$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft File: NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft (raw, json) Hash identifier: SxiHnqIWvTQz+F2e+Zvf+IE7uCOQ+jb+s0iV9uuwzmg= Subject key identifier: B4:0B:25:F5:D7:7C:CD:19:C5:D8:DE:06:71:EE:4D:4E:97:0F:2A:7F Authority key identifier: 35:76:4D:94:20:7D:44:D8:9A:70:55:7C:66:D2:A2:EF:3D:1C:54:80 Certificate issuer: /CN=A915BC71/serialNumber=35764D94207D44D89A70557C66D2A2EF3D1C5480 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft Manifest number: 62 Signing time: Sun 01 Nov 2026 09:09:12 +0000 Manifest this update: Sun 01 Nov 2026 09:09:12 +0000 Manifest next update: Sun 08 Nov 2026 09:09:12 +0000 Files and hashes: 1: NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl (hash: lP1aRZH+QGuH+OhRvgzKqfzp5yJOwO/WimQBaN1ZPi4=) 2: 045117A63F0611F1B36B08F4C9833773.roa (hash: yc41YsNACmYj/Sr/DAPgp/0vliNwQTb4cuVsDR9CDfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Nov 2026 09:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC71, serialNumber=35764D94207D44D89A70557C66D2A2EF3D1C5480 Validity Not Before: Nov 1 09:09:12 2026 GMT Not After : Nov 8 09:09:12 2026 GMT Subject: CN=6ae701b8-545c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cb:5d:1d:cd:9b:29:a2:ba:a1:df:e1:db:02: 8b:e0:f4:77:f0:0c:46:f4:bc:65:00:43:e5:04:6f: b5:0e:38:86:0d:f6:f0:08:3c:5d:2b:f4:26:db:58: b1:a1:66:e2:f4:74:7c:4a:28:6a:ea:eb:41:d9:48: d0:86:e7:b6:1e:8c:a0:ad:50:29:81:82:a4:53:c5: db:8c:3d:84:34:52:f8:bf:8c:1b:7a:37:a9:e4:ee: f3:6b:22:10:74:ba:01:a3:bb:3d:d2:1b:c2:a5:9b: 98:4f:5d:81:a6:4b:6a:d4:b4:0a:46:e0:cd:bd:f7: e3:32:d4:2f:f3:a8:d5:42:32:07:35:35:ec:78:e0: f1:b1:15:45:e5:87:70:3e:b4:e3:c6:e1:a5:59:aa: 1c:b6:b5:d8:db:34:e7:42:a7:60:7d:70:f6:15:3b: b7:0b:79:a7:65:70:f7:df:2e:2f:2a:b2:c0:28:a8: 10:c2:4c:68:79:c6:88:38:5a:73:38:27:90:03:ad: 85:97:5e:ae:6b:3c:31:02:09:c6:bc:69:95:13:35: d2:3c:0b:ff:d8:4b:30:a4:2e:82:7b:7b:47:27:f3: ca:aa:a6:24:ff:b6:5a:10:70:3d:63:8f:4d:97:fa: af:70:ed:ba:c6:ee:16:b0:a0:a5:15:3d:bf:5c:f0: e5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0B:25:F5:D7:7C:CD:19:C5:D8:DE:06:71:EE:4D:4E:97:0F:2A:7F X509v3 Authority Key Identifier: keyid:35:76:4D:94:20:7D:44:D8:9A:70:55:7C:66:D2:A2:EF:3D:1C:54:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:fd:ec:51:ca:54:5c:4f:03:58:8a:ff:90:10:af:56:dc:a6: 4c:a2:6c:a1:29:da:6f:af:4e:fd:2c:c1:72:99:72:8e:07:24: 65:38:6d:de:f9:a8:3b:b2:ca:7a:4a:e6:d1:37:8e:fc:97:44: 48:1f:1f:52:7e:33:a9:fa:98:9a:7f:8b:e1:ff:c8:f7:57:29: 3e:9d:d2:9a:e3:df:4a:37:35:13:f8:52:d7:b0:ed:fe:72:92: 74:a8:0e:3b:ad:47:3c:c6:8a:24:9a:8e:35:5b:82:eb:04:03: 5d:77:77:8b:83:6e:1d:fb:77:ef:89:67:3b:40:41:61:7c:84: fa:ac:fe:51:3c:18:76:06:1c:ea:d9:81:3f:19:b3:fa:d0:79: 49:3f:d5:7d:0f:07:8f:f7:3c:90:bc:ad:a1:b8:a7:b7:f8:98: 76:08:75:9e:9d:54:57:e7:d8:91:b2:8e:f6:66:2b:d7:26:5f: 83:0f:84:1c:65:86:ac:ab:be:37:fd:e2:d9:f6:c1:6c:fe:24: 14:bc:a8:94:fe:7d:91:14:f5:91:21:a8:c2:19:54:c5:76:f4: 84:fb:ae:22:83:42:1d:04:21:69:eb:74:01:e8:d3:80:1f:e3: 16:ed:4b:4d:e2:53:70:ce:ca:5e:b2:45:45:7f:9a:87:b5:91: 7b:f8:94:cc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QkM3MTExMC8GA1UEBRMoMzU3NjREOTQyMDdENDREODlBNzA1NTdDNjZEMkEyRUYz RDFDNTQ4MDAeFw0yNjExMDEwOTA5MTJaFw0yNjExMDgwOTA5MTJaMBgxFjAUBgNV BAMTDTZhZTcwMWI4LTU0NWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVy10dzZsporqh3+HbAovg9HfwDEb0vGUAQ+UEb7UOOIYN9vAIPF0r9CbbWLGh ZuL0dHxKKGrq60HZSNCG57YejKCtUCmBgqRTxduMPYQ0Uvi/jBt6N6nk7vNrIhB0 ugGjuz3SG8Klm5hPXYGmS2rUtApG4M299+My1C/zqNVCMgc1Nex44PGxFUXlh3A+ tOPG4aVZqhy2tdjbNOdCp2B9cPYVO7cLeadlcPffLi8qssAoqBDCTGh5xog4WnM4 J5ADrYWXXq5rPDECCca8aZUTNdI8C//YSzCkLoJ7e0cn88qqpiT/tloQcD1jj02X +q9w7brG7hawoKUVPb9c8OU1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtAsl9dd8 zRnF2N4Gce5NTpcPKn8wHwYDVR0jBBgwFoAUNXZNlCB9RNiacFV8ZtKi7z0cVIAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCQzcxLzg4QTNCNEJBM0Yw NTExRjFCRTNGQzBDMkM5ODMzNzczL05YWk5sQ0I5Uk5pYWNGVjhadEtpN3owY1ZJ QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTlhaTmxDQjlSTmlhY0ZWOFp0S2k3ejBjVklBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC QzcxLzg4QTNCNEJBM0YwNTExRjFCRTNGQzBDMkM5ODMzNzczL05YWk5sQ0I5Uk5p YWNGVjhadEtpN3owY1ZJQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA9/exRylRcTwNYiv+QEK9W3KZMomyhKdpvr079LMFymXKOByRlOG3e+ag7ssp6 SubRN478l0RIHx9SfjOp+piaf4vh/8j3Vyk+ndKa499KNzUT+FLXsO3+cpJ0qA47 rUc8xookmo41W4LrBANdd3eLg24d+3fviWc7QEFhfIT6rP5RPBh2Bhzq2YE/GbP6 0HlJP9V9DweP9zyQvK2huKe3+Jh2CHWenVRX59iRso72ZivXJl+DD4QcZYasq743 /eLZ9sFs/iQUvKiU/n2RFPWRIajCGVTFdvSE+64ig0IdBCFp63QB6NOAH+MW7UtN 4lNwzspeskVFf5qHtZF7+JTM -----END CERTIFICATE-----Generated at Mon Nov 2 12:44:27 2026 by rpki-client