$ rpki-client -vvvf rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.mft File: NXoXnN0K-aP7A-F31qQ_uKV3VOA.mft (raw, json) Hash identifier: Ao4lvWcV1d5pzkzvOUfTZMF77wm+3qZCu1T0GwLTyTw= Subject key identifier: F9:79:CD:52:EA:B0:40:DB:44:E3:DA:D4:10:7C:47:62:ED:79:30:06 Authority key identifier: 35:7A:17:9C:DD:0A:F9:A3:FB:03:E1:77:D6:A4:3F:B8:A5:77:54:E0 Certificate issuer: /CN=A9166AFF/serialNumber=357A179CDD0AF9A3FB03E177D6A43FB8A57754E0 Certificate serial: 01F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NXoXnN0K-aP7A-F31qQ_uKV3VOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.mft Manifest number: 01E9 Signing time: Sat 03 Oct 2026 04:11:53 +0000 Manifest this update: Sat 03 Oct 2026 04:11:52 +0000 Manifest next update: Sat 10 Oct 2026 04:11:52 +0000 Files and hashes: 1: NXoXnN0K-aP7A-F31qQ_uKV3VOA.crl (hash: Ley+VtQDF+ZcxbfNAp4kWCCUbK2Gfa4to4K5xCVvn8o=) 2: 8109B4CA9DF211F0B1ED220FC4F9AE02.roa (hash: 3F15rH6YOfm7yUgvAU7B83xmF5fOsfIgjewKISbkfSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.crl rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NXoXnN0K-aP7A-F31qQ_uKV3VOA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 04:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 504 (0x1f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166AFF, serialNumber=357A179CDD0AF9A3FB03E177D6A43FB8A57754E0 Validity Not Before: Oct 3 04:11:52 2026 GMT Not After : Oct 10 04:11:52 2026 GMT Subject: CN=6ac08089-b0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2f:ce:d0:69:ae:0f:b2:f5:6a:dd:0c:55:81: 09:1f:34:a2:da:f7:e0:5a:83:71:80:df:fb:05:33: 91:cc:6c:f4:36:b6:75:d7:27:26:c6:9a:7a:e5:ce: 16:5f:77:dc:d8:69:1b:e4:5a:d8:57:c8:b4:a7:71: 31:b6:82:2f:fe:cc:b0:b7:0a:ce:99:86:d3:5e:05: f4:40:96:ce:56:d5:a7:c5:2b:49:02:a1:10:66:99: 79:4c:6f:78:f6:a2:6e:2c:77:9b:0f:5e:7f:88:ba: 6f:cb:1a:5c:04:31:70:cb:ba:79:85:d7:97:38:63: 0b:b3:6f:4d:fa:ed:88:76:fb:88:e3:a3:1c:c5:d6: 62:a9:a6:4a:75:9e:f7:6b:fd:84:37:6f:9e:33:13: e0:11:09:e4:03:30:f6:c2:51:5f:07:73:35:bc:a7: 99:ed:e7:90:a3:af:75:b3:0b:5d:e7:82:5d:23:01: 73:cf:23:d7:3b:3b:21:6b:06:49:56:6f:d8:84:85: b5:19:69:a7:70:c5:cf:12:66:3f:cc:4e:2f:11:b5: a5:9c:34:af:76:cd:ae:2f:bd:e4:0a:44:85:22:af: 79:1a:46:53:8f:5a:53:a7:e4:a9:0b:8c:af:35:2b: 5c:45:5e:24:c3:36:2d:95:b7:3e:33:2c:34:22:97: f4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:79:CD:52:EA:B0:40:DB:44:E3:DA:D4:10:7C:47:62:ED:79:30:06 X509v3 Authority Key Identifier: keyid:35:7A:17:9C:DD:0A:F9:A3:FB:03:E1:77:D6:A4:3F:B8:A5:77:54:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NXoXnN0K-aP7A-F31qQ_uKV3VOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:5e:eb:36:65:a3:96:b8:c4:97:88:6d:02:59:28:55:47:6d: e3:af:4c:2d:9e:2f:82:4f:01:3e:f3:e3:81:2b:5d:3a:a2:92: 2d:41:a1:bf:24:d7:38:bb:b9:54:63:a1:1b:c8:b8:86:85:30: d7:d6:d1:90:e2:1b:ce:51:08:73:af:29:d1:55:f3:13:ce:ff: e9:18:e1:01:f1:22:71:46:cb:9b:d3:b3:27:06:2a:08:d3:cd: 87:a9:c7:40:64:db:c2:03:40:68:64:c0:cd:06:72:00:8d:1c: 36:99:a6:4f:22:b2:95:0d:3f:fa:81:18:be:b6:3f:01:30:45: e0:22:a9:77:cd:ab:96:1e:cc:14:df:ce:f0:00:4e:ec:10:ae: c9:a6:74:b8:f0:0b:c2:e3:fc:3e:5a:23:d8:15:0e:03:e2:1a: e0:9c:25:c4:7a:b1:f8:da:c0:e5:8f:67:25:8d:85:d1:1b:1b: bc:a4:39:0e:98:1b:05:22:e8:cc:98:de:d0:dc:11:7a:cc:02: 63:e3:e8:9f:12:1a:66:f7:3e:ad:68:0c:dc:f0:16:10:9d:a9: 77:50:3b:e3:32:5a:e9:24:7f:70:7f:8c:b1:1f:53:ac:70:28: eb:4c:43:1c:13:2a:40:f2:6d:2b:e6:7b:6b:50:34:48:e6:85: df:3b:96:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZBRkYxMTAvBgNVBAUTKDM1N0ExNzlDREQwQUY5QTNGQjAzRTE3N0Q2QTQzRkI4 QTU3NzU0RTAwHhcNMjYxMDAzMDQxMTUyWhcNMjYxMDEwMDQxMTUyWjAYMRYwFAYD VQQDEw02YWMwODA4OS1iMGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvC/O0GmuD7L1at0MVYEJHzSi2vfgWoNxgN/7BTORzGz0NrZ11ycmxpp65c4W X3fc2Gkb5FrYV8i0p3ExtoIv/sywtwrOmYbTXgX0QJbOVtWnxStJAqEQZpl5TG94 9qJuLHebD15/iLpvyxpcBDFwy7p5hdeXOGMLs29N+u2IdvuI46McxdZiqaZKdZ73 a/2EN2+eMxPgEQnkAzD2wlFfB3M1vKeZ7eeQo691swtd54JdIwFzzyPXOzshawZJ Vm/YhIW1GWmncMXPEmY/zE4vEbWlnDSvds2uL73kCkSFIq95GkZTj1pTp+SpC4yv NStcRV4kwzYtlbc+Myw0Ipf0NwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPl5zVLq sEDbROPa1BB8R2LteTAGMB8GA1UdIwQYMBaAFDV6F5zdCvmj+wPhd9akP7ild1Tg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkFGRi80MENEMUI1NEU1 MDIxMUVFOUFCRjc2NTVDNEY5QUUwMi9OWG9Ybk4wSy1hUDdBLUYzMXFRX3VLVjNW T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Yb1huTjBLLWFQN0EtRjMxcVFfdUtWM1ZPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkFGRi80MENEMUI1NEU1MDIxMUVFOUFCRjc2NTVDNEY5QUUwMi9OWG9Ybk4wSy1h UDdBLUYzMXFRX3VLVjNWT0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANF7rNmWjlrjEl4htAlkoVUdt469MLZ4vgk8BPvPjgStdOqKSLUGhvyTXOLu5 VGOhG8i4hoUw19bRkOIbzlEIc68p0VXzE87/6RjhAfEicUbLm9OzJwYqCNPNh6nH QGTbwgNAaGTAzQZyAI0cNpmmTyKylQ0/+oEYvrY/ATBF4CKpd82rlh7MFN/O8ABO 7BCuyaZ0uPALwuP8Ploj2BUOA+Ia4JwlxHqx+NrA5Y9nJY2F0RsbvKQ5DpgbBSLo zJje0NwReswCY+PonxIaZvc+rWgM3PAWEJ2pd1A74zJa6SR/cH+MsR9TrHAo60xD HBMqQPJtK+Z7a1A0SOaF3zuWEQ== -----END CERTIFICATE-----Generated at Sun Oct 4 21:28:49 2026 by rpki-client