$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.mft File: NXR5DY34KztVHjtwJXG69VqemWE.mft (raw, json) Hash identifier: AgwEr+pv40r5G5STmPOs6RvNjro7MtCnwKQWzNnwgaw= Subject key identifier: 4E:E8:E8:34:18:7D:B8:5F:28:2C:45:3D:D1:BB:FD:0F:2D:C7:DA:38 Authority key identifier: 35:74:79:0D:8D:F8:2B:3B:55:1E:3B:70:25:71:BA:F5:5A:9E:99:61 Certificate issuer: /CN=A91CD40B/serialNumber=3574790D8DF82B3B551E3B702571BAF55A9E9961 Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.mft Manifest number: 0185 Signing time: Fri 25 Sep 2026 04:51:04 +0000 Manifest this update: Fri 25 Sep 2026 04:51:03 +0000 Manifest next update: Fri 02 Oct 2026 04:51:03 +0000 Files and hashes: 1: NXR5DY34KztVHjtwJXG69VqemWE.crl (hash: dAKlsbT2q31WQ4V3gOVCgIbZe9Z0Wx7U+swcb+0nPI0=) 2: DA8D1C7EA72311EFBCEB047EC4F9AE02.roa (hash: KOPGS6LMhund+vJdD6XHT18EgiJR1qKIzzUaEq9CH3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.crl rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:51:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD40B, serialNumber=3574790D8DF82B3B551E3B702571BAF55A9E9961 Validity Not Before: Sep 25 04:51:03 2026 GMT Not After : Oct 2 04:51:03 2026 GMT Subject: CN=6ab5fdb8-9e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5c:1e:ee:9d:42:fe:30:23:e4:28:ef:f9:9a: 79:ca:a5:9e:a4:e2:a9:a5:a9:6d:1b:e9:da:38:1b: fc:9d:95:b8:b6:dc:28:77:37:e4:6d:ba:03:9c:a2: 3b:3e:28:69:2f:3c:2d:6e:40:ae:a1:7a:8e:e9:0f: 8b:7c:a4:38:f1:5c:51:1b:28:13:e6:0e:90:ab:76: a4:86:cb:c9:50:7c:3e:a8:ba:a6:af:9a:63:d8:d2: 4e:25:ad:10:68:c8:04:85:bc:a0:d8:80:98:65:d6: 7c:d0:8f:2a:14:61:3b:6d:29:c4:85:95:6f:95:2a: 1c:2c:b3:2a:46:01:49:40:17:9e:6c:5b:01:00:a1: df:d9:cf:d4:19:4b:7a:5e:89:e9:68:df:e4:d6:bb: 10:24:5c:ad:02:05:eb:93:20:10:06:df:46:a7:58: e6:09:5c:09:85:0c:50:dd:3a:9f:1b:24:e5:bf:ff: f2:2e:a8:e2:4c:26:a5:d4:1b:ea:46:84:66:f0:fb: 5d:42:9e:10:8e:0e:d9:01:f2:9e:8a:cf:05:9a:7a: aa:b9:4d:8c:e5:f0:8b:b9:d3:3b:24:0d:d4:4f:c9: da:e7:88:fe:d3:9e:5f:e1:1e:c5:6f:62:04:d9:31: f7:78:1f:18:1a:b2:84:5b:ec:17:1a:d6:01:4e:6c: 5e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E8:E8:34:18:7D:B8:5F:28:2C:45:3D:D1:BB:FD:0F:2D:C7:DA:38 X509v3 Authority Key Identifier: keyid:35:74:79:0D:8D:F8:2B:3B:55:1E:3B:70:25:71:BA:F5:5A:9E:99:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:60:3f:5f:1f:96:40:7c:10:19:83:ec:a1:d8:3f:45:50:6a: af:a7:9b:c7:05:79:88:27:a1:f6:28:4a:7d:28:80:c7:b4:60: 95:83:ca:16:7c:ca:52:99:ff:a2:b6:6f:00:48:e7:d3:dd:57: e1:17:b3:5a:2c:1c:a7:d5:6d:43:68:24:8f:7f:10:35:ab:f0: 92:7a:d8:36:f1:36:80:b7:ff:31:22:b3:4e:07:ec:9d:3b:c7: a4:e0:48:45:82:53:1a:84:e2:0c:69:b7:63:fd:a4:21:98:17: 93:9f:94:4f:d3:d2:cd:0d:b8:3b:8a:bb:44:4c:af:fa:74:30: cf:a5:19:2c:c5:07:ec:d5:98:ab:dd:7a:1d:93:05:eb:99:7e: 05:fb:3a:0f:0a:ca:06:7d:8b:70:1a:31:25:5e:d0:d7:3f:a4: fd:9d:fa:ba:fc:2b:6b:43:14:ae:f0:95:9e:39:94:f7:1a:5a: 28:2d:ac:a4:e4:92:63:f2:a1:ca:3c:cc:02:63:ec:59:68:cd: d4:7e:d3:a5:0c:b0:74:81:a1:bb:19:02:e4:5f:31:ab:d0:63: 22:d8:5a:44:a0:90:f6:23:31:c9:b9:ec:b3:8f:e4:0b:dc:74: 74:1f:56:7b:ae:46:f9:5d:88:22:ba:f4:53:c2:79:a3:ff:00: 04:8e:23:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q0MEIxMTAvBgNVBAUTKDM1NzQ3OTBEOERGODJCM0I1NTFFM0I3MDI1NzFCQUY1 NUE5RTk5NjEwHhcNMjYwOTI1MDQ1MTAzWhcNMjYxMDAyMDQ1MTAzWjAYMRYwFAYD VQQDEw02YWI1ZmRiOC05ZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Fwe7p1C/jAj5Cjv+Zp5yqWepOKppaltG+naOBv8nZW4ttwodzfkbboDnKI7 PihpLzwtbkCuoXqO6Q+LfKQ48VxRGygT5g6Qq3akhsvJUHw+qLqmr5pj2NJOJa0Q aMgEhbyg2ICYZdZ80I8qFGE7bSnEhZVvlSocLLMqRgFJQBeebFsBAKHf2c/UGUt6 XonpaN/k1rsQJFytAgXrkyAQBt9Gp1jmCVwJhQxQ3TqfGyTlv//yLqjiTCal1Bvq RoRm8PtdQp4Qjg7ZAfKeis8FmnqquU2M5fCLudM7JA3UT8na54j+055f4R7Fb2IE 2TH3eB8YGrKEW+wXGtYBTmxeEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE7o6DQY fbhfKCxFPdG7/Q8tx9o4MB8GA1UdIwQYMBaAFDV0eQ2N+Cs7VR47cCVxuvVanplh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDQwQi82QjVEMkE3Qzg1 NUIxMUVGQjA1NzZENDBDNEY5QUUwMi9OWFI1RFkzNEt6dFZIanR3SlhHNjlWcWVt V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05YUjVEWTM0S3p0VkhqdHdKWEc2OVZxZW1XRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDQwQi82QjVEMkE3Qzg1NUIxMUVGQjA1NzZENDBDNEY5QUUwMi9OWFI1RFkzNEt6 dFZIanR3SlhHNjlWcWVtV0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmGA/Xx+WQHwQGYPsodg/RVBqr6ebxwV5iCeh9ihKfSiAx7RglYPKFnzKUpn/ orZvAEjn091X4RezWiwcp9VtQ2gkj38QNavwknrYNvE2gLf/MSKzTgfsnTvHpOBI RYJTGoTiDGm3Y/2kIZgXk5+UT9PSzQ24O4q7REyv+nQwz6UZLMUH7NWYq916HZMF 65l+Bfs6DwrKBn2LcBoxJV7Q1z+k/Z36uvwra0MUrvCVnjmU9xpaKC2spOSSY/Kh yjzMAmPsWWjN1H7TpQywdIGhuxkC5F8xq9BjIthaRKCQ9iMxybnss4/kC9x0dB9W e65G+V2IIrr0U8J5o/8ABI4jaQ== -----END CERTIFICATE-----Generated at Fri Sep 25 22:16:32 2026 by rpki-client