$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft File: Nvf123A1uQ_bKShY4vz45rmRgXg.mft (raw, json) Hash identifier: Qve5ikd1CFBdFli7AvW0ph9Pd7Vxw/LGDCWz8r/aCvM= Subject key identifier: B5:B8:6F:56:48:09:AC:AE:07:2B:E6:F4:FA:4B:48:9B:BA:23:EE:97 Authority key identifier: 36:F7:F5:DB:70:35:B9:0F:DB:29:28:58:E2:FC:F8:E6:B9:91:81:78 Certificate issuer: /CN=A91CC636/serialNumber=36F7F5DB7035B90FDB292858E2FCF8E6B9918178 Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft Manifest number: 0249 Signing time: Sat 03 Oct 2026 03:01:44 +0000 Manifest this update: Sat 03 Oct 2026 03:01:44 +0000 Manifest next update: Sat 10 Oct 2026 03:01:44 +0000 Files and hashes: 1: Nvf123A1uQ_bKShY4vz45rmRgXg.crl (hash: 3ryTGhJTT1Myt1UPYLcYbb382o7af48pfQNBhoyU/GE=) 2: 4501FE2855A411F1BF51EB6898833773.roa (hash: yG08lYLDDmHIqjTOg/iRWcQpM2TiZf/NyAxNKazIns0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.crl rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 03:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC636, serialNumber=36F7F5DB7035B90FDB292858E2FCF8E6B9918178 Validity Not Before: Oct 3 03:01:44 2026 GMT Not After : Oct 10 03:01:44 2026 GMT Subject: CN=6ac07018-306e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e3:2a:c4:3b:ac:a3:c3:a2:bb:77:7f:e5:d2: 4b:31:8c:f7:22:b3:c6:06:39:ce:32:7d:e2:75:06: e1:28:2e:d4:32:78:a3:93:97:c3:b1:10:58:d1:4b: df:b4:1c:9a:4a:02:e8:9f:94:27:ff:b0:3c:46:b1: 5f:64:1b:59:0c:d8:15:1f:96:26:0a:61:b6:0a:29: c3:0a:44:0a:ac:84:e3:64:eb:01:86:b2:b3:d1:55: 3f:34:83:73:8e:ca:cd:5d:e7:2d:c9:e5:51:f8:24: ed:0f:c1:ec:ef:47:3f:75:44:90:63:05:ac:ea:65: 47:99:bf:06:de:7c:f9:10:0b:d6:71:69:7c:cb:b1: 62:a4:87:ba:af:0b:b8:30:80:3c:69:2f:68:39:7e: db:26:15:3e:b0:17:5c:72:2f:64:01:67:ac:36:2f: a1:46:34:47:de:45:0d:90:6f:7e:3b:3f:21:50:b4: 90:0c:a8:b7:38:b8:d4:a3:0d:e0:17:f3:76:c9:b7: 24:7b:7f:3f:26:dc:66:34:e1:53:71:71:e0:d9:a7: 85:72:03:ce:8e:44:9c:56:f3:58:ac:1f:b4:fb:80: 10:ae:bd:84:e8:22:c6:f4:5a:fd:c9:fe:bc:30:19: bb:4e:ca:d4:2b:d4:f9:9b:77:6d:1c:30:a2:92:c7: 53:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B8:6F:56:48:09:AC:AE:07:2B:E6:F4:FA:4B:48:9B:BA:23:EE:97 X509v3 Authority Key Identifier: keyid:36:F7:F5:DB:70:35:B9:0F:DB:29:28:58:E2:FC:F8:E6:B9:91:81:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:55:1d:21:f7:75:0b:e9:d6:2c:98:59:eb:9b:cd:59:de:02: cc:b5:1d:33:94:87:94:bb:33:aa:b6:e4:40:42:bf:35:d1:5f: 09:8f:36:e1:f9:cb:df:76:b6:9c:88:1c:af:74:4f:50:8e:85: 23:17:55:9b:75:0c:ff:38:18:5b:4c:8e:9b:26:e8:01:90:ef: a3:01:9b:17:6b:50:98:6a:c4:ac:a1:be:24:2f:23:f1:53:2b: bd:da:1f:5c:c7:ea:48:fd:d8:68:9b:ba:9b:21:0f:33:81:93: 44:3a:e2:f6:43:ce:30:88:ea:81:7e:b2:bf:bd:cb:c7:28:91: 78:0b:7e:4b:c7:7e:62:9f:ac:49:4c:8c:73:ae:26:26:7b:4f: 77:77:b7:d6:7e:7a:61:ce:6c:88:e3:54:b3:3f:29:b6:83:b8: f1:bb:65:38:81:79:50:b8:e9:d7:2a:47:4a:26:39:fc:2a:77: 69:90:8e:3d:6d:ca:96:8d:27:5c:0e:0d:3f:02:f4:a2:43:ea: 13:98:52:2e:cb:55:18:fe:4e:27:ed:74:d1:c8:a0:d2:f0:04: 5d:30:98:5e:4c:5c:2d:b5:7c:08:b3:d1:06:39:22:84:2a:b2: 4c:c5:e5:be:27:75:0a:3f:72:a8:8d:69:cf:6d:2e:8e:1c:64: 16:8c:fc:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M2MzYxMTAvBgNVBAUTKDM2RjdGNURCNzAzNUI5MEZEQjI5Mjg1OEUyRkNGOEU2 Qjk5MTgxNzgwHhcNMjYxMDAzMDMwMTQ0WhcNMjYxMDEwMDMwMTQ0WjAYMRYwFAYD VQQDEw02YWMwNzAxOC0zMDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoOMqxDuso8Oiu3d/5dJLMYz3IrPGBjnOMn3idQbhKC7UMnijk5fDsRBY0Uvf tByaSgLon5Qn/7A8RrFfZBtZDNgVH5YmCmG2CinDCkQKrITjZOsBhrKz0VU/NINz jsrNXectyeVR+CTtD8Hs70c/dUSQYwWs6mVHmb8G3nz5EAvWcWl8y7FipIe6rwu4 MIA8aS9oOX7bJhU+sBdcci9kAWesNi+hRjRH3kUNkG9+Oz8hULSQDKi3OLjUow3g F/N2ybcke38/JtxmNOFTcXHg2aeFcgPOjkScVvNYrB+0+4AQrr2E6CLG9Fr9yf68 MBm7TsrUK9T5m3dtHDCiksdTVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLW4b1ZI CayuByvm9PpLSJu6I+6XMB8GA1UdIwQYMBaAFDb39dtwNbkP2ykoWOL8+Oa5kYF4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzYzNi81NEQyN0UyMDQy MzUxMUVFQTg0MEYxNDhDNEY5QUUwMi9OdmYxMjNBMXVRX2JLU2hZNHZ6NDVybVJn WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL052ZjEyM0ExdVFfYktTaFk0dno0NXJtUmdYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzYzNi81NEQyN0UyMDQyMzUxMUVFQTg0MEYxNDhDNEY5QUUwMi9OdmYxMjNBMXVR X2JLU2hZNHZ6NDVybVJnWGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm1UdIfd1C+nWLJhZ65vNWd4CzLUdM5SHlLszqrbkQEK/NdFfCY824fnL33a2 nIgcr3RPUI6FIxdVm3UM/zgYW0yOmyboAZDvowGbF2tQmGrErKG+JC8j8VMrvdof XMfqSP3YaJu6myEPM4GTRDri9kPOMIjqgX6yv73LxyiReAt+S8d+Yp+sSUyMc64m JntPd3e31n56Yc5siONUsz8ptoO48btlOIF5ULjp1ypHSiY5/Cp3aZCOPW3Klo0n XA4NPwL0okPqE5hSLstVGP5OJ+100cig0vAEXTCYXkxcLbV8CLPRBjkihCqyTMXl vid1Cj9yqI1pz20ujhxkFoz8Vw== -----END CERTIFICATE-----Generated at Sun Oct 4 13:31:08 2026 by rpki-client