$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft File: NFMkWvnnaQX2mpDxzs2F6og_6hY.mft (raw, json) Hash identifier: X7rw0/6xh4FrsQ5faBm1Xl/uDKgDP9Qe5mO++YgH3h8= Subject key identifier: 3F:ED:C2:7F:9F:FC:D0:88:AD:D5:39:47:50:F6:3B:BE:98:8E:AA:38 Authority key identifier: 34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 Certificate issuer: /CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Certificate serial: 0852 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft Manifest number: 0844 Signing time: Wed 30 Sep 2026 21:20:01 +0000 Manifest this update: Wed 30 Sep 2026 21:20:00 +0000 Manifest next update: Wed 07 Oct 2026 21:20:00 +0000 Files and hashes: 1: NFMkWvnnaQX2mpDxzs2F6og_6hY.crl (hash: V1nQO1HWgiXRyFtI+mE+GVpNU0afdeaoIlkugoApO5o=) 2: EX_lvS7gU1AvzbjKRgLhmWARlbs.asa (hash: +kZqapzmf5a4lhlOs86fylCVjupwGssekMG9E/s7pXc=) 3: 0BAA4608297211EB99ECF956C4F9AE02.roa (hash: wKAEYn7N0s61lmDabEnuaSxEMJJCyF8MvcXmo7hrc/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 21:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2130 (0x852) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6064, serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Validity Not Before: Sep 30 21:20:00 2026 GMT Not After : Oct 7 21:20:00 2026 GMT Subject: CN=6abd7d01-0cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:76:e6:8c:91:73:f5:90:d8:af:5b:53:d4:c6: 42:32:ec:03:09:5b:e7:fb:a7:6b:b5:8f:51:50:4c: 23:2d:90:75:35:66:a2:10:fb:73:f7:a7:91:bc:c9: ec:61:ec:e0:18:31:57:84:15:9f:07:48:56:54:db: b0:49:df:41:0d:0e:44:47:0c:85:68:02:17:5f:58: 3c:02:67:80:58:99:54:5e:4b:39:df:27:e5:f1:b0: af:05:37:8e:ce:d5:e2:41:39:c7:bc:36:4a:7d:fe: 46:82:70:24:bd:f8:33:ad:83:25:8a:43:ed:3f:1c: 25:37:b4:6c:00:b6:17:df:d7:fe:83:24:f2:fe:e6: 70:2c:cf:53:d3:39:d8:8c:68:ec:8b:de:e6:e6:e9: 58:ca:70:50:09:5a:30:d8:ba:ae:3d:04:89:ef:d0: 3c:11:be:3b:de:a2:1f:35:6c:ef:9b:5a:48:5f:41: a8:a3:4d:a0:0f:b9:42:43:6d:eb:74:30:be:e2:21: c6:fa:52:18:b4:7b:3d:68:ac:df:18:07:4b:f1:ab: f1:fc:0d:3e:46:b4:c6:5c:ec:0a:b2:18:93:c6:67: c7:fe:a6:15:b4:70:62:08:c3:82:37:b6:9a:ad:f7: e2:a4:d2:8c:8d:a8:5b:2e:34:b5:e5:53:ec:47:ce: 6e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:ED:C2:7F:9F:FC:D0:88:AD:D5:39:47:50:F6:3B:BE:98:8E:AA:38 X509v3 Authority Key Identifier: keyid:34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:98:77:b8:a9:ec:6b:5a:26:e5:4d:08:f1:83:3e:ef:c9:5e: ae:da:fa:9d:47:cc:a0:19:78:cc:c1:b8:50:65:ce:85:0c:5a: fb:0b:47:95:21:59:e8:12:c9:27:a5:fb:ca:e6:89:1a:96:50: 6e:4d:4c:79:47:23:2d:a4:46:f0:1b:22:9c:25:22:0f:62:ef: f0:52:ca:f0:39:7d:da:c4:e5:2e:5d:79:13:40:45:8b:6d:47: 21:85:6a:19:e0:60:c5:08:6b:ce:5c:1d:89:94:ee:b6:66:0a: 28:82:78:38:97:00:d8:39:96:45:f5:79:28:c1:b0:52:54:d1: 35:a4:66:03:a8:99:0a:4b:52:5d:aa:f8:60:9d:41:28:44:8e: 7b:9a:7d:46:7d:bb:e3:d8:df:cb:73:82:f7:13:bb:f1:2c:b5: b4:a5:d6:c8:9a:9e:ab:2f:f9:85:a6:f7:29:3a:a2:d0:b2:d6: 95:bb:ab:9f:b6:eb:ea:64:a4:1f:2a:c4:1a:ce:27:0f:0a:03: 93:84:8d:f1:fe:d0:14:3f:35:8b:5b:0b:57:ed:a5:04:a1:53: 8f:eb:59:41:8c:fa:f4:2e:e6:96:25:90:f6:ed:05:d0:03:32: 7b:dc:f9:f1:d6:00:21:07:51:93:eb:47:7e:2e:3b:a8:6e:72: 39:e9:5d:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwNjQxMTAvBgNVBAUTKDM0NTMyNDVBRjlFNzY5MDVGNjlBOTBGMUNFQ0Q4NUVB ODgzRkVBMTYwHhcNMjYwOTMwMjEyMDAwWhcNMjYxMDA3MjEyMDAwWjAYMRYwFAYD VQQDEw02YWJkN2QwMS0wY2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjnbmjJFz9ZDYr1tT1MZCMuwDCVvn+6drtY9RUEwjLZB1NWaiEPtz96eRvMns YezgGDFXhBWfB0hWVNuwSd9BDQ5ERwyFaAIXX1g8AmeAWJlUXks53yfl8bCvBTeO ztXiQTnHvDZKff5GgnAkvfgzrYMlikPtPxwlN7RsALYX39f+gyTy/uZwLM9T0znY jGjsi97m5ulYynBQCVow2LquPQSJ79A8Eb473qIfNWzvm1pIX0Goo02gD7lCQ23r dDC+4iHG+lIYtHs9aKzfGAdL8avx/A0+RrTGXOwKshiTxmfH/qYVtHBiCMOCN7aa rffipNKMjahbLjS15VPsR85u3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD/twn+f /NCIrdU5R1D2O76Yjqo4MB8GA1UdIwQYMBaAFDRTJFr552kF9pqQ8c7NheqIP+oW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA2NC81MkZFRjczQTI5 NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFRWDJtcER4enMyRjZvZ182 aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GTWtXdm5uYVFYMm1wRHh6czJGNm9nXzZoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA2NC81MkZFRjczQTI5NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFR WDJtcER4enMyRjZvZ182aFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASph3uKnsa1om5U0I8YM+78lertr6nUfMoBl4zMG4UGXOhQxa+wtHlSFZ6BLJ J6X7yuaJGpZQbk1MeUcjLaRG8BsinCUiD2Lv8FLK8Dl92sTlLl15E0BFi21HIYVq GeBgxQhrzlwdiZTutmYKKIJ4OJcA2DmWRfV5KMGwUlTRNaRmA6iZCktSXar4YJ1B KESOe5p9Rn2749jfy3OC9xO78Sy1tKXWyJqeqy/5hab3KTqi0LLWlburn7br6mSk HyrEGs4nDwoDk4SN8f7QFD81i1sLV+2lBKFTj+tZQYz69C7mliWQ9u0F0AMye9z5 8dYAIQdRk+tHfi47qG5yOeld2w== -----END CERTIFICATE-----Generated at Thu Oct 1 12:32:48 2026 by rpki-client