$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft File: nJSl3M9qZbaJhscEOEbHIb0zvpk.mft (raw, json) Hash identifier: /uVQY+yAsiV9fSXpLVYmY5I27jnjpA3RkT+bMrlmVyY= Subject key identifier: C4:2B:23:C4:F3:FC:FA:0E:C0:8B:62:CA:4B:67:12:23:A7:C4:3A:3F Authority key identifier: 9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99 Certificate issuer: /CN=A91D66A0/serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99 Certificate serial: 0E46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft Manifest number: 0E2A Signing time: Sat 24 Oct 2026 17:45:57 +0000 Manifest this update: Sat 24 Oct 2026 17:45:57 +0000 Manifest next update: Sat 31 Oct 2026 17:45:57 +0000 Files and hashes: 1: nJSl3M9qZbaJhscEOEbHIb0zvpk.crl (hash: DBO85WFOh5I9RRPzb0wM0Qz1m+ndk8xK08qwphtvyBc=) 2: 2BABEEB482EE11EAB170FD4BC4F9AE02.roa (hash: CG6vYgZ1e3/8dZN64pHrnStSPG3URxAwT0J40lVEYis=) 3: 064D129A56EA11EA84DC982BC4F9AE02.roa (hash: /XXsn5P+CzGOi6w4JWRUAkj1a3bzJJfkjs3Rtf98gFg=) 4: 2B17862A82EE11EAB170FD4BC4F9AE02.roa (hash: z7n2Ro4Gkp0kvswymZ3NmSJNOHu0kHCX/BYv3spailI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 17:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3654 (0xe46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D66A0, serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99 Validity Not Before: Oct 24 17:45:57 2026 GMT Not After : Oct 31 17:45:57 2026 GMT Subject: CN=6adceed5-182b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:fc:d3:46:87:fe:70:f3:25:18:a0:d6:cd:79: 3a:42:aa:61:eb:15:92:82:bc:e1:10:09:4e:50:5d: 15:f7:4e:39:50:7f:10:6d:03:48:a4:72:8b:9b:24: 4e:28:de:31:68:22:f9:16:32:be:9a:e9:28:10:d0: 2d:68:9c:41:57:db:3f:49:08:05:47:ee:78:0b:f8: d2:e0:f2:f9:62:e4:d8:12:47:00:ef:67:17:1c:80: 36:b6:93:0d:b4:bb:34:c0:c7:5e:b9:c4:31:ea:ba: 89:20:9e:7b:e5:d0:67:ba:2c:d9:e9:64:50:6a:8f: b2:fb:35:87:6d:34:c0:2b:50:fe:ae:fd:3b:77:47: 96:da:a0:c2:cc:8c:00:01:e3:92:ea:11:98:91:69: 5f:9f:e4:db:1b:24:81:a3:6c:fe:5f:27:5d:06:05: 22:3b:dd:a7:58:10:a8:33:de:fa:3c:ce:a3:4c:0e: ea:9f:1d:a8:65:11:e1:99:bb:e6:66:41:17:45:1d: 66:d7:68:39:56:c1:47:dc:46:32:4c:d8:6e:df:d0: 00:f6:e4:77:f6:89:53:31:ee:e9:77:13:58:63:e7: 07:bd:ce:bb:d8:e1:03:29:c6:2f:aa:3d:65:24:02: 0c:bc:ff:2d:a8:72:a9:89:69:b2:88:f3:89:aa:d6: e5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2B:23:C4:F3:FC:FA:0E:C0:8B:62:CA:4B:67:12:23:A7:C4:3A:3F X509v3 Authority Key Identifier: keyid:9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:e4:18:c0:5b:45:c4:76:66:30:97:fa:34:fa:2f:c7:31:88: d0:2f:65:0f:05:45:b1:2f:27:92:0c:18:8c:b5:cc:86:8f:41: b5:eb:32:ab:a9:a7:94:13:91:db:74:a3:1e:fe:f0:2c:a2:be: 9f:a2:b1:0d:45:10:27:f5:6e:8a:b0:36:bb:f1:ef:82:1b:82: 61:e7:4e:6d:b0:c7:4f:bf:85:11:b0:e0:a9:36:d5:8b:eb:4b: a3:d8:fe:67:73:60:ec:ff:fd:1b:52:2b:cf:18:52:88:6f:91: 27:aa:ae:e0:6a:0d:ca:d9:c1:35:ba:e9:ec:4f:93:f0:27:35: 69:fc:a5:5d:54:e7:94:33:2a:63:a8:71:58:23:1a:cc:c5:84: 77:50:ab:be:db:b3:30:75:09:f9:83:ee:1e:60:b9:62:f0:56: 20:e5:37:da:1e:bc:fd:c3:50:c4:f3:79:97:95:83:60:6d:29: 5a:8a:4f:19:03:8f:1e:7f:8d:cb:0f:0e:75:fa:10:92:b4:3e: 91:d1:0a:1e:22:3f:a8:95:09:df:db:c6:68:27:68:6f:4a:f3: cb:a8:4d:aa:b4:4a:fc:b5:a1:15:8f:a9:d9:cf:d4:ce:1e:15: ce:f5:86:f3:fb:61:15:6c:24:8b:93:55:74:48:43:3b:53:71: a9:c9:eb:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY2QTAxMTAvBgNVBAUTKDlDOTRBNURDQ0Y2QTY1QjY4OTg2QzcwNDM4NDZDNzIx QkQzM0JFOTkwHhcNMjYxMDI0MTc0NTU3WhcNMjYxMDMxMTc0NTU3WjAYMRYwFAYD VQQDEw02YWRjZWVkNS0xODJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6PzTRof+cPMlGKDWzXk6Qqph6xWSgrzhEAlOUF0V9045UH8QbQNIpHKLmyRO KN4xaCL5FjK+mukoENAtaJxBV9s/SQgFR+54C/jS4PL5YuTYEkcA72cXHIA2tpMN tLs0wMdeucQx6rqJIJ575dBnuizZ6WRQao+y+zWHbTTAK1D+rv07d0eW2qDCzIwA AeOS6hGYkWlfn+TbGySBo2z+XyddBgUiO92nWBCoM976PM6jTA7qnx2oZRHhmbvm ZkEXRR1m12g5VsFH3EYyTNhu39AA9uR39olTMe7pdxNYY+cHvc672OEDKcYvqj1l JAIMvP8tqHKpiWmyiPOJqtblhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMQrI8Tz /PoOwItiyktnEiOnxDo/MB8GA1UdIwQYMBaAFJyUpdzPamW2iYbHBDhGxyG9M76Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjZBMC82MjVGRjcyNkQ5 RTcxMUU5ODgwNTQwMTZDNEY5QUUwMi9uSlNsM005cVpiYUpoc2NFT0ViSEliMHp2 cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25KU2wzTTlxWmJhSmhzY0VPRWJISWIwenZway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjZBMC82MjVGRjcyNkQ5RTcxMUU5ODgwNTQwMTZDNEY5QUUwMi9uSlNsM005cVpi YUpoc2NFT0ViSEliMHp2cGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl+QYwFtFxHZmMJf6NPovxzGI0C9lDwVFsS8nkgwYjLXMho9Btesyq6mnlBOR 23SjHv7wLKK+n6KxDUUQJ/VuirA2u/HvghuCYedObbDHT7+FEbDgqTbVi+tLo9j+ Z3Ng7P/9G1IrzxhSiG+RJ6qu4GoNytnBNbrp7E+T8Cc1afylXVTnlDMqY6hxWCMa zMWEd1CrvtuzMHUJ+YPuHmC5YvBWIOU32h68/cNQxPN5l5WDYG0pWopPGQOPHn+N yw8OdfoQkrQ+kdEKHiI/qJUJ39vGaCdob0rzy6hNqrRK/LWhFY+p2c/Uzh4VzvWG 8/thFWwki5NVdEhDO1NxqcnrKQ== -----END CERTIFICATE-----Generated at Sun Oct 25 01:00:53 2026 by rpki-client