$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft File: nkKx9pFGDihG-nHwbcib8sdB25o.mft (raw, json) Hash identifier: Z1NtBpWnNwcvjWXHw5uZgZOw07YIYivdhQWUmhCSXZ4= Subject key identifier: CE:FA:B5:7A:04:5D:9E:29:D9:BD:B8:8B:62:94:D6:C6:1F:60:7B:B9 Authority key identifier: 9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A Certificate issuer: /CN=A911BCDD/serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft Manifest number: 0217 Signing time: Mon 21 Sep 2026 02:57:25 +0000 Manifest this update: Mon 21 Sep 2026 02:57:24 +0000 Manifest next update: Mon 28 Sep 2026 02:57:24 +0000 Files and hashes: 1: nkKx9pFGDihG-nHwbcib8sdB25o.crl (hash: wJJXuUx5v0BpfqWXRmGiNdXYliyuaSj0JE073EAyokg=) 2: 5ED417AE869011EEA9011A36C4F9AE02.roa (hash: Qx6h3CTOkKIiFv1hoz1s6u5nieG3giT15j3ng44V7sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 02:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCDD, serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Validity Not Before: Sep 21 02:57:24 2026 GMT Not After : Sep 28 02:57:24 2026 GMT Subject: CN=6ab09d15-b25f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3c:69:49:b9:b6:41:9f:d9:1a:b4:a3:57:44: c9:ad:f8:e2:b3:31:36:42:81:83:5a:79:d9:3a:fb: 57:5d:3f:04:3f:69:50:a0:d4:bf:cc:9c:5d:25:7c: de:e1:7a:5b:87:73:eb:11:d9:19:dd:2c:14:f2:0a: e8:46:50:3c:a4:ac:6b:27:e2:ba:22:db:66:23:6d: a6:bb:4f:7a:84:f5:ff:01:c3:ba:39:3f:2c:ec:ea: f4:f5:1e:24:b8:38:09:c4:70:7e:73:b5:d6:18:98: c3:0f:00:3b:44:62:26:2d:37:63:4e:a1:4f:11:89: d7:73:1a:46:57:89:34:78:35:e7:2c:63:71:a3:3d: 6e:54:98:2b:7c:98:40:28:4d:46:0c:4c:fc:0b:78: 62:7c:33:96:c3:45:fa:1f:93:72:22:2e:06:43:5a: 7a:52:57:01:36:d9:c5:02:3b:10:90:91:82:88:6e: 65:6e:4d:88:7a:92:ff:06:ca:7e:9b:d1:0f:82:ea: d8:49:d4:8a:52:67:6a:7d:81:38:67:f7:0e:6d:0f: 87:64:13:79:ae:c9:b7:5c:06:78:ee:de:7c:ba:a7: fa:07:ef:ec:a9:cd:98:1e:f4:7d:e8:85:d3:99:6b: a2:48:de:db:bc:1c:08:2c:57:ce:a6:e8:b0:8f:d3: 18:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FA:B5:7A:04:5D:9E:29:D9:BD:B8:8B:62:94:D6:C6:1F:60:7B:B9 X509v3 Authority Key Identifier: keyid:9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:8e:28:e4:35:c8:c3:cd:98:76:2c:81:92:6f:75:1a:d4:2e: 3e:e0:8e:16:15:24:79:b7:ae:62:09:75:65:bd:59:c7:31:67: b2:4a:4b:16:94:e2:2e:1b:f8:71:1a:d5:55:d0:32:6b:ef:21: c0:eb:43:b3:3d:ca:95:0b:8b:6a:cb:41:0c:76:43:35:35:85: 24:f8:20:9e:96:90:ed:37:c0:96:f6:7d:16:a6:2f:46:7a:ba: c9:06:5a:f4:2f:75:f0:b8:fe:40:0a:29:a2:02:64:06:ee:32: 07:9c:6d:c9:a5:4a:e3:a7:a4:f9:cc:69:16:18:f0:5a:5e:82: cc:b6:2d:bc:d3:62:1b:f9:e8:52:aa:83:d9:15:dd:b3:e8:eb: 0f:7b:dc:63:5f:99:c1:c4:8f:35:96:41:48:66:0d:38:77:f3: c9:af:a9:bb:b4:94:41:83:aa:85:f9:60:5d:ff:ca:dc:f0:77: e7:15:84:aa:0f:f0:e6:58:78:9d:8e:38:4e:36:77:3c:13:14: d9:db:e0:bd:64:72:96:8b:7c:08:22:7f:74:7a:de:0e:fe:93: e4:7e:82:d7:23:69:12:7b:b6:bb:76:ee:c6:b9:7e:cc:e0:2b: 74:19:76:ab:54:bc:eb:3d:f3:52:3b:81:24:83:6f:ae:33:2f: f2:e3:89:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDREQxMTAvBgNVBAUTKDlFNDJCMUY2OTE0NjBFMjg0NkZBNzFGMDZEQzg5QkYy Qzc0MURCOUEwHhcNMjYwOTIxMDI1NzI0WhcNMjYwOTI4MDI1NzI0WjAYMRYwFAYD VQQDEw02YWIwOWQxNS1iMjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoTxpSbm2QZ/ZGrSjV0TJrfjiszE2QoGDWnnZOvtXXT8EP2lQoNS/zJxdJXze 4Xpbh3PrEdkZ3SwU8groRlA8pKxrJ+K6IttmI22mu096hPX/AcO6OT8s7Or09R4k uDgJxHB+c7XWGJjDDwA7RGImLTdjTqFPEYnXcxpGV4k0eDXnLGNxoz1uVJgrfJhA KE1GDEz8C3hifDOWw0X6H5NyIi4GQ1p6UlcBNtnFAjsQkJGCiG5lbk2IepL/Bsp+ m9EPgurYSdSKUmdqfYE4Z/cObQ+HZBN5rsm3XAZ47t58uqf6B+/sqc2YHvR96IXT mWuiSN7bvBwILFfOpuiwj9MYxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM76tXoE XZ4p2b24i2KU1sYfYHu5MB8GA1UdIwQYMBaAFJ5CsfaRRg4oRvpx8G3Im/LHQdua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNERC8zNDhBRDhBQzg2 MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0RpaEctbkh3YmNpYjhzZEIy NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25rS3g5cEZHRGloRy1uSHdiY2liOHNkQjI1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNERC8zNDhBRDhBQzg2MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0Rp aEctbkh3YmNpYjhzZEIyNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADY4o5DXIw82YdiyBkm91GtQuPuCOFhUkebeuYgl1Zb1ZxzFnskpLFpTiLhv4 cRrVVdAya+8hwOtDsz3KlQuLastBDHZDNTWFJPggnpaQ7TfAlvZ9FqYvRnq6yQZa 9C918Lj+QAopogJkBu4yB5xtyaVK46ek+cxpFhjwWl6CzLYtvNNiG/noUqqD2RXd s+jrD3vcY1+ZwcSPNZZBSGYNOHfzya+pu7SUQYOqhflgXf/K3PB35xWEqg/w5lh4 nY44TjZ3PBMU2dvgvWRylot8CCJ/dHreDv6T5H6C1yNpEnu2u3buxrl+zOArdBl2 q1S86z3zUjuBJINvrjMv8uOJIQ== -----END CERTIFICATE-----Generated at Wed Sep 23 01:01:13 2026 by rpki-client