$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft File: ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft (raw, json) Hash identifier: DeZZuHcG7yiK1QooQmklM4+BROeCK5oCL6udKpX+YD8= Subject key identifier: A1:32:50:C0:E5:64:3F:6F:E1:D3:43:00:6A:84:F0:64:F9:0C:94:23 Authority key identifier: 9E:D6:44:3B:C1:7D:1E:82:56:B5:C1:C2:34:60:C7:8C:DC:D9:5D:1A Certificate issuer: /CN=A91BB8EA/serialNumber=9ED6443BC17D1E8256B5C1C23460C78CDCD95D1A Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft Manifest number: 3F Signing time: Sun 25 Oct 2026 08:53:41 +0000 Manifest this update: Sun 25 Oct 2026 08:53:41 +0000 Manifest next update: Sun 01 Nov 2026 08:53:41 +0000 Files and hashes: 1: ntZEO8F9HoJWtcHCNGDHjNzZXRo.crl (hash: rXOpLoMI/bBP2vfe2BxNbhFr44IMcUrNH5wyUmuVwnE=) 2: 25170F0873AF11F1A114703E7BA30FBC.roa (hash: rHhYjIfJ1Uff3ehA9HhL+/gkS6dmDJsJgGHAaP2R35k=) 3: 2488172673AF11F1A114703E7BA30FBC.roa (hash: 19yy3TT6Ip3JsO4sFrTFEkAM4n8pIPoPdPe28xr/XwQ=) 4: 2405203273AF11F1A114703E7BA30FBC.roa (hash: IhibjJxGIh0OyW3/zjLPSvy30FYiWbe6Y1PZPZxcy54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.crl rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 08:53:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB8EA, serialNumber=9ED6443BC17D1E8256B5C1C23460C78CDCD95D1A Validity Not Before: Oct 25 08:53:41 2026 GMT Not After : Nov 1 08:53:41 2026 GMT Subject: CN=6addc395-c1e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fe:59:50:66:a6:3f:14:61:5a:19:99:3b:2c: 95:29:a4:61:23:90:15:02:31:e4:3b:bc:18:c8:45: 3b:fa:e3:9a:23:b9:54:dd:63:cb:cb:fb:90:2c:70: b0:e5:db:9e:9f:4d:19:1b:bf:1b:21:7d:51:78:90: 73:15:1e:e0:a0:d5:3a:dd:7e:1c:31:39:18:0d:d0: 36:9d:b2:e2:5d:2c:ce:9e:78:03:08:3f:8d:4d:99: 53:4d:04:3e:cb:da:1b:9e:9e:6f:70:5e:87:c5:dc: 79:1b:eb:1f:f1:1c:0a:b3:d3:82:15:63:1d:0a:5a: 0c:80:3a:17:c2:3a:d0:87:b7:de:0c:df:5f:df:69: 3d:cf:0a:9c:5b:25:4f:7c:89:b5:01:c4:69:fc:71: 91:78:c3:1c:bd:15:d3:5a:3e:98:35:34:b1:d7:7f: c3:89:b7:c2:f6:d3:e4:60:72:c1:7a:d7:d0:df:4e: e0:48:9a:7e:e4:d9:1e:80:cc:ea:ad:4b:64:f7:17: 13:91:08:1f:60:c1:4d:08:9b:de:b4:db:a7:aa:8d: 55:6c:1d:33:1b:bb:6f:d9:a8:a5:01:f5:66:0c:8d: cf:cf:b5:4e:b8:66:1d:ca:51:69:44:78:62:d9:bf: 75:38:bf:d7:49:ff:4b:16:80:3e:75:8f:9e:93:38: e3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:32:50:C0:E5:64:3F:6F:E1:D3:43:00:6A:84:F0:64:F9:0C:94:23 X509v3 Authority Key Identifier: keyid:9E:D6:44:3B:C1:7D:1E:82:56:B5:C1:C2:34:60:C7:8C:DC:D9:5D:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:72:6d:5a:2d:09:6d:18:ae:6c:a8:93:f3:2a:00:5e:80:89: f9:16:9b:56:5c:b7:44:9a:5f:6f:28:e7:aa:b4:09:e1:06:2b: 40:48:69:f8:f1:2b:bb:ae:7f:43:00:e5:e6:7c:ea:45:00:d8: 6b:ea:a5:79:45:b4:90:2d:de:68:17:1d:11:31:95:55:8b:5f: b8:af:02:a0:8e:05:93:2e:22:cf:5f:4c:35:6e:9d:cc:64:92: c5:72:8d:9b:e4:7f:9c:17:c4:3a:20:45:f8:d0:ae:77:47:ab: 1a:f4:a2:b4:34:30:48:2d:24:46:98:03:f3:f7:8a:57:f2:34: b0:f5:0f:3c:73:79:e9:64:13:b7:dc:3e:0d:52:08:ef:1d:95: 5e:b8:50:1e:ed:0d:6e:03:9b:91:d7:4c:53:94:01:92:1c:08: 00:5a:07:6d:bf:b9:28:5f:11:3c:e4:e9:fb:85:7a:32:15:b8: 52:53:e3:e4:c0:7a:14:60:73:6c:4a:f2:6b:f8:97:2f:a0:1a: 8d:5f:89:fb:3c:8a:9f:ba:c7:61:33:a4:25:f4:9c:70:9a:51: 89:5c:62:d9:a6:3b:95:2c:55:65:59:10:88:b4:d8:c1:d7:4d: 15:aa:67:1b:b2:fb:ac:ea:44:ab:46:b1:ff:4b:42:0d:50:e2: 63:78:86:7e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjhFQTExMC8GA1UEBRMoOUVENjQ0M0JDMTdEMUU4MjU2QjVDMUMyMzQ2MEM3OENE Q0Q5NUQxQTAeFw0yNjEwMjUwODUzNDFaFw0yNjExMDEwODUzNDFaMBgxFjAUBgNV BAMTDTZhZGRjMzk1LWMxZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ/llQZqY/FGFaGZk7LJUppGEjkBUCMeQ7vBjIRTv645ojuVTdY8vL+5AscLDl 256fTRkbvxshfVF4kHMVHuCg1TrdfhwxORgN0DadsuJdLM6eeAMIP41NmVNNBD7L 2huenm9wXofF3Hkb6x/xHAqz04IVYx0KWgyAOhfCOtCHt94M31/faT3PCpxbJU98 ibUBxGn8cZF4wxy9FdNaPpg1NLHXf8OJt8L20+RgcsF619DfTuBImn7k2R6AzOqt S2T3FxORCB9gwU0Im96026eqjVVsHTMbu2/ZqKUB9WYMjc/PtU64Zh3KUWlEeGLZ v3U4v9dJ/0sWgD51j56TOOM3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoTJQwOVk P2/h00MAaoTwZPkMlCMwHwYDVR0jBBgwFoAUntZEO8F9HoJWtcHCNGDHjNzZXRow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCOEVBLzQwQThGMjhDNzNB RTExRjE5OUU0OEIxNjdCQTMwRkJDL250WkVPOEY5SG9KV3RjSENOR0RIak56WlhS by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnRaRU84RjlIb0pXdGNIQ05HREhqTnpaWFJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC OEVBLzQwQThGMjhDNzNBRTExRjE5OUU0OEIxNjdCQTMwRkJDL250WkVPOEY5SG9K V3RjSENOR0RIak56WlhSby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCDcm1aLQltGK5sqJPzKgBegIn5FptWXLdEml9vKOeqtAnhBitASGn48Su7rn9D AOXmfOpFANhr6qV5RbSQLd5oFx0RMZVVi1+4rwKgjgWTLiLPX0w1bp3MZJLFco2b 5H+cF8Q6IEX40K53R6sa9KK0NDBILSRGmAPz94pX8jSw9Q88c3npZBO33D4NUgjv HZVeuFAe7Q1uA5uR10xTlAGSHAgAWgdtv7koXxE85On7hXoyFbhSU+PkwHoUYHNs SvJr+JcvoBqNX4n7PIqfusdhM6Ql9JxwmlGJXGLZpjuVLFVlWRCItNjB100Vqmcb svus6kSrRrH/S0INUOJjeIZ+ -----END CERTIFICATE-----Generated at Mon Oct 26 12:43:37 2026 by rpki-client