$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft File: nJSl3M9qZbaJhscEOEbHIb0zvpk.mft (raw, json) Hash identifier: q8dqRcaQkjlrT/AO+WXcs6s9hH0HFIrZctsI9dPwQgs= Subject key identifier: 10:8B:E2:86:B3:59:A2:08:36:24:A2:4A:5F:C4:C3:B3:E7:C6:4E:B2 Authority key identifier: 9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99 Certificate issuer: /CN=A91D66A0/serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99 Certificate serial: 0E3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft Manifest number: 0E1E Signing time: Wed 30 Sep 2026 18:00:20 +0000 Manifest this update: Wed 30 Sep 2026 18:00:19 +0000 Manifest next update: Wed 07 Oct 2026 18:00:19 +0000 Files and hashes: 1: nJSl3M9qZbaJhscEOEbHIb0zvpk.crl (hash: QD6H9lTXdgcMQg+a96h+TjK7SQzeTXk3gJutN1Wy1io=) 2: 2B17862A82EE11EAB170FD4BC4F9AE02.roa (hash: z7n2Ro4Gkp0kvswymZ3NmSJNOHu0kHCX/BYv3spailI=) 3: 2BABEEB482EE11EAB170FD4BC4F9AE02.roa (hash: CG6vYgZ1e3/8dZN64pHrnStSPG3URxAwT0J40lVEYis=) 4: 064D129A56EA11EA84DC982BC4F9AE02.roa (hash: /XXsn5P+CzGOi6w4JWRUAkj1a3bzJJfkjs3Rtf98gFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 18:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3642 (0xe3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D66A0, serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99 Validity Not Before: Sep 30 18:00:19 2026 GMT Not After : Oct 7 18:00:19 2026 GMT Subject: CN=6abd4e33-3982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:86:83:dd:d4:52:89:df:b5:ba:40:10:c0:e4: 90:fe:31:e9:af:f7:c1:16:7d:3a:58:24:d8:6e:18: 3e:1c:70:ff:47:0b:59:1b:a6:9f:5b:0b:6c:db:4f: 08:a9:77:dc:56:86:ef:92:85:a9:61:0b:df:b5:a0: 9d:a9:5d:27:b9:fd:bf:72:31:39:10:39:22:b0:69: 77:e1:be:7b:c6:28:72:5a:45:7e:f6:fa:24:fa:6e: 4b:39:31:e3:25:b7:75:7a:e0:f6:59:41:81:c5:0e: c9:32:6e:40:27:3f:94:7f:1d:5a:0d:6a:bf:c9:b2: 3e:6d:57:61:44:2e:f8:4b:b3:ed:82:82:cb:b2:0c: 2f:1d:b1:f2:c9:72:c9:61:e5:2c:aa:bd:df:f3:4a: 99:2c:d6:d6:83:8d:55:23:30:52:35:f6:ab:13:ec: 87:7b:d7:e5:71:cf:f7:b4:1b:05:5a:1a:d5:33:6d: 91:69:c2:d1:1e:e6:b0:18:1e:da:80:5d:87:22:a1: 7c:2f:d6:00:ce:e0:1a:0e:72:07:28:6a:8b:b3:bc: 9e:52:f8:df:3c:8d:58:d0:e3:cb:d5:16:63:14:a6: 9f:b3:66:e7:99:d7:85:d3:8b:bc:eb:b7:6e:bd:7e: c6:f3:a1:d6:28:79:37:d3:72:a3:4e:e3:3c:e4:1f: 5a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8B:E2:86:B3:59:A2:08:36:24:A2:4A:5F:C4:C3:B3:E7:C6:4E:B2 X509v3 Authority Key Identifier: keyid:9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:2f:fc:bf:7e:84:f1:b4:fb:aa:fd:89:b4:bf:38:10:76:49: e0:c7:50:d0:de:08:39:74:0f:cc:c2:50:6f:74:32:f3:65:0c: ec:65:fb:5d:d5:bf:f3:45:18:f2:ec:eb:eb:0f:dd:d9:fc:b3: fb:bc:ff:32:4c:aa:47:c3:48:e8:e2:c9:a5:9f:3f:ae:2b:ba: 4d:ab:9e:fc:19:74:4b:66:28:8f:57:da:3e:d8:d3:f6:ec:54: 12:ae:e2:19:a8:0d:93:6d:36:4f:30:85:98:d6:39:00:91:71: 14:f9:58:92:f8:8d:d8:da:3d:f5:3a:ca:9f:38:ed:df:22:73: 97:96:56:a8:cc:54:c5:0f:30:e2:82:f8:3d:81:88:a9:13:df: 9e:70:27:a3:9e:93:0c:88:41:bf:40:28:db:4e:99:62:e5:99: ba:bd:3e:68:94:ee:53:a5:98:6b:eb:02:f5:55:0d:83:f1:da: ff:0a:34:fa:90:20:b5:34:38:00:94:28:26:2b:36:42:c5:08: ae:d3:e6:f0:7e:ed:95:84:fb:27:b9:0f:98:a7:3e:b3:ca:54: 7c:0b:52:a8:59:82:f1:06:64:df:21:70:54:ec:5a:a9:25:a2: 9f:4e:53:5e:ef:91:f6:4f:f9:01:ed:2f:47:a1:dc:49:88:87: 52:c4:5d:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY2QTAxMTAvBgNVBAUTKDlDOTRBNURDQ0Y2QTY1QjY4OTg2QzcwNDM4NDZDNzIx QkQzM0JFOTkwHhcNMjYwOTMwMTgwMDE5WhcNMjYxMDA3MTgwMDE5WjAYMRYwFAYD VQQDEw02YWJkNGUzMy0zOTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoaD3dRSid+1ukAQwOSQ/jHpr/fBFn06WCTYbhg+HHD/RwtZG6afWwts208I qXfcVobvkoWpYQvftaCdqV0nuf2/cjE5EDkisGl34b57xihyWkV+9vok+m5LOTHj Jbd1euD2WUGBxQ7JMm5AJz+Ufx1aDWq/ybI+bVdhRC74S7PtgoLLsgwvHbHyyXLJ YeUsqr3f80qZLNbWg41VIzBSNfarE+yHe9flcc/3tBsFWhrVM22RacLRHuawGB7a gF2HIqF8L9YAzuAaDnIHKGqLs7yeUvjfPI1Y0OPL1RZjFKafs2bnmdeF04u867du vX7G86HWKHk303KjTuM85B9a7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBCL4oaz WaIINiSiSl/Ew7Pnxk6yMB8GA1UdIwQYMBaAFJyUpdzPamW2iYbHBDhGxyG9M76Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjZBMC82MjVGRjcyNkQ5 RTcxMUU5ODgwNTQwMTZDNEY5QUUwMi9uSlNsM005cVpiYUpoc2NFT0ViSEliMHp2 cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25KU2wzTTlxWmJhSmhzY0VPRWJISWIwenZway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjZBMC82MjVGRjcyNkQ5RTcxMUU5ODgwNTQwMTZDNEY5QUUwMi9uSlNsM005cVpi YUpoc2NFT0ViSEliMHp2cGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGi/8v36E8bT7qv2JtL84EHZJ4MdQ0N4IOXQPzMJQb3Qy82UM7GX7XdW/80UY 8uzr6w/d2fyz+7z/MkyqR8NI6OLJpZ8/riu6Taue/Bl0S2Yoj1faPtjT9uxUEq7i GagNk202TzCFmNY5AJFxFPlYkviN2No99TrKnzjt3yJzl5ZWqMxUxQ8w4oL4PYGI qRPfnnAno56TDIhBv0Ao206ZYuWZur0+aJTuU6WYa+sC9VUNg/Ha/wo0+pAgtTQ4 AJQoJis2QsUIrtPm8H7tlYT7J7kPmKc+s8pUfAtSqFmC8QZk3yFwVOxaqSWin05T Xu+R9k/5Ae0vR6HcSYiHUsRdCg== -----END CERTIFICATE-----Generated at Thu Oct 1 16:05:57 2026 by rpki-client