$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft File: NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft (raw, json) Hash identifier: B6A9IWDVVxGe78WXVxX+SZjSalvBImKcKEH5Fz8vQ2w= Subject key identifier: 94:31:48:3C:9A:19:54:C9:00:93:8A:05:B1:80:0B:60:87:B2:C4:40 Authority key identifier: 37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A Certificate issuer: /CN=A91DE7DE/serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Certificate serial: 12C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft Manifest number: 1296 Signing time: Mon 26 Oct 2026 17:05:48 +0000 Manifest this update: Mon 26 Oct 2026 17:05:48 +0000 Manifest next update: Mon 02 Nov 2026 17:05:48 +0000 Files and hashes: 1: NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl (hash: PlcaRQpsgtPP6q2GvjMIknpda87Yx/Jgou55dNxWk4Q=) 2: 7F7F1470091D11F0B7E95627C4F9AE02.roa (hash: f+/uDtECPh4z9lUgGecamZwBqy/HTP1IaGpVkdXlDqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 17:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4808 (0x12c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Validity Not Before: Oct 26 17:05:48 2026 GMT Not After : Nov 2 17:05:48 2026 GMT Subject: CN=6adf886c-8ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b5:86:04:70:67:99:62:b7:b9:12:96:10:2e: d9:1d:84:cd:00:36:c0:ed:1e:c9:cf:f5:8d:40:6f: ff:4f:3c:76:71:b4:54:a1:32:bb:2d:2c:a5:fd:d9: 31:ee:a2:ac:ad:12:10:4e:ca:52:9d:05:58:d4:a5: 9c:67:8b:c5:83:8d:35:a2:a9:53:ad:90:8e:95:0d: 1e:b8:14:e7:7e:be:b7:fa:81:dc:a0:06:8e:67:02: 1c:39:e8:81:92:59:ec:42:b9:a9:61:26:c5:5a:b2: ec:de:34:5e:c8:07:55:dd:c3:1c:3b:47:e3:35:e4: 10:d8:c6:6c:b2:b1:80:5a:f4:51:f6:0a:c2:43:74: 8b:94:58:7a:72:19:7e:57:9b:f8:33:a0:25:ee:93: 45:2d:07:65:4f:09:77:39:fd:b5:1f:7a:1a:26:cf: e3:00:de:52:02:2c:46:83:53:06:38:9e:e1:52:b4: 0e:47:20:6a:af:e4:97:59:d3:02:40:69:b4:81:af: d4:e1:63:c9:bf:ac:2c:47:8b:86:5e:0c:1f:6f:ae: d2:e4:c9:fe:2c:e6:ba:cd:63:21:56:aa:b6:f8:e2: 02:91:1f:1f:f2:72:6c:36:53:a7:d3:e2:ef:88:29: 5b:f2:34:bd:59:44:99:bd:e2:1e:90:47:df:88:cd: 11:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:31:48:3C:9A:19:54:C9:00:93:8A:05:B1:80:0B:60:87:B2:C4:40 X509v3 Authority Key Identifier: keyid:37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:fb:fa:5f:de:49:66:51:f7:0b:82:73:64:40:96:16:9f:33: a1:35:68:2e:64:24:b8:12:73:3c:38:ed:fd:74:4c:91:79:de: 62:f8:99:6e:94:95:88:b2:cd:98:fc:03:df:c6:3c:13:02:7a: ea:2b:3e:45:5a:a2:1d:26:56:12:ce:b2:ff:2c:58:7b:99:44: 82:c7:1b:54:ca:11:02:ec:9c:41:c5:d4:82:05:7d:52:19:0c: 98:cb:43:6c:08:27:a3:83:12:bb:7f:2a:2e:3a:d4:66:e8:be: a0:da:c1:e4:d3:21:f1:87:43:82:53:11:a1:16:9a:7a:39:28: b5:81:62:8e:af:a0:45:59:65:a9:bf:b8:f3:90:d5:ca:b8:e6: 9d:af:43:4e:8d:df:46:52:49:e1:5b:0c:54:9e:63:57:51:3e: f0:29:d2:8e:9f:73:8e:1a:0b:16:eb:18:b8:d2:00:40:be:dc: 3b:4a:ed:17:86:8a:53:c5:ba:8b:90:70:3d:96:b0:a9:4a:87: 42:a4:56:c6:7c:b3:0b:e4:ca:e4:59:c1:13:90:91:73:92:2e: fb:01:98:fc:3e:8a:eb:6a:c6:97:f4:3b:41:2a:54:6f:ce:48: e9:73:ae:93:bc:fd:36:30:ac:3d:e2:f0:3b:90:ae:5a:31:e1: 81:a6:ae:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDM3MTI3M0NGRDhDMkM5MDhCNjkxRDZCRUExNzVFOERF ODJCRDQzOUEwHhcNMjYxMDI2MTcwNTQ4WhcNMjYxMTAyMTcwNTQ4WjAYMRYwFAYD VQQDEw02YWRmODg2Yy04ZmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrWGBHBnmWK3uRKWEC7ZHYTNADbA7R7Jz/WNQG//Tzx2cbRUoTK7LSyl/dkx 7qKsrRIQTspSnQVY1KWcZ4vFg401oqlTrZCOlQ0euBTnfr63+oHcoAaOZwIcOeiB klnsQrmpYSbFWrLs3jReyAdV3cMcO0fjNeQQ2MZssrGAWvRR9grCQ3SLlFh6chl+ V5v4M6Al7pNFLQdlTwl3Of21H3oaJs/jAN5SAixGg1MGOJ7hUrQORyBqr+SXWdMC QGm0ga/U4WPJv6wsR4uGXgwfb67S5Mn+LOa6zWMhVqq2+OICkR8f8nJsNlOn0+Lv iClb8jS9WUSZveIekEffiM0RoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJQxSDya GVTJAJOKBbGAC2CHssRAMB8GA1UdIwQYMBaAFDcSc8/YwskItpHWvqF16N6CvUOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DRUUzRDcxODA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lRaTJrZGEtb1hYbzNvSzlR NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL054Snp6OWpDeVFpMmtkYS1vWFhvM29LOVE1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DRUUzRDcxODA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lR aTJrZGEtb1hYbzNvSzlRNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbPv6X95JZlH3C4JzZECWFp8zoTVoLmQkuBJzPDjt/XRMkXneYviZbpSViLLN mPwD38Y8EwJ66is+RVqiHSZWEs6y/yxYe5lEgscbVMoRAuycQcXUggV9UhkMmMtD bAgno4MSu38qLjrUZui+oNrB5NMh8YdDglMRoRaaejkotYFijq+gRVllqb+485DV yrjmna9DTo3fRlJJ4VsMVJ5jV1E+8CnSjp9zjhoLFusYuNIAQL7cO0rtF4aKU8W6 i5BwPZawqUqHQqRWxnyzC+TK5FnBE5CRc5Iu+wGY/D6K62rGl/Q7QSpUb85I6XOu k7z9NjCsPeLwO5CuWjHhgaauyA== -----END CERTIFICATE-----Generated at Tue Oct 27 16:44:28 2026 by rpki-client