$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft File: nOkX3Drgxboud8t3WjrZnGhcQGs.mft (raw, json) Hash identifier: CriEzFyPhAzGcIoHxCW9uV9oJfY+A903lXDOPQKS1PY= Subject key identifier: C4:57:5B:82:17:32:22:3F:FF:F9:E4:C3:C1:E2:A1:A6:27:5D:76:C6 Authority key identifier: 9C:E9:17:DC:3A:E0:C5:BA:2E:77:CB:77:5A:3A:D9:9C:68:5C:40:6B Certificate issuer: /CN=A9161F3E/serialNumber=9CE917DC3AE0C5BA2E77CB775A3AD99C685C406B Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft Manifest number: 0125 Signing time: Tue 27 Oct 2026 06:03:25 +0000 Manifest this update: Tue 27 Oct 2026 06:03:25 +0000 Manifest next update: Tue 03 Nov 2026 06:03:25 +0000 Files and hashes: 1: nOkX3Drgxboud8t3WjrZnGhcQGs.crl (hash: bG4A8P6R6pwfNL9layd3Ksz8vrZJFjwdop2MprhuwBg=) 2: 49DEAEDC12A711F099020A73C4F9AE02.roa (hash: 73STUG9MRsTj+UMDTuA4X0z5fGUTYqhKS5W5S7xFgxs=) 3: 4A3C802012A711F099020A73C4F9AE02.roa (hash: iEuV0+5znqF8f5T5Ps6WIUoKRiKa2jw2dHDVVLuYtWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.crl rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 06:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161F3E, serialNumber=9CE917DC3AE0C5BA2E77CB775A3AD99C685C406B Validity Not Before: Oct 27 06:03:25 2026 GMT Not After : Nov 3 06:03:25 2026 GMT Subject: CN=6ae03ead-e61b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:25:e7:6d:92:e3:81:f3:f1:a7:6e:69:5b:ba: 10:21:de:5b:0a:4c:cf:de:1e:31:6a:ee:d2:ac:10: 5d:c4:87:e5:31:c3:89:4b:4b:bf:fa:b8:1b:2e:65: a5:37:e6:1b:77:d7:52:b8:49:4b:9a:5b:05:fa:8e: 23:77:87:c6:9f:0f:8d:b3:59:b5:c4:ab:fc:66:e3: 93:b0:aa:5c:1d:70:f9:ab:f3:1d:2a:63:cf:35:26: 8a:11:3d:6e:20:00:3e:b0:47:35:d4:aa:ba:90:63: 59:d6:06:f7:d0:73:1d:23:91:2d:b5:38:bf:28:c6: bd:7d:aa:d0:39:6e:df:a5:89:36:f6:ed:1e:76:1e: b5:70:cc:8a:f1:42:aa:c2:db:90:06:3d:b2:73:8d: 44:03:62:7c:b5:bb:3d:21:36:9b:ab:c4:23:2f:b2: b0:95:f7:91:0b:dc:f6:c5:07:74:9b:10:d8:b3:c6: 1d:04:f7:c2:19:ef:04:c5:e3:d4:aa:5a:74:7e:f0: d6:bc:3d:65:2e:8c:a3:51:52:7a:0d:1c:ce:22:39: 0b:07:07:97:80:33:70:6d:1c:5f:e1:74:74:d0:05: c7:ea:8a:90:e9:96:a3:a9:e0:84:b2:fc:c5:95:79: 62:e5:cf:9d:4c:3d:aa:fa:8e:1c:36:34:a5:bf:cc: 9f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:57:5B:82:17:32:22:3F:FF:F9:E4:C3:C1:E2:A1:A6:27:5D:76:C6 X509v3 Authority Key Identifier: keyid:9C:E9:17:DC:3A:E0:C5:BA:2E:77:CB:77:5A:3A:D9:9C:68:5C:40:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:64:63:77:52:64:e5:d3:8c:b2:ce:8b:67:bc:bb:66:af:94: e7:be:c6:69:1c:dd:75:cc:32:b9:5a:f3:c5:cc:f2:e2:24:16: e8:d8:f6:2b:1c:66:c8:01:4b:72:31:a1:46:26:e1:39:f3:b0: 41:02:42:2b:a9:53:0c:d9:0a:51:bc:1b:89:15:64:b6:c4:c6: 3f:fa:e2:5f:ad:64:a3:98:23:a8:d9:38:94:48:2e:ad:f3:ec: d1:e0:f5:e2:c6:42:19:fa:fd:82:a0:1e:5d:ff:6b:b4:23:0e: fb:f2:b1:98:8a:4b:74:19:44:4a:45:f1:b6:94:e9:99:6b:ae: 9f:de:03:f1:03:29:9a:49:37:f2:f8:f2:8d:59:8b:29:3b:57: 2c:5d:71:db:ac:2a:61:97:35:9a:9a:3d:59:5a:13:ef:ca:0d: 61:b5:9d:1c:74:36:95:b1:c2:4b:e8:71:2b:b4:87:8d:dc:99: 53:92:ec:c0:22:d5:b4:d1:10:35:c1:aa:e2:30:e8:30:43:86: e0:93:5d:26:24:be:09:53:c6:49:24:21:e9:60:1c:2d:0c:33: d4:ec:aa:da:da:e2:b9:c1:7a:0b:ae:7e:8c:ca:48:ff:07:c1: 5f:2e:c6:c0:62:d6:7c:dc:61:e5:9b:4e:bd:77:4d:b3:e2:54: cd:ed:99:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGM0UxMTAvBgNVBAUTKDlDRTkxN0RDM0FFMEM1QkEyRTc3Q0I3NzVBM0FEOTlD Njg1QzQwNkIwHhcNMjYxMDI3MDYwMzI1WhcNMjYxMTAzMDYwMzI1WjAYMRYwFAYD VQQDEw02YWUwM2VhZC1lNjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3CXnbZLjgfPxp25pW7oQId5bCkzP3h4xau7SrBBdxIflMcOJS0u/+rgbLmWl N+Ybd9dSuElLmlsF+o4jd4fGnw+Ns1m1xKv8ZuOTsKpcHXD5q/MdKmPPNSaKET1u IAA+sEc11Kq6kGNZ1gb30HMdI5EttTi/KMa9farQOW7fpYk29u0edh61cMyK8UKq wtuQBj2yc41EA2J8tbs9ITabq8QjL7KwlfeRC9z2xQd0mxDYs8YdBPfCGe8ExePU qlp0fvDWvD1lLoyjUVJ6DRzOIjkLBweXgDNwbRxf4XR00AXH6oqQ6ZajqeCEsvzF lXli5c+dTD2q+o4cNjSlv8yf1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMRXW4IX MiI///nkw8HioaYnXXbGMB8GA1UdIwQYMBaAFJzpF9w64MW6LnfLd1o62ZxoXEBr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUYzRS8zMzlFREU2ODEw RTQxMUYwQjc1QjgxNjZDNEY5QUUwMi9uT2tYM0RyZ3hib3VkOHQzV2pyWm5HaGNR R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25Pa1gzRHJneGJvdWQ4dDNXanJabkdoY1FHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUYzRS8zMzlFREU2ODEwRTQxMUYwQjc1QjgxNjZDNEY5QUUwMi9uT2tYM0RyZ3hi b3VkOHQzV2pyWm5HaGNRR3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg2Rjd1Jk5dOMss6LZ7y7Zq+U577GaRzddcwyuVrzxczy4iQW6Nj2KxxmyAFL cjGhRibhOfOwQQJCK6lTDNkKUbwbiRVktsTGP/riX61ko5gjqNk4lEgurfPs0eD1 4sZCGfr9gqAeXf9rtCMO+/KxmIpLdBlESkXxtpTpmWuun94D8QMpmkk38vjyjVmL KTtXLF1x26wqYZc1mpo9WVoT78oNYbWdHHQ2lbHCS+hxK7SHjdyZU5LswCLVtNEQ NcGq4jDoMEOG4JNdJiS+CVPGSSQh6WAcLQwz1Oyq2triucF6C65+jMpI/wfBXy7G wGLWfNxh5ZtOvXdNs+JUze2Zjg== -----END CERTIFICATE-----Generated at Tue Oct 27 17:17:52 2026 by rpki-client