$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft File: nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft (raw, json) Hash identifier: GPA1/7e/MJsfXDL70ms79NVeT0RtIrd+hG9rQSt3Ofs= Subject key identifier: CC:40:E1:9B:71:E1:9D:3C:13:84:24:88:9E:C6:D0:57:8D:DF:AA:4D Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 Certificate issuer: /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft Manifest number: 020A Signing time: Wed 07 Oct 2026 03:40:07 +0000 Manifest this update: Wed 07 Oct 2026 03:40:06 +0000 Manifest next update: Wed 14 Oct 2026 03:40:06 +0000 Files and hashes: 1: nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl (hash: 1dAttewNdecxYX/G8L8iXH+6IaQoVBOI3lF9aKhI4nI=) 2: 51E59058921B11EFB656CB41C4F9AE02.roa (hash: gnfLlur8gPdUkwqDHn+eOeiErOoehQs7kmodfs4S4jc=) 3: 09E42D1E921B11EF829E0041C4F9AE02.roa (hash: j9PF6XHW/9cjHdZemEYcO4bIyJTkShVbfz28uJrkeSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CAF, serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Validity Not Before: Oct 7 03:40:06 2026 GMT Not After : Oct 14 03:40:06 2026 GMT Subject: CN=6ac5bf17-72bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cc:21:68:3e:49:f8:f9:73:1a:b1:05:af:2c: d1:46:bb:28:11:1d:5c:d1:4c:53:b5:f0:09:55:ff: 06:04:51:d3:58:2c:5b:4c:c4:4a:52:74:e5:82:5d: 05:f5:d5:65:f6:44:e4:aa:b0:39:43:ad:91:e5:d7: 55:8c:e3:1e:4f:55:73:a5:50:15:59:e3:dd:ec:15: 0c:f9:65:3d:98:7a:a6:b6:64:07:b2:64:b5:cd:32: 14:e1:cf:6c:39:76:b3:82:f8:72:a7:92:57:ea:ca: 3b:a6:20:63:3b:f1:0e:f0:24:29:88:d2:7f:81:44: 9a:75:1b:63:75:7d:ee:ba:6b:25:b6:45:4c:b2:85: 65:55:a4:2e:e0:35:19:84:c8:ae:95:39:81:ad:f4: 8e:25:16:97:68:a5:1b:33:26:de:3f:86:5d:29:de: db:8e:50:ec:8e:ef:66:bd:cf:58:b6:9e:f0:91:db: 1a:6b:b9:e2:4d:6d:81:47:a2:c4:b8:2c:08:cf:f7: 92:dc:ca:09:b5:d4:17:b3:c0:bb:e1:1a:bf:e1:9e: f0:0c:aa:af:6c:31:2d:b8:3a:f9:1d:ad:5e:2a:9e: 9c:2c:9f:5f:fe:ac:46:1b:30:74:3c:a8:8e:82:c9: 2f:4e:53:3a:c3:fa:e2:a4:59:4d:2c:7e:96:a9:e5: 72:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:40:E1:9B:71:E1:9D:3C:13:84:24:88:9E:C6:D0:57:8D:DF:AA:4D X509v3 Authority Key Identifier: keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:fa:d2:8b:9f:e4:d0:15:85:08:c9:c4:1d:7e:b9:39:09:4f: 69:cd:2c:23:d9:6d:7f:5e:53:a2:89:be:96:4c:79:01:ca:e9: ec:f9:72:1e:a2:92:5f:35:ef:eb:ec:99:77:0b:96:b8:a1:af: 34:09:09:6e:9f:5c:0d:de:37:72:f3:71:65:40:72:3d:b5:f3: 68:2e:9f:b9:7d:43:27:c8:d3:b7:fe:5a:8c:73:fb:b0:b2:69: 36:d5:b6:a4:b4:58:97:38:21:77:dd:44:b3:8d:68:d8:f9:fd: 9e:7c:61:b3:32:15:a5:2f:b5:e5:64:97:b1:90:ad:c6:40:da: 44:8e:ec:fa:0d:86:69:c0:14:8d:a4:23:8c:fc:8e:a8:ff:ae: 3f:2a:0d:90:8c:8e:3d:ac:2a:c1:b0:81:5f:de:a6:98:e8:8d: 81:6e:23:8e:d3:1c:d6:30:5a:fd:75:02:80:a5:29:24:3f:c0: 06:77:e1:7c:a1:17:a2:58:0b:9a:a2:9f:63:64:fe:fb:37:0a: 90:21:13:05:00:60:d9:54:c2:4c:66:c1:f2:06:23:90:59:15: f2:df:ad:54:02:02:e4:5d:7f:6a:ba:e0:29:90:fd:49:9f:dd: bc:e4:1b:d9:61:c5:a1:05:20:e0:05:43:7d:6e:25:24:ff:0a: 97:bb:7a:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQUYxMTAvBgNVBAUTKDlGMDJEQTNBQjVGQjQ1MzE3NTA3QzQ4MDIxQ0UwQThC OTM3MjU1QzkwHhcNMjYxMDA3MDM0MDA2WhcNMjYxMDE0MDM0MDA2WjAYMRYwFAYD VQQDEw02YWM1YmYxNy03MmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArswhaD5J+PlzGrEFryzRRrsoER1c0UxTtfAJVf8GBFHTWCxbTMRKUnTlgl0F 9dVl9kTkqrA5Q62R5ddVjOMeT1VzpVAVWePd7BUM+WU9mHqmtmQHsmS1zTIU4c9s OXazgvhyp5JX6so7piBjO/EO8CQpiNJ/gUSadRtjdX3uumsltkVMsoVlVaQu4DUZ hMiulTmBrfSOJRaXaKUbMybeP4ZdKd7bjlDsju9mvc9Ytp7wkdsaa7niTW2BR6LE uCwIz/eS3MoJtdQXs8C74Rq/4Z7wDKqvbDEtuDr5Ha1eKp6cLJ9f/qxGGzB0PKiO gskvTlM6w/ripFlNLH6WqeVyuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMxA4Ztx 4Z08E4QkiJ7G0FeN36pNMB8GA1UdIwQYMBaAFJ8C2jq1+0UxdQfEgCHOCouTclXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNBRi9GM0UwRkFFNEI2 RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JURjFCOFNBSWM0S2k1TnlW Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL253TGFPclg3UlRGMUI4U0FJYzRLaTVOeVZjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNBRi9GM0UwRkFFNEI2RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JU RjFCOFNBSWM0S2k1TnlWY2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASPrSi5/k0BWFCMnEHX65OQlPac0sI9ltf15Toom+lkx5Acrp7PlyHqKSXzXv 6+yZdwuWuKGvNAkJbp9cDd43cvNxZUByPbXzaC6fuX1DJ8jTt/5ajHP7sLJpNtW2 pLRYlzghd91Es41o2Pn9nnxhszIVpS+15WSXsZCtxkDaRI7s+g2GacAUjaQjjPyO qP+uPyoNkIyOPawqwbCBX96mmOiNgW4jjtMc1jBa/XUCgKUpJD/ABnfhfKEXolgL mqKfY2T++zcKkCETBQBg2VTCTGbB8gYjkFkV8t+tVAIC5F1/arrgKZD9SZ/dvOQb 2WHFoQUg4AVDfW4lJP8Kl7t6nw== -----END CERTIFICATE-----Generated at Wed Oct 7 09:36:12 2026 by rpki-client