$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft File: NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft (raw, json) Hash identifier: r3DAJNpTmf4es/i5U/Wzhjz3h13FRtPjL1zNQefZtZA= Subject key identifier: FF:E1:4C:54:D7:D9:3A:D5:BA:35:A9:EB:1F:22:82:EF:C4:C0:99:B0 Authority key identifier: 36:10:4A:D5:D1:CE:29:FA:6F:03:5D:59:69:0C:FE:12:39:11:85:95 Certificate issuer: /CN=A91E0727/serialNumber=36104AD5D1CE29FA6F035D59690CFE1239118595 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhBK1dHOKfpvA11ZaQz-EjkRhZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft Manifest number: 4E Signing time: Sat 03 Oct 2026 09:05:15 +0000 Manifest this update: Sat 03 Oct 2026 09:05:15 +0000 Manifest next update: Sat 10 Oct 2026 09:05:15 +0000 Files and hashes: 1: NhBK1dHOKfpvA11ZaQz-EjkRhZU.crl (hash: XVxfJ2dXy/7m52j89YDYx6Ww6IcyeBV+9p0+EfTSQWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.crl rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhBK1dHOKfpvA11ZaQz-EjkRhZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 09:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0727, serialNumber=36104AD5D1CE29FA6F035D59690CFE1239118595 Validity Not Before: Oct 3 09:05:15 2026 GMT Not After : Oct 10 09:05:15 2026 GMT Subject: CN=6ac0c54b-aa6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3b:3d:e7:76:7d:23:c2:82:e9:12:f7:94:2c: 7f:cc:6b:07:d0:fa:8c:e0:a9:f8:05:ae:85:ad:5c: b6:78:22:cb:5a:37:89:e5:c2:41:e5:fd:63:7c:06: 75:8b:8c:ff:44:ed:77:46:ac:f7:73:cc:60:06:f2: 07:6e:f9:2a:ed:87:e2:32:62:ab:b2:ae:8b:a9:e9: 76:e2:61:b5:1d:af:f5:4f:59:ea:80:b7:08:89:54: 44:65:a7:d7:d8:90:a8:89:ac:41:7e:e6:d2:51:c0: d0:39:92:72:b9:c7:a2:c6:a9:0a:6f:8d:8f:15:f0: 0f:6f:d7:25:2c:ea:ff:5b:43:91:e9:2c:47:4e:a4: ba:18:63:64:00:f8:35:42:91:8d:5a:7c:b3:42:61: 45:d2:02:c1:77:48:62:64:2d:d3:92:78:9a:ff:bf: bc:de:31:9c:8e:0b:9e:4c:52:af:a7:d7:cd:92:d6: a7:a7:39:5f:c1:9b:03:ec:f5:e6:35:55:17:04:8f: 30:1a:99:22:23:8c:fb:3c:96:df:e8:3c:86:47:4a: 22:66:c7:58:08:04:cf:18:64:85:43:dc:28:ca:10: 11:a6:2d:f3:09:9b:31:c7:15:ea:7f:2b:1e:6c:0c: bb:97:35:8c:39:ac:78:b9:bf:86:6d:15:fd:35:91: 5a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E1:4C:54:D7:D9:3A:D5:BA:35:A9:EB:1F:22:82:EF:C4:C0:99:B0 X509v3 Authority Key Identifier: keyid:36:10:4A:D5:D1:CE:29:FA:6F:03:5D:59:69:0C:FE:12:39:11:85:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhBK1dHOKfpvA11ZaQz-EjkRhZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0727/F823C9A849FD11F1A0F1D14DBD833773/NhBK1dHOKfpvA11ZaQz-EjkRhZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:80:77:34:71:2d:62:63:64:e8:7d:af:8a:95:d5:7b:1d:0d: ae:7a:be:88:ec:0f:cc:56:53:a8:66:e2:da:7f:9d:50:91:b6: f8:7f:20:4e:a6:27:57:3f:e5:48:76:89:f2:fd:8e:37:57:ae: c8:1f:6c:ee:37:fd:97:5a:2a:2f:dc:e7:44:8d:80:09:a4:a5: 8a:0b:99:21:bf:43:59:b3:4f:59:5f:2e:e8:ff:bd:26:0e:00: 2f:92:c1:aa:80:a8:fa:85:e0:57:1e:be:5c:35:55:9f:ca:7b: 6c:2e:d7:bd:d3:ff:29:26:94:40:38:a2:4d:fd:87:85:93:5c: ef:fc:f6:c1:b8:d2:14:42:e8:fd:dc:dd:94:04:56:53:f7:63: 89:07:a8:a9:85:89:3c:0f:3d:8d:60:9e:7c:0e:76:65:5e:fc: 26:ee:68:2c:98:9f:5a:a0:d6:d2:a6:b5:fd:8a:7c:10:a0:c8: 3d:52:e8:3e:04:c1:39:a4:73:9a:07:0a:e5:83:b4:10:7c:8c: 4b:1a:55:ee:92:7b:4a:8d:c1:a7:79:cd:4a:2d:39:23:67:de: a0:f3:4f:9c:32:2d:0c:a1:9a:bb:69:3f:46:ad:15:d4:b5:82: 6f:b8:4b:6f:7e:8c:23:38:68:cc:60:b7:2b:c0:98:88:e4:cd: 35:1f:62:2a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDcyNzExMC8GA1UEBRMoMzYxMDRBRDVEMUNFMjlGQTZGMDM1RDU5NjkwQ0ZFMTIz OTExODU5NTAeFw0yNjEwMDMwOTA1MTVaFw0yNjEwMTAwOTA1MTVaMBgxFjAUBgNV BAMTDTZhYzBjNTRiLWFhNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEOz3ndn0jwoLpEveULH/MawfQ+ozgqfgFroWtXLZ4IstaN4nlwkHl/WN8BnWL jP9E7XdGrPdzzGAG8gdu+Srth+IyYquyroup6XbiYbUdr/VPWeqAtwiJVERlp9fY kKiJrEF+5tJRwNA5knK5x6LGqQpvjY8V8A9v1yUs6v9bQ5HpLEdOpLoYY2QA+DVC kY1afLNCYUXSAsF3SGJkLdOSeJr/v7zeMZyOC55MUq+n182S1qenOV/BmwPs9eY1 VRcEjzAamSIjjPs8lt/oPIZHSiJmx1gIBM8YZIVD3CjKEBGmLfMJmzHHFep/Kx5s DLuXNYw5rHi5v4ZtFf01kVolAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/+FMVNfZ OtW6NanrHyKC78TAmbAwHwYDVR0jBBgwFoAUNhBK1dHOKfpvA11ZaQz+EjkRhZUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwNzI3L0Y4MjNDOUE4NDlG RDExRjFBMEYxRDE0REJEODMzNzczL05oQksxZEhPS2ZwdkExMVphUXotRWprUmha VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTmhCSzFkSE9LZnB2QTExWmFRei1FamtSaFpVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw NzI3L0Y4MjNDOUE4NDlGRDExRjFBMEYxRDE0REJEODMzNzczL05oQksxZEhPS2Zw dkExMVphUXotRWprUmhaVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQADgHc0cS1iY2Tofa+KldV7HQ2uer6I7A/MVlOoZuLaf51Qkbb4fyBOpidXP+VI dony/Y43V67IH2zuN/2XWiov3OdEjYAJpKWKC5khv0NZs09ZXy7o/70mDgAvksGq gKj6heBXHr5cNVWfyntsLte90/8pJpRAOKJN/YeFk1zv/PbBuNIUQuj93N2UBFZT 92OJB6iphYk8Dz2NYJ58DnZlXvwm7mgsmJ9aoNbSprX9inwQoMg9Uug+BME5pHOa Bwrlg7QQfIxLGlXukntKjcGnec1KLTkjZ96g80+cMi0MoZq7aT9GrRXUtYJvuEtv fowjOGjMYLcrwJiI5M01H2Iq -----END CERTIFICATE-----Generated at Sun Oct 4 19:59:42 2026 by rpki-client