$ rpki-client -vvvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft File: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft (raw, json) Hash identifier: q9PuTckqOH+9rsdfvV0Fvd2YcTA+GYsUQmezb4B+KP4= Subject key identifier: B5:05:3C:C6:2A:E3:2A:BD:74:33:AE:83:22:EB:A2:FA:F5:92:5F:38 Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Certificate serial: 0A46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft Manifest number: 099D Signing time: Tue 20 Oct 2026 20:32:15 +0000 Manifest this update: Tue 20 Oct 2026 20:32:14 +0000 Manifest next update: Tue 27 Oct 2026 20:32:14 +0000 Files and hashes: 1: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl (hash: k2OxKlf3waN8g8yFaKA6uqSchT3HBIU0vMHtjTsJoiE=) 2: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (hash: jwid66LxSE6FtfJo00r5CTlLTDl6YNkAIwCqKcvsbZE=) 3: A98F7960A41F11F0A133244EC4F9AE02.roa (hash: tpBOZMv/BM0U3GaohtwEK9Q6M+tw+SVPAEKtte+eObI=) 4: 47B17AE48B2911F198C4B09681EE528E.roa (hash: jgMCgh6U8M9QpIXWs6QMJZGNfrnnxeAEbiLKeOOdRSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 20:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2630 (0xa46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Validity Not Before: Oct 20 20:32:14 2026 GMT Not After : Oct 27 20:32:14 2026 GMT Subject: CN=6ad7cfce-f545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2d:25:8e:b5:4f:69:76:b6:b3:ea:32:e6:9f: 0b:d2:93:25:2a:f7:78:1a:c2:ed:41:6c:8a:96:dd: a1:05:0a:79:f8:ea:8f:1f:4d:0e:e2:40:1e:68:f7: 12:52:c6:34:9f:89:5d:c2:11:df:91:58:58:c5:f6: b3:09:f8:9a:5c:5a:b6:37:eb:d3:14:14:66:ca:03: 26:7b:ab:b6:68:7c:9c:f9:d1:1a:e9:1f:26:b0:f7: 9c:78:c2:86:e2:39:51:96:2d:da:9f:bc:f1:d2:de: 5f:9e:57:4e:56:81:5a:b2:fe:2f:07:c1:25:4a:ee: 76:f6:f6:8d:d1:0b:8c:00:f5:81:75:5c:6a:e4:b4: 62:8b:7c:7a:6c:9c:b2:8b:79:97:87:33:99:b4:aa: 30:0d:f0:95:7d:54:00:2f:53:3f:d3:53:a0:c5:94: 09:ea:56:3f:57:ea:a6:79:d6:48:54:53:e5:d2:93: 6e:38:ca:29:bc:cc:73:64:a2:9c:11:5c:3a:d6:62: a3:42:c2:3a:ce:ae:5f:d8:ab:8a:1d:e9:06:0d:f6: b3:53:7b:2b:8b:f7:56:af:5b:62:3c:2e:6d:ee:08: 1a:d3:d4:6a:20:a7:ed:52:61:4b:00:eb:e6:18:cb: e9:c7:d6:79:19:1b:09:fc:4b:c7:22:36:92:64:b9: 8c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:05:3C:C6:2A:E3:2A:BD:74:33:AE:83:22:EB:A2:FA:F5:92:5F:38 X509v3 Authority Key Identifier: keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5c:90:1d:1f:51:f9:3c:a3:dc:86:3d:6e:0e:f1:ce:4b:6f: c2:d2:f9:38:e7:bc:32:0e:60:32:17:10:87:b0:0a:72:8a:8f: 9b:2a:5c:2d:7f:d9:64:f0:2d:07:6c:e5:62:16:93:54:b6:b8: 62:6b:d6:d6:42:0d:ff:bc:91:88:34:f4:5c:b6:6e:f9:44:7a: f3:51:ac:b4:4a:60:33:27:6a:1a:b4:4e:a3:fb:f7:4f:97:e6: 3a:03:c8:92:60:46:b2:45:1f:08:24:62:13:7c:39:69:90:61: 2c:4a:1a:b5:dd:26:9e:9f:07:17:92:5a:27:48:b3:44:bc:6e: 40:a4:fb:08:c3:75:56:cc:b7:27:e2:94:77:3a:50:4b:21:4c: a8:55:56:8b:5c:a0:58:a5:f6:81:d8:1f:d7:40:32:34:d2:e0: 21:e4:b1:c2:a9:13:12:e0:7b:a3:8f:c9:54:26:4e:49:57:70: 57:fe:fe:8b:c5:79:ea:c8:f6:68:4e:65:f7:99:b3:fe:70:e8: a3:7c:b1:f6:af:49:fb:32:c0:87:0b:77:97:94:2f:6f:45:eb: 4c:1f:8d:cf:37:60:46:b0:5a:c5:0e:17:96:e6:e8:42:0f:18: 08:24:5a:a5:be:b6:0a:49:87:d1:01:4c:24:d3:e2:15:c7:ad: ef:9e:d4:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0 OTQ5OTcxNjIwHhcNMjYxMDIwMjAzMjE0WhcNMjYxMDI3MjAzMjE0WjAYMRYwFAYD VQQDEw02YWQ3Y2ZjZS1mNTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsC0ljrVPaXa2s+oy5p8L0pMlKvd4GsLtQWyKlt2hBQp5+OqPH00O4kAeaPcS UsY0n4ldwhHfkVhYxfazCfiaXFq2N+vTFBRmygMme6u2aHyc+dEa6R8msPeceMKG 4jlRli3an7zx0t5fnldOVoFasv4vB8ElSu529vaN0QuMAPWBdVxq5LRii3x6bJyy i3mXhzOZtKowDfCVfVQAL1M/01OgxZQJ6lY/V+qmedZIVFPl0pNuOMopvMxzZKKc EVw61mKjQsI6zq5f2KuKHekGDfazU3sri/dWr1tiPC5t7gga09RqIKftUmFLAOvm GMvpx9Z5GRsJ/EvHIjaSZLmMVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLUFPMYq 4yq9dDOugyLrovr1kl84MB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDA0RS9CQzAzMEM3NkYxREExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFE S0Q4TXEwUGkzR0ZKU1pjV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALlyQHR9R+Tyj3IY9bg7xzktvwtL5OOe8Mg5gMhcQh7AKcoqPmypcLX/ZZPAt B2zlYhaTVLa4YmvW1kIN/7yRiDT0XLZu+UR681GstEpgMydqGrROo/v3T5fmOgPI kmBGskUfCCRiE3w5aZBhLEoatd0mnp8HF5JaJ0izRLxuQKT7CMN1Vsy3J+KUdzpQ SyFMqFVWi1ygWKX2gdgf10AyNNLgIeSxwqkTEuB7o4/JVCZOSVdwV/7+i8V56sj2 aE5l95mz/nDoo3yx9q9J+zLAhwt3l5Qvb0XrTB+NzzdgRrBaxQ4XluboQg8YCCRa pb62CkmH0QFMJNPiFcet757UmA== -----END CERTIFICATE-----Generated at Thu Oct 22 05:48:26 2026 by rpki-client