$ rpki-client -vvvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft File: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft (raw, json) Hash identifier: J+wLhcCXjBReazOaUqV6qKzyliTzhJQiaKsdP2IHhhI= Subject key identifier: 12:79:F2:03:9E:06:A1:BF:FD:0A:E0:65:90:D3:A4:26:95:BB:51:81 Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Certificate serial: 1288 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft Manifest number: 10E8 Signing time: Thu 22 Oct 2026 17:31:46 +0000 Manifest this update: Thu 22 Oct 2026 17:31:46 +0000 Manifest next update: Thu 29 Oct 2026 17:31:46 +0000 Files and hashes: 1: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl (hash: AbVS2LgUGNvIp07zyqRylih1zo25o9ClPO6oAIsu2uM=) 2: FD5158C044C511F0ABA4E977C4F9AE02.roa (hash: A3mprKP4/bzMlJDhCze5Spg/p0sS0GlpyT+kIwue5HU=) 3: C3BEAC38CF7C11F0B0EB4644C4F9AE02.roa (hash: GeYMMjQQO4OJv0hhzntd/IKM1r5EywrlvT+cEVRcT2M=) 4: C2356A948FE811E98B967A66C4F9AE02.roa (hash: tZuST+AOoUn223wk8bZTKDT1J1Cy3KgRlLbmHSwBjOc=) 5: 8224E55C345F11F0BD514C6CC4F9AE02.roa (hash: u6/wQAnigEtagpknx3tXOVG7uwO7ZVlGNYHIfxcAb4g=) 6: C4A85FD48FE811E98B967A66C4F9AE02.roa (hash: WtxeX8BB0opbdwzUtALDCwbBr4nNuxXM2Tpyyv444y0=) 7: DFC4CB6686F011F19E006003A7EE528E.roa (hash: e4jwE0ZT8KKqzAYg8acBAl1aL2eMGYBkO5WKPD4gY0E=) 8: 2A4EE13E7CFD11F08A91EE21C4F9AE02.roa (hash: i5Rintjycnuo9u71FbQoVNcu5/vekh+2HiEq9B95npE=) 9: F3011EAAB88311EBB2078C50C4F9AE02.roa (hash: VxYvOO28xeiG9c6rCrahvvpw2JaHPPY/8pkFYEDdB48=) 10: B969078EB94B11EB8CFABC23C4F9AE02.roa (hash: yfpfiXjcixpP9IQZ4ifctX4fhZj0BN5GuoJO9ai0I80=) 11: C435900ACF7C11F0AAC14644C4F9AE02.roa (hash: qVwJ/vwm5XFANli3yyVsiUhVINMVoW4a5PClUSRYBSE=) 12: 49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa (hash: e4iJVgXrOeEESzCVIGc2vflltGz2qDITSBKrnWa8B+0=) 13: 9394D360345F11F0AB96776CC4F9AE02.roa (hash: dneRbel94yY09BrODhW/cm0eDKRgptqdSpSXdfm04G0=) 14: I3gtydeyCoEzxoHhphV7nSBEdcE.asa (hash: UsfZdqrzXmth4HfD3tidOb1ZQGOW3dFNJ6v8mpbSRSE=) 15: 5C4E5A6EB9E511EB9717B256C4F9AE02.roa (hash: jSm32Eb8eMElOEnd+VebqX3ziEBklNA1JW0RK3i6/Ok=) 16: 50D040327CFD11F0B32D4522C4F9AE02.roa (hash: ig8ZCKfrZ5CJ7ljOZZuhrKZUQ/12pkHKHaOO+01joog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4744 (0x1288) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Validity Not Before: Oct 22 17:31:46 2026 GMT Not After : Oct 29 17:31:46 2026 GMT Subject: CN=6ada4882-66f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:04:09:f5:9a:44:e6:e1:ac:66:f6:0a:73:8c: 08:e9:84:8c:15:fd:9f:2b:f9:37:f1:ce:01:12:13: 7c:9e:f0:e7:97:72:db:24:cd:b7:97:f6:bf:26:17: 74:71:86:f7:a7:ea:02:ec:b8:91:9f:00:b3:32:e9: 9f:f5:f1:f6:06:83:30:7a:5f:c9:35:ba:08:41:21: fc:20:a8:90:b8:05:47:ab:53:12:1d:fc:14:d1:57: 88:74:9c:ff:ac:41:e6:3f:64:70:50:e4:09:6a:ef: 31:f5:72:65:f7:3e:7b:86:94:b6:e0:2f:a8:25:07: 22:62:0c:db:2c:68:08:ab:b5:16:52:30:44:2e:d1: 4d:8e:fc:a4:c2:05:a7:1b:09:4d:e9:17:9b:81:7e: 9d:c9:58:f1:fe:04:4d:49:19:5e:6b:db:a4:fa:c8: c8:37:43:d3:3b:40:8f:3b:27:fe:4d:e9:b1:44:dd: d3:65:31:43:bb:a6:f8:6f:3b:2c:f1:7e:3f:0d:89: 88:c5:b1:ad:34:24:20:a4:b3:de:47:69:00:8f:91: 8b:eb:c4:5d:38:24:4c:f1:53:bd:cd:89:3f:e6:52: 54:26:26:78:57:2f:b7:52:0d:b3:53:c6:87:ab:4d: 29:bf:c6:8f:c3:05:72:a6:4b:84:9c:87:2f:d7:75: f6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:79:F2:03:9E:06:A1:BF:FD:0A:E0:65:90:D3:A4:26:95:BB:51:81 X509v3 Authority Key Identifier: keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:da:fc:8a:37:f2:18:26:a7:3e:46:0a:dd:72:73:4c:24:78: 30:b7:dc:8f:5d:07:06:11:f5:2f:bf:16:13:3b:35:fd:ed:f4: 2f:be:c0:8b:28:34:39:c5:ab:bb:e7:3d:5b:58:6d:06:dd:89: 4b:61:b9:2d:22:b8:0a:53:93:25:b2:70:4b:3b:4a:15:c4:33: 14:0b:e7:d8:54:5f:9a:74:79:2b:32:83:92:6d:3f:83:9e:82: 21:d3:31:e5:53:8a:fe:8c:b7:f9:69:bc:d5:9a:29:af:14:fb: 77:01:4b:e5:c7:7b:e6:53:20:7a:eb:bc:95:73:91:e0:62:06: 67:5e:b6:9d:44:c2:9b:a0:3d:5b:0d:1b:3c:02:4e:87:98:09: b4:be:c4:8e:ec:c9:70:a1:82:71:94:0a:21:d0:a4:7d:54:3f: 87:46:32:a9:6a:b3:7b:b0:d2:e1:93:7f:22:b0:05:80:16:95: 1d:f4:b7:5f:6c:01:c0:c4:d5:24:8d:a6:ac:37:8b:3b:90:71: 69:45:94:d1:c2:1c:aa:cd:17:59:09:70:e3:60:96:4f:62:af: 4f:22:56:76:f9:9c:58:4c:13:f8:cc:1d:59:f4:a4:d8:41:49: 5a:5e:d2:bc:15:96:70:19:0c:b9:71:75:23:d9:ab:e3:02:34: 91:26:ba:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5 RDNGRDdCNjAwHhcNMjYxMDIyMTczMTQ2WhcNMjYxMDI5MTczMTQ2WjAYMRYwFAYD VQQDEw02YWRhNDg4Mi02NmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlgQJ9ZpE5uGsZvYKc4wI6YSMFf2fK/k38c4BEhN8nvDnl3LbJM23l/a/Jhd0 cYb3p+oC7LiRnwCzMumf9fH2BoMwel/JNboIQSH8IKiQuAVHq1MSHfwU0VeIdJz/ rEHmP2RwUOQJau8x9XJl9z57hpS24C+oJQciYgzbLGgIq7UWUjBELtFNjvykwgWn GwlN6RebgX6dyVjx/gRNSRlea9uk+sjIN0PTO0CPOyf+TemxRN3TZTFDu6b4bzss 8X4/DYmIxbGtNCQgpLPeR2kAj5GL68RdOCRM8VO9zYk/5lJUJiZ4Vy+3Ug2zU8aH q00pv8aPwwVypkuEnIcv13X2JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBJ58gOe BqG//QrgZZDTpCaVu1GBMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDNEQi8wREMzNUQzRThERDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0 Q0ZyNkJzQ1Q1VXFkUDllMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgtr8ijfyGCanPkYK3XJzTCR4MLfcj10HBhH1L78WEzs1/e30L77Aiyg0OcWr u+c9W1htBt2JS2G5LSK4ClOTJbJwSztKFcQzFAvn2FRfmnR5KzKDkm0/g56CIdMx 5VOK/oy3+Wm81ZoprxT7dwFL5cd75lMgeuu8lXOR4GIGZ162nUTCm6A9Ww0bPAJO h5gJtL7EjuzJcKGCcZQKIdCkfVQ/h0YyqWqze7DS4ZN/IrAFgBaVHfS3X2wBwMTV JI2mrDeLO5BxaUWU0cIcqs0XWQlw42CWT2KvTyJWdvmcWEwT+MwdWfSk2EFJWl7S vBWWcBkMuXF1I9mr4wI0kSa68w== -----END CERTIFICATE-----Generated at Thu Oct 22 21:30:30 2026 by rpki-client