$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1E8B/6291764445B611EF8AB30A31C4F9AE02/nTwzrLEQPnH6H_PmAT6dwxEiafw.mft File: nTwzrLEQPnH6H_PmAT6dwxEiafw.mft (raw, json) Hash identifier: nvSLewgbgytn4ZRio2+V/BYv4iq9suDwA+GK1/YAEBc= Subject key identifier: 69:91:D3:49:95:A0:AB:89:DE:6C:05:1C:3D:57:9A:1D:93:F5:F4:3A Authority key identifier: 9D:3C:33:AC:B1:10:3E:71:FA:1F:F3:E6:01:3E:9D:C3:11:22:69:FC Certificate issuer: /CN=A91B1E8B/serialNumber=9D3C33ACB1103E71FA1FF3E6013E9DC3112269FC Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nTwzrLEQPnH6H_PmAT6dwxEiafw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E8B/6291764445B611EF8AB30A31C4F9AE02/nTwzrLEQPnH6H_PmAT6dwxEiafw.mft Manifest number: 019F Signing time: Tue 29 Sep 2026 04:44:16 +0000 Manifest this update: Tue 29 Sep 2026 04:44:16 +0000 Manifest next update: Tue 06 Oct 2026 04:44:16 +0000 Files and hashes: 1: nTwzrLEQPnH6H_PmAT6dwxEiafw.crl (hash: GR/FZqpYGNuHsFeJ2OwY1hV5hm6jmzuB5nd4tm6ecF4=) 2: DD76C09AB16711EFBD483568C4F9AE02.roa (hash: OJIwdILNcKxj0xX6Uj1lld3dWONiR8ZjcGc33mTU5vk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E8B/6291764445B611EF8AB30A31C4F9AE02/nTwzrLEQPnH6H_PmAT6dwxEiafw.crl rsync://rpki.apnic.net/member_repository/A91B1E8B/6291764445B611EF8AB30A31C4F9AE02/nTwzrLEQPnH6H_PmAT6dwxEiafw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nTwzrLEQPnH6H_PmAT6dwxEiafw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 04:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E8B, serialNumber=9D3C33ACB1103E71FA1FF3E6013E9DC3112269FC Validity Not Before: Sep 29 04:44:16 2026 GMT Not After : Oct 6 04:44:16 2026 GMT Subject: CN=6abb4220-1d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f2:22:59:2a:e8:83:45:41:64:c5:59:7b:6d: c5:33:11:bd:3e:4a:7b:cc:ee:8d:b1:bf:26:79:cb: fe:0c:4b:27:80:d1:6e:28:76:e6:9b:d0:13:e9:0c: fd:f8:d6:d2:b0:fe:0f:ff:eb:08:31:9e:40:4d:d1: df:c8:61:eb:fc:d8:ae:a6:08:e9:10:d6:0b:25:eb: 07:d4:eb:0e:e0:9a:80:c3:49:76:55:43:11:22:af: a1:04:15:d2:a3:fb:55:83:ae:0e:c8:0c:12:0f:da: ad:72:c1:60:d4:96:a0:85:dd:70:67:3b:10:29:02: f5:97:24:78:63:e7:bd:72:e7:16:45:1c:17:1c:e3: 2f:39:2c:1d:68:20:40:ee:cb:e1:7c:27:35:45:d6: d4:fa:06:76:f0:3d:24:89:04:91:df:fb:89:e3:6b: 4b:59:12:00:f6:91:4a:86:0f:2a:7b:8a:30:1b:c6: c1:1a:48:fc:22:7c:de:73:b6:6c:7a:ec:30:89:78: 5b:7d:c3:24:15:f4:14:d6:16:aa:3b:53:e4:12:e3: 2a:82:65:f9:a8:a9:52:db:13:f8:7e:f4:0e:2b:df: 67:1b:3c:8c:a2:e1:47:c8:10:ab:25:ed:a2:09:a3: 22:1b:2e:62:28:81:ed:ba:91:6c:3f:38:68:bf:10: d3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:91:D3:49:95:A0:AB:89:DE:6C:05:1C:3D:57:9A:1D:93:F5:F4:3A X509v3 Authority Key Identifier: keyid:9D:3C:33:AC:B1:10:3E:71:FA:1F:F3:E6:01:3E:9D:C3:11:22:69:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6291764445B611EF8AB30A31C4F9AE02/nTwzrLEQPnH6H_PmAT6dwxEiafw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nTwzrLEQPnH6H_PmAT6dwxEiafw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6291764445B611EF8AB30A31C4F9AE02/nTwzrLEQPnH6H_PmAT6dwxEiafw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:cf:d4:56:01:3b:b0:77:e1:14:67:41:eb:fe:06:dd:e9:1f: 3a:a3:72:49:6e:b9:45:d1:0d:57:e0:f1:6c:4c:3b:ab:fa:d2: 9c:a0:46:82:81:ef:01:fe:1f:2c:a0:9f:d9:01:53:99:ef:16: 1d:60:e6:66:30:e2:5e:11:34:fb:ed:02:93:bb:4a:14:55:74: 6f:c0:55:d5:d7:2d:5d:36:d7:9e:2a:a8:cc:06:b3:80:95:c2: f2:07:d3:33:00:27:f6:00:86:30:47:07:47:bb:8a:61:b5:a4: 84:95:d7:7b:8c:b1:db:41:05:91:a8:ed:30:68:1b:a6:3e:88: 75:bc:a9:46:a0:c0:d3:f6:ba:90:2e:3e:7c:2c:40:05:46:53: f7:d9:06:c9:8f:6a:7e:83:9c:cf:09:ed:07:24:35:36:e1:b4: 84:b7:27:6b:88:f8:f2:08:03:bd:27:64:7c:df:b1:a8:53:bc: 38:a3:ca:67:5b:85:08:d4:48:65:81:7c:54:93:ea:6e:81:66: 4b:d5:30:e8:96:34:db:47:b9:c1:c1:16:12:b9:45:e8:f4:be: 1e:3f:22:96:76:0a:3b:ef:55:58:e6:db:f3:7c:88:49:3c:c2: ec:b3:fe:76:cc:47:ee:09:06:25:ac:51:82:09:a2:0e:20:a8: e7:ad:37:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFOEIxMTAvBgNVBAUTKDlEM0MzM0FDQjExMDNFNzFGQTFGRjNFNjAxM0U5REMz MTEyMjY5RkMwHhcNMjYwOTI5MDQ0NDE2WhcNMjYxMDA2MDQ0NDE2WjAYMRYwFAYD VQQDEw02YWJiNDIyMC0xZDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlPIiWSrog0VBZMVZe23FMxG9Pkp7zO6Nsb8mecv+DEsngNFuKHbmm9AT6Qz9 +NbSsP4P/+sIMZ5ATdHfyGHr/NiupgjpENYLJesH1OsO4JqAw0l2VUMRIq+hBBXS o/tVg64OyAwSD9qtcsFg1Jaghd1wZzsQKQL1lyR4Y+e9cucWRRwXHOMvOSwdaCBA 7svhfCc1RdbU+gZ28D0kiQSR3/uJ42tLWRIA9pFKhg8qe4owG8bBGkj8Inzec7Zs euwwiXhbfcMkFfQU1haqO1PkEuMqgmX5qKlS2xP4fvQOK99nGzyMouFHyBCrJe2i CaMiGy5iKIHtupFsPzhovxDT1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGmR00mV oKuJ3mwFHD1Xmh2T9fQ6MB8GA1UdIwQYMBaAFJ08M6yxED5x+h/z5gE+ncMRImn8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU4Qi82MjkxNzY0NDQ1 QjYxMUVGOEFCMzBBMzFDNEY5QUUwMi9uVHd6ckxFUVBuSDZIX1BtQVQ2ZHd4RWlh ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25Ud3pyTEVRUG5INkhfUG1BVDZkd3hFaWFmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU4Qi82MjkxNzY0NDQ1QjYxMUVGOEFCMzBBMzFDNEY5QUUwMi9uVHd6ckxFUVBu SDZIX1BtQVQ2ZHd4RWlhZncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAps/UVgE7sHfhFGdB6/4G3ekfOqNySW65RdENV+DxbEw7q/rSnKBGgoHvAf4f LKCf2QFTme8WHWDmZjDiXhE0++0Ck7tKFFV0b8BV1dctXTbXniqozAazgJXC8gfT MwAn9gCGMEcHR7uKYbWkhJXXe4yx20EFkajtMGgbpj6IdbypRqDA0/a6kC4+fCxA BUZT99kGyY9qfoOczwntByQ1NuG0hLcna4j48ggDvSdkfN+xqFO8OKPKZ1uFCNRI ZYF8VJPqboFmS9Uw6JY020e5wcEWErlF6PS+Hj8ilnYKO+9VWObb83yISTzC7LP+ dsxH7gkGJaxRggmiDiCo5603sA== -----END CERTIFICATE-----Generated at Wed Sep 30 08:08:46 2026 by rpki-client