$ rpki-client -vvvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft File: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft (raw, json) Hash identifier: U9CWAu0nc2gy9vaIARnC8rFeByaTGe0GwAnqhzJwQVY= Subject key identifier: 70:33:30:90:50:B5:F9:E6:43:34:80:BC:DA:DB:FF:51:56:E8:F0:E4 Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Certificate serial: 1294 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft Manifest number: 10F4 Signing time: Sat 14 Nov 2026 17:23:59 +0000 Manifest this update: Sat 14 Nov 2026 17:23:58 +0000 Manifest next update: Sat 21 Nov 2026 17:23:58 +0000 Files and hashes: 1: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl (hash: o7Vt0U30utiDLkg1N9P5tvD94vDzwvGYocpga2r7wgQ=) 2: C3BEAC38CF7C11F0B0EB4644C4F9AE02.roa (hash: GeYMMjQQO4OJv0hhzntd/IKM1r5EywrlvT+cEVRcT2M=) 3: 2A4EE13E7CFD11F08A91EE21C4F9AE02.roa (hash: i5Rintjycnuo9u71FbQoVNcu5/vekh+2HiEq9B95npE=) 4: I3gtydeyCoEzxoHhphV7nSBEdcE.asa (hash: UsfZdqrzXmth4HfD3tidOb1ZQGOW3dFNJ6v8mpbSRSE=) 5: 9394D360345F11F0AB96776CC4F9AE02.roa (hash: dneRbel94yY09BrODhW/cm0eDKRgptqdSpSXdfm04G0=) 6: C2356A948FE811E98B967A66C4F9AE02.roa (hash: tZuST+AOoUn223wk8bZTKDT1J1Cy3KgRlLbmHSwBjOc=) 7: 5C4E5A6EB9E511EB9717B256C4F9AE02.roa (hash: jSm32Eb8eMElOEnd+VebqX3ziEBklNA1JW0RK3i6/Ok=) 8: 8224E55C345F11F0BD514C6CC4F9AE02.roa (hash: u6/wQAnigEtagpknx3tXOVG7uwO7ZVlGNYHIfxcAb4g=) 9: B969078EB94B11EB8CFABC23C4F9AE02.roa (hash: yfpfiXjcixpP9IQZ4ifctX4fhZj0BN5GuoJO9ai0I80=) 10: C435900ACF7C11F0AAC14644C4F9AE02.roa (hash: qVwJ/vwm5XFANli3yyVsiUhVINMVoW4a5PClUSRYBSE=) 11: F3011EAAB88311EBB2078C50C4F9AE02.roa (hash: VxYvOO28xeiG9c6rCrahvvpw2JaHPPY/8pkFYEDdB48=) 12: FD5158C044C511F0ABA4E977C4F9AE02.roa (hash: A3mprKP4/bzMlJDhCze5Spg/p0sS0GlpyT+kIwue5HU=) 13: 50D040327CFD11F0B32D4522C4F9AE02.roa (hash: ig8ZCKfrZ5CJ7ljOZZuhrKZUQ/12pkHKHaOO+01joog=) 14: 49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa (hash: e4iJVgXrOeEESzCVIGc2vflltGz2qDITSBKrnWa8B+0=) 15: DFC4CB6686F011F19E006003A7EE528E.roa (hash: e4jwE0ZT8KKqzAYg8acBAl1aL2eMGYBkO5WKPD4gY0E=) 16: C4A85FD48FE811E98B967A66C4F9AE02.roa (hash: WtxeX8BB0opbdwzUtALDCwbBr4nNuxXM2Tpyyv444y0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4756 (0x1294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Validity Not Before: Nov 14 17:23:58 2026 GMT Not After : Nov 21 17:23:58 2026 GMT Subject: CN=6af8992f-edf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ee:f4:3f:8f:02:c0:ec:8e:60:8d:a2:a7:9c: 87:29:31:7a:b4:47:6e:da:f3:8d:a6:12:87:91:38: b9:9c:6f:10:63:cc:9f:63:d6:70:b6:2c:b7:b8:fd: a8:37:8e:19:ea:39:ae:14:ff:84:21:e9:11:22:5f: 9b:03:a3:06:be:a8:81:62:a9:32:6b:65:3e:cd:d4: f5:c4:bc:69:c9:ee:4d:be:2c:df:13:62:9c:9f:38: 57:33:ea:18:91:d9:80:7e:93:8b:eb:8c:5a:8c:16: 1d:03:bb:9c:0e:2a:51:56:80:6c:29:b5:b8:77:29: 5f:83:35:5c:bb:df:39:cc:55:9e:f8:fc:0f:bd:39: 59:e6:43:60:0c:2f:f3:2d:ef:c1:b9:97:24:36:bb: a7:5e:92:3a:61:7f:7e:05:af:1d:f9:d7:15:71:75: 48:8f:f3:9d:98:c7:29:2d:e7:3e:48:37:9a:33:d2: b2:19:7b:c7:e9:f1:ea:5b:46:e5:a2:b1:fc:69:5a: 77:67:20:83:30:a9:52:0f:b8:46:30:1d:78:9b:25: 41:70:20:7a:c0:81:23:ba:91:28:12:42:f1:90:42: 23:2f:fc:39:62:1d:d5:c1:d0:93:5c:ba:59:2e:48: 47:db:21:48:28:f8:88:09:f4:68:ea:64:6f:d6:ec: cd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:33:30:90:50:B5:F9:E6:43:34:80:BC:DA:DB:FF:51:56:E8:F0:E4 X509v3 Authority Key Identifier: keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:11:ef:93:32:82:82:54:c4:61:03:29:a4:66:d5:8b:bd:2d: d2:76:db:62:4e:53:45:f7:aa:1e:fc:0f:b5:2e:3b:60:d3:fd: 88:13:c2:52:ce:56:89:bb:12:8b:4a:da:59:da:f4:0b:a0:73: d5:b9:d0:b2:95:32:3c:f1:e9:bb:c8:99:e9:f4:5d:41:a3:2a: 81:51:ce:35:fb:6d:f4:f7:19:d7:e7:ee:5a:40:5b:c4:2a:ae: 6d:e2:1b:a1:0d:4b:7b:d7:1d:df:85:24:ee:a5:f9:ee:c7:99: cb:7b:e0:38:fe:20:dd:a0:04:70:0c:a5:3b:0e:e6:e2:26:26: 50:9c:7e:85:0f:05:96:9e:14:de:43:64:01:8e:35:5b:04:5f: a5:0e:aa:82:82:39:60:ea:95:05:1e:bf:9e:45:72:66:37:f2: 9c:d5:43:1f:ce:e5:c7:b5:45:ef:db:20:d7:79:1d:b1:09:62: d8:b4:71:37:78:22:cf:79:8e:a7:84:ba:2c:66:ec:57:5d:e3: 1b:16:dc:0a:84:2a:db:dd:ea:31:9c:0f:9e:4c:cf:26:c7:f2: 3c:1a:c7:6f:da:a7:da:58:ec:33:76:b8:96:dd:6e:ae:9d:0c: e8:a5:60:81:5c:0c:8e:a7:46:05:c1:6f:a8:fe:65:55:40:a5: 8d:16:d4:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5 RDNGRDdCNjAwHhcNMjYxMTE0MTcyMzU4WhcNMjYxMTIxMTcyMzU4WjAYMRYwFAYD VQQDEw02YWY4OTkyZi1lZGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+70P48CwOyOYI2ip5yHKTF6tEdu2vONphKHkTi5nG8QY8yfY9Zwtiy3uP2o N44Z6jmuFP+EIekRIl+bA6MGvqiBYqkya2U+zdT1xLxpye5NvizfE2KcnzhXM+oY kdmAfpOL64xajBYdA7ucDipRVoBsKbW4dylfgzVcu985zFWe+PwPvTlZ5kNgDC/z Le/BuZckNrunXpI6YX9+Ba8d+dcVcXVIj/OdmMcpLec+SDeaM9KyGXvH6fHqW0bl orH8aVp3ZyCDMKlSD7hGMB14myVBcCB6wIEjupEoEkLxkEIjL/w5Yh3VwdCTXLpZ LkhH2yFIKPiICfRo6mRv1uzNawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHAzMJBQ tfnmQzSAvNrb/1FW6PDkMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDNEQi8wREMzNUQzRThERDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0 Q0ZyNkJzQ1Q1VXFkUDllMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMRHvkzKCglTEYQMppGbVi70t0nbbYk5TRfeqHvwPtS47YNP9iBPCUs5WibsS i0raWdr0C6Bz1bnQspUyPPHpu8iZ6fRdQaMqgVHONftt9PcZ1+fuWkBbxCqubeIb oQ1Le9cd34Uk7qX57seZy3vgOP4g3aAEcAylOw7m4iYmUJx+hQ8Flp4U3kNkAY41 WwRfpQ6qgoI5YOqVBR6/nkVyZjfynNVDH87lx7VF79sg13kdsQli2LRxN3giz3mO p4S6LGbsV13jGxbcCoQq293qMZwPnkzPJsfyPBrHb9qn2ljsM3a4lt1urp0M6KVg gVwMjqdGBcFvqP5lVUCljRbUaA== -----END CERTIFICATE-----Generated at Sat Nov 14 22:40:09 2026 by rpki-client