$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft File: nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft (raw, json) Hash identifier: 6KZtnUOmZFkGPmmyGEs7jgzzNmctoTxbWGJM+blasfA= Subject key identifier: 32:48:A7:11:13:8F:DA:1E:4D:01:67:AF:18:F7:3D:C1:59:36:06:C3 Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Certificate serial: 0FC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft Manifest number: 0ECC Signing time: Mon 26 Oct 2026 17:47:44 +0000 Manifest this update: Mon 26 Oct 2026 17:47:43 +0000 Manifest next update: Mon 02 Nov 2026 17:47:43 +0000 Files and hashes: 1: nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl (hash: eiJmuVPZ8EVkzmBjWlvK0/o+a7no5ja+zn67NXQYfMU=) 2: B066E5B6C5C111F0BD9B1831C4F9AE02.roa (hash: nNxHt9F+p6KI/XxX/IHOQ6Ohaw9Mn/6bqQ8JgTffC8o=) 3: 60B3CD6EAF2E11EEBF12DF45C4F9AE02.roa (hash: 1f2phcqQmmi3QewwHTntymoXxlY1vaGBHZf4d83qpRc=) 4: 2152FB1650C511EAB566FE61C4F9AE02.roa (hash: 4Dur1jIx3Py+FV9GnftEwHBIoGYO+qrpeIHWnQl1eg4=) 5: 7072DE7601C911EC9286E827C4F9AE02.roa (hash: VF5Ihkgss3eEF0eF0RXv99yvFaNnXbi4F1C1EW0C81k=) 6: B07EF7408DDD11EA8B5F824BC4F9AE02.roa (hash: wLoXAFA4bLf19b9jPn3a1aNAYCXtzzCyZRCHGXoGTTs=) 7: 03774914696211EC8A05D115C4F9AE02.roa (hash: 529ic9qz0jYOTL+Y9hkAcJ9upS4aOt6qG85i+oz5nlY=) 8: 378C18A43D3D11EAA59A8012C4F9AE02.roa (hash: rOBLE6A0EIALDzqcM8ydFc2oovMN2wtUd1p0AWxIOoE=) 9: B6A7D6FCCAEA11EE8E1B2D36C4F9AE02.roa (hash: 7ySchihxHfebU2ZhU1CGMeKuJprNHeKF8ZvTEPQm+Ps=) 10: 9F71391C684F11EAB45B6F4FC4F9AE02.roa (hash: /lqE0fcVtZNviMtzF6KcdvDYxyFd2WfKbqPkhxIQA0g=) 11: 45F4DDA265CF11EB9E3CFA6FC4F9AE02.roa (hash: YFagb40AbqmE67WpsPHQQlwPOv44QLtDjwGBLFO+SMg=) 12: 12F0D72E7BC111EA8503D815C4F9AE02.roa (hash: NI9ztI/dUr8wepd6qEzurrTRw6jIjbbQY+3nIC256Cg=) 13: EDE3E1EE306D11EB9AEE3E86C4F9AE02.roa (hash: dpkimmBVqBA7Hxpk3m2+4JsPBW+BiPPwqR13NATbL1g=) 14: 81CDB96A53F111EB85FBFA19C4F9AE02.roa (hash: FRg/vpc/AMBGrvMjIcOoVz1j/708E2nJzNJ2bFS2Beg=) 15: 88A00388193111EB9E0A6A49C4F9AE02.roa (hash: DvevpJu7vWFY5EjSZxts3Sc7D51eP/pW+05crk3lgB0=) 16: 72EB65AAC96511EDB2A13779C4F9AE02.roa (hash: CPQelJmSoQmrjckxju62zT4kF0v4K2A3XLdBMFmD/A0=) 17: 0741B84C2FFA11EB9544F785C4F9AE02.roa (hash: zlI1hG7GiNHiVUCacl+MGSO9NxzvZc+dp6nf+cN3YqQ=) 18: D17A895C0C5D11EAB1A29D67C4F9AE02.roa (hash: IEzFe4BPkAZ0NzJZL6yH2kjj+JWlwA9NjN+OrbuWGN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 17:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4032 (0xfc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Validity Not Before: Oct 26 17:47:43 2026 GMT Not After : Nov 2 17:47:43 2026 GMT Subject: CN=6adf923f-7312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ad:ab:d5:eb:77:ee:f3:f9:ec:8e:8a:14:21: 8a:d1:fa:df:1d:06:92:35:3e:dc:03:16:a4:cd:ca: 37:57:5b:02:d5:e8:64:75:09:bf:5d:ee:77:3b:21: 4e:94:2f:8d:88:64:fe:51:70:b1:bd:e3:81:9c:30: e2:cd:f2:f0:3b:36:a2:95:a4:e5:cb:ab:60:d8:6f: 54:fc:f7:26:64:a1:b6:0c:e3:ef:a8:d2:17:5c:36: 62:04:4a:17:ef:13:6a:77:82:90:d6:a4:d6:b7:51: 64:55:b6:b0:2b:08:a8:82:76:81:7e:2f:d7:e9:bc: 3e:23:25:6e:95:4d:e3:a6:6a:d8:b6:92:35:9c:e2: 5e:18:79:32:9b:c2:1a:15:43:24:23:73:55:ac:bb: ab:2d:8f:7d:b1:27:00:18:c4:21:5d:d2:10:d5:8f: 82:5b:c9:da:31:d1:85:f8:25:5b:fe:7b:8f:86:51: 0f:ef:14:2f:e6:bb:5c:95:36:b4:ea:a1:1c:cd:97: cd:cd:c6:3a:f7:d4:05:80:0a:1b:e8:13:49:c9:86: 57:6c:75:61:8d:89:51:6d:92:16:bc:09:d5:65:c3: af:95:92:88:43:ec:2a:6c:a9:e9:e2:a1:24:24:69: 02:cd:c6:6d:08:c3:d9:f3:80:6d:92:2b:87:87:f8: 7d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:48:A7:11:13:8F:DA:1E:4D:01:67:AF:18:F7:3D:C1:59:36:06:C3 X509v3 Authority Key Identifier: keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:be:87:88:fc:f6:95:48:66:3d:1a:a9:5e:af:57:9b:04:cc: 60:da:a6:53:d8:c6:6e:1c:e7:2f:a7:82:e7:be:70:2e:06:86: 4a:c0:25:82:9d:eb:e2:56:cb:6a:0d:54:bd:4e:95:d2:6c:45: eb:54:cd:4c:bb:00:92:fc:71:c6:aa:07:a8:a4:d8:01:56:f0: 01:32:98:cf:74:73:68:a4:35:42:35:a0:24:2e:b6:0e:37:4f: d9:68:5e:88:70:13:8f:ec:37:1e:2e:71:ab:82:58:3b:f0:51: 81:a1:dd:d7:a1:2c:80:4c:ae:9a:96:e7:90:4a:33:cb:36:71: 7e:cc:84:a4:a0:19:f6:b2:ce:73:7a:1f:5c:b7:1b:9a:58:87: 30:3b:73:f4:81:8c:a5:3c:a3:2d:68:5f:31:6e:29:ce:a4:32: 82:72:26:8d:07:1a:8c:df:79:7f:7b:8e:e6:a5:2c:2f:ed:6c: 9a:e6:91:fe:a0:ee:60:c7:87:6f:75:ed:cc:d9:47:79:18:26: 06:b3:84:f2:25:33:58:e8:19:0f:5f:11:41:9c:f8:0a:6e:3b: 84:e1:17:8e:cf:c9:7a:56:25:89:db:09:77:bb:dd:3e:1e:df: 10:fd:f9:e6:bd:77:34:ac:f3:78:be:1c:0c:a7:32:ea:6f:08: 5e:92:8e:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDNjAxMTAvBgNVBAUTKDlFRjlFNDM3NkUzNjY1MzI3NUM3OTYzNTk4RDZCNDVC NzBBRjgwOTkwHhcNMjYxMDI2MTc0NzQzWhcNMjYxMTAyMTc0NzQzWjAYMRYwFAYD VQQDEw02YWRmOTIzZi03MzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApq2r1et37vP57I6KFCGK0frfHQaSNT7cAxakzco3V1sC1ehkdQm/Xe53OyFO lC+NiGT+UXCxveOBnDDizfLwOzailaTly6tg2G9U/PcmZKG2DOPvqNIXXDZiBEoX 7xNqd4KQ1qTWt1FkVbawKwiognaBfi/X6bw+IyVulU3jpmrYtpI1nOJeGHkym8Ia FUMkI3NVrLurLY99sScAGMQhXdIQ1Y+CW8naMdGF+CVb/nuPhlEP7xQv5rtclTa0 6qEczZfNzcY699QFgAob6BNJyYZXbHVhjYlRbZIWvAnVZcOvlZKIQ+wqbKnp4qEk JGkCzcZtCMPZ84BtkiuHh/h9ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDJIpxET j9oeTQFnrxj3PcFZNgbDMB8GA1UdIwQYMBaAFJ755DduNmUydceWNZjWtFtwr4CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEM2MC9CNTI2RkY3NEQ4 NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpUSjF4NVkxbU5hMFczQ3Zn SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252bmtOMjQyWlRKMXg1WTFtTmEwVzNDdmdKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEM2MC9CNTI2RkY3NEQ4NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpU SjF4NVkxbU5hMFczQ3ZnSmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgb6HiPz2lUhmPRqpXq9XmwTMYNqmU9jGbhznL6eC575wLgaGSsAlgp3r4lbL ag1UvU6V0mxF61TNTLsAkvxxxqoHqKTYAVbwATKYz3RzaKQ1QjWgJC62DjdP2Whe iHATj+w3Hi5xq4JYO/BRgaHd16EsgEyumpbnkEozyzZxfsyEpKAZ9rLOc3ofXLcb mliHMDtz9IGMpTyjLWhfMW4pzqQygnImjQcajN95f3uO5qUsL+1smuaR/qDuYMeH b3XtzNlHeRgmBrOE8iUzWOgZD18RQZz4Cm47hOEXjs/JelYlidsJd7vdPh7fEP35 5r13NKzzeL4cDKcy6m8IXpKOSg== -----END CERTIFICATE-----Generated at Wed Oct 28 14:44:20 2026 by rpki-client