$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft File: Nh-touCojPKH9M5sw7RGLJEzC_w.mft (raw, json) Hash identifier: 3yIVnKXs5Bo01qZr1VQ6fWwvCovO8b8T4mcbMHWBcKs= Subject key identifier: 9E:2F:D6:E8:F7:6D:F9:75:04:D5:BA:5C:57:E8:78:15:22:C7:F3:87 Authority key identifier: 36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC Certificate issuer: /CN=A91F8357/serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft Manifest number: 0142 Signing time: Wed 07 Oct 2026 05:58:41 +0000 Manifest this update: Wed 07 Oct 2026 05:58:40 +0000 Manifest next update: Wed 14 Oct 2026 05:58:40 +0000 Files and hashes: 1: Nh-touCojPKH9M5sw7RGLJEzC_w.crl (hash: 7ESfKdnoicW0UA3DFiubeWakfDhYK+ao7QtJZPpgQLA=) 2: 89E51722DF9011EFB2CE892EC4F9AE02.roa (hash: Nuy8wkTfNQsDA+tWgvTQcyjhbo91R+mIegI98+xjZxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 05:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8357, serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC Validity Not Before: Oct 7 05:58:40 2026 GMT Not After : Oct 14 05:58:40 2026 GMT Subject: CN=6ac5df91-bed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:00:f2:06:f0:e8:d5:39:17:4e:30:0d:87:55: 0a:64:60:0a:f2:70:69:5c:bf:8b:33:9c:12:68:b2: b1:57:d8:70:6e:94:14:fc:ca:4d:1e:d5:98:29:f6: 91:d2:2d:53:75:32:1e:67:2f:59:2d:29:5b:e2:e3: a5:6f:9c:0e:af:e0:bb:bd:6a:a5:c5:4d:22:3c:db: 96:d3:bf:8c:f9:44:bf:7f:29:48:87:0f:88:3d:95: 11:27:50:e3:b3:55:fe:82:63:98:03:bf:f3:25:b7: 75:85:74:c7:ef:90:d4:ec:af:e3:79:a5:12:7f:dc: 42:5f:cd:be:df:20:32:72:87:9a:e3:43:28:66:e7: f4:8b:e0:04:10:28:76:e4:34:b3:48:e4:e0:9c:51: 76:0c:b8:29:d1:6a:d7:92:49:a8:89:5c:4c:0b:97: 02:78:36:1c:eb:80:7a:ec:85:c3:2f:da:2e:1f:85: e3:85:64:62:a5:a6:eb:e6:57:f8:8f:29:88:c3:c4: d7:d1:21:94:2e:f1:a6:22:5d:39:ba:0c:f8:b0:76: 50:88:ee:10:85:f9:df:0f:fa:14:cf:02:ac:6e:c4: a1:a4:7b:a3:e7:c8:93:5e:5e:0c:3e:3c:99:bf:14: 9f:d9:fb:ad:c2:40:ce:c4:a9:93:bb:74:53:a0:3d: 1a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:2F:D6:E8:F7:6D:F9:75:04:D5:BA:5C:57:E8:78:15:22:C7:F3:87 X509v3 Authority Key Identifier: keyid:36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:94:4c:31:56:f4:a4:aa:2b:98:05:ee:df:58:fd:1f:62:d8: 24:c9:0f:26:f5:8e:11:8d:80:8a:d7:a9:4c:12:46:b0:d4:6f: 9e:f6:e6:e3:88:19:f7:1e:b0:1e:27:f4:59:31:19:c1:05:b0: 01:bd:4f:6a:e4:87:33:19:f4:39:1c:72:a4:7d:15:e6:71:60: de:b1:05:26:8c:53:3d:83:b1:3f:cd:bb:5e:52:6f:af:58:20: 13:60:f1:fb:1a:7e:45:63:d8:e6:2c:e1:ee:ca:2f:47:0e:98: 5e:b1:82:e5:76:55:4e:98:98:7a:42:30:93:12:4f:1c:bf:d9: 32:13:1d:46:18:3f:2c:8e:9b:91:c1:9c:de:fc:31:20:5f:fe: 0c:58:b0:7a:e9:4d:90:03:3d:77:c1:86:5b:e3:eb:e8:47:8e: 97:19:b8:27:66:5c:7c:a9:3f:79:e8:31:ad:61:49:b9:df:57: a3:bb:8b:71:9b:50:39:ab:ad:ca:a0:99:1a:90:cf:6e:83:23: 73:c2:1d:2e:63:df:f0:b3:5b:4e:20:93:12:c0:7b:7e:25:5d: 02:eb:b2:a4:93:1f:78:fd:af:e7:6d:80:b6:3c:67:98:e3:d4: 70:de:49:5e:98:62:8a:e0:d1:d9:45:3d:d6:62:5e:fa:e0:ba: 9c:42:c2:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzNTcxMTAvBgNVBAUTKDM2MUZBREEyRTBBODhDRjI4N0Y0Q0U2Q0MzQjQ0NjJD OTEzMzBCRkMwHhcNMjYxMDA3MDU1ODQwWhcNMjYxMDE0MDU1ODQwWjAYMRYwFAYD VQQDEw02YWM1ZGY5MS1iZWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwDyBvDo1TkXTjANh1UKZGAK8nBpXL+LM5wSaLKxV9hwbpQU/MpNHtWYKfaR 0i1TdTIeZy9ZLSlb4uOlb5wOr+C7vWqlxU0iPNuW07+M+US/fylIhw+IPZURJ1Dj s1X+gmOYA7/zJbd1hXTH75DU7K/jeaUSf9xCX82+3yAycoea40MoZuf0i+AEECh2 5DSzSOTgnFF2DLgp0WrXkkmoiVxMC5cCeDYc64B67IXDL9ouH4XjhWRipabr5lf4 jymIw8TX0SGULvGmIl05ugz4sHZQiO4QhfnfD/oUzwKsbsShpHuj58iTXl4MPjyZ vxSf2futwkDOxKmTu3RToD0aQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ4v1uj3 bfl1BNW6XFfoeBUix/OHMB8GA1UdIwQYMBaAFDYfraLgqIzyh/TObMO0RiyRMwv8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODM1Ny8xNEE3OEYyQ0RG OEExMUVGODc0NzJCNzRDNEY5QUUwMi9OaC10b3VDb2pQS0g5TTVzdzdSR0xKRXpD X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05oLXRvdUNvalBLSDlNNXN3N1JHTEpFekNfdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODM1Ny8xNEE3OEYyQ0RGOEExMUVGODc0NzJCNzRDNEY5QUUwMi9OaC10b3VDb2pQ S0g5TTVzdzdSR0xKRXpDX3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVJRMMVb0pKormAXu31j9H2LYJMkPJvWOEY2AitepTBJGsNRvnvbm44gZ9x6w Hif0WTEZwQWwAb1PauSHMxn0ORxypH0V5nFg3rEFJoxTPYOxP827XlJvr1ggE2Dx +xp+RWPY5izh7sovRw6YXrGC5XZVTpiYekIwkxJPHL/ZMhMdRhg/LI6bkcGc3vwx IF/+DFiweulNkAM9d8GGW+Pr6EeOlxm4J2ZcfKk/eegxrWFJud9Xo7uLcZtQOaut yqCZGpDPboMjc8IdLmPf8LNbTiCTEsB7fiVdAuuypJMfeP2v522AtjxnmOPUcN5J XphiiuDR2UU91mJe+uC6nELC0g== -----END CERTIFICATE-----Generated at Thu Oct 8 05:36:56 2026 by rpki-client