$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft File: nEKLhAc-vngu7TP5LkDdc2GgnKo.mft (raw, json) Hash identifier: 0msccyCJk+X9bCSE31i66ouNnot2L09XvLJY3SeWI78= Subject key identifier: 0D:06:C7:1C:4F:6B:84:F8:33:74:74:91:18:28:6A:08:96:CA:C8:07 Authority key identifier: 9C:42:8B:84:07:3E:BE:78:2E:ED:33:F9:2E:40:DD:73:61:A0:9C:AA Certificate issuer: /CN=A91D8B6F/serialNumber=9C428B84073EBE782EED33F92E40DD7361A09CAA Certificate serial: 0970 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft Manifest number: 0966 Signing time: Thu 24 Sep 2026 20:02:19 +0000 Manifest this update: Thu 24 Sep 2026 20:02:19 +0000 Manifest next update: Thu 01 Oct 2026 20:02:19 +0000 Files and hashes: 1: nEKLhAc-vngu7TP5LkDdc2GgnKo.crl (hash: UyCpfMJFe0iuU8i7tHTUY0icpbbv6EXdgqeiRUW7bCI=) 2: C592AFD286F111F19E006003A7EE528E.roa (hash: tDKWwcpnaZY1Mze9WS4S7X4lHgZRsJdlm83QRVgSUNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.crl rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2416 (0x970) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B6F, serialNumber=9C428B84073EBE782EED33F92E40DD7361A09CAA Validity Not Before: Sep 24 20:02:19 2026 GMT Not After : Oct 1 20:02:19 2026 GMT Subject: CN=6ab581cb-ed9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:78:64:ec:f2:6e:66:bf:c9:9c:d4:76:c0:7d: 11:83:13:76:8a:a9:c0:64:d0:89:d1:a1:f7:92:e1: 86:23:dc:44:fb:a5:47:7a:32:25:19:7a:93:a2:3a: 0c:1b:73:b1:5e:0f:04:c4:2a:0a:71:33:5c:88:52: fd:91:f8:c4:6d:c8:db:84:0d:d7:34:77:df:12:69: c5:36:e6:92:2f:33:26:29:e0:d5:a3:89:6b:57:3f: 93:c7:2a:67:5d:5e:c8:c5:02:cd:00:95:b6:ff:5c: 67:8d:db:f8:b8:bd:f4:16:96:f6:a0:03:5c:d3:56: fa:48:b0:80:72:64:25:37:3d:ab:b9:96:ff:d5:16: 7b:2d:cc:1a:04:ae:35:0c:c3:98:42:c6:fe:ce:7c: 13:71:66:77:72:13:33:36:b9:d9:0c:23:b4:fe:4d: 23:69:a0:89:d0:15:9c:ce:c0:cb:f1:62:df:47:bf: d4:2f:d0:2d:c0:cf:fe:da:88:04:d8:27:f5:0e:0e: 93:89:1d:17:48:c7:2f:be:f2:98:c6:60:dc:09:67: 4a:c4:fc:06:44:d3:11:44:e0:85:4e:00:00:35:a8: 2b:da:98:a4:d7:f5:91:50:04:21:cc:3c:bb:1c:08: ae:03:be:72:ed:72:21:57:f1:58:f5:5d:8f:6d:73: 82:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:06:C7:1C:4F:6B:84:F8:33:74:74:91:18:28:6A:08:96:CA:C8:07 X509v3 Authority Key Identifier: keyid:9C:42:8B:84:07:3E:BE:78:2E:ED:33:F9:2E:40:DD:73:61:A0:9C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:5b:db:fb:a4:e3:a5:db:b1:18:c1:49:a7:98:9a:5b:5f:93: 79:8c:f0:e1:2c:3e:d1:0a:25:ae:01:06:50:31:27:bc:ec:89: 56:67:a0:a6:ee:6d:ec:87:40:30:93:de:85:a5:8d:5c:8a:39: 2b:04:02:8f:b0:c9:21:b2:b4:db:8c:b5:9f:c1:22:11:ad:b7: 22:d7:db:7d:a3:62:b4:03:e0:b4:32:d0:b9:e2:fb:2c:07:63: d8:b1:70:90:44:34:c6:09:e3:8a:92:14:94:5a:53:8c:33:61: 2c:e1:b7:7b:50:4d:42:5d:22:b3:9c:35:87:ef:50:e3:d3:28: 08:3c:a2:c1:34:fa:8b:59:46:5d:45:b1:5c:92:62:ca:f3:04: 07:f5:52:46:b9:99:3c:01:39:11:2c:74:1f:a3:66:bd:22:af: 1c:c3:94:6f:5c:08:45:1e:22:e7:a4:2a:a5:ce:0d:60:98:69: 14:9d:b1:a6:4c:c8:4f:77:fa:20:25:7d:ab:2f:72:ab:4a:d5: 4d:f8:31:fd:de:f1:10:b7:36:21:cd:75:5d:6c:b9:5c:45:5f: 48:4c:e8:84:15:35:0f:9c:4c:67:fb:86:da:a8:eb:ea:23:c2: 6b:0d:d7:0f:9f:d3:7d:61:a6:85:8b:c3:1e:66:a1:db:f1:a2: db:27:b5:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCNkYxMTAvBgNVBAUTKDlDNDI4Qjg0MDczRUJFNzgyRUVEMzNGOTJFNDBERDcz NjFBMDlDQUEwHhcNMjYwOTI0MjAwMjE5WhcNMjYxMDAxMjAwMjE5WjAYMRYwFAYD VQQDEw02YWI1ODFjYi1lZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3hk7PJuZr/JnNR2wH0RgxN2iqnAZNCJ0aH3kuGGI9xE+6VHejIlGXqTojoM G3OxXg8ExCoKcTNciFL9kfjEbcjbhA3XNHffEmnFNuaSLzMmKeDVo4lrVz+Txypn XV7IxQLNAJW2/1xnjdv4uL30Fpb2oANc01b6SLCAcmQlNz2ruZb/1RZ7LcwaBK41 DMOYQsb+znwTcWZ3chMzNrnZDCO0/k0jaaCJ0BWczsDL8WLfR7/UL9AtwM/+2ogE 2Cf1Dg6TiR0XSMcvvvKYxmDcCWdKxPwGRNMRROCFTgAANagr2pik1/WRUAQhzDy7 HAiuA75y7XIhV/FY9V2PbXOCeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA0GxxxP a4T4M3R0kRgoagiWysgHMB8GA1UdIwQYMBaAFJxCi4QHPr54Lu0z+S5A3XNhoJyq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEI2Ri9FNDQ4QkYxOEM0 RUYxMUVBODdGNDM4MTBDNEY5QUUwMi9uRUtMaEFjLXZuZ3U3VFA1TGtEZGMyR2du S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25FS0xoQWMtdm5ndTdUUDVMa0RkYzJHZ25Lby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEI2Ri9FNDQ4QkYxOEM0RUYxMUVBODdGNDM4MTBDNEY5QUUwMi9uRUtMaEFjLXZu Z3U3VFA1TGtEZGMyR2duS28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADFvb+6TjpduxGMFJp5iaW1+TeYzw4Sw+0QolrgEGUDEnvOyJVmegpu5t7IdA MJPehaWNXIo5KwQCj7DJIbK024y1n8EiEa23ItfbfaNitAPgtDLQueL7LAdj2LFw kEQ0xgnjipIUlFpTjDNhLOG3e1BNQl0is5w1h+9Q49MoCDyiwTT6i1lGXUWxXJJi yvMEB/VSRrmZPAE5ESx0H6NmvSKvHMOUb1wIRR4i56Qqpc4NYJhpFJ2xpkzIT3f6 ICV9qy9yq0rVTfgx/d7xELc2Ic11XWy5XEVfSEzohBU1D5xMZ/uG2qjr6iPCaw3X D5/TfWGmhYvDHmah2/Gi2ye1og== -----END CERTIFICATE-----Generated at Thu Sep 24 22:13:38 2026 by rpki-client