$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: P8TW1dR/dDvVDu2KpQoO5fg98FyfCC204N47qBPwQ50= Subject key identifier: 01:07:04:34:A6:3C:CB:04:CC:16:65:75:53:36:2C:C6:C4:05:9C:85 Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 0245 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 0238 Signing time: Fri 25 Sep 2026 02:39:35 +0000 Manifest this update: Fri 25 Sep 2026 02:39:35 +0000 Manifest next update: Fri 02 Oct 2026 02:39:35 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: i5xdTHV/CucLKwsLJ3c0BFIeV+1zHW9a4BGY8VFoxbc=) 2: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: 6ItTRA5BinCfkM/YDEDL4VrpFPkwwb1Q479PqDEMyKE=) 3: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: 5pAydkFPBG/xNuitrTpbftHSJib51VywK3J+r7VMLUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: Sep 25 02:39:35 2026 GMT Not After : Oct 2 02:39:35 2026 GMT Subject: CN=6ab5dee7-d36e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:81:e2:46:0c:b8:b6:6d:e1:8a:3f:d5:86:1b: f5:c0:82:56:f5:bc:49:43:87:f5:90:75:54:40:d6: 29:b7:a4:93:d4:4c:f6:d6:25:a0:a4:52:6a:f5:99: 64:b3:20:11:89:68:05:6e:9d:95:96:f8:ba:ff:4c: 09:3b:33:49:a4:0c:da:4c:bf:a0:af:7e:89:35:e0: 83:a8:72:e8:31:b3:e5:c0:aa:6c:7c:ad:2a:06:d1: 2a:4a:34:80:69:be:11:6b:f7:d3:00:f4:82:68:5c: ae:c5:6e:f7:88:a4:2d:13:b3:f8:88:58:8d:7f:ac: ae:a8:52:1e:05:66:57:60:4f:b4:8b:53:fb:21:fe: 81:64:1b:cd:73:d0:ed:84:46:c0:79:d4:0f:88:44: 83:51:88:0f:33:a4:37:9f:7c:5e:a8:4e:78:f4:b8: ab:11:a3:ae:9f:b1:68:80:ef:34:70:2a:38:63:d8: 25:40:0d:be:03:19:39:90:e6:0d:11:74:4f:a9:23: a7:87:97:2e:9b:f4:75:91:3f:1e:6a:ab:13:f4:59: 5b:d8:d3:79:51:e4:42:80:ab:9c:2b:5f:c9:43:6b: a5:9c:76:07:7a:d1:93:43:dd:45:f7:11:b7:70:3c: d7:ec:46:85:7e:24:b3:30:b3:1c:d2:08:a7:29:7e: 52:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:07:04:34:A6:3C:CB:04:CC:16:65:75:53:36:2C:C6:C4:05:9C:85 X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:bb:01:67:01:c9:61:fc:d4:e1:58:9e:f8:9f:74:bb:14:b9: d8:4a:48:26:5e:27:e2:03:b8:af:f9:81:59:b0:4c:ab:4c:5c: 0b:51:87:ee:67:bb:25:36:da:dd:a5:79:f1:dd:92:7a:67:4c: be:95:1c:5a:f2:f1:91:83:0d:7b:c7:9d:c6:f3:e7:86:58:44: 32:04:a1:8b:ff:ba:b1:ed:1e:27:cc:0d:ea:51:58:6c:79:12: 91:57:ab:05:1b:6e:18:17:1f:84:fe:6f:a7:6e:ab:6b:d2:ba: e3:6d:df:f6:40:cd:e4:51:ac:c1:3a:a4:39:25:f5:38:c5:bb: 08:d0:c5:59:a4:01:7f:30:2c:25:85:3d:a1:9f:83:fc:aa:6f: 96:26:c7:50:ce:ae:bd:dc:87:2e:4b:1f:03:b9:71:64:d3:1b: b4:c5:33:b5:01:ad:03:fc:17:14:4f:a1:ac:a4:75:1b:be:1f: b1:85:8c:51:69:0d:25:b4:ae:4e:ff:fa:b2:87:4e:02:81:c3: 1e:bf:6f:77:d0:3f:14:87:a1:6c:99:16:f1:71:87:84:53:00: bf:d2:e0:66:8a:99:71:c3:24:13:f8:07:15:ab:c2:b2:fe:4b: ee:d7:d4:b8:fd:64:3d:d8:19:37:07:66:15:b6:db:3b:a3:3f: da:89:a9:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjYwOTI1MDIzOTM1WhcNMjYxMDAyMDIzOTM1WjAYMRYwFAYD VQQDEw02YWI1ZGVlNy1kMzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApoHiRgy4tm3hij/Vhhv1wIJW9bxJQ4f1kHVUQNYpt6ST1Ez21iWgpFJq9Zlk syARiWgFbp2Vlvi6/0wJOzNJpAzaTL+gr36JNeCDqHLoMbPlwKpsfK0qBtEqSjSA ab4Ra/fTAPSCaFyuxW73iKQtE7P4iFiNf6yuqFIeBWZXYE+0i1P7If6BZBvNc9Dt hEbAedQPiESDUYgPM6Q3n3xeqE549LirEaOun7FogO80cCo4Y9glQA2+Axk5kOYN EXRPqSOnh5cum/R1kT8eaqsT9Flb2NN5UeRCgKucK1/JQ2ulnHYHetGTQ91F9xG3 cDzX7EaFfiSzMLMc0ginKX5SgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAEHBDSm PMsEzBZldVM2LMbEBZyFMB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc7sBZwHJYfzU4Vie+J90uxS52EpIJl4n4gO4r/mBWbBMq0xcC1GH7me7JTba 3aV58d2SemdMvpUcWvLxkYMNe8edxvPnhlhEMgShi/+6se0eJ8wN6lFYbHkSkVer BRtuGBcfhP5vp26ra9K6423f9kDN5FGswTqkOSX1OMW7CNDFWaQBfzAsJYU9oZ+D /KpvlibHUM6uvdyHLksfA7lxZNMbtMUztQGtA/wXFE+hrKR1G74fsYWMUWkNJbSu Tv/6sodOAoHDHr9vd9A/FIehbJkW8XGHhFMAv9LgZoqZccMkE/gHFavCsv5L7tfU uP1kPdgZNwdmFbbbO6M/2omp6g== -----END CERTIFICATE-----Generated at Sat Sep 26 18:51:30 2026 by rpki-client