$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft File: NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft (raw, json) Hash identifier: 8Br75mYIMDcB4dWUg/RPKMam71OrFcIwsVRFIzWQxoM= Subject key identifier: FF:F8:49:70:1A:23:62:C3:E0:C2:1B:E6:49:5D:25:70:BF:AF:82:C0 Authority key identifier: 34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD Certificate issuer: /CN=A91E8F36/serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD Certificate serial: 02D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft Manifest number: 02CD Signing time: Sat 03 Oct 2026 01:51:29 +0000 Manifest this update: Sat 03 Oct 2026 01:51:28 +0000 Manifest next update: Sat 10 Oct 2026 01:51:28 +0000 Files and hashes: 1: NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl (hash: lipl6zIRZ2sxFKqWTGE4rjLAoPJribSmMuRficUHUCU=) 2: AC270A727D0711ED8181DA7FC4F9AE02.roa (hash: pWPy+X5EuBSNslThAxl9vzV4QotLdBFyZSA0fVW7aaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 01:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 726 (0x2d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8F36, serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD Validity Not Before: Oct 3 01:51:28 2026 GMT Not After : Oct 10 01:51:28 2026 GMT Subject: CN=6ac05fa1-8603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:da:44:80:bd:cd:ae:dc:3c:55:77:3a:4e:ce: db:3c:9b:7b:b3:c5:50:9c:7e:de:b7:ba:34:28:31: 27:68:7f:ea:90:08:a7:b7:fb:6b:ad:a0:d9:4b:37: 63:00:62:fe:82:a6:45:a1:6c:60:73:1c:04:2c:59: 40:ea:23:65:af:66:0f:27:8c:7b:d1:24:e5:24:19: c3:0a:bd:0a:77:c8:68:85:1a:4b:ae:22:2e:b1:76: 1d:a0:62:29:a2:28:20:4f:c4:aa:ef:d8:7d:f8:d2: d7:da:79:12:bc:d2:fb:cd:e2:f7:1f:3c:d1:85:dd: ae:e1:77:55:f5:90:dc:b8:49:da:34:d1:b8:aa:cc: 67:01:c1:f0:96:2f:fb:e2:bc:fc:4c:a8:45:ad:4b: 28:93:f7:a4:8a:35:af:66:98:b4:17:5a:bc:6e:a9: c8:db:3f:fd:6d:7b:9d:7d:16:0e:34:ae:dc:5b:1b: bd:09:26:00:fe:c5:4e:dd:5e:fa:45:8a:ef:53:2f: b6:f3:db:a6:60:54:60:20:da:cb:cb:96:b2:5e:16: b9:1c:4f:89:5d:ae:94:e6:19:e5:54:b9:e4:f2:90: 4a:44:7c:c3:44:d1:6e:96:b7:6c:a5:75:c6:76:8b: 0e:9a:d8:d3:95:86:57:82:a2:67:64:f3:90:ba:41: 34:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F8:49:70:1A:23:62:C3:E0:C2:1B:E6:49:5D:25:70:BF:AF:82:C0 X509v3 Authority Key Identifier: keyid:34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:3e:10:2a:eb:7c:08:11:8d:d7:8a:e0:38:26:32:4b:f1:1d: e9:5b:4b:74:0c:2c:bd:5e:f6:0b:e2:a0:85:46:e9:8a:37:3f: 89:f3:9f:59:dc:bd:47:84:5c:67:44:fd:dc:98:aa:ab:da:6a: 6c:17:6f:5d:73:63:64:ed:ad:52:e2:26:6f:d5:9a:fd:8c:a4: 26:0d:37:a0:67:2d:72:2f:13:5a:49:0a:b5:45:6f:05:52:6c: 18:06:80:56:8d:bf:49:70:a4:5c:11:cf:21:10:cf:c3:05:7f: 56:7f:eb:a7:4e:c4:75:d3:a7:1a:a9:c4:04:be:32:11:b4:d8: 8b:62:84:ff:0c:de:8f:55:65:54:6c:e6:25:dc:61:47:91:21: 81:8c:50:e5:f8:79:c2:05:d4:4d:12:31:9c:da:07:9a:54:ee: 0c:9b:c2:b5:67:52:dd:13:8b:42:87:ed:8f:69:08:dc:f7:3b: b0:99:c5:ef:84:d0:47:2f:9c:b9:88:db:79:20:05:2d:04:71: 48:83:bd:82:83:18:0f:e9:e8:6d:00:11:2f:91:54:6f:71:a2: 6e:d4:8e:b2:a3:ab:de:0d:a1:6d:1b:bd:ea:ee:06:90:b2:2c: 0c:d8:de:3b:e2:a1:b1:28:a3:32:40:60:87:19:42:be:5b:57: 72:47:b0:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThGMzYxMTAvBgNVBAUTKDM0RDdENkQ0NDFDMzJEN0M4NzE0MkU5RkU1QzdFQkM0 RjQ3OUIwQ0QwHhcNMjYxMDAzMDE1MTI4WhcNMjYxMDEwMDE1MTI4WjAYMRYwFAYD VQQDEw02YWMwNWZhMS04NjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodpEgL3Nrtw8VXc6Ts7bPJt7s8VQnH7et7o0KDEnaH/qkAint/trraDZSzdj AGL+gqZFoWxgcxwELFlA6iNlr2YPJ4x70STlJBnDCr0Kd8hohRpLriIusXYdoGIp oiggT8Sq79h9+NLX2nkSvNL7zeL3HzzRhd2u4XdV9ZDcuEnaNNG4qsxnAcHwli/7 4rz8TKhFrUsok/ekijWvZpi0F1q8bqnI2z/9bXudfRYONK7cWxu9CSYA/sVO3V76 RYrvUy+289umYFRgINrLy5ayXha5HE+JXa6U5hnlVLnk8pBKRHzDRNFulrdspXXG dosOmtjTlYZXgqJnZPOQukE0iQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP/4SXAa I2LD4MIb5kldJXC/r4LAMB8GA1UdIwQYMBaAFDTX1tRBwy18hxQun+XH68T0ebDN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEYzNi8yNDlGNDE0NjdE MDIxMUVEOUM1RDdENjJDNEY5QUUwMi9OTmZXMUVIRExYeUhGQzZmNWNmcnhQUjVz TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05OZlcxRUhETFh5SEZDNmY1Y2ZyeFBSNXNNMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEYzNi8yNDlGNDE0NjdEMDIxMUVEOUM1RDdENjJDNEY5QUUwMi9OTmZXMUVIRExY eUhGQzZmNWNmcnhQUjVzTTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtz4QKut8CBGN14rgOCYyS/Ed6VtLdAwsvV72C+KghUbpijc/ifOfWdy9R4Rc Z0T93Jiqq9pqbBdvXXNjZO2tUuImb9Wa/YykJg03oGctci8TWkkKtUVvBVJsGAaA Vo2/SXCkXBHPIRDPwwV/Vn/rp07EddOnGqnEBL4yEbTYi2KE/wzej1VlVGzmJdxh R5EhgYxQ5fh5wgXUTRIxnNoHmlTuDJvCtWdS3ROLQoftj2kI3Pc7sJnF74TQRy+c uYjbeSAFLQRxSIO9goMYD+nobQARL5FUb3GibtSOsqOr3g2hbRu96u4GkLIsDNje O+KhsSijMkBghxlCvltXckewjw== -----END CERTIFICATE-----Generated at Sun Oct 4 13:36:05 2026 by rpki-client