$ rpki-client -vvvf rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft File: 0NDWzWh3DDh4O764QbES0FYBdKI.mft (raw, json) Hash identifier: PNEi+GdsL9U1oRfELdp/Frls1qpaW1KcECyGFBsQHzc= Subject key identifier: 0C:3F:25:4C:A1:D1:91:AE:0F:5D:D7:E1:ED:B7:90:83:83:9C:19:4D Authority key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2 Certificate issuer: /CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2 Certificate serial: 09B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft Manifest number: 096F Signing time: Sat 31 Oct 2026 20:30:44 +0000 Manifest this update: Sat 31 Oct 2026 20:30:44 +0000 Manifest next update: Sat 07 Nov 2026 20:30:44 +0000 Files and hashes: 1: 0NDWzWh3DDh4O764QbES0FYBdKI.crl (hash: x6nabUhyz0myJtXqXsoNjUa3jdoT5G62cHbdvKR6hEw=) 2: 530A6E26721711F1A345157A7BA30FBC.roa (hash: q5oiasmtw4zs+gP72ndK+9apIt6id57zzQstMwGY0i4=) 3: 577FD5BE067C11ED882FC127C4F9AE02.roa (hash: oRxcNHxks0xSpQQ3xzQ2CValnLK9KvTZJVfHvaOGSxM=) 4: 4EF79184489411ED86987260C4F9AE02.roa (hash: FW+6trj4ky9MIx0ol9teJ9/ApDWDbFtG0371+JMzJmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 20:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2482 (0x9b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91998BE, serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2 Validity Not Before: Oct 31 20:30:44 2026 GMT Not After : Nov 7 20:30:44 2026 GMT Subject: CN=6ae64ff4-439f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:73:e7:87:5a:9a:9d:3c:c1:15:e9:94:09:f9: b4:c9:d5:da:6d:5b:5f:3a:1a:b3:10:0d:21:2a:52: 46:09:88:d2:09:f8:28:c6:d1:75:bb:de:34:ca:51: 24:62:32:d9:e4:d2:b2:3b:87:8d:9d:df:db:fe:b7: 74:10:40:5c:02:34:e6:7b:c1:c2:98:29:2e:42:cf: 6d:34:99:69:97:76:56:94:b9:7c:45:af:50:ab:a3: 0a:8e:87:73:e6:b6:34:52:03:14:49:c5:e7:62:51: ca:17:0f:e8:1c:f6:fc:e9:b4:3d:a1:ef:ed:86:e1: 7c:d1:bb:a0:bf:49:a9:4b:c7:22:3d:bf:1a:5c:c6: f2:6b:d4:72:8c:a2:88:41:26:68:1c:f4:d3:de:f6: a8:64:9f:f3:a9:7c:2f:97:f7:37:69:22:fc:14:ba: 17:4b:a4:a2:65:1c:c9:75:01:fe:c1:56:b6:ac:09: 56:6a:d1:db:06:17:4f:25:b9:9d:59:f9:fb:9b:81: eb:47:39:ba:32:42:68:03:97:d9:92:4c:12:5a:3a: 43:ff:8e:81:5c:48:3a:a0:a3:ce:fb:28:72:c6:58: 30:c7:e3:05:65:71:38:eb:e5:67:3a:7a:96:15:4a: 8c:e3:46:3b:1b:70:9b:0b:10:1e:8a:d5:64:00:bc: 47:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3F:25:4C:A1:D1:91:AE:0F:5D:D7:E1:ED:B7:90:83:83:9C:19:4D X509v3 Authority Key Identifier: keyid:D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:b2:f0:a0:46:86:62:2d:67:fb:ed:a7:a5:2e:91:6f:4b:ed: 44:e9:f2:5d:2e:3c:f2:fe:25:2b:58:d7:eb:64:74:9e:94:fa: 11:e5:a6:ef:e7:38:e3:d1:7c:5c:f1:29:bd:b1:2c:db:0d:df: 1f:8b:15:5e:b7:e6:01:d7:18:12:86:ed:a5:6a:69:f4:30:f2: d6:21:86:88:79:c1:8e:45:52:85:9e:60:5b:fa:e4:8f:37:80: 8b:b4:24:61:97:f1:68:a3:79:75:1b:81:c2:5b:f5:26:8a:77: ed:05:da:74:e7:71:ba:57:f4:97:52:a4:6c:32:19:06:4f:12: 36:e0:c7:7e:2a:f9:d0:1a:b7:e5:64:0d:0a:9d:2d:d7:95:f3: 7e:ca:bc:41:08:98:61:5a:5a:0d:95:36:ff:8b:03:8a:dc:8a: 55:e1:c1:16:ca:8d:68:fa:42:99:51:da:38:d1:76:67:0b:ff: 97:3d:bb:98:64:31:21:ca:00:04:81:c3:6b:4c:81:13:ad:85: ee:ee:aa:51:bd:03:5d:31:bb:6d:53:a1:1a:bd:69:69:92:7e: a0:9b:c1:39:24:05:a7:cb:b0:02:25:09:f2:69:2b:66:d8:9a: e4:79:4b:b5:52:aa:78:ce:c6:fc:be:22:31:7d:d8:79:b7:41: 1e:a1:21:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4QkUxMTAvBgNVBAUTKEQwRDBENkNENjg3NzBDMzg3ODNCQkVCODQxQjExMkQw NTYwMTc0QTIwHhcNMjYxMDMxMjAzMDQ0WhcNMjYxMTA3MjAzMDQ0WjAYMRYwFAYD VQQDEw02YWU2NGZmNC00MzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2HPnh1qanTzBFemUCfm0ydXabVtfOhqzEA0hKlJGCYjSCfgoxtF1u940ylEk YjLZ5NKyO4eNnd/b/rd0EEBcAjTme8HCmCkuQs9tNJlpl3ZWlLl8Ra9Qq6MKjodz 5rY0UgMUScXnYlHKFw/oHPb86bQ9oe/thuF80bugv0mpS8ciPb8aXMbya9RyjKKI QSZoHPTT3vaoZJ/zqXwvl/c3aSL8FLoXS6SiZRzJdQH+wVa2rAlWatHbBhdPJbmd Wfn7m4HrRzm6MkJoA5fZkkwSWjpD/46BXEg6oKPO+yhyxlgwx+MFZXE46+VnOnqW FUqM40Y7G3CbCxAeitVkALxHnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAw/JUyh 0ZGuD13X4e23kIODnBlNMB8GA1UdIwQYMBaAFNDQ1s1odww4eDu+uEGxEtBWAXSi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OThCRS8xNTBFNTdDNkNG NDkxMUVBOUNDOTM1M0VDNEY5QUUwMi8wTkRXeldoM0REaDRPNzY0UWJFUzBGWUJk S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBORFd6V2gzRERoNE83NjRRYkVTMEZZQmRLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OThCRS8xNTBFNTdDNkNGNDkxMUVBOUNDOTM1M0VDNEY5QUUwMi8wTkRXeldoM0RE aDRPNzY0UWJFUzBGWUJkS0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvbLwoEaGYi1n++2npS6Rb0vtROnyXS488v4lK1jX62R0npT6EeWm7+c449F8 XPEpvbEs2w3fH4sVXrfmAdcYEobtpWpp9DDy1iGGiHnBjkVShZ5gW/rkjzeAi7Qk YZfxaKN5dRuBwlv1Jop37QXadOdxulf0l1KkbDIZBk8SNuDHfir50Bq35WQNCp0t 15Xzfsq8QQiYYVpaDZU2/4sDityKVeHBFsqNaPpCmVHaONF2Zwv/lz27mGQxIcoA BIHDa0yBE62F7u6qUb0DXTG7bVOhGr1paZJ+oJvBOSQFp8uwAiUJ8mkrZtia5HlL tVKqeM7G/L4iMX3YebdBHqEhow== -----END CERTIFICATE-----Generated at Sun Nov 1 02:40:25 2026 by rpki-client