$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.mft File: nMJa0Q0U5nMm84672jnBK4x95YM.mft (raw, json) Hash identifier: S0kLsn7VFI/rfu/bchn/cOCGBXsKxkqnWXInzcl+cME= Subject key identifier: F7:5D:B0:BA:2E:F3:A9:F3:59:67:A1:4A:B1:A7:21:26:F4:6C:2E:A4 Authority key identifier: 9C:C2:5A:D1:0D:14:E6:73:26:F3:8E:BB:DA:39:C1:2B:8C:7D:E5:83 Certificate issuer: /CN=A91AA1F9/serialNumber=9CC25AD10D14E67326F38EBBDA39C12B8C7DE583 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nMJa0Q0U5nMm84672jnBK4x95YM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.mft Manifest number: 3A Signing time: Mon 05 Oct 2026 09:01:57 +0000 Manifest this update: Mon 05 Oct 2026 09:01:57 +0000 Manifest next update: Mon 12 Oct 2026 09:01:57 +0000 Files and hashes: 1: nMJa0Q0U5nMm84672jnBK4x95YM.crl (hash: R2S9UzxTsWFwfW8yK8vrJxkjKOnWCanxlGD3M4PpY0Q=) 2: 375CD0C4687B11F18B8955F26647A888.roa (hash: NFBGXohwTAbP6RYJ9RBlPbPILrA7Ch+/AQAFkCpBYas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.crl rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nMJa0Q0U5nMm84672jnBK4x95YM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA1F9, serialNumber=9CC25AD10D14E67326F38EBBDA39C12B8C7DE583 Validity Not Before: Oct 5 09:01:57 2026 GMT Not After : Oct 12 09:01:57 2026 GMT Subject: CN=6ac36785-4bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dd:ce:23:d9:74:7c:fa:02:d8:c0:8c:3a:24: 84:53:0e:7a:84:9a:2d:27:53:50:e2:c3:df:0c:af: c7:e9:a3:30:d1:f9:c3:ed:f6:09:e1:cf:fe:3e:93: 07:a9:14:f4:aa:97:53:d5:21:8b:33:f4:0c:2b:29: 85:1f:3d:b4:8a:30:f1:d4:d5:9c:fa:e0:ed:b8:f4: 10:53:ee:49:63:10:5e:e8:e3:19:4d:e1:55:7d:09: f5:c8:6f:ba:a9:3a:1d:02:58:12:2c:20:44:86:11: 1e:70:6c:aa:7d:40:cf:ad:55:db:70:05:1f:94:74: 8a:9a:df:70:eb:de:75:55:ef:7e:a4:d3:83:c0:2a: bd:ba:3a:81:84:fc:8f:8d:1b:bf:df:52:53:d2:d3: b3:81:b5:7a:59:ca:56:9e:b5:9d:44:02:58:99:fd: 8c:90:87:3f:e8:84:da:80:1b:6b:ce:65:73:bb:ce: de:9e:7f:e0:ff:7b:e6:7b:30:c2:5e:04:ad:99:59: 73:b2:da:3e:f3:18:d2:cb:bc:9b:ba:d2:99:23:b4: 20:d1:e5:70:9b:f9:5c:a7:ba:65:bf:29:36:84:83: a7:d6:88:f3:db:81:47:36:cd:c7:b5:0a:1a:74:f6: cf:88:22:ac:39:46:f1:a7:bf:8b:5d:f0:55:1a:61: b1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:5D:B0:BA:2E:F3:A9:F3:59:67:A1:4A:B1:A7:21:26:F4:6C:2E:A4 X509v3 Authority Key Identifier: keyid:9C:C2:5A:D1:0D:14:E6:73:26:F3:8E:BB:DA:39:C1:2B:8C:7D:E5:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nMJa0Q0U5nMm84672jnBK4x95YM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA1F9/C804CEA2687A11F19E7144DB6647A888/nMJa0Q0U5nMm84672jnBK4x95YM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:0f:b5:6b:f2:27:f3:15:23:0f:6e:5f:cc:35:4b:05:5a:93: 0b:e3:e4:29:12:57:b3:80:03:b7:9e:ca:42:c8:9a:d2:8b:9b: 13:36:46:34:6e:e3:61:b7:2b:43:62:3e:9d:1b:a2:87:8b:6b: e4:2f:87:2e:20:b7:f6:83:39:55:32:e8:ba:7d:bc:e1:52:fe: f4:f5:ad:d9:d9:eb:47:6f:85:df:a3:1f:bd:7e:80:f5:f8:53: 75:72:35:0f:4d:bf:9d:f3:22:77:e8:c5:ea:49:71:81:fd:0e: 84:81:57:5a:72:aa:a5:b4:45:a5:0b:4b:c8:57:8b:15:23:68: 6f:a4:b8:f4:2d:de:cf:56:d4:55:4a:a6:a8:5c:bd:1f:f1:f6: 46:09:96:2b:6e:cd:69:36:49:99:48:e3:96:c0:29:6d:f4:24: 9a:d7:22:35:e8:42:ab:7c:b4:af:67:b8:43:95:75:5d:08:30: 04:46:0a:64:b5:38:41:00:65:87:77:d6:5c:9d:bf:53:dc:0a: 63:53:0b:d8:17:56:ba:66:ff:ac:e3:66:10:80:60:36:10:e1: ae:42:61:e9:aa:a7:c2:2f:9e:9c:6f:bd:53:2a:7d:a8:cc:7b: a4:61:32:d9:bc:28:00:55:1a:e3:d9:3e:af:e5:c6:34:2e:82: aa:41:f5:d7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTFGOTExMC8GA1UEBRMoOUNDMjVBRDEwRDE0RTY3MzI2RjM4RUJCREEzOUMxMkI4 QzdERTU4MzAeFw0yNjEwMDUwOTAxNTdaFw0yNjEwMTIwOTAxNTdaMBgxFjAUBgNV BAMTDTZhYzM2Nzg1LTRiZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCl3c4j2XR8+gLYwIw6JIRTDnqEmi0nU1Diw98Mr8fpozDR+cPt9gnhz/4+kwep FPSql1PVIYsz9AwrKYUfPbSKMPHU1Zz64O249BBT7kljEF7o4xlN4VV9CfXIb7qp Oh0CWBIsIESGER5wbKp9QM+tVdtwBR+UdIqa33Dr3nVV736k04PAKr26OoGE/I+N G7/fUlPS07OBtXpZylaetZ1EAliZ/YyQhz/ohNqAG2vOZXO7zt6ef+D/e+Z7MMJe BK2ZWXOy2j7zGNLLvJu60pkjtCDR5XCb+VynumW/KTaEg6fWiPPbgUc2zce1Chp0 9s+IIqw5RvGnv4td8FUaYbFBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU912wui7z qfNZZ6FKsachJvRsLqQwHwYDVR0jBBgwFoAUnMJa0Q0U5nMm84672jnBK4x95YMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBMUY5L0M4MDRDRUEyNjg3 QTExRjE5RTcxNDREQjY2NDdBODg4L25NSmEwUTBVNW5NbTg0Njcyam5CSzR4OTVZ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbk1KYTBRMFU1bk1tODQ2NzJqbkJLNHg5NVlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB MUY5L0M4MDRDRUEyNjg3QTExRjE5RTcxNDREQjY2NDdBODg4L25NSmEwUTBVNW5N bTg0Njcyam5CSzR4OTVZTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBHD7Vr8ifzFSMPbl/MNUsFWpML4+QpElezgAO3nspCyJrSi5sTNkY0buNhtytD Yj6dG6KHi2vkL4cuILf2gzlVMui6fbzhUv709a3Z2etHb4Xfox+9foD1+FN1cjUP Tb+d8yJ36MXqSXGB/Q6EgVdacqqltEWlC0vIV4sVI2hvpLj0Ld7PVtRVSqaoXL0f 8fZGCZYrbs1pNkmZSOOWwClt9CSa1yI16EKrfLSvZ7hDlXVdCDAERgpktThBAGWH d9Zcnb9T3ApjUwvYF1a6Zv+s42YQgGA2EOGuQmHpqqfCL56cb71TKn2ozHukYTLZ vCgAVRrj2T6v5cY0LoKqQfXX -----END CERTIFICATE-----Generated at Tue Oct 6 21:16:14 2026 by rpki-client