$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft File: nxlDAU2jmDwfXHj3bM8tpWpKNro.mft (raw, json) Hash identifier: +IUQt1jmvS3fxFNTkHsnqaP3r3XtWdxWuH7PWle7row= Subject key identifier: CA:1E:A2:AD:00:28:21:EA:12:84:A0:4C:59:F6:B0:2A:9F:EE:50:B9 Authority key identifier: 9F:19:43:01:4D:A3:98:3C:1F:5C:78:F7:6C:CF:2D:A5:6A:4A:36:BA Certificate issuer: /CN=A912E3B6/serialNumber=9F1943014DA3983C1F5C78F76CCF2DA56A4A36BA Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft Manifest number: 65 Signing time: Fri 25 Sep 2026 08:09:03 +0000 Manifest this update: Fri 25 Sep 2026 08:09:02 +0000 Manifest next update: Fri 02 Oct 2026 08:09:02 +0000 Files and hashes: 1: nxlDAU2jmDwfXHj3bM8tpWpKNro.crl (hash: uE0TF52FGV+siTlh7dqRHKCGWkh69UZ5cOa7wc65KC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.crl rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E3B6, serialNumber=9F1943014DA3983C1F5C78F76CCF2DA56A4A36BA Validity Not Before: Sep 25 08:09:02 2026 GMT Not After : Oct 2 08:09:02 2026 GMT Subject: CN=6ab62c1f-9e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:88:e9:0d:36:c1:3f:bb:4a:d2:ed:df:72:57: 88:69:d8:bb:11:9b:a0:60:13:73:2f:49:37:93:87: e2:c0:1c:e3:d4:3d:96:a6:9c:be:43:a4:d6:14:28: ad:0f:4e:a9:c9:8b:9c:31:1d:fa:88:2c:7d:56:a9: 9c:2d:31:95:09:b6:93:a0:0e:a1:e0:06:6e:e0:9e: 06:df:c2:a3:07:7f:1a:60:c0:f3:3c:47:81:48:80: b9:cc:7d:26:70:a0:e3:89:51:1d:49:63:e8:a8:cb: c5:36:b6:20:bb:4e:d9:84:bc:b0:22:9b:74:fe:68: 26:dd:87:48:2b:2b:7f:0c:95:d6:db:a5:9e:24:8d: ae:4d:9d:03:43:c4:2f:da:95:c7:82:16:dd:62:a3: 6f:2c:7d:1e:0d:49:e0:53:d1:42:31:c2:be:83:ae: 37:d0:26:6a:ba:43:ff:b4:b8:51:bb:83:73:af:5c: d6:ed:33:29:e7:b3:56:54:56:50:1a:c1:02:05:9d: cb:9f:12:70:b0:61:af:21:3e:22:ea:b4:19:3e:71: 25:d4:25:62:80:2e:93:03:9d:f1:a5:27:67:cd:98: d0:98:07:4e:69:e5:5d:6a:76:d6:65:62:96:30:d4: d2:a3:72:d0:cb:7a:01:27:58:03:f2:bc:91:fe:a0: 57:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1E:A2:AD:00:28:21:EA:12:84:A0:4C:59:F6:B0:2A:9F:EE:50:B9 X509v3 Authority Key Identifier: keyid:9F:19:43:01:4D:A3:98:3C:1F:5C:78:F7:6C:CF:2D:A5:6A:4A:36:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:75:af:fa:f9:2d:b0:09:83:04:c5:53:55:05:64:91:b1:ab: 21:94:0f:48:fb:d2:46:65:97:b4:9f:6f:f5:9f:f7:bd:53:c1: 0b:11:8b:69:80:2d:99:93:0d:e9:ef:54:2b:f5:15:2a:c0:1d: 3c:f3:df:df:60:f1:84:73:f0:b0:b0:11:b3:12:04:df:94:54: 78:d9:a3:73:e2:1d:84:e7:17:25:fb:35:a0:17:c4:33:52:3a: 94:2a:08:c3:51:ad:42:3d:9d:74:d1:91:47:93:5b:a9:ce:5e: 3b:dd:bf:2a:85:37:2f:1b:43:e3:96:f3:74:15:20:09:87:71: c7:2a:e9:dd:d4:8c:03:6e:9c:fe:90:90:95:f8:72:9d:33:45: 55:5d:c2:94:58:b3:19:0c:48:b1:00:b5:27:0b:9d:c8:f8:2d: 11:fa:6c:f0:33:29:a9:b9:2a:94:2c:62:ee:8a:f9:3f:65:3e: b3:57:b9:e9:aa:38:fb:c2:63:cc:d5:5f:37:1e:da:39:42:94: c0:36:98:c0:87:84:2e:cd:e3:03:fe:47:8e:b5:be:01:b6:47: 54:44:a4:f6:b8:ce:08:53:73:40:bf:ab:ba:d0:b4:52:2b:3e: 4f:56:08:0f:b3:f5:81:cb:70:04:1b:69:5c:94:e6:bd:d3:2c: a3:b3:ad:47 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RTNCNjExMC8GA1UEBRMoOUYxOTQzMDE0REEzOTgzQzFGNUM3OEY3NkNDRjJEQTU2 QTRBMzZCQTAeFw0yNjA5MjUwODA5MDJaFw0yNjEwMDIwODA5MDJaMBgxFjAUBgNV BAMTDTZhYjYyYzFmLTllNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCziOkNNsE/u0rS7d9yV4hp2LsRm6BgE3MvSTeTh+LAHOPUPZamnL5DpNYUKK0P TqnJi5wxHfqILH1WqZwtMZUJtpOgDqHgBm7gngbfwqMHfxpgwPM8R4FIgLnMfSZw oOOJUR1JY+ioy8U2tiC7TtmEvLAim3T+aCbdh0grK38MldbbpZ4kja5NnQNDxC/a lceCFt1io28sfR4NSeBT0UIxwr6DrjfQJmq6Q/+0uFG7g3OvXNbtMynns1ZUVlAa wQIFncufEnCwYa8hPiLqtBk+cSXUJWKALpMDnfGlJ2fNmNCYB05p5V1qdtZlYpYw 1NKjctDLegEnWAPyvJH+oFdNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyh6irQAo IeoShKBMWfawKp/uULkwHwYDVR0jBBgwFoAUnxlDAU2jmDwfXHj3bM8tpWpKNrow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFM0I2L0MxNDc2OTk2MUVD MjExRjFBRjU2RDdCODI0M0Q4QzY3L254bERBVTJqbUR3ZlhIajNiTTh0cFdwS05y by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvbnhsREFVMmptRHdmWEhqM2JNOHRwV3BLTnJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF M0I2L0MxNDc2OTk2MUVDMjExRjFBRjU2RDdCODI0M0Q4QzY3L254bERBVTJqbUR3 ZlhIajNiTTh0cFdwS05yby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCMda/6+S2wCYMExVNVBWSRsashlA9I+9JGZZe0n2/1n/e9U8ELEYtpgC2Zkw3p 71Qr9RUqwB0889/fYPGEc/CwsBGzEgTflFR42aNz4h2E5xcl+zWgF8QzUjqUKgjD Ua1CPZ100ZFHk1upzl473b8qhTcvG0PjlvN0FSAJh3HHKund1IwDbpz+kJCV+HKd M0VVXcKUWLMZDEixALUnC53I+C0R+mzwMympuSqULGLuivk/ZT6zV7npqjj7wmPM 1V83Hto5QpTANpjAh4QuzeMD/keOtb4BtkdURKT2uM4IU3NAv6u60LRSKz5PVggP s/WBy3AEG2lclOa90yyjs61H -----END CERTIFICATE-----Generated at Fri Sep 25 17:16:05 2026 by rpki-client