$ rpki-client -vvvf rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft File: nr2hI9nugwlDBaEYDCoIBX_lQGo.mft (raw, json) Hash identifier: weSkZAHHD831SkvESYQ6qEwOLwOldEgZFnPbGroFCpY= Subject key identifier: B2:00:F5:B6:C6:75:35:91:0C:59:F9:CB:F7:D5:99:41:1E:DC:E3:8E Authority key identifier: 9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A Certificate issuer: /CN=A91425C3/serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft Manifest number: E5 Signing time: Fri 25 Sep 2026 06:40:07 +0000 Manifest this update: Fri 25 Sep 2026 06:40:06 +0000 Manifest next update: Fri 02 Oct 2026 06:40:06 +0000 Files and hashes: 1: nr2hI9nugwlDBaEYDCoIBX_lQGo.crl (hash: qA/3fEI97GWUUjq5eo50W18IHxhwzW0chXitU9scAUA=) 2: 8C538C5AEFCF11F0889DE39E746F56BC.roa (hash: IYXOhXL6bJ68pYNK/kTrLKmd+mngJz9PldPbItCSzvQ=) 3: 224FBC52EFCF11F0A018F59D746F56BC.roa (hash: mEE2s8TFrbg3u/2M8DQXMANj0UbWZqDl7u6JBf6OnyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 06:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91425C3, serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Validity Not Before: Sep 25 06:40:06 2026 GMT Not After : Oct 2 06:40:06 2026 GMT Subject: CN=6ab61747-43d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:af:8c:d9:d4:88:10:b3:2e:37:fa:62:8d:10: 3a:36:75:f4:27:25:8a:7a:af:54:ba:04:b8:fe:44: 09:15:db:c4:31:95:6e:d4:13:c9:c2:4b:12:c9:90: 8a:48:21:d0:17:99:0e:32:be:a9:c8:6c:51:98:5b: 33:d9:55:4f:ca:35:f5:79:ab:a9:bc:29:c8:1d:bc: 73:1a:9f:44:e1:24:7a:07:38:c6:ed:8a:b6:e3:27: e8:ba:51:60:dd:b9:e0:88:94:6d:b0:ce:a1:55:f8: 2d:b2:9e:f9:d0:0b:88:d4:13:27:2c:59:a3:ef:6f: b6:85:22:2e:92:88:21:63:f5:e3:c6:7e:ba:fb:a2: 39:4d:b2:4b:10:39:83:e2:f3:57:f3:f9:a2:14:c9: d9:ff:48:14:4d:b3:ef:1b:90:5b:bd:05:ef:d3:80: dc:dd:70:fc:2f:a6:50:67:32:ed:18:3e:ac:92:c8: dd:7a:4a:8a:be:de:4e:1c:4a:ad:2c:e9:e6:35:4e: c3:fb:3c:0e:54:5a:ae:38:c5:21:d3:8a:c3:ec:0d: 5b:8a:b2:83:1b:48:fb:54:12:c9:6c:4e:f0:28:5d: 4c:68:a7:09:37:e4:48:c2:03:c1:90:ea:2b:0c:72: 10:72:54:38:10:9e:11:a3:69:0b:76:2e:c3:ae:32: 82:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:00:F5:B6:C6:75:35:91:0C:59:F9:CB:F7:D5:99:41:1E:DC:E3:8E X509v3 Authority Key Identifier: keyid:9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e3:50:8c:26:bb:b4:12:be:4a:41:5d:50:76:73:16:1f:f2: 0b:22:a8:26:a3:bf:1f:5e:69:36:11:e7:ed:a5:23:03:1d:3e: 2d:73:60:23:06:04:98:f6:f1:52:45:15:77:4d:6d:9e:97:f3: 9f:95:38:6a:7e:c9:a0:c5:44:6a:c3:a1:81:d9:78:0b:c4:8b: b6:10:c2:0d:73:8e:ed:6c:9e:26:f5:d1:fc:55:e3:9f:41:39: 50:cf:c1:e5:ef:d3:d0:da:5c:62:8b:a7:88:e1:7a:a6:95:51: 70:c3:d2:bd:53:31:a8:78:89:f2:97:0c:26:16:04:86:40:c0: 17:07:fd:dc:84:28:2f:c2:20:3b:d8:42:f4:59:14:18:d7:e8: 7e:90:60:0c:6e:37:61:16:5e:98:e4:35:94:22:e1:46:70:16: 10:22:c1:16:92:89:40:be:8e:63:3a:44:51:52:aa:bd:dd:3b: 06:33:84:4c:58:0f:89:b2:f5:e8:aa:2e:2a:a1:be:51:33:0a: 99:af:86:ee:96:47:dc:ef:26:47:3b:cc:9d:a9:e4:17:15:ae: a6:1f:20:6c:fd:e6:16:a9:3f:81:a0:fc:d2:61:c7:af:10:e4: 11:b0:ed:2b:68:b5:f4:6b:cd:17:de:49:73:16:f5:35:20:6e: 4a:ab:5b:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI1QzMxMTAvBgNVBAUTKDlFQkRBMTIzRDlFRTgzMDk0MzA1QTExODBDMkEwODA1 N0ZFNTQwNkEwHhcNMjYwOTI1MDY0MDA2WhcNMjYxMDAyMDY0MDA2WjAYMRYwFAYD VQQDEw02YWI2MTc0Ny00M2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnK+M2dSIELMuN/pijRA6NnX0JyWKeq9UugS4/kQJFdvEMZVu1BPJwksSyZCK SCHQF5kOMr6pyGxRmFsz2VVPyjX1eaupvCnIHbxzGp9E4SR6BzjG7Yq24yfoulFg 3bngiJRtsM6hVfgtsp750AuI1BMnLFmj72+2hSIukoghY/Xjxn66+6I5TbJLEDmD 4vNX8/miFMnZ/0gUTbPvG5BbvQXv04Dc3XD8L6ZQZzLtGD6sksjdekqKvt5OHEqt LOnmNU7D+zwOVFquOMUh04rD7A1birKDG0j7VBLJbE7wKF1MaKcJN+RIwgPBkOor DHIQclQ4EJ4Ro2kLdi7DrjKCjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLIA9bbG dTWRDFn5y/fVmUEe3OOOMB8GA1UdIwQYMBaAFJ69oSPZ7oMJQwWhGAwqCAV/5UBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjVDMy8yMzI2QzYzRTY2 MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi9ucjJoSTludWd3bERCYUVZRENvSUJYX2xR R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25yMmhJOW51Z3dsREJhRVlEQ29JQlhfbFFHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjVDMy8yMzI2QzYzRTY2MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi9ucjJoSTludWd3 bERCYUVZRENvSUJYX2xRR28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOuNQjCa7tBK+SkFdUHZzFh/yCyKoJqO/H15pNhHn7aUjAx0+LXNgIwYEmPbx UkUVd01tnpfzn5U4an7JoMVEasOhgdl4C8SLthDCDXOO7WyeJvXR/FXjn0E5UM/B 5e/T0NpcYouniOF6ppVRcMPSvVMxqHiJ8pcMJhYEhkDAFwf93IQoL8IgO9hC9FkU GNfofpBgDG43YRZemOQ1lCLhRnAWECLBFpKJQL6OYzpEUVKqvd07BjOETFgPibL1 6KouKqG+UTMKma+G7pZH3O8mRzvMnankFxWuph8gbP3mFqk/gaD80mHHrxDkEbDt K2i19GvNF95Jcxb1NSBuSqtbSw== -----END CERTIFICATE-----Generated at Fri Sep 25 14:16:19 2026 by rpki-client