$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft File: NfWNhhxBvf6ka4xykLGqxnDnzBs.mft (raw, json) Hash identifier: CJv5IiPDcqTyeptqOlLVZB6sa6num4DeW35UanrfJa0= Subject key identifier: B9:43:68:30:C8:A4:12:D3:D1:0A:04:67:B3:93:40:4C:C5:C5:11:43 Authority key identifier: 35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B Certificate issuer: /CN=A91B35BB/serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Certificate serial: 0C41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft Manifest number: 0C2E Signing time: Mon 12 Oct 2026 18:53:46 +0000 Manifest this update: Mon 12 Oct 2026 18:53:45 +0000 Manifest next update: Mon 19 Oct 2026 18:53:45 +0000 Files and hashes: 1: NfWNhhxBvf6ka4xykLGqxnDnzBs.crl (hash: qY8p0hIZiRpPT9irkIHUu3IYLaSojNC6Zsf+arK7fTk=) 2: 8F9F2F823C0111EAB6CB9936C4F9AE02.roa (hash: zrbEpdPJC+D2d8+tTb0MQGcYEqeI6Y60eS+Lp/wlgrg=) 3: 902F47663C0111EAB6CB9936C4F9AE02.roa (hash: Gs/OJqCKd+Z2MrNkjskkMTrkotmVzq3GXlJl1vTfx3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 16:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3137 (0xc41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B35BB, serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Validity Not Before: Oct 12 18:53:45 2026 GMT Not After : Oct 19 18:53:45 2026 GMT Subject: CN=6acd2cba-c7be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b1:ce:ae:35:fa:d5:ce:63:b6:71:ba:c9:59: a5:60:81:e5:51:57:6e:92:6f:01:c3:88:ac:5b:1d: a7:66:88:18:74:c8:09:88:91:aa:74:bf:b8:3a:67: bc:2d:bc:16:be:c2:5e:0f:1f:46:1f:4d:73:df:f4: 88:76:bc:37:6f:1f:18:bd:a3:e1:8a:2e:1d:0a:03: 7e:10:e5:69:99:cb:18:d7:cc:76:dd:4f:c3:30:ed: 11:33:99:9d:18:38:0d:6a:84:29:79:45:0a:09:01: 70:4d:19:6f:f8:aa:65:18:87:68:bb:49:cc:33:a3: 6c:9f:66:9b:54:ac:dd:0e:10:65:f0:55:6f:97:65: fe:8d:32:92:95:18:50:52:f0:a5:c1:fe:1e:05:2d: 1e:6e:c0:21:5b:5f:84:00:8e:b5:ec:8b:8d:4e:6a: 56:55:11:da:7e:5f:1a:47:65:54:ae:2a:e8:49:35: c0:c4:33:07:13:65:38:35:d1:93:04:69:e3:11:52: c1:a4:f7:c5:db:cf:ed:54:2b:4d:3d:d8:5c:b6:ec: 14:16:c1:d2:25:47:95:65:0e:6e:41:3a:b3:a4:3c: 92:ff:fd:40:58:17:28:fc:13:d6:83:ff:14:ed:5f: 2b:1f:b5:5e:5c:2d:0b:40:98:23:41:b5:9e:1a:03: 53:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:43:68:30:C8:A4:12:D3:D1:0A:04:67:B3:93:40:4C:C5:C5:11:43 X509v3 Authority Key Identifier: keyid:35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:a5:c1:a8:66:47:76:ba:fe:03:7f:1d:85:19:44:ae:65:e3: 47:61:3e:4a:77:19:d8:f4:04:01:6d:04:70:dd:29:a0:0f:d9: fb:d6:6f:84:3b:73:29:ff:39:84:5a:c0:c0:dd:d7:78:38:07: 3a:b4:07:d0:37:ae:0a:89:79:dc:65:89:3c:df:dd:92:ae:84: f8:36:90:f0:99:e3:2e:df:30:5c:3d:11:6b:14:f8:ca:14:b1: ef:7c:a4:3d:72:a9:50:f9:4a:02:fa:3e:e9:0a:49:25:21:30: c1:62:d3:3e:e8:c8:f0:17:ad:ed:38:45:b3:e8:74:19:24:26: ac:86:69:b9:c5:83:7c:9e:16:72:2f:8e:4a:c7:6c:e1:40:64: e2:aa:6e:ee:bc:58:3d:3a:2d:4e:0d:e9:24:44:6e:8c:8e:b3: b6:f0:b4:05:a1:b1:e3:ae:0a:29:d0:42:85:1f:60:71:b7:b8: ec:72:71:1a:20:74:fb:d2:ff:d6:49:14:f1:aa:7d:46:81:5f: 19:d8:0f:dd:67:73:4e:3e:bf:a8:ef:74:2e:54:65:7a:a7:b9: 47:af:d6:a9:b9:94:71:2e:4a:f1:ec:aa:56:a1:e0:37:47:42: 8a:76:e3:e8:b2:6a:e3:f3:bc:f3:04:c5:30:d7:38:72:ab:7f: 2d:d0:34:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1QkIxMTAvBgNVBAUTKDM1RjU4RDg2MUM0MUJERkVBNDZCOEM3MjkwQjFBQUM2 NzBFN0NDMUIwHhcNMjYxMDEyMTg1MzQ1WhcNMjYxMDE5MTg1MzQ1WjAYMRYwFAYD VQQDEw02YWNkMmNiYS1jN2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh7HOrjX61c5jtnG6yVmlYIHlUVdukm8Bw4isWx2nZogYdMgJiJGqdL+4Ome8 LbwWvsJeDx9GH01z3/SIdrw3bx8YvaPhii4dCgN+EOVpmcsY18x23U/DMO0RM5md GDgNaoQpeUUKCQFwTRlv+KplGIdou0nMM6Nsn2abVKzdDhBl8FVvl2X+jTKSlRhQ UvClwf4eBS0ebsAhW1+EAI617IuNTmpWVRHafl8aR2VUriroSTXAxDMHE2U4NdGT BGnjEVLBpPfF28/tVCtNPdhctuwUFsHSJUeVZQ5uQTqzpDyS//1AWBco/BPWg/8U 7V8rH7VeXC0LQJgjQbWeGgNTkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLlDaDDI pBLT0QoEZ7OTQEzFxRFDMB8GA1UdIwQYMBaAFDX1jYYcQb3+pGuMcpCxqsZw58wb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzVCQi81Nzg5QjFBNDND MDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZmNmthNHh5a0xHcXhuRG56 QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mV05oaHhCdmY2a2E0eHlrTEdxeG5EbnpCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzVCQi81Nzg5QjFBNDNDMDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZm NmthNHh5a0xHcXhuRG56QnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABqXBqGZHdrr+A38dhRlErmXjR2E+SncZ2PQEAW0EcN0poA/Z+9ZvhDtzKf85 hFrAwN3XeDgHOrQH0DeuCol53GWJPN/dkq6E+DaQ8JnjLt8wXD0RaxT4yhSx73yk PXKpUPlKAvo+6QpJJSEwwWLTPujI8Bet7ThFs+h0GSQmrIZpucWDfJ4Wci+OSsds 4UBk4qpu7rxYPTotTg3pJERujI6ztvC0BaGx464KKdBChR9gcbe47HJxGiB0+9L/ 1kkU8ap9RoFfGdgP3WdzTj6/qO90LlRleqe5R6/WqbmUcS5K8eyqVqHgN0dCinbj 6LJq4/O88wTFMNc4cqt/LdA0tQ== -----END CERTIFICATE-----Generated at Tue Oct 13 04:46:04 2026 by rpki-client