$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft File: nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft (raw, json) Hash identifier: mAaotmtHGJ/d20gS/qIIjHJEHK7y+MS9zh8nPnOHl4k= Subject key identifier: D1:55:56:AD:3F:F9:F2:6D:66:74:AF:A6:EA:41:7F:B7:F9:B4:A0:59 Authority key identifier: 9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD Certificate issuer: /CN=A9185D34/serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD Certificate serial: 090F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft Manifest number: 0900 Signing time: Fri 02 Oct 2026 20:37:36 +0000 Manifest this update: Fri 02 Oct 2026 20:37:36 +0000 Manifest next update: Fri 09 Oct 2026 20:37:36 +0000 Files and hashes: 1: nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl (hash: LvqSx4J5LI7J7bQYRLXGuQYbXy+0+vW9wdOZALKVNDk=) 2: C1171FCAB1B111ECBA7F614FC4F9AE02.roa (hash: yy56Dhxj1ovpz3FD+DcyQb1Zocg7YLvQqlFzvMeS8+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 20:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2319 (0x90f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D34, serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD Validity Not Before: Oct 2 20:37:36 2026 GMT Not After : Oct 9 20:37:36 2026 GMT Subject: CN=6ac01610-c8e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:24:cc:b5:6a:77:e3:35:48:ed:a1:96:97:04: cc:72:92:44:84:ed:d3:d4:ba:73:f0:f9:6e:79:fb: ea:9e:1d:09:29:bf:48:62:a5:c8:80:4d:9f:f8:b1: 77:58:dc:31:5e:30:83:a5:14:e0:7c:ae:33:b9:02: 73:ea:2e:20:0f:52:df:8e:85:d3:8e:ad:d0:11:8c: 04:1b:08:b9:6e:b3:9a:18:8f:25:c7:d7:08:28:3d: 29:29:b4:a4:19:15:89:92:e4:d5:30:44:17:99:2c: 1b:f6:55:bb:d9:35:e2:8a:86:85:bb:70:3a:59:aa: d0:b2:f5:ef:f4:e3:16:4f:fe:32:4a:d2:20:88:6e: 48:28:6b:79:1e:60:e5:6f:ae:2a:01:ba:56:4b:b1: 3a:bd:0b:fc:26:7f:17:e8:2c:58:31:62:ef:d0:f2: 96:ad:ab:7b:aa:2e:77:3a:15:c3:93:38:24:08:39: 46:43:9b:19:6c:df:93:0e:c6:42:36:43:1b:35:c1: 86:98:93:d5:58:f9:4b:59:e1:b2:f0:22:42:6e:c3: d4:ab:e2:65:3e:3a:7d:27:95:e8:49:1b:8e:e2:f5: 65:01:8a:5b:66:44:74:d7:5e:3b:ec:de:8a:5a:81: 6b:2b:67:4b:38:91:c9:ec:f2:9b:61:52:7d:7d:f2: 91:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:55:56:AD:3F:F9:F2:6D:66:74:AF:A6:EA:41:7F:B7:F9:B4:A0:59 X509v3 Authority Key Identifier: keyid:9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:fb:49:6e:7f:91:32:25:6e:db:76:fb:f3:7e:f9:d4:43:34: 43:8d:9c:63:05:c2:53:19:e1:48:b7:b8:54:ee:4c:73:24:b0: 15:ec:db:d3:25:95:ba:fa:62:27:93:91:ea:47:68:a1:3f:a5: 60:00:b2:3f:38:0c:0b:88:88:e6:d1:9c:ea:0c:a2:d5:62:e8: d4:4c:96:a8:9a:0a:1b:06:1d:19:2d:f2:56:fe:c2:bf:49:8a: ae:32:7d:b2:ba:aa:1b:23:56:94:cb:73:d4:21:73:8c:36:5b: 1f:2a:91:ab:28:db:ac:a6:fb:20:67:7e:32:9b:f6:f6:05:c9: 3b:2a:7e:56:8e:7d:46:33:23:d6:60:18:39:7e:79:41:8d:79: 22:bc:2c:37:91:9b:62:01:e5:85:06:27:0e:7f:d3:af:7f:1d: 32:bb:e6:0e:82:a3:58:7b:a7:b0:7a:2d:99:31:65:85:fd:18: 0a:6d:d5:c3:10:b9:94:d4:c6:59:a9:c5:5f:e2:46:86:15:78: 2d:ad:8b:55:bc:3b:ff:14:9d:86:42:97:6b:af:ed:bc:bf:7e: 65:b9:51:76:96:07:a0:03:47:57:d2:13:c0:89:f6:15:6f:f8: d3:5b:c8:04:a0:83:0b:56:f4:f0:76:80:1d:23:44:ff:d3:56: ec:ec:f6:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVEMzQxMTAvBgNVBAUTKDlFQzEyMTZEMjU2NDE2NDAzQ0I1QzUzRTczNDU1MzBG ODMyNzJDREQwHhcNMjYxMDAyMjAzNzM2WhcNMjYxMDA5MjAzNzM2WjAYMRYwFAYD VQQDEw02YWMwMTYxMC1jOGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiTMtWp34zVI7aGWlwTMcpJEhO3T1Lpz8Pluefvqnh0JKb9IYqXIgE2f+LF3 WNwxXjCDpRTgfK4zuQJz6i4gD1LfjoXTjq3QEYwEGwi5brOaGI8lx9cIKD0pKbSk GRWJkuTVMEQXmSwb9lW72TXiioaFu3A6WarQsvXv9OMWT/4yStIgiG5IKGt5HmDl b64qAbpWS7E6vQv8Jn8X6CxYMWLv0PKWrat7qi53OhXDkzgkCDlGQ5sZbN+TDsZC NkMbNcGGmJPVWPlLWeGy8CJCbsPUq+JlPjp9J5XoSRuO4vVlAYpbZkR011477N6K WoFrK2dLOJHJ7PKbYVJ9ffKRIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNFVVq0/ +fJtZnSvpupBf7f5tKBZMB8GA1UdIwQYMBaAFJ7BIW0lZBZAPLXFPnNFUw+DJyzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQzNC9EQkE4Nzg1OEU2 QTAxMUVBQTg1NDRCNDNDNEY5QUUwMi9uc0VoYlNWa0ZrQTh0Y1UtYzBWVEQ0TW5M TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25zRWhiU1ZrRmtBOHRjVS1jMFZURDRNbkxOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQzNC9EQkE4Nzg1OEU2QTAxMUVBQTg1NDRCNDNDNEY5QUUwMi9uc0VoYlNWa0Zr QTh0Y1UtYzBWVEQ0TW5MTjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdPtJbn+RMiVu23b783751EM0Q42cYwXCUxnhSLe4VO5McySwFezb0yWVuvpi J5OR6kdooT+lYACyPzgMC4iI5tGc6gyi1WLo1EyWqJoKGwYdGS3yVv7Cv0mKrjJ9 srqqGyNWlMtz1CFzjDZbHyqRqyjbrKb7IGd+Mpv29gXJOyp+Vo59RjMj1mAYOX55 QY15IrwsN5GbYgHlhQYnDn/Tr38dMrvmDoKjWHunsHotmTFlhf0YCm3VwxC5lNTG WanFX+JGhhV4La2LVbw7/xSdhkKXa6/tvL9+ZblRdpYHoANHV9ITwIn2FW/401vI BKCDC1b08HaAHSNE/9NW7Oz2Dw== -----END CERTIFICATE-----Generated at Sun Oct 4 20:00:10 2026 by rpki-client