7:d7:d4:c9:f8: f4:be:4b:22:42:73:fb:af:2e:27:20:cc:ee:64:ea:c0:66:95: 53:bc:f7:10:17:af:24:94:82:41:35:b3:ab:3b:f9:b7:82:8b: 23:dd:a7:dc:4c:a1:b1:5a:8d:d1:7c:e3:04:c0:9d:bb:2b:81: 38:9a:51:7d:f5:80:89:d3:0e:14:10:29:dd:0d:8c:6a:48:e3: 60:20:a9:36:46:d5:f0:66:69:8c:64:69:14:2c:45:b0:e0:3b: 85:5f:a1:0e:98:16:93:af:1d:65:5f:d3:4a:56:80:41:df:7e: f1:11:67:44:f0:3d:78:59:18:e1:a5:17:13:a5:79:5a:99:1b: fa:fb:f9:92:bd:7a:8c:6f:28:21:a3:b2:76:c7:81:42:8a:3c: 0b:5e:f8:47:38:a6:bf:c6:c4:18:19:1d:14:6b:f0:20:18:ee: e5:41:3f:73:7e:67:56:10:cb:6c:a7:26:15:45:14:fd:f2:7c: b8:3b:70:77:96:d2:b8:34:7e:7d:bf:1a:0c:55:57:e7:df:ac: 3b:91:88:7f:22:3a:aa:0f:19:fe:98:f0:8f:de:88:61:d6:c6: 9c:b3:1c:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE5MzIxMTAvBgNVBAUTKDM2MzhERkEzQjk4NTZBMTVBRDlENTQzMDZCNUJGNzA2 MzBGNjM2NDYwHhcNMjYxMDI1MDQ1MzQzWhcNMjYxMTAxMDQ1MzQzWjAYMRYwFAYD VQQDEw02YWRkOGI1Ny1kY2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaNvuGOXkZ/NsNoVF8YU5o4Q0jx6JRhvUDC6zZ2nUdMl85yG1tggCpCyK0Ut KNcArgh5zKQse2ZcTTJEmdqP6HcLscZiJXz4Al88MPmw8iP02Kzl+axwuAqhJTaJ E45zOD4MVWz1cck4CI322cKZJ1HxTEc0PBF9/IZIsU6JHq+KtghUbZsapUm8O6J6 wKucy2Dw4Imo/KoBo7qCNbWBB6b2o7vSml0tPxGuVWYOx456YirFWps8DO5ruemL 0uHPw8qSynaJUAwDS1IM+JbuLQeMxRi3LTg84vTGJb0kKvR2k6XdoO2SNf6ftWHF YJv6/tZiHTCEphFCJGaQNpbBjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEzV2qww wM6Yc2y1e2X2I6PS7yPAMB8GA1UdIwQYMBaAFDY436O5hWoVrZ1UMGtb9wYw9jZG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTkzMi8yQTVFOEIwMkRD OTMxMUYwQjQ1MTg5NjFBMkVFNTI4RS9OampmbzdtRmFoV3RuVlF3YTF2M0JqRDJO a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL05qamZvN21GYWhXdG5WUXdhMXYzQmpEMk5rWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTkzMi8yQTVFOEIwMkRDOTMxMUYwQjQ1MTg5NjFBMkVFNTI4RS9OampmbzdtRmFo V3RuVlF3YTF2M0JqRDJOa1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQb+ACH9dN8JPduCEotZ23CMEH9NI4DHwqoZR5zwYovfX1Mn49L5LIkJz+68u JyDM7mTqwGaVU7z3EBevJJSCQTWzqzv5t4KLI92n3EyhsVqN0XzjBMCduyuBOJpR ffWAidMOFBAp3Q2MakjjYCCpNkbV8GZpjGRpFCxFsOA7hV+hDpgWk68dZV/TSlaA Qd9+8RFnRPA9eFkY4aUXE6V5Wpkb+vv5kr16jG8oIaOydseBQoo8C174Rzimv8bE GBkdFGvwIBju5UE/c35nVhDLbKcmFUUU/fJ8uDtwd5bSuDR+fb8aDFVX59+sO5GI fyI6qg8Z/pjwj96IYdbGnLMcHg== -----END CERTIFICATE-----Generated at Tue Oct 27 01:54:05 2026 by rpki-client