$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft File: NHTCU5hhEAr9ljoWPIAtAmT47H0.mft (raw, json) Hash identifier: kJy+IKPdExcP2Jn0FHKfrRPtigYBED98UD+56xg1EI0= Subject key identifier: BA:33:26:D1:37:07:D7:F2:B9:B3:92:30:F0:80:BF:64:CA:19:56:E8 Authority key identifier: 34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D Certificate issuer: /CN=A91D63AF/serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D Certificate serial: 021F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft Manifest number: 0211 Signing time: Mon 19 Oct 2026 03:42:14 +0000 Manifest this update: Mon 19 Oct 2026 03:42:13 +0000 Manifest next update: Mon 26 Oct 2026 03:42:13 +0000 Files and hashes: 1: NHTCU5hhEAr9ljoWPIAtAmT47H0.crl (hash: fv9uvK/VekHnwyFRo6sb+bM58kps8oiozCPzQB6BAMo=) 2: 8C508DC055F711EFA5200828C4F9AE02.roa (hash: +vcgHqQaVF6a8tBeWlRZvq+SFdKItNicDBwJjhcEwPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 03:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63AF, serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D Validity Not Before: Oct 19 03:42:13 2026 GMT Not After : Oct 26 03:42:13 2026 GMT Subject: CN=6ad59196-5dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:23:3a:13:d5:9a:b0:18:89:e1:1c:ca:e8:68: 6e:26:4a:66:4e:24:af:fa:3c:4a:87:1c:b7:77:59: 1e:6f:e8:95:f4:96:c2:c9:5e:21:78:a3:bc:5d:98: 87:34:ca:b6:d3:3d:09:4c:c8:fb:b0:ce:5a:73:e4: a6:27:8a:45:de:98:37:69:2f:d5:fd:13:00:1d:77: 0b:4c:d5:8f:6e:c3:0b:45:0e:4a:4b:ac:35:01:f5: d5:a3:8c:e5:c5:32:dc:d3:ec:ad:19:9c:05:06:2a: 5a:eb:88:b9:60:e2:65:11:71:3b:80:b8:3a:73:f8: 6a:2d:b0:9c:9f:e5:91:8c:56:cb:87:49:59:96:ad: 4f:a6:9b:39:d5:27:e3:5f:ab:1e:f5:7a:2b:62:d1: 4e:8e:9f:1b:32:35:ae:b6:cb:e0:27:84:60:e2:f0: 87:88:7f:1f:b0:9f:39:94:4a:cc:d3:e9:25:ec:31: 30:18:af:48:7e:83:47:65:80:fb:47:a6:1f:11:57: 19:96:ce:23:61:47:37:d2:0c:5e:1d:71:5e:c3:70: a1:79:bd:1a:19:3a:c8:57:13:2d:66:05:93:01:49: 89:31:7b:aa:d9:83:00:f1:ff:0d:06:6a:68:08:a6: fb:5a:c0:e8:39:b5:51:09:24:3e:48:7c:d3:44:c6: 6a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:33:26:D1:37:07:D7:F2:B9:B3:92:30:F0:80:BF:64:CA:19:56:E8 X509v3 Authority Key Identifier: keyid:34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:bb:f2:fb:7c:7e:c6:34:d8:67:0a:b6:4b:d2:e6:c5:f7:ca: fc:9b:ec:69:24:d8:09:f8:d7:d2:3a:1c:ef:dc:c0:d7:79:74: 4e:88:28:f0:7a:68:aa:46:01:69:42:95:2c:97:9a:bb:35:37: 54:cb:6e:e3:3e:ef:45:16:1f:f7:2d:cb:38:c8:34:a2:31:1e: 5d:1a:e5:9b:f5:07:ef:5f:34:fd:01:5f:58:94:91:35:73:8b: 0c:f9:e2:c2:6f:e1:65:5d:64:71:5d:90:86:5a:ef:84:ee:4b: bf:71:20:f2:eb:28:2d:15:86:cb:b8:82:24:19:b6:85:05:5e: bf:5f:2c:09:dd:ae:82:f0:54:cb:67:90:79:1f:06:e9:c5:57: ee:e5:56:d5:7f:43:e6:54:79:f9:d1:94:8d:bb:f1:86:6a:ac: 27:8b:e2:9c:a5:b4:5a:b7:28:6d:02:e6:56:14:40:26:21:7c: 61:8c:40:48:d6:51:29:19:ee:2c:00:fd:c4:23:61:52:af:12: 1f:9d:d5:43:c3:df:8f:6c:4f:cd:e4:c2:90:7d:3e:4d:29:b2: 01:cd:1e:f9:d2:0f:6d:ca:d8:04:45:43:8a:9d:8f:45:9b:30: af:07:5e:f2:ac:6f:55:6b:56:13:48:70:02:41:a2:1d:40:8e: 5c:5b:5f:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzQUYxMTAvBgNVBAUTKDM0NzRDMjUzOTg2MTEwMEFGRDk2M0ExNjNDODAyRDAy NjRGOEVDN0QwHhcNMjYxMDE5MDM0MjEzWhcNMjYxMDI2MDM0MjEzWjAYMRYwFAYD VQQDEw02YWQ1OTE5Ni01ZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyM6E9WasBiJ4RzK6GhuJkpmTiSv+jxKhxy3d1keb+iV9JbCyV4heKO8XZiH NMq20z0JTMj7sM5ac+SmJ4pF3pg3aS/V/RMAHXcLTNWPbsMLRQ5KS6w1AfXVo4zl xTLc0+ytGZwFBipa64i5YOJlEXE7gLg6c/hqLbCcn+WRjFbLh0lZlq1Ppps51Sfj X6se9XorYtFOjp8bMjWutsvgJ4Rg4vCHiH8fsJ85lErM0+kl7DEwGK9IfoNHZYD7 R6YfEVcZls4jYUc30gxeHXFew3Cheb0aGTrIVxMtZgWTAUmJMXuq2YMA8f8NBmpo CKb7WsDoObVRCSQ+SHzTRMZqnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLozJtE3 B9fyubOSMPCAv2TKGVboMB8GA1UdIwQYMBaAFDR0wlOYYRAK/ZY6FjyALQJk+Ox9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNBRi80REZFNjgyNEI2 QjcxMUVFQTlEN0ZDM0FDNEY5QUUwMi9OSFRDVTVoaEVBcjlsam9XUElBdEFtVDQ3 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05IVENVNWhoRUFyOWxqb1dQSUF0QW1UNDdIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNBRi80REZFNjgyNEI2QjcxMUVFQTlEN0ZDM0FDNEY5QUUwMi9OSFRDVTVoaEVB cjlsam9XUElBdEFtVDQ3SDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPLvy+3x+xjTYZwq2S9LmxffK/JvsaSTYCfjX0joc79zA13l0Togo8HpoqkYB aUKVLJeauzU3VMtu4z7vRRYf9y3LOMg0ojEeXRrlm/UH7180/QFfWJSRNXOLDPni wm/hZV1kcV2QhlrvhO5Lv3Eg8usoLRWGy7iCJBm2hQVev18sCd2ugvBUy2eQeR8G 6cVX7uVW1X9D5lR5+dGUjbvxhmqsJ4vinKW0WrcobQLmVhRAJiF8YYxASNZRKRnu LAD9xCNhUq8SH53VQ8Pfj2xPzeTCkH0+TSmyAc0e+dIPbcrYBEVDip2PRZswrwde 8qxvVWtWE0hwAkGiHUCOXFtf6Q== -----END CERTIFICATE-----Generated at Mon Oct 19 19:33:09 2026 by rpki-client