$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft File: ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft (raw, json) Hash identifier: wPee8l2I6FlqrAiX5Zmqlzh9bXomMPF7/744kW7jIYk= Subject key identifier: F1:91:CF:D1:A1:4A:57:E5:DB:AC:41:FD:70:AA:6C:CE:B4:7E:99:2F Authority key identifier: 9E:D6:44:3B:C1:7D:1E:82:56:B5:C1:C2:34:60:C7:8C:DC:D9:5D:1A Certificate issuer: /CN=A91BB8EA/serialNumber=9ED6443BC17D1E8256B5C1C23460C78CDCD95D1A Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft Manifest number: 2E Signing time: Fri 25 Sep 2026 08:50:30 +0000 Manifest this update: Fri 25 Sep 2026 08:50:29 +0000 Manifest next update: Fri 02 Oct 2026 08:50:29 +0000 Files and hashes: 1: ntZEO8F9HoJWtcHCNGDHjNzZXRo.crl (hash: LKMCWiIFfQnXKvZ1+4WNOdA3WbNo0gCmbHOfQeOU0+U=) 2: 2405203273AF11F1A114703E7BA30FBC.roa (hash: IhibjJxGIh0OyW3/zjLPSvy30FYiWbe6Y1PZPZxcy54=) 3: 2488172673AF11F1A114703E7BA30FBC.roa (hash: 19yy3TT6Ip3JsO4sFrTFEkAM4n8pIPoPdPe28xr/XwQ=) 4: 25170F0873AF11F1A114703E7BA30FBC.roa (hash: rHhYjIfJ1Uff3ehA9HhL+/gkS6dmDJsJgGHAaP2R35k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.crl rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 08:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB8EA, serialNumber=9ED6443BC17D1E8256B5C1C23460C78CDCD95D1A Validity Not Before: Sep 25 08:50:29 2026 GMT Not After : Oct 2 08:50:29 2026 GMT Subject: CN=6ab635d6-57ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7c:6d:d3:52:e0:44:95:1a:6d:1c:7f:bb:39: 9c:a7:05:be:1e:7a:be:94:16:74:7c:71:d7:83:d2: 20:f6:81:dd:be:eb:b3:88:3e:e0:a0:6e:00:e1:c8: 41:d1:38:3f:f0:98:a3:ec:79:43:d9:68:81:19:02: 3a:47:fa:02:63:bf:97:8a:3d:79:28:dc:2c:5c:35: b4:19:11:6a:71:98:57:8d:80:df:15:6b:7d:94:e8: bf:79:0b:a1:71:61:56:0c:18:d4:e2:40:10:0f:46: ba:87:53:41:b0:f1:15:94:91:30:dd:1a:2d:37:2b: 3a:bb:49:25:ef:fa:13:24:fc:11:b3:69:63:31:d0: f5:7a:a1:05:6d:c1:e9:39:a4:8e:e6:27:7b:27:9c: 97:e2:f3:c3:43:3e:9c:ec:87:e9:19:33:b5:0b:93: dc:51:54:d6:22:c1:2e:62:5f:d6:6f:2f:c8:af:84: 85:e9:21:92:21:db:6b:d8:83:ca:30:c2:ef:77:75: 34:de:ab:b7:69:ce:ee:f1:14:f0:03:6c:c1:6d:6d: f5:cc:da:07:4b:f4:26:d0:d9:e2:63:88:1c:a3:c9: c3:af:19:95:42:30:56:64:8d:2e:8e:7d:be:89:f6: 95:72:68:e2:89:7f:9a:a0:1b:89:e1:1e:6d:0c:46: 81:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:91:CF:D1:A1:4A:57:E5:DB:AC:41:FD:70:AA:6C:CE:B4:7E:99:2F X509v3 Authority Key Identifier: keyid:9E:D6:44:3B:C1:7D:1E:82:56:B5:C1:C2:34:60:C7:8C:DC:D9:5D:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:e5:af:2d:44:1c:1b:9c:da:30:fc:f4:4e:93:f4:34:0b:2a: 14:47:f1:0a:61:28:23:99:ed:84:cd:d2:66:6b:4a:cf:2a:a7: 4b:c9:35:50:a2:fb:00:33:1b:8e:b5:6f:74:0b:25:9b:a3:bc: cd:28:f2:09:9f:55:a4:be:c1:d5:fc:21:d2:81:31:2c:ae:26: f8:86:03:2b:3c:50:1b:24:9b:62:24:04:c3:c3:76:59:0a:af: dc:13:38:58:da:22:88:ce:be:f5:ea:82:12:2d:74:ef:fc:77: e9:78:68:fa:b4:0f:f2:67:68:08:fd:49:18:a8:44:d1:b7:70: 88:67:85:4c:5d:6c:33:f1:23:22:c9:19:ae:e8:45:b2:24:5e: 19:8a:1b:86:5c:1b:4b:c7:cd:1a:06:01:a7:61:89:83:c3:26: aa:4d:ca:13:fd:35:65:30:80:b7:40:4f:fb:77:b5:a1:5b:1b: fc:27:4b:55:43:a0:85:76:ec:7a:5c:e6:a0:b9:bf:8f:d3:03: f8:91:ba:0b:44:cc:4c:c9:be:47:18:94:9d:8a:ee:cb:2b:c7: ad:c8:34:80:03:41:69:a2:69:50:3a:32:b4:c2:6e:a6:b2:c3: ad:8a:e4:73:74:41:c0:7c:1b:49:f5:f8:7c:5d:fe:6a:b0:48: 7b:79:2b:d7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjhFQTExMC8GA1UEBRMoOUVENjQ0M0JDMTdEMUU4MjU2QjVDMUMyMzQ2MEM3OENE Q0Q5NUQxQTAeFw0yNjA5MjUwODUwMjlaFw0yNjEwMDIwODUwMjlaMBgxFjAUBgNV BAMTDTZhYjYzNWQ2LTU3YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwfG3TUuBElRptHH+7OZynBb4eer6UFnR8cdeD0iD2gd2+67OIPuCgbgDhyEHR OD/wmKPseUPZaIEZAjpH+gJjv5eKPXko3CxcNbQZEWpxmFeNgN8Va32U6L95C6Fx YVYMGNTiQBAPRrqHU0Gw8RWUkTDdGi03Kzq7SSXv+hMk/BGzaWMx0PV6oQVtwek5 pI7mJ3snnJfi88NDPpzsh+kZM7ULk9xRVNYiwS5iX9ZvL8ivhIXpIZIh22vYg8ow wu93dTTeq7dpzu7xFPADbMFtbfXM2gdL9CbQ2eJjiByjycOvGZVCMFZkjS6Ofb6J 9pVyaOKJf5qgG4nhHm0MRoGDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8ZHP0aFK V+XbrEH9cKpszrR+mS8wHwYDVR0jBBgwFoAUntZEO8F9HoJWtcHCNGDHjNzZXRow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCOEVBLzQwQThGMjhDNzNB RTExRjE5OUU0OEIxNjdCQTMwRkJDL250WkVPOEY5SG9KV3RjSENOR0RIak56WlhS by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnRaRU84RjlIb0pXdGNIQ05HREhqTnpaWFJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC OEVBLzQwQThGMjhDNzNBRTExRjE5OUU0OEIxNjdCQTMwRkJDL250WkVPOEY5SG9K V3RjSENOR0RIak56WlhSby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCt5a8tRBwbnNow/PROk/Q0CyoUR/EKYSgjme2EzdJma0rPKqdLyTVQovsAMxuO tW90CyWbo7zNKPIJn1WkvsHV/CHSgTEsrib4hgMrPFAbJJtiJATDw3ZZCq/cEzhY 2iKIzr716oISLXTv/HfpeGj6tA/yZ2gI/UkYqETRt3CIZ4VMXWwz8SMiyRmu6EWy JF4ZihuGXBtLx80aBgGnYYmDwyaqTcoT/TVlMIC3QE/7d7WhWxv8J0tVQ6CFdux6 XOagub+P0wP4kboLRMxMyb5HGJSdiu7LK8etyDSAA0FpomlQOjK0wm6mssOtiuRz dEHAfBtJ9fh8Xf5qsEh7eSvX -----END CERTIFICATE-----Generated at Sat Sep 26 16:17:15 2026 by rpki-client