$ rpki-client -vvvf rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft File: nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft (raw, json) Hash identifier: REnfCO+jFrNs9gt5Gjqi8i1ob4QO+nf0qcAagnV4hK4= Subject key identifier: EF:01:F8:60:58:AA:9C:CE:DA:92:A9:23:6F:49:9D:8F:1B:3E:D0:BC Authority key identifier: 9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9 Certificate issuer: /CN=A91529DF/serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft Manifest number: A2 Signing time: Sun 15 Nov 2026 07:29:46 +0000 Manifest this update: Sun 15 Nov 2026 07:29:45 +0000 Manifest next update: Sun 22 Nov 2026 07:29:45 +0000 Files and hashes: 1: nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl (hash: k8dQ+78KW5v0sHxraYOZkoP2uef/DlMLUC35pZtdyHY=) 2: FFB52996ED3C11F08785EF274C6F56BC.roa (hash: OoVBLoUT5miBH3MJ0SxwCQXvStMXH6JblWzdGUt2G6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 04:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91529DF, serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9 Validity Not Before: Nov 15 07:29:45 2026 GMT Not After : Nov 22 07:29:45 2026 GMT Subject: CN=6af95f6a-17a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:19:18:17:cc:09:06:4a:e3:ea:70:16:64:23: fd:22:ba:95:a5:bc:92:e2:db:b2:d4:d6:f0:88:cc: a0:74:7a:72:5e:15:93:22:7a:44:51:43:a7:1d:be: c6:d3:8f:9d:24:10:92:23:19:90:59:fc:d0:e2:11: 08:4d:1f:ec:95:3d:01:92:f1:00:a7:7e:9d:45:ec: 13:a8:f9:50:ba:81:df:38:1d:8c:68:4e:47:1d:a7: a5:71:96:84:78:bc:19:c4:8e:d0:76:14:76:99:51: 2d:df:14:8b:4d:75:47:97:0c:f8:b7:06:40:a1:10: 54:2a:66:22:cd:c9:63:46:ee:df:26:38:3f:69:18: b3:45:39:ff:97:6b:75:54:48:f0:8e:68:c5:2a:87: 0e:db:b1:af:bd:56:b6:80:29:da:cd:cc:51:ce:81: ee:c0:b8:12:31:95:1a:c9:71:45:89:b2:f8:11:6c: 8f:63:e7:58:1d:40:9f:8f:1e:e2:2a:3d:63:94:c9: 89:c9:4a:d3:ae:4c:5b:8e:a6:e3:ea:f2:f3:c2:20: 31:04:f6:70:cc:20:a3:33:5f:5b:86:47:c9:4e:b7: 18:2c:e6:54:29:31:c2:9c:dc:0f:52:77:1d:d9:8f: 10:de:45:d4:34:da:a7:21:4f:e5:1f:2a:ec:40:59: c3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:01:F8:60:58:AA:9C:CE:DA:92:A9:23:6F:49:9D:8F:1B:3E:D0:BC X509v3 Authority Key Identifier: keyid:9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:13:61:fe:e5:d0:b4:de:4d:18:57:06:93:c9:d7:b6:ed:71: 3b:90:cd:a8:25:ab:27:38:33:e0:44:5d:3d:ed:7f:c7:6a:c3: 1f:87:fa:c8:6a:01:dc:c0:99:ad:8a:33:23:96:38:52:1a:dc: d8:11:6d:1c:a2:d0:e2:ad:4c:cc:01:90:6a:70:cb:ad:5d:2f: 7d:d7:c2:a9:f5:f5:97:02:06:79:05:3e:d8:7f:6d:82:51:5c: 8c:94:5f:26:f3:31:31:95:21:1e:d3:b5:0c:65:38:93:07:9a: 71:43:bb:9f:01:17:62:06:32:1b:7b:7c:2e:6f:36:f4:88:28: e3:9c:6f:79:46:62:29:f6:60:66:7b:c2:ae:22:bb:43:86:96: 0f:40:25:9d:ae:99:4c:53:57:cc:07:ed:f6:87:70:a9:e0:72: ff:69:ad:28:8d:e7:08:5f:e4:88:b6:10:6d:a5:f5:0b:45:c8: df:77:9d:13:8e:6d:45:eb:df:92:f5:a3:0d:df:c1:9a:44:7a: 20:82:58:ee:32:71:64:5e:e0:29:e7:02:b3:9f:64:0b:cd:d6: c9:2c:a8:76:6f:d2:35:44:df:3a:c8:4b:44:c7:5c:48:7f:45: 49:15:13:59:96:e8:de:29:5d:f8:86:14:27:71:7c:02:4e:6a: 8f:e1:f9:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI5REYxMTAvBgNVBAUTKDlFNkNGQUFCOTRCNDJCMjE3NjAxRTEzMzBBMDI3ODIy QjlDQTFGQjkwHhcNMjYxMTE1MDcyOTQ1WhcNMjYxMTIyMDcyOTQ1WjAYMRYwFAYD VQQDEw02YWY5NWY2YS0xN2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRkYF8wJBkrj6nAWZCP9IrqVpbyS4tuy1NbwiMygdHpyXhWTInpEUUOnHb7G 04+dJBCSIxmQWfzQ4hEITR/slT0BkvEAp36dRewTqPlQuoHfOB2MaE5HHaelcZaE eLwZxI7QdhR2mVEt3xSLTXVHlwz4twZAoRBUKmYizcljRu7fJjg/aRizRTn/l2t1 VEjwjmjFKocO27GvvVa2gCnazcxRzoHuwLgSMZUayXFFibL4EWyPY+dYHUCfjx7i Kj1jlMmJyUrTrkxbjqbj6vLzwiAxBPZwzCCjM19bhkfJTrcYLOZUKTHCnNwPUncd 2Y8Q3kXUNNqnIU/lHyrsQFnDFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO8B+GBY qpzO2pKpI29JnY8bPtC8MB8GA1UdIwQYMBaAFJ5s+quUtCshdgHhMwoCeCK5yh+5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjlERi9FMjdDOTNBRUVE MkUxMUYwODBDNDYwMzI0NzZGNTZCQy9ubXo2cTVTMEt5RjJBZUV6Q2dKNElybktI N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25tejZxNVMwS3lGMkFlRXpDZ0o0SXJuS0g3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjlERi9FMjdDOTNBRUVEMkUxMUYwODBDNDYwMzI0NzZGNTZCQy9ubXo2cTVTMEt5 RjJBZUV6Q2dKNElybktIN2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOxNh/uXQtN5NGFcGk8nXtu1xO5DNqCWrJzgz4ERdPe1/x2rDH4f6yGoB3MCZ rYozI5Y4Uhrc2BFtHKLQ4q1MzAGQanDLrV0vfdfCqfX1lwIGeQU+2H9tglFcjJRf JvMxMZUhHtO1DGU4kweacUO7nwEXYgYyG3t8Lm829Igo45xveUZiKfZgZnvCriK7 Q4aWD0Alna6ZTFNXzAft9odwqeBy/2mtKI3nCF/kiLYQbaX1C0XI33edE45tRevf kvWjDd/BmkR6IIJY7jJxZF7gKecCs59kC83WySyodm/SNUTfOshLRMdcSH9FSRUT WZbo3ild+IYUJ3F8Ak5qj+H5bQ== -----END CERTIFICATE-----Generated at Sun Nov 15 11:44:34 2026 by rpki-client