$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft File: NSX5xUTpmw5jRgCZyS39lNSb9so.mft (raw, json) Hash identifier: VBMNOpqFmPmkOtL61LW4DsGKPfGztiZuIXo3zgRu4Xg= Subject key identifier: 5E:D2:9B:A4:B9:69:62:29:48:DF:BF:3B:11:F0:ED:C8:86:A0:62:27 Authority key identifier: 35:25:F9:C5:44:E9:9B:0E:63:46:00:99:C9:2D:FD:94:D4:9B:F6:CA Certificate issuer: /CN=A91D9D7A/serialNumber=3525F9C544E99B0E63460099C92DFD94D49BF6CA Certificate serial: 0340 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft Manifest number: 0339 Signing time: Tue 13 Oct 2026 23:06:19 +0000 Manifest this update: Tue 13 Oct 2026 23:06:19 +0000 Manifest next update: Tue 20 Oct 2026 23:06:19 +0000 Files and hashes: 1: NSX5xUTpmw5jRgCZyS39lNSb9so.crl (hash: 7f1/4HC2Z2E3YgFFKMbqffIVT/nXuDIOuWs8mWfy4kM=) 2: 81B7763C280211ED93948C10C4F9AE02.roa (hash: Fpwo9jD8mgQGYUfa+tB5R9PIcIcluQYUoxN2TJBXj7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.crl rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 23:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 832 (0x340) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9D7A, serialNumber=3525F9C544E99B0E63460099C92DFD94D49BF6CA Validity Not Before: Oct 13 23:06:19 2026 GMT Not After : Oct 20 23:06:19 2026 GMT Subject: CN=6aceb96b-25ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cc:a4:73:4f:76:23:a8:bd:4d:1b:09:99:30: 05:f2:4b:cb:ab:ca:e8:6a:4e:e5:08:04:ec:65:67: c3:73:3a:af:51:3d:b1:81:23:ed:4f:af:bd:f5:03: 88:4e:e1:e4:0c:53:d0:89:3d:a7:b5:8f:5e:72:55: 95:86:94:ee:af:10:b4:c4:98:5f:be:ca:53:b9:62: 52:be:45:b6:a7:b6:73:4a:2d:f0:d8:49:ca:c2:c8: 6a:03:30:a9:9b:69:90:a8:f8:03:41:9b:71:74:fe: c4:a6:b0:29:25:d4:8d:56:63:ed:e8:0d:09:8b:48: 05:82:f8:b4:40:76:be:9e:a6:15:90:26:d2:2b:30: 3b:d3:8c:3f:72:26:28:49:98:71:a4:e7:d0:5c:45: 92:e7:08:c0:87:a0:c9:4d:10:61:a9:ba:42:21:b9: 57:25:3c:86:05:d8:ac:7b:a9:99:69:44:3f:70:5d: 61:16:50:ef:79:54:c1:6f:df:51:b6:f6:3c:16:96: 9f:01:b5:3b:b4:80:a4:c9:87:e6:c2:b6:3a:68:1d: b8:6e:06:17:95:ce:64:d0:b8:4b:9b:6b:a2:01:15: c8:13:a0:07:d1:a4:bc:0e:b8:4f:98:6d:62:f1:50: 13:51:64:8a:53:dd:d6:51:63:0f:22:25:de:cf:bb: b1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D2:9B:A4:B9:69:62:29:48:DF:BF:3B:11:F0:ED:C8:86:A0:62:27 X509v3 Authority Key Identifier: keyid:35:25:F9:C5:44:E9:9B:0E:63:46:00:99:C9:2D:FD:94:D4:9B:F6:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:51:b8:28:4f:2e:ab:7e:0e:ad:39:eb:a3:75:38:eb:73:41: 96:ee:70:8e:bf:50:78:78:a6:82:e9:2e:8c:7e:ac:cc:24:cc: 56:d8:9d:3e:c0:c8:95:d7:88:46:83:3b:7a:c1:64:e1:8d:17: e6:93:f2:0b:d8:6e:41:4a:0b:d4:6f:5d:1d:a6:6f:f2:09:16: d8:07:b3:5b:fc:06:b5:d8:09:e6:86:c2:8f:fe:b2:51:83:c2: f1:67:4f:dc:40:87:a0:3c:7e:1d:06:a1:13:48:54:51:d2:a2: 60:df:58:8c:32:ad:60:5f:92:2b:2a:93:50:fa:55:f8:88:29: 51:11:49:39:87:5a:0f:3d:47:b7:5c:46:f8:f0:1c:fc:6b:54: 43:a3:a3:ea:c5:48:ac:eb:f5:2d:a9:5c:eb:e0:12:00:7f:de: 0f:68:8f:6d:7a:52:6a:c1:bc:99:98:79:d2:12:1d:2b:9f:62: 59:13:51:54:8d:51:f7:e4:4c:ad:5b:0f:91:ac:29:d7:03:7e: a4:ae:53:27:06:9e:d4:9b:7a:93:66:e0:97:f2:24:5d:b3:4c: 4f:ad:d4:4d:32:8b:be:ea:5b:20:15:ad:d0:66:ed:db:50:9b: 36:89:18:9c:ab:2a:73:3e:c9:79:46:4d:a1:d3:7f:98:66:4f: 90:82:e4:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlEN0ExMTAvBgNVBAUTKDM1MjVGOUM1NDRFOTlCMEU2MzQ2MDA5OUM5MkRGRDk0 RDQ5QkY2Q0EwHhcNMjYxMDEzMjMwNjE5WhcNMjYxMDIwMjMwNjE5WjAYMRYwFAYD VQQDEw02YWNlYjk2Yi0yNWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiMykc092I6i9TRsJmTAF8kvLq8roak7lCATsZWfDczqvUT2xgSPtT6+99QOI TuHkDFPQiT2ntY9eclWVhpTurxC0xJhfvspTuWJSvkW2p7ZzSi3w2EnKwshqAzCp m2mQqPgDQZtxdP7EprApJdSNVmPt6A0Ji0gFgvi0QHa+nqYVkCbSKzA704w/ciYo SZhxpOfQXEWS5wjAh6DJTRBhqbpCIblXJTyGBdise6mZaUQ/cF1hFlDveVTBb99R tvY8FpafAbU7tICkyYfmwrY6aB24bgYXlc5k0LhLm2uiARXIE6AH0aS8DrhPmG1i 8VATUWSKU93WUWMPIiXez7ux9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF7Sm6S5 aWIpSN+/OxHw7ciGoGInMB8GA1UdIwQYMBaAFDUl+cVE6ZsOY0YAmckt/ZTUm/bK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUQ3QS84OUE5QUEyNDI3 ODMxMUVEOUJBMDI0NTBDNEY5QUUwMi9OU1g1eFVUcG13NWpSZ0NaeVMzOWxOU2I5 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05TWDV4VVRwbXc1alJnQ1p5UzM5bE5TYjlzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUQ3QS84OUE5QUEyNDI3ODMxMUVEOUJBMDI0NTBDNEY5QUUwMi9OU1g1eFVUcG13 NWpSZ0NaeVMzOWxOU2I5c28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVFG4KE8uq34OrTnro3U463NBlu5wjr9QeHimgukujH6szCTMVtidPsDIldeI RoM7esFk4Y0X5pPyC9huQUoL1G9dHaZv8gkW2AezW/wGtdgJ5obCj/6yUYPC8WdP 3ECHoDx+HQahE0hUUdKiYN9YjDKtYF+SKyqTUPpV+IgpURFJOYdaDz1Ht1xG+PAc /GtUQ6Oj6sVIrOv1Lalc6+ASAH/eD2iPbXpSasG8mZh50hIdK59iWRNRVI1R9+RM rVsPkawp1wN+pK5TJwae1Jt6k2bgl/IkXbNMT63UTTKLvupbIBWt0Gbt21CbNokY nKsqcz7JeUZNodN/mGZPkILkiA== -----END CERTIFICATE-----Generated at Wed Oct 14 11:53:38 2026 by rpki-client