$ rpki-client -vvvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft File: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft (raw, json) Hash identifier: nsQhUrQiaKmLkmxMjGdD3V9KzUnWbPI236Ez1Z6z0W8= Subject key identifier: B3:81:48:CD:61:95:6F:FD:D9:DC:6C:BD:BE:BE:14:88:0B:08:3D:7D Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Certificate serial: 127A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft Manifest number: 10DA Signing time: Thu 24 Sep 2026 17:27:36 +0000 Manifest this update: Thu 24 Sep 2026 17:27:36 +0000 Manifest next update: Thu 01 Oct 2026 17:27:36 +0000 Files and hashes: 1: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl (hash: bB5xwFbM0anaUsF8BHrdaYbxwNGcDNhnbQZ7t1uQ9h8=) 2: DFC4CB6686F011F19E006003A7EE528E.roa (hash: e4jwE0ZT8KKqzAYg8acBAl1aL2eMGYBkO5WKPD4gY0E=) 3: C4A85FD48FE811E98B967A66C4F9AE02.roa (hash: WtxeX8BB0opbdwzUtALDCwbBr4nNuxXM2Tpyyv444y0=) 4: C435900ACF7C11F0AAC14644C4F9AE02.roa (hash: qVwJ/vwm5XFANli3yyVsiUhVINMVoW4a5PClUSRYBSE=) 5: 5C4E5A6EB9E511EB9717B256C4F9AE02.roa (hash: jSm32Eb8eMElOEnd+VebqX3ziEBklNA1JW0RK3i6/Ok=) 6: C3BEAC38CF7C11F0B0EB4644C4F9AE02.roa (hash: GeYMMjQQO4OJv0hhzntd/IKM1r5EywrlvT+cEVRcT2M=) 7: 8224E55C345F11F0BD514C6CC4F9AE02.roa (hash: u6/wQAnigEtagpknx3tXOVG7uwO7ZVlGNYHIfxcAb4g=) 8: F3011EAAB88311EBB2078C50C4F9AE02.roa (hash: VxYvOO28xeiG9c6rCrahvvpw2JaHPPY/8pkFYEDdB48=) 9: 49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa (hash: e4iJVgXrOeEESzCVIGc2vflltGz2qDITSBKrnWa8B+0=) 10: C2356A948FE811E98B967A66C4F9AE02.roa (hash: tZuST+AOoUn223wk8bZTKDT1J1Cy3KgRlLbmHSwBjOc=) 11: FD5158C044C511F0ABA4E977C4F9AE02.roa (hash: A3mprKP4/bzMlJDhCze5Spg/p0sS0GlpyT+kIwue5HU=) 12: 9394D360345F11F0AB96776CC4F9AE02.roa (hash: dneRbel94yY09BrODhW/cm0eDKRgptqdSpSXdfm04G0=) 13: I3gtydeyCoEzxoHhphV7nSBEdcE.asa (hash: UsfZdqrzXmth4HfD3tidOb1ZQGOW3dFNJ6v8mpbSRSE=) 14: 50D040327CFD11F0B32D4522C4F9AE02.roa (hash: ig8ZCKfrZ5CJ7ljOZZuhrKZUQ/12pkHKHaOO+01joog=) 15: 2A4EE13E7CFD11F08A91EE21C4F9AE02.roa (hash: i5Rintjycnuo9u71FbQoVNcu5/vekh+2HiEq9B95npE=) 16: B969078EB94B11EB8CFABC23C4F9AE02.roa (hash: yfpfiXjcixpP9IQZ4ifctX4fhZj0BN5GuoJO9ai0I80=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4730 (0x127a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Validity Not Before: Sep 24 17:27:36 2026 GMT Not After : Oct 1 17:27:36 2026 GMT Subject: CN=6ab55d88-14c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:97:55:17:78:d3:c2:fa:c9:be:05:71:f2:a3: 0c:c0:66:33:27:af:eb:36:cd:67:a6:7e:23:3f:58: 2d:4a:ab:65:34:02:68:d7:39:4c:3f:2a:7a:c5:6f: e9:43:53:fd:79:ff:6a:7c:f4:61:91:1a:5c:da:12: bf:fc:42:d2:6b:32:ae:90:8f:47:0a:6d:88:9f:4b: b1:cf:a1:d0:57:d7:ed:bf:81:c1:cd:e3:96:5b:af: e1:97:98:df:19:ef:69:bb:5b:bf:53:03:c0:58:21: d2:64:2d:c9:8f:db:27:c8:92:82:64:e3:06:7a:2a: 28:97:d0:2f:bb:10:94:6f:3f:18:28:4c:5f:c3:c1: 4b:dc:06:6e:08:00:e8:e4:b2:3a:34:b0:9e:f7:2f: e7:45:2b:25:34:85:b9:a0:f9:c4:6e:ab:07:0c:9f: 41:0c:c3:64:d5:ed:ee:fa:1e:d5:88:85:30:27:74: 1a:b2:4e:8a:48:40:20:b7:7d:89:34:b5:8a:49:52: 99:9d:03:4b:6b:a4:e7:97:95:6b:18:44:89:6d:45: 96:5e:7e:7d:06:13:52:74:ef:b1:95:43:83:ad:13: a7:dd:9a:10:f0:e2:af:04:06:22:79:01:27:ac:13: 2a:e1:db:f1:b5:81:e3:3b:6f:1d:6b:23:6e:8f:1d: 2c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:81:48:CD:61:95:6F:FD:D9:DC:6C:BD:BE:BE:14:88:0B:08:3D:7D X509v3 Authority Key Identifier: keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:c7:92:0b:a3:9f:22:f5:c5:9c:b2:0a:8c:48:94:51:63:d6: be:5b:a7:8a:a2:4d:84:ba:75:c8:b7:cc:85:52:85:ea:3a:12: f8:b1:b1:47:f0:37:34:3d:01:c0:df:33:53:08:2d:70:e1:d3: 01:74:b3:78:fc:72:b1:d2:2d:74:ac:2b:c8:e9:aa:68:0a:23: 6d:af:b9:7e:4a:3f:e9:36:2a:16:20:11:96:c9:90:f9:24:15: 06:90:fc:74:9a:57:64:7d:27:cc:31:b6:ee:80:56:b1:c6:c0: 5d:74:c8:0f:6b:19:53:1e:1d:7c:7e:6e:b0:c9:12:c9:46:a3: e7:be:94:eb:c5:16:ec:59:9d:72:01:27:1c:80:f6:3a:7f:82: ba:df:25:b2:f4:4c:c1:e0:f2:7a:50:52:79:09:76:d1:12:67: 8d:f1:28:d6:da:28:6a:f6:ca:7d:f7:1d:41:58:e3:b0:86:07: 1a:13:27:4b:c9:3c:d8:69:65:65:3e:91:55:4e:22:23:10:65: c2:f3:60:83:04:41:2e:d7:cf:c7:c6:bb:3e:7b:27:55:e2:52: 96:5e:61:72:56:5f:a6:1c:f2:20:dc:ae:a9:13:83:a9:5a:6c: 3b:cf:c5:18:5e:fc:83:d0:5c:db:f1:a0:03:02:84:42:06:20: b1:60:6a:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5 RDNGRDdCNjAwHhcNMjYwOTI0MTcyNzM2WhcNMjYxMDAxMTcyNzM2WjAYMRYwFAYD VQQDEw02YWI1NWQ4OC0xNGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJdVF3jTwvrJvgVx8qMMwGYzJ6/rNs1npn4jP1gtSqtlNAJo1zlMPyp6xW/p Q1P9ef9qfPRhkRpc2hK//ELSazKukI9HCm2In0uxz6HQV9ftv4HBzeOWW6/hl5jf Ge9pu1u/UwPAWCHSZC3Jj9snyJKCZOMGeiool9AvuxCUbz8YKExfw8FL3AZuCADo 5LI6NLCe9y/nRSslNIW5oPnEbqsHDJ9BDMNk1e3u+h7ViIUwJ3Qask6KSEAgt32J NLWKSVKZnQNLa6Tnl5VrGESJbUWWXn59BhNSdO+xlUODrROn3ZoQ8OKvBAYieQEn rBMq4dvxtYHjO28dayNujx0sEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLOBSM1h lW/92dxsvb6+FIgLCD19MB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDNEQi8wREMzNUQzRThERDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0 Q0ZyNkJzQ1Q1VXFkUDllMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF8eSC6OfIvXFnLIKjEiUUWPWvluniqJNhLp1yLfMhVKF6joS+LGxR/A3ND0B wN8zUwgtcOHTAXSzePxysdItdKwryOmqaAojba+5fko/6TYqFiARlsmQ+SQVBpD8 dJpXZH0nzDG27oBWscbAXXTID2sZUx4dfH5usMkSyUaj576U68UW7FmdcgEnHID2 On+Cut8lsvRMweDyelBSeQl20RJnjfEo1tooavbKffcdQVjjsIYHGhMnS8k82Gll ZT6RVU4iIxBlwvNggwRBLtfPx8a7PnsnVeJSll5hclZfphzyINyuqRODqVpsO8/F GF78g9Bc2/GgAwKEQgYgsWBqLg== -----END CERTIFICATE-----Generated at Thu Sep 24 20:51:42 2026 by rpki-client