$ rpki-client -vvvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft File: Nu6KQBMF6zjijYal2392KKq34k8.mft (raw, json) Hash identifier: bfaWADSUrI1kw7ZaRpZFyjFY7CVA0xIqFalLDgaD2qk= Subject key identifier: 21:06:08:14:95:89:1E:64:60:BF:12:A6:5B:9E:7D:56:DF:D8:61:42 Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F Certificate issuer: /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F Certificate serial: 1222 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft Manifest number: 11A2 Signing time: Wed 14 Oct 2026 17:16:13 +0000 Manifest this update: Wed 14 Oct 2026 17:16:13 +0000 Manifest next update: Wed 21 Oct 2026 17:16:13 +0000 Files and hashes: 1: Nu6KQBMF6zjijYal2392KKq34k8.crl (hash: P99/+nvdKNBtBY8WVmp7tGoHrk4qVYSkeoIYuNy2oKI=) 2: 53DFF8EC2E9111E999636910C4F9AE02.roa (hash: aOutH14XqTU7CvFjZF4RAhY9j2C5Nrg3m1MQwiLdC9E=) 3: 264DBA882E9411E9A7232A19C4F9AE02.roa (hash: bAw2DJ5Kd887dPCmMIgU3xUTOQCR/psfXJJs57GhqSk=) 4: 8D76CA462E9511E9896EFA1DC4F9AE02.roa (hash: lflQBr5KFU0YHST8ZC+CiZu1r2eTacXElo40hp/vo78=) 5: 8EA288F62E9511E9896EFA1DC4F9AE02.roa (hash: tCQBUtYFoGYz0mkeelr2MTFt0PRYSbZ9klpLIVmb1oc=) 6: 8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa (hash: NHQV92FmnuARgeDDhUDewRl+rTj+thYHcs3GlrXraHk=) 7: 81CBCECA0BFF11EE9AE0F676C4F9AE02.roa (hash: 3JBN2jyg46LmYUyUHhEZh4IoQyWfFsojDUHEe85wv/g=) 8: 52685F222E9111E999636910C4F9AE02.roa (hash: 4Ei9jmJLAQOoAToGpIrcLdsdG3+i6HRC8BOB0H1zkBM=) 9: 8F5856362E9511E9896EFA1DC4F9AE02.roa (hash: fzVldj66k6KXtgIRLEaGb66ZtwgbJga1awvd7qMV8+I=) 10: 5870952EC53011EA98D1D651C4F9AE02.roa (hash: sm0eBXuJHpy/6GBiyFucIa3zwW7MRE4QJ04/eh2HAes=) 11: 8CD1AEC62E9511E9896EFA1DC4F9AE02.roa (hash: R3UXvxLGuAsLaHQCcYjq4jsLIsHsiVoo5zau0vUpLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 17:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4642 (0x1222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709BC, serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F Validity Not Before: Oct 14 17:16:13 2026 GMT Not After : Oct 21 17:16:13 2026 GMT Subject: CN=6acfb8dd-7ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:07:a9:45:6d:52:cf:7a:e5:56:86:0e:1f:f9: 60:9c:2a:67:9f:1f:d1:0d:87:3a:e1:0b:ec:2b:ec: e0:6b:2e:a1:fb:9b:1e:8e:52:70:7d:19:69:3f:fd: 74:d7:9e:69:ee:48:82:d8:bc:83:05:f8:00:37:18: 48:8d:21:3c:e7:d5:11:50:3a:a8:c9:b2:30:50:7e: 50:8c:34:0c:d0:04:6c:70:10:a2:4f:88:cb:61:8f: 8e:af:c4:82:ef:a2:83:f1:65:12:aa:96:51:ce:6f: 31:96:50:cc:f5:f7:0d:f4:75:be:83:1c:79:58:78: 5d:02:7c:e6:37:86:7c:37:f1:b6:4f:62:13:ab:53: 2e:86:27:03:b5:1d:03:c4:7e:57:d2:de:33:fa:e6: 63:8c:9e:f2:46:23:0a:03:c6:8e:14:26:67:48:30: 73:e6:2d:4a:1f:59:bb:f4:8b:5e:24:3f:e4:8a:28: cd:63:13:7c:6a:1f:f1:0a:91:07:f1:af:51:91:dc: db:f6:24:97:2a:92:6e:82:30:a9:10:8e:8b:84:0c: e8:1d:dc:19:c1:0a:07:10:ad:4a:10:d4:1a:db:dd: f6:5a:cd:d6:71:f6:c2:a6:83:42:a2:d4:ec:b9:12: c8:59:17:47:0d:e2:b6:08:e5:cc:05:18:8c:c0:dd: 72:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:06:08:14:95:89:1E:64:60:BF:12:A6:5B:9E:7D:56:DF:D8:61:42 X509v3 Authority Key Identifier: keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:ad:de:ad:5f:30:16:ab:ae:81:41:b6:d6:96:49:08:27:46: 60:ed:6c:f8:88:e4:ea:a8:79:d4:c9:3c:23:ca:db:56:5b:91: a6:72:1c:86:46:98:18:c4:d4:3d:72:5e:48:08:6e:4d:1b:67: 3b:45:ad:b9:83:28:bb:2c:3e:8d:a6:03:0d:18:99:85:f7:de: a9:08:ff:0d:22:9c:6a:7e:2d:41:e3:1a:85:09:07:8f:25:5a: d1:de:4b:c3:c2:16:fc:0b:a7:8e:f4:ae:7c:4d:9c:52:d3:ec: a0:b6:fc:db:0f:e9:d9:28:b4:ee:31:71:79:53:37:33:fb:02: 2c:ac:66:af:dc:de:cb:59:f0:5a:44:b2:04:b9:33:73:3e:e8: 82:d8:1b:0b:d2:7c:6b:2f:35:30:38:60:f7:f3:34:6c:b1:7d: 82:ca:d5:4a:8e:5b:2c:b4:04:0c:d6:23:08:3f:6f:5f:9b:c0: 31:77:9d:20:51:7d:8b:69:2e:e3:cc:1d:22:b8:18:0e:6b:12: 18:42:3d:3e:33:02:d8:7c:6c:2d:51:48:87:41:2d:00:e8:37: 74:cd:23:a4:fd:cd:1e:65:3b:54:47:3b:2d:24:28:ee:f0:df: a3:36:b7:e8:63:f7:6c:29:d5:e8:f9:39:15:fa:ca:49:f1:77: e1:2f:c6:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5QkMxMTAvBgNVBAUTKDM2RUU4QTQwMTMwNUVCMzhFMjhEODZBNURCN0Y3NjI4 QUFCN0UyNEYwHhcNMjYxMDE0MTcxNjEzWhcNMjYxMDIxMTcxNjEzWjAYMRYwFAYD VQQDEw02YWNmYjhkZC03Y2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQepRW1Sz3rlVoYOH/lgnCpnnx/RDYc64QvsK+zgay6h+5sejlJwfRlpP/10 155p7kiC2LyDBfgANxhIjSE859URUDqoybIwUH5QjDQM0ARscBCiT4jLYY+Or8SC 76KD8WUSqpZRzm8xllDM9fcN9HW+gxx5WHhdAnzmN4Z8N/G2T2ITq1MuhicDtR0D xH5X0t4z+uZjjJ7yRiMKA8aOFCZnSDBz5i1KH1m79IteJD/kiijNYxN8ah/xCpEH 8a9Rkdzb9iSXKpJugjCpEI6LhAzoHdwZwQoHEK1KENQa2932Ws3WcfbCpoNCotTs uRLIWRdHDeK2COXMBRiMwN1yiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCEGCBSV iR5kYL8SpluefVbf2GFCMB8GA1UdIwQYMBaAFDbuikATBes44o2Gpdt/diiqt+JP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlCQy84OTI4OTczMDJF OTAxMUU5OTE3Nzk2MEZDNEY5QUUwMi9OdTZLUUJNRjZ6amlqWWFsMjM5MktLcTM0 azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051NktRQk1GNnpqaWpZYWwyMzkyS0txMzRrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDlCQy84OTI4OTczMDJFOTAxMUU5OTE3Nzk2MEZDNEY5QUUwMi9OdTZLUUJNRjZ6 amlqWWFsMjM5MktLcTM0azgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARq3erV8wFquugUG21pZJCCdGYO1s+Ijk6qh51Mk8I8rbVluRpnIchkaYGMTU PXJeSAhuTRtnO0WtuYMouyw+jaYDDRiZhffeqQj/DSKcan4tQeMahQkHjyVa0d5L w8IW/AunjvSufE2cUtPsoLb82w/p2Si07jFxeVM3M/sCLKxmr9zey1nwWkSyBLkz cz7ogtgbC9J8ay81MDhg9/M0bLF9gsrVSo5bLLQEDNYjCD9vX5vAMXedIFF9i2ku 48wdIrgYDmsSGEI9PjMC2HxsLVFIh0EtAOg3dM0jpP3NHmU7VEc7LSQo7vDfoza3 6GP3bCnV6Pk5FfrKSfF34S/GVA== -----END CERTIFICATE-----Generated at Thu Oct 15 10:46:00 2026 by rpki-client