$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft File: nEKLhAc-vngu7TP5LkDdc2GgnKo.mft (raw, json) Hash identifier: /5Tnsdw0+hz3e6kgSoVMB42sdoxv7awc8PaXjeLJ9Qo= Subject key identifier: AC:B9:65:69:E1:3F:AC:2D:F6:83:5C:6D:BF:C9:EB:18:4D:54:6A:7A Authority key identifier: 9C:42:8B:84:07:3E:BE:78:2E:ED:33:F9:2E:40:DD:73:61:A0:9C:AA Certificate issuer: /CN=A91D8B6F/serialNumber=9C428B84073EBE782EED33F92E40DD7361A09CAA Certificate serial: 096F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft Manifest number: 0965 Signing time: Tue 22 Sep 2026 19:54:19 +0000 Manifest this update: Tue 22 Sep 2026 19:54:19 +0000 Manifest next update: Tue 29 Sep 2026 19:54:19 +0000 Files and hashes: 1: nEKLhAc-vngu7TP5LkDdc2GgnKo.crl (hash: btj9IiX5Ck7PTLIfrU11B5aGWm/EV5wUEHuDmGZtyks=) 2: C592AFD286F111F19E006003A7EE528E.roa (hash: tDKWwcpnaZY1Mze9WS4S7X4lHgZRsJdlm83QRVgSUNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.crl rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 19:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2415 (0x96f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B6F, serialNumber=9C428B84073EBE782EED33F92E40DD7361A09CAA Validity Not Before: Sep 22 19:54:19 2026 GMT Not After : Sep 29 19:54:19 2026 GMT Subject: CN=6ab2dceb-e75a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d0:4e:68:27:56:ad:6e:86:c1:78:81:9c:ae: cc:5c:02:13:63:0e:79:61:74:31:8e:9e:c3:c3:b5: bf:37:bf:ed:a6:4a:f2:65:6a:8c:21:4a:cf:15:c0: 8a:1b:b3:e9:9b:43:59:cb:7c:d1:d1:d5:25:60:b2: 7b:42:af:0f:d4:2a:a2:6a:b3:ee:6b:c6:ce:b8:b5: 9c:05:4e:d7:63:97:23:54:7b:46:9f:7d:fd:de:7c: bc:9e:b3:1f:3f:4c:29:a8:3d:ed:26:36:b2:b5:cd: c8:cb:c4:bc:b9:de:2d:67:16:45:d4:e4:1b:0b:84: 3d:ca:2b:12:f8:66:fa:1a:1e:d1:8d:4f:a1:01:14: 21:3e:14:cc:3d:06:52:ce:7d:03:cb:f0:52:77:4f: 02:64:5d:d0:53:19:7f:e2:ab:9b:56:1e:d8:27:6d: 84:72:65:a1:55:de:49:f3:4c:e7:94:29:79:f4:27: f8:ef:dc:47:09:a7:fa:cf:55:0b:43:20:32:79:47: 6a:4a:de:5c:73:2f:a0:bb:c1:3f:f8:d1:d0:cd:1e: 63:f4:2d:59:2d:d3:5e:e0:f8:3f:be:65:16:a5:b1: 08:4b:c2:9e:ec:c0:83:f7:4a:68:b2:49:62:36:8b: 86:95:f5:0d:b2:32:52:70:6d:59:10:4d:c2:05:8f: b5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B9:65:69:E1:3F:AC:2D:F6:83:5C:6D:BF:C9:EB:18:4D:54:6A:7A X509v3 Authority Key Identifier: keyid:9C:42:8B:84:07:3E:BE:78:2E:ED:33:F9:2E:40:DD:73:61:A0:9C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:65:6e:ef:31:ef:82:fd:f4:0e:8c:23:0e:7a:f9:a0:46:21: 6c:d4:41:df:7e:ad:b0:4d:b3:73:62:6b:26:9d:48:4e:cb:12: 17:c5:af:50:73:cd:e7:32:c3:48:2c:79:9d:8a:6d:13:75:ac: ba:90:e2:4e:dd:bb:eb:34:4c:1e:e0:00:ba:01:15:7b:48:18: c7:0f:b5:f8:11:02:3e:7e:fe:a9:29:06:69:53:d0:b7:c5:ac: 25:1c:2d:a1:1c:6c:52:35:73:6f:5a:ef:11:ce:0c:92:98:5e: 33:d1:95:f5:f3:0f:61:12:f2:bb:b6:b5:35:c1:28:7f:6d:d6: bf:17:b2:0b:ac:21:1d:01:f4:f7:76:c9:89:f7:2a:c0:7d:9f: 7a:64:7a:86:fd:be:9c:c5:ed:0e:d9:61:7e:3f:9b:ca:63:8f: b8:a1:16:8b:f4:25:32:b6:51:77:b1:c8:f5:4d:ac:97:fc:6b: 93:0c:0a:4c:eb:56:bd:4f:86:0a:c2:be:fa:7a:ba:e8:14:7c: be:85:44:dd:4a:71:91:16:02:01:63:77:d1:28:0b:8e:93:de: 12:80:b8:b8:44:8e:fa:2c:67:d0:db:7f:8b:e7:9e:d8:7c:49: b8:d2:39:ab:9d:68:43:e3:89:5f:d3:c1:89:ff:f2:32:bf:eb: 5a:30:4a:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCNkYxMTAvBgNVBAUTKDlDNDI4Qjg0MDczRUJFNzgyRUVEMzNGOTJFNDBERDcz NjFBMDlDQUEwHhcNMjYwOTIyMTk1NDE5WhcNMjYwOTI5MTk1NDE5WjAYMRYwFAYD VQQDEw02YWIyZGNlYi1lNzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkNBOaCdWrW6GwXiBnK7MXAITYw55YXQxjp7Dw7W/N7/tpkryZWqMIUrPFcCK G7Ppm0NZy3zR0dUlYLJ7Qq8P1CqiarPua8bOuLWcBU7XY5cjVHtGn3393ny8nrMf P0wpqD3tJjaytc3Iy8S8ud4tZxZF1OQbC4Q9yisS+Gb6Gh7RjU+hARQhPhTMPQZS zn0Dy/BSd08CZF3QUxl/4qubVh7YJ22EcmWhVd5J80znlCl59Cf479xHCaf6z1UL QyAyeUdqSt5ccy+gu8E/+NHQzR5j9C1ZLdNe4Pg/vmUWpbEIS8Ke7MCD90poskli NouGlfUNsjJScG1ZEE3CBY+12QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKy5ZWnh P6wt9oNcbb/J6xhNVGp6MB8GA1UdIwQYMBaAFJxCi4QHPr54Lu0z+S5A3XNhoJyq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEI2Ri9FNDQ4QkYxOEM0 RUYxMUVBODdGNDM4MTBDNEY5QUUwMi9uRUtMaEFjLXZuZ3U3VFA1TGtEZGMyR2du S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25FS0xoQWMtdm5ndTdUUDVMa0RkYzJHZ25Lby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEI2Ri9FNDQ4QkYxOEM0RUYxMUVBODdGNDM4MTBDNEY5QUUwMi9uRUtMaEFjLXZu Z3U3VFA1TGtEZGMyR2duS28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZWVu7zHvgv30DowjDnr5oEYhbNRB336tsE2zc2JrJp1ITssSF8WvUHPN5zLD SCx5nYptE3WsupDiTt276zRMHuAAugEVe0gYxw+1+BECPn7+qSkGaVPQt8WsJRwt oRxsUjVzb1rvEc4MkpheM9GV9fMPYRLyu7a1NcEof23WvxeyC6whHQH093bJifcq wH2femR6hv2+nMXtDtlhfj+bymOPuKEWi/QlMrZRd7HI9U2sl/xrkwwKTOtWvU+G CsK++nq66BR8voVE3UpxkRYCAWN30SgLjpPeEoC4uESO+ixn0Nt/i+ee2HxJuNI5 q51oQ+OJX9PBif/yMr/rWjBKVQ== -----END CERTIFICATE-----Generated at Thu Sep 24 04:18:12 2026 by rpki-client