$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft File: NfWNhhxBvf6ka4xykLGqxnDnzBs.mft (raw, json) Hash identifier: onF1ues6+3sBzqlxmodq3qVVBTpUOejzxMiUDo7j7HI= Subject key identifier: C5:D1:87:F4:34:7F:DA:59:71:70:0B:7E:0E:A3:09:73:C9:88:FD:B8 Authority key identifier: 35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B Certificate issuer: /CN=A91B35BB/serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Certificate serial: 0C40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft Manifest number: 0C2D Signing time: Sat 10 Oct 2026 18:50:03 +0000 Manifest this update: Sat 10 Oct 2026 18:50:03 +0000 Manifest next update: Sat 17 Oct 2026 18:50:03 +0000 Files and hashes: 1: NfWNhhxBvf6ka4xykLGqxnDnzBs.crl (hash: LIglqFUvr37EpWvZ+rSYIlPNoP8kxxTzoIGJuaGY3PE=) 2: 8F9F2F823C0111EAB6CB9936C4F9AE02.roa (hash: zrbEpdPJC+D2d8+tTb0MQGcYEqeI6Y60eS+Lp/wlgrg=) 3: 902F47663C0111EAB6CB9936C4F9AE02.roa (hash: Gs/OJqCKd+Z2MrNkjskkMTrkotmVzq3GXlJl1vTfx3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 18:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3136 (0xc40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B35BB, serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Validity Not Before: Oct 10 18:50:03 2026 GMT Not After : Oct 17 18:50:03 2026 GMT Subject: CN=6aca88db-fa43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:47:de:3f:8c:81:e9:be:d8:35:dd:10:2e:a2: c8:4d:1d:46:73:aa:e5:78:3f:c4:27:ca:82:f8:6f: 83:12:1e:83:7d:aa:18:71:41:bd:18:ed:ba:b4:68: db:96:07:d0:6c:34:a3:ac:e1:04:d7:b0:94:8c:9d: 44:9a:ba:d3:be:9a:9a:aa:92:66:da:56:a9:10:57: e6:a3:a5:c0:e1:e4:10:15:b7:ba:e2:43:f0:2c:da: 4b:c9:b1:3c:1e:7d:10:17:31:8b:75:86:e1:36:a3: f1:7a:ce:fb:33:18:5a:10:e0:25:6e:44:ca:2d:6c: 85:a3:ba:33:a2:e7:f3:82:c2:d7:f9:10:20:50:24: 91:50:e0:2a:55:6c:86:d3:fc:ac:c8:7f:76:40:ac: 5d:b6:f5:6e:68:00:d0:0d:8b:db:77:42:92:a7:8f: 65:d3:a2:05:d2:05:ec:55:d3:cd:4c:9b:9a:5d:ea: 61:06:eb:89:60:01:76:67:a5:57:ec:92:ce:b4:ca: 5c:24:8b:ad:d0:f8:29:1c:25:20:24:09:26:7f:6c: e6:92:77:69:08:ae:32:85:e3:7e:9d:65:0b:7f:82: b8:19:ab:7c:2e:a6:f0:bc:1b:69:50:91:5a:ef:1f: 9a:a9:da:4b:51:ea:5c:e2:80:06:0e:e1:52:91:e1: 1a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D1:87:F4:34:7F:DA:59:71:70:0B:7E:0E:A3:09:73:C9:88:FD:B8 X509v3 Authority Key Identifier: keyid:35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:6e:2c:3c:67:3c:f5:5b:e9:f5:06:4e:ff:40:1d:f0:95:34: 74:7d:64:f7:4b:6b:4f:54:d9:25:29:68:ae:50:9f:5c:94:c5: 50:e1:2d:d2:ba:ff:a1:c0:aa:46:50:98:d4:88:1e:3c:45:23: 9d:24:7a:b3:32:83:5d:c6:11:3a:cc:66:8d:cb:1b:22:44:86: cb:55:c5:39:ed:c4:81:42:0d:54:d5:56:fd:5c:52:1f:74:bc: 93:6b:94:b7:9b:ac:bd:65:8a:49:85:32:8e:db:b4:46:f3:81: be:1c:63:64:6c:55:45:1e:07:ae:6c:0f:af:e6:39:32:cf:99: f1:bf:7e:ec:3c:95:e1:d1:cd:46:fd:ae:c0:62:d5:b1:44:d3: 01:e8:a0:86:1e:47:85:d5:be:2c:44:e5:1f:11:85:b1:cd:d9: ec:65:30:af:91:82:46:01:3a:44:95:bb:71:01:e4:9b:7d:06: 9e:57:c7:63:7b:a9:45:91:62:5b:8e:6a:bc:4b:ce:7a:58:e4: 2e:c4:46:c2:2a:6a:4f:e4:ae:d9:d6:05:88:41:ac:97:b9:5d: 85:e1:2e:e5:6c:11:23:bf:0f:4a:b6:01:62:bf:d1:15:7c:db: 87:7f:59:d8:dd:7d:63:a4:0f:b7:99:47:e7:02:74:34:7b:8d: bc:62:40:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1QkIxMTAvBgNVBAUTKDM1RjU4RDg2MUM0MUJERkVBNDZCOEM3MjkwQjFBQUM2 NzBFN0NDMUIwHhcNMjYxMDEwMTg1MDAzWhcNMjYxMDE3MTg1MDAzWjAYMRYwFAYD VQQDEw02YWNhODhkYi1mYTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjkfeP4yB6b7YNd0QLqLITR1Gc6rleD/EJ8qC+G+DEh6DfaoYcUG9GO26tGjb lgfQbDSjrOEE17CUjJ1EmrrTvpqaqpJm2lapEFfmo6XA4eQQFbe64kPwLNpLybE8 Hn0QFzGLdYbhNqPxes77MxhaEOAlbkTKLWyFo7ozoufzgsLX+RAgUCSRUOAqVWyG 0/ysyH92QKxdtvVuaADQDYvbd0KSp49l06IF0gXsVdPNTJuaXephBuuJYAF2Z6VX 7JLOtMpcJIut0PgpHCUgJAkmf2zmkndpCK4yheN+nWULf4K4Gat8LqbwvBtpUJFa 7x+aqdpLUepc4oAGDuFSkeEaLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMXRh/Q0 f9pZcXALfg6jCXPJiP24MB8GA1UdIwQYMBaAFDX1jYYcQb3+pGuMcpCxqsZw58wb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzVCQi81Nzg5QjFBNDND MDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZmNmthNHh5a0xHcXhuRG56 QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mV05oaHhCdmY2a2E0eHlrTEdxeG5EbnpCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzVCQi81Nzg5QjFBNDNDMDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZm NmthNHh5a0xHcXhuRG56QnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp24sPGc89Vvp9QZO/0Ad8JU0dH1k90trT1TZJSlorlCfXJTFUOEt0rr/ocCq RlCY1IgePEUjnSR6szKDXcYROsxmjcsbIkSGy1XFOe3EgUINVNVW/VxSH3S8k2uU t5usvWWKSYUyjtu0RvOBvhxjZGxVRR4HrmwPr+Y5Ms+Z8b9+7DyV4dHNRv2uwGLV sUTTAeighh5HhdW+LETlHxGFsc3Z7GUwr5GCRgE6RJW7cQHkm30GnlfHY3upRZFi W45qvEvOeljkLsRGwipqT+Su2dYFiEGsl7ldheEu5WwRI78PSrYBYr/RFXzbh39Z 2N19Y6QPt5lH5wJ0NHuNvGJAAw== -----END CERTIFICATE-----Generated at Sun Oct 11 21:11:49 2026 by rpki-client