$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft File: nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft (raw, json) Hash identifier: tEfZRcXnevCfkytpvHPgUrvMsGW5zg2Yf9yibH98pGg= Subject key identifier: CC:73:C7:CB:84:7E:25:F3:9D:ED:D3:C6:01:FD:96:87:C0:83:F8:38 Authority key identifier: 9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A Certificate issuer: /CN=A91EF19E/serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Certificate serial: 2B13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft Manifest number: 2B03 Signing time: Thu 08 Oct 2026 14:24:18 +0000 Manifest this update: Thu 08 Oct 2026 14:24:18 +0000 Manifest next update: Thu 15 Oct 2026 14:24:18 +0000 Files and hashes: 1: nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl (hash: guDQjI5fDXh5Z5/c/QUQEnMmaSOJTnLNC4Eufo1EcX4=) 2: 5060B434AD8911F1B5F6152E6611F970.roa (hash: 9FnBND8nmvsKH6cDvf/xdjAGczE3b5tt1j6KJMIXX0E=) 3: 4ED816C0AD8911F1B5F6152E6611F970.roa (hash: uAn45Qu/y4a1RpICf91Ny7afBn11GlIxBuzQrD1Zoq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 14:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11027 (0x2b13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF19E, serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Validity Not Before: Oct 8 14:24:18 2026 GMT Not After : Oct 15 14:24:18 2026 GMT Subject: CN=6ac7a792-bcde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ca:cc:07:17:9c:de:ac:08:40:42:76:ec:b8: ff:d6:af:8f:02:d7:04:3c:ac:b7:75:53:ef:ec:b7: f9:77:5e:5d:de:5e:83:53:7c:a1:b2:e3:ce:65:0f: 28:71:f3:ae:1d:d7:59:7c:72:68:78:dd:b6:0f:dc: c4:10:c1:e8:f8:0d:dd:b0:14:e7:f9:be:1a:2a:39: 04:8d:83:2d:a7:fb:84:9f:77:f8:d1:e7:41:9c:0c: 2a:55:09:ad:c9:f9:d2:35:16:97:42:44:a3:ae:cc: 6f:8d:0d:0c:b5:54:b1:db:7f:98:e7:41:68:ea:ef: 34:31:dd:bf:78:b0:ba:f0:21:63:ea:b1:5f:b7:64: 8f:1c:10:0c:26:d8:ff:ce:f5:d2:16:e6:e2:dc:46: c8:dd:85:2c:e0:35:ff:43:45:dd:35:e8:08:48:2a: 79:95:3a:1e:f1:b6:77:39:e5:48:0e:47:48:17:51: 47:0a:ff:e1:17:91:58:57:d7:d8:0c:ec:3c:f1:b9: 60:6e:26:54:da:ea:5e:a1:f7:8f:2b:32:1d:84:17: e6:ed:56:fc:ca:32:85:b2:fc:f1:d1:b6:92:f0:e2: 8d:00:4b:3a:41:fe:09:56:4c:bb:3a:dd:4a:fa:87: d5:02:36:e4:0d:05:1b:5e:45:6f:45:b8:c7:fa:d1: d1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:73:C7:CB:84:7E:25:F3:9D:ED:D3:C6:01:FD:96:87:C0:83:F8:38 X509v3 Authority Key Identifier: keyid:9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:c2:12:cf:d3:24:4f:c2:aa:95:c2:ea:40:20:0b:03:c6:95: 58:d4:aa:0e:c9:2a:bb:2b:dd:23:bf:98:11:39:5d:43:80:28: 25:fb:56:8f:28:fb:c9:43:ad:ab:a9:3c:15:42:c0:36:e8:aa: 6f:31:9b:93:b1:0c:1f:b6:fd:11:2c:32:fe:0e:d2:1e:9c:7c: 63:3d:28:ad:76:a4:99:34:b5:fc:6f:9a:2c:1f:03:94:2b:bb: 62:36:8a:77:68:fc:c1:cc:6e:35:2f:04:9d:d2:22:9c:38:75: 83:a7:9f:a5:24:c6:9c:98:ca:5e:1a:fe:57:17:f9:88:74:4c: 2a:16:cc:4c:f3:9c:01:06:f7:7f:00:0e:f8:4b:77:09:f2:8a: 77:28:4f:79:2c:f5:a3:96:6e:22:bd:f1:42:27:67:36:8f:39: 98:4b:0b:0d:f9:e1:bd:e9:a2:0d:3e:11:26:6d:86:c4:6c:79: 9a:52:48:68:b9:fe:80:db:6e:48:c9:62:76:85:b3:e8:d4:b7: 95:3f:fa:59:77:26:e5:1d:08:1a:5d:df:69:c5:38:49:aa:f6: 93:78:40:dd:25:ac:e0:f1:24:df:78:49:c2:c9:71:c3:01:51: ef:76:68:8e:13:be:6b:ae:3c:66:8a:37:c9:90:17:ab:66:ff: d7:4e:bb:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxOUUxMTAvBgNVBAUTKDlFMUYxOUE3RTE4RDhCQ0VEMjNFRjJFREFCMTlFODU0 MzhFN0YwOEEwHhcNMjYxMDA4MTQyNDE4WhcNMjYxMDE1MTQyNDE4WjAYMRYwFAYD VQQDEw02YWM3YTc5Mi1iY2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8rMBxec3qwIQEJ27Lj/1q+PAtcEPKy3dVPv7Lf5d15d3l6DU3yhsuPOZQ8o cfOuHddZfHJoeN22D9zEEMHo+A3dsBTn+b4aKjkEjYMtp/uEn3f40edBnAwqVQmt yfnSNRaXQkSjrsxvjQ0MtVSx23+Y50Fo6u80Md2/eLC68CFj6rFft2SPHBAMJtj/ zvXSFubi3EbI3YUs4DX/Q0XdNegISCp5lToe8bZ3OeVIDkdIF1FHCv/hF5FYV9fY DOw88blgbiZU2upeofePKzIdhBfm7Vb8yjKFsvzx0baS8OKNAEs6Qf4JVky7Ot1K +ofVAjbkDQUbXkVvRbjH+tHRQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMxzx8uE fiXzne3TxgH9lofAg/g4MB8GA1UdIwQYMBaAFJ4fGafhjYvO0j7y7asZ6FQ45/CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS9BOTNFOTkzRTM0 MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4N1NQdkx0cXhub1ZEam44 SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25oOFpwLUdOaTg3U1B2THRxeG5vVkRqbjhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE5RS9BOTNFOTkzRTM0MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4 N1NQdkx0cXhub1ZEam44SW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR8ISz9MkT8KqlcLqQCALA8aVWNSqDskquyvdI7+YETldQ4AoJftWjyj7yUOt q6k8FULANuiqbzGbk7EMH7b9ESwy/g7SHpx8Yz0orXakmTS1/G+aLB8DlCu7YjaK d2j8wcxuNS8EndIinDh1g6efpSTGnJjKXhr+Vxf5iHRMKhbMTPOcAQb3fwAO+Et3 CfKKdyhPeSz1o5ZuIr3xQidnNo85mEsLDfnhvemiDT4RJm2GxGx5mlJIaLn+gNtu SMlidoWz6NS3lT/6WXcm5R0IGl3facU4Sar2k3hA3SWs4PEk33hJwslxwwFR73Zo jhO+a648Zoo3yZAXq2b/1067Rw== -----END CERTIFICATE-----Generated at Thu Oct 8 21:04:08 2026 by rpki-client