$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft File: rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft (raw, json) Hash identifier: tu20/3D8kdYEPNz1yMnIqVrjjW45XR+f4D6IjXGRWe4= Subject key identifier: 3D:3D:EB:69:49:37:28:E9:BB:23:2A:DE:57:D3:9F:77:54:94:FA:C5 Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft Manifest number: 01FA Signing time: Sun 11 Oct 2026 04:17:41 +0000 Manifest this update: Sun 11 Oct 2026 04:17:40 +0000 Manifest next update: Sun 18 Oct 2026 04:17:40 +0000 Files and hashes: 1: rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl (hash: 7suLJAiENcrm4zLoD5PV8o5tvedDumgrPn6HZmpYP9s=) 2: 7B21EBD2B6FB11F0AFDD6239C4F9AE02.roa (hash: N7d2kdSjz/jwSyQEPzpDvWGJTq/1G0TljCkUhHZagrM=) 3: DFB06F1E8C4411F1B3F3C3C65411F970.roa (hash: m3C4Ne1JUnCi+zYe3q0erjOJOltliP8iGbvHB8vQzRY=) 4: UvM_rQ0kUKCbTjsTrzhHaoT0tco.asa (hash: qbLrr8nHVN0hPefgqkS7zyRLd13bpru8nRDGyVM6x6c=) 5: 6CFCC5EC8F4D11F1B986D3494611F970.roa (hash: DIzsgSR5GwxTp5MHAgczXy9dfk2cq7Ie4lXeoFdLBeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 04:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Validity Not Before: Oct 11 04:17:40 2026 GMT Not After : Oct 18 04:17:40 2026 GMT Subject: CN=6acb0de4-6011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:50:a1:d6:ec:9b:7b:67:04:df:4f:4c:b7:2e: db:c8:42:9b:58:8c:5f:c1:b5:d4:7d:cd:7c:0d:27: f5:11:29:fb:79:52:b4:0e:ab:ed:89:b5:b0:11:ab: fe:a1:4e:3c:6f:12:27:01:1e:83:0b:49:91:69:23: 4a:3a:6f:42:41:f1:3c:72:85:a7:e6:e9:33:79:28: bb:0d:22:50:8e:70:bf:11:18:a9:25:5a:aa:8b:02: f7:af:d9:48:de:68:ec:5b:ae:8d:db:70:6d:e0:2a: 44:6d:f2:f4:99:77:71:3a:e2:cb:4c:ef:e9:d2:f6: 38:db:12:cb:15:cf:f8:e1:54:1e:da:58:3f:1c:ba: e6:59:f0:7c:95:71:17:96:e2:d3:0b:72:9d:8d:64: e0:5a:3f:27:b9:1b:4a:84:eb:8f:8b:df:f5:1c:00: e7:5a:ef:89:99:23:c0:c5:b2:37:cb:79:a7:27:7a: d1:5a:9c:96:a3:84:c0:ac:86:f3:7c:c3:82:8e:4d: 8f:0f:e0:9f:9b:6e:fa:ce:f5:0c:ee:6b:ab:3b:0f: 85:7a:c4:eb:3a:88:2d:ed:96:2b:37:69:5b:3d:a5: 5b:e0:77:9c:4e:71:66:5d:4b:ff:7c:52:03:25:fd: f7:63:07:a3:7f:e1:78:9d:9e:56:61:62:23:4b:20: e5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3D:EB:69:49:37:28:E9:BB:23:2A:DE:57:D3:9F:77:54:94:FA:C5 X509v3 Authority Key Identifier: keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d8:09:3a:fd:2c:22:be:e9:41:b5:52:d8:a0:a5:8c:dd:7a: 0c:92:4c:21:a0:32:b7:0e:c2:35:a3:1f:75:c8:75:4f:3e:f1: 0f:12:92:bd:9b:72:f6:47:d6:71:57:92:2c:26:88:51:4e:ca: d3:76:ae:81:f4:30:c0:05:15:0c:9c:9e:30:f1:ae:3f:86:cd: bc:e5:52:3a:f5:b8:08:6b:76:41:42:3a:75:8b:42:e2:a0:8c: cc:8a:69:d5:f7:31:90:a5:c6:1e:fe:8c:28:24:ec:a6:f0:6e: 2e:dc:7a:11:2f:73:ad:c1:de:30:60:08:73:f8:27:17:55:38: 71:2d:36:ee:80:c6:fe:16:75:a4:a7:14:f1:76:5b:c3:23:ab: 5e:7e:28:23:8b:7f:74:da:9a:41:89:eb:93:c2:99:b6:69:cf: 04:2f:08:18:0d:96:c6:a1:72:ec:3f:a8:4c:f7:1b:b8:e2:f6: 39:c2:c0:5f:c0:33:ce:0a:1c:94:70:ea:26:16:69:2a:d1:31: 06:87:ad:55:38:2d:82:6a:f5:6b:f8:6e:c9:50:b4:27:08:43: 84:d6:64:29:e5:03:28:25:6a:ab:ac:5b:e1:09:20:35:10:71: 9a:84:81:9a:78:16:e5:e3:1e:9a:70:2f:8c:f5:a9:e8:6f:cc: 03:72:05:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkzNTMxMTAvBgNVBAUTKEFDRDA0N0QwRDg4RTI2NTdFMTJDRjkxMzAxQzE2MEYx RDNDRDJGMzMwHhcNMjYxMDExMDQxNzQwWhcNMjYxMDE4MDQxNzQwWjAYMRYwFAYD VQQDEw02YWNiMGRlNC02MDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVCh1uybe2cE309Mty7byEKbWIxfwbXUfc18DSf1ESn7eVK0DqvtibWwEav+ oU48bxInAR6DC0mRaSNKOm9CQfE8coWn5ukzeSi7DSJQjnC/ERipJVqqiwL3r9lI 3mjsW66N23Bt4CpEbfL0mXdxOuLLTO/p0vY42xLLFc/44VQe2lg/HLrmWfB8lXEX luLTC3KdjWTgWj8nuRtKhOuPi9/1HADnWu+JmSPAxbI3y3mnJ3rRWpyWo4TArIbz fMOCjk2PD+Cfm276zvUM7murOw+FesTrOogt7ZYrN2lbPaVb4HecTnFmXUv/fFID Jf33Ywejf+F4nZ5WYWIjSyDlxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0962lJ NyjpuyMq3lfTn3dUlPrFMB8GA1UdIwQYMBaAFKzQR9DYjiZX4Sz5EwHBYPHTzS8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTM1My8wODc1RTY0ODA1 QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0psZmhMUGtUQWNGZzhkUE5M ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQkgwTmlPSmxmaExQa1RBY0ZnOGRQTkx6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTM1My8wODc1RTY0ODA1QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0ps ZmhMUGtUQWNGZzhkUE5Mek0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPtgJOv0sIr7pQbVS2KCljN16DJJMIaAytw7CNaMfdch1Tz7xDxKSvZty9kfW cVeSLCaIUU7K03augfQwwAUVDJyeMPGuP4bNvOVSOvW4CGt2QUI6dYtC4qCMzIpp 1fcxkKXGHv6MKCTspvBuLtx6ES9zrcHeMGAIc/gnF1U4cS027oDG/hZ1pKcU8XZb wyOrXn4oI4t/dNqaQYnrk8KZtmnPBC8IGA2WxqFy7D+oTPcbuOL2OcLAX8Azzgoc lHDqJhZpKtExBoetVTgtgmr1a/huyVC0JwhDhNZkKeUDKCVqq6xb4QkgNRBxmoSB mngW5eMemnAvjPWp6G/MA3IFsw== -----END CERTIFICATE-----Generated at Mon Oct 12 14:07:24 2026 by rpki-client