$ rpki-client -vvvf rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft File: NU4yud4OVpoZUal7kyAZ9oijUKw.mft (raw, json) Hash identifier: VBzGcUWOxJ1uARwNiSZRzMCresBN2IkxppLjNMv3oqQ= Subject key identifier: AB:BF:31:6A:A0:09:38:53:64:84:51:E6:D3:F3:2A:71:93:F4:18:3D Authority key identifier: 35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC Certificate issuer: /CN=A912442A/serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft Manifest number: 0103 Signing time: Tue 13 Oct 2026 00:39:59 +0000 Manifest this update: Tue 13 Oct 2026 00:39:59 +0000 Manifest next update: Tue 20 Oct 2026 00:39:59 +0000 Files and hashes: 1: NU4yud4OVpoZUal7kyAZ9oijUKw.crl (hash: eRSuvRZL/uk/GdnNLgcTvUpO5vGgib6QyugHJWmZwAg=) 2: 19D89DB656F311F083F53B5DC4F9AE02.roa (hash: jv1KvzcTvw26f2C0XqbVWuFuNFMIpOIQKmYH0GVxJUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 00:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A, serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC Validity Not Before: Oct 13 00:39:59 2026 GMT Not After : Oct 20 00:39:59 2026 GMT Subject: CN=6acd7ddf-e5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:b9:2f:37:43:20:49:4e:ee:8a:33:4d:ec: 55:f2:21:5a:d3:13:a3:b3:8e:42:2e:53:dd:d9:a2: 8b:1c:33:ff:16:48:20:a8:13:8b:fb:51:5f:53:d0: a9:95:38:a1:28:25:c7:f7:13:75:b3:b5:a1:41:4a: 51:9a:c0:8f:81:c0:62:8f:27:d5:9b:66:b0:8f:8d: 04:d5:7d:8a:0a:5f:b9:39:66:6e:7a:4f:fb:6c:1f: 3d:97:91:7e:0b:20:c0:d2:4c:53:bb:8f:b9:25:29: 28:e6:bf:e9:6e:1c:1b:fe:fd:23:b7:f8:6e:05:5e: 81:85:e1:b8:f9:4a:80:f5:03:ef:ec:7a:a4:e8:8a: d7:bc:53:fc:3c:af:ca:32:52:e5:ed:fa:df:02:76: 45:77:ef:15:d9:39:1a:0f:de:56:ab:e9:61:5c:2c: c7:5d:b7:bd:b7:d9:ab:58:4a:5e:a7:ed:5d:19:25: 32:49:ee:ee:00:7c:09:f8:bd:05:cd:2f:71:a1:f3: 13:ee:be:56:bd:21:22:e0:b1:6a:b6:02:00:02:e1: 05:94:23:12:86:64:59:f0:f1:a6:0d:6a:4b:be:3c: 55:22:66:b1:d6:eb:cb:98:90:00:9d:43:f5:1a:46: 5b:01:4c:53:4d:5b:b8:5c:f8:e8:54:b2:c8:02:91: a7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:BF:31:6A:A0:09:38:53:64:84:51:E6:D3:F3:2A:71:93:F4:18:3D X509v3 Authority Key Identifier: keyid:35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:62:cc:1e:8c:f7:06:a1:6f:b5:e4:f5:0b:40:ab:7a:f8:74: f0:21:a5:38:a6:8c:0f:37:ac:20:19:ac:d7:70:3e:25:e5:56: 08:99:8f:8c:98:ba:81:bc:a4:6e:dc:2f:8b:75:c1:2f:2c:8d: 2a:06:34:9d:1b:7f:93:35:ba:4a:26:6c:57:fb:be:a7:18:9c: 98:4d:e5:80:d4:82:f7:c9:2d:e4:3a:41:24:c4:bc:fe:33:0a: 93:81:43:43:e7:75:5c:9a:95:a6:a5:c9:51:7a:fb:bc:fa:2c: 73:3f:73:bd:80:4e:41:34:cc:5b:2d:2b:3c:36:e7:74:1d:64: 3a:8c:e1:1b:2e:1f:79:68:8e:60:ca:80:f7:be:15:78:37:fa: d4:f2:60:a0:80:7d:f0:9c:82:08:d9:66:09:13:d4:f7:a5:58: b9:93:53:57:f0:69:1b:69:7b:38:7c:26:dd:6a:e0:48:78:66: 8b:8d:21:db:84:16:62:98:be:fc:e3:82:1a:57:24:f7:60:89: d9:a9:a1:62:32:e9:83:f8:44:69:20:0a:46:77:52:7c:30:ae: bb:8b:3d:c6:61:15:e6:65:bb:94:d2:9a:c9:ed:43:3d:14:a5: 5f:32:83:2d:52:a5:7f:60:c7:b8:43:f9:33:b8:c4:67:4b:f0: ae:ef:c7:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDM1NEUzMkI5REUwRTU2OUExOTUxQTk3QjkzMjAxOUY2 ODhBMzUwQUMwHhcNMjYxMDEzMDAzOTU5WhcNMjYxMDIwMDAzOTU5WjAYMRYwFAYD VQQDEw02YWNkN2RkZi1lNWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7u5LzdDIElO7oozTexV8iFa0xOjs45CLlPd2aKLHDP/FkggqBOL+1FfU9Cp lTihKCXH9xN1s7WhQUpRmsCPgcBijyfVm2awj40E1X2KCl+5OWZuek/7bB89l5F+ CyDA0kxTu4+5JSko5r/pbhwb/v0jt/huBV6BheG4+UqA9QPv7Hqk6IrXvFP8PK/K MlLl7frfAnZFd+8V2TkaD95Wq+lhXCzHXbe9t9mrWEpep+1dGSUySe7uAHwJ+L0F zS9xofMT7r5WvSEi4LFqtgIAAuEFlCMShmRZ8PGmDWpLvjxVImax1uvLmJAAnUP1 GkZbAUxTTVu4XPjoVLLIApGnjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKu/MWqg CThTZIRR5tPzKnGT9Bg9MB8GA1UdIwQYMBaAFDVOMrneDlaaGVGpe5MgGfaIo1Cs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS81NUVCQjg1ODRF M0IxMUYwOUMxMjU1NDdDNEY5QUUwMi9OVTR5dWQ0T1Zwb1pVYWw3a3lBWjlvaWpV S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05VNHl1ZDRPVnBvWlVhbDdreUFaOW9palVLdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDQyQS81NUVCQjg1ODRFM0IxMUYwOUMxMjU1NDdDNEY5QUUwMi9OVTR5dWQ0T1Zw b1pVYWw3a3lBWjlvaWpVS3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHGLMHoz3BqFvteT1C0Crevh08CGlOKaMDzesIBms13A+JeVWCJmPjJi6gbyk btwvi3XBLyyNKgY0nRt/kzW6SiZsV/u+pxicmE3lgNSC98kt5DpBJMS8/jMKk4FD Q+d1XJqVpqXJUXr7vPoscz9zvYBOQTTMWy0rPDbndB1kOozhGy4feWiOYMqA974V eDf61PJgoIB98JyCCNlmCRPU96VYuZNTV/BpG2l7OHwm3WrgSHhmi40h24QWYpi+ /OOCGlck92CJ2amhYjLpg/hEaSAKRndSfDCuu4s9xmEV5mW7lNKaye1DPRSlXzKD LVKlf2DHuEP5M7jEZ0vwru/HBg== -----END CERTIFICATE-----Generated at Wed Oct 14 21:01:01 2026 by rpki-client