$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft File: NebIf2uhtlE6EnD23BNt23ETZFc.mft (raw, json) Hash identifier: O/QHLNAmnTL9dMMtbDVGnU3Wmo4z1WFKTpMKrgX8hQE= Subject key identifier: DF:EB:09:2D:B6:A6:AA:27:F2:11:CA:51:B0:EA:F6:38:4E:A2:01:48 Authority key identifier: 35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57 Certificate issuer: /CN=A91F9749/serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457 Certificate serial: 044B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft Manifest number: 0443 Signing time: Mon 19 Oct 2026 00:19:31 +0000 Manifest this update: Mon 19 Oct 2026 00:19:31 +0000 Manifest next update: Mon 26 Oct 2026 00:19:31 +0000 Files and hashes: 1: NebIf2uhtlE6EnD23BNt23ETZFc.crl (hash: EADIAsg8sf9RMjWdejfWXC0WX8xpsPUnWQw++dWzdb0=) 2: 97B81DD6BF9F11ECAB5B1239C4F9AE02.roa (hash: OhAzKBerxXTp038deHSgx6f20NkMAUKF1iAsoKTjbdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 00:19:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1099 (0x44b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9749, serialNumber=35E6C87F6BA1B6513A1270F6DC136DDB71136457 Validity Not Before: Oct 19 00:19:31 2026 GMT Not After : Oct 26 00:19:31 2026 GMT Subject: CN=6ad56213-a2e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c9:0a:80:8a:ec:89:8d:38:92:88:00:62:ff: 67:b5:b9:f6:ee:9a:f0:b5:c8:d1:fc:3b:06:7e:54: 09:d0:28:68:f3:f1:20:9d:44:25:39:a1:d1:05:86: a9:35:de:f2:be:e4:26:09:d0:e5:15:b8:83:16:31: cd:72:cb:98:09:93:5e:53:79:16:96:bd:10:22:c6: ab:5a:b7:05:5b:d5:6e:29:63:87:87:23:53:e8:27: bb:12:c2:1d:e8:88:9b:a7:42:39:ef:de:75:99:cd: 1b:53:6f:7d:4f:fa:55:1d:78:0a:e9:df:61:e1:34: f4:03:f8:ca:f8:18:d4:80:47:56:0d:0d:88:5c:46: 7f:93:99:2c:fc:41:1a:e5:c0:bb:ae:6f:0e:7f:bb: b0:9f:79:a3:04:99:bf:53:84:bf:f5:ee:ab:72:a4: 08:9c:27:03:29:61:cd:3d:8c:b4:83:ff:24:35:88: 52:68:a2:67:17:b0:51:b6:1c:1f:b9:f1:43:dc:7a: c1:28:8d:10:0f:44:e6:7d:20:c1:71:45:d7:f9:1a: 27:1a:a2:7a:b3:94:28:96:f4:ce:2f:00:2f:24:e1: 04:3b:4c:56:d5:37:4e:52:9b:e6:21:8b:57:00:0a: d2:2f:ab:eb:7a:f1:e7:a6:4b:b7:53:46:42:4a:9f: 46:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EB:09:2D:B6:A6:AA:27:F2:11:CA:51:B0:EA:F6:38:4E:A2:01:48 X509v3 Authority Key Identifier: keyid:35:E6:C8:7F:6B:A1:B6:51:3A:12:70:F6:DC:13:6D:DB:71:13:64:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NebIf2uhtlE6EnD23BNt23ETZFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9749/99D17D96BF9B11ECAD3C0A30C4F9AE02/NebIf2uhtlE6EnD23BNt23ETZFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:e5:2f:48:1f:9f:95:24:80:50:9c:bd:61:25:59:a3:a3:bd: f5:c1:18:29:3a:8d:83:4b:d7:7c:0f:ca:05:43:6d:11:32:6f: 2a:bb:51:16:c8:30:39:37:0e:7f:68:6b:06:ab:d0:60:b8:8b: ec:6d:3b:31:98:78:68:b8:73:22:ff:9d:40:d8:fb:25:ff:f2: 75:1d:90:e2:11:6f:6e:ec:d3:eb:0a:ed:22:9a:b5:03:c4:ad: 3b:e7:8e:b0:04:a9:ef:90:0f:ab:ee:93:47:20:36:16:5e:46: 99:7f:be:bf:b0:16:e3:f6:fd:e8:d1:bb:90:e2:a5:3a:1e:09: 1e:33:39:87:3a:76:0b:d8:f0:1f:f4:9b:b9:cf:33:77:3e:68: 01:a3:72:41:09:c0:a9:9f:00:19:71:91:4d:d5:83:ae:27:7f: 60:81:dd:fa:52:74:ab:56:36:ac:03:9a:02:ba:da:ae:1f:03: c0:f3:44:88:8a:f3:59:f7:a2:24:42:41:ca:a0:af:36:e9:a5: b3:99:35:85:ff:cf:32:22:72:d1:09:b6:e3:5c:61:b2:1c:75: 0e:88:43:8b:00:5a:4d:1a:3c:da:d4:0f:ea:d5:b2:3a:fa:45: cf:bf:ae:0b:bf:0c:a7:b3:c5:8e:df:43:f4:a5:15:48:86:4d: a2:63:73:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk3NDkxMTAvBgNVBAUTKDM1RTZDODdGNkJBMUI2NTEzQTEyNzBGNkRDMTM2RERC NzExMzY0NTcwHhcNMjYxMDE5MDAxOTMxWhcNMjYxMDI2MDAxOTMxWjAYMRYwFAYD VQQDEw02YWQ1NjIxMy1hMmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MkKgIrsiY04kogAYv9ntbn27prwtcjR/DsGflQJ0Cho8/EgnUQlOaHRBYap Nd7yvuQmCdDlFbiDFjHNcsuYCZNeU3kWlr0QIsarWrcFW9VuKWOHhyNT6Ce7EsId 6Iibp0I57951mc0bU299T/pVHXgK6d9h4TT0A/jK+BjUgEdWDQ2IXEZ/k5ks/EEa 5cC7rm8Of7uwn3mjBJm/U4S/9e6rcqQInCcDKWHNPYy0g/8kNYhSaKJnF7BRthwf ufFD3HrBKI0QD0TmfSDBcUXX+RonGqJ6s5QolvTOLwAvJOEEO0xW1TdOUpvmIYtX AArSL6vrevHnpku3U0ZCSp9GpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN/rCS22 pqon8hHKUbDq9jhOogFIMB8GA1UdIwQYMBaAFDXmyH9robZROhJw9twTbdtxE2RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTc0OS85OUQxN0Q5NkJG OUIxMUVDQUQzQzBBMzBDNEY5QUUwMi9OZWJJZjJ1aHRsRTZFbkQyM0JOdDIzRVRa RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05lYklmMnVodGxFNkVuRDIzQk50MjNFVFpGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTc0OS85OUQxN0Q5NkJGOUIxMUVDQUQzQzBBMzBDNEY5QUUwMi9OZWJJZjJ1aHRs RTZFbkQyM0JOdDIzRVRaRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYuUvSB+flSSAUJy9YSVZo6O99cEYKTqNg0vXfA/KBUNtETJvKrtRFsgwOTcO f2hrBqvQYLiL7G07MZh4aLhzIv+dQNj7Jf/ydR2Q4hFvbuzT6wrtIpq1A8StO+eO sASp75APq+6TRyA2Fl5GmX++v7AW4/b96NG7kOKlOh4JHjM5hzp2C9jwH/Sbuc8z dz5oAaNyQQnAqZ8AGXGRTdWDrid/YIHd+lJ0q1Y2rAOaArrarh8DwPNEiIrzWfei JEJByqCvNumls5k1hf/PMiJy0Qm241xhshx1DohDiwBaTRo82tQP6tWyOvpFz7+u C78Mp7PFjt9D9KUVSIZNomNzow== -----END CERTIFICATE-----Generated at Tue Oct 20 08:37:49 2026 by rpki-client