$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json) Hash identifier: t7Ytcqjd/2ol3XrEZlrZlNzIfTVb9waSfCVuPOZHCnI= Subject key identifier: CA:45:C3:71:37:5D:38:AC:D3:2F:1D:3D:94:5C:79:62:AD:7B:1B:91 Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft Manifest number: 0239 Signing time: Thu 01 Oct 2026 03:27:43 +0000 Manifest this update: Thu 01 Oct 2026 03:27:43 +0000 Manifest next update: Thu 08 Oct 2026 03:27:43 +0000 Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: a1WgSuwtMoykflNJ3gkIlLvVwAV8llvJ2FbsszMt4kk=) 2: 36020660DD2411EF9F4FB925C4F9AE02.roa (hash: i1Pu+9UVIaU6wY+KGS3N0zfxP0rOfpHG8M6EeBicwr4=) 3: 0B421064DD2411EFA5DECA6CC4F9AE02.roa (hash: +S1F0zYbzMvWkIw6OtTYzr4kRvSGMZIIi7dYMQVKPYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 03:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD, serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: Oct 1 03:27:43 2026 GMT Not After : Oct 8 03:27:43 2026 GMT Subject: CN=6abdd32f-8555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:45:d8:ca:62:72:f0:cf:32:b2:5c:d7:2d:40: 0e:b2:63:2d:c2:16:20:84:09:9e:2a:66:c0:09:75: c6:9a:86:52:a7:02:e1:ef:4c:7e:d9:84:6b:01:6a: e4:c8:b4:e1:39:31:dc:60:f0:d4:43:8b:05:8d:aa: 71:b3:86:7f:15:2d:74:3f:f5:a7:6c:aa:b7:6c:e8: 04:d3:2c:1d:1a:6a:ae:2a:14:5a:dc:a6:f6:cc:ef: 83:a8:fd:b0:36:9c:75:d5:e9:8f:00:cc:ae:16:23: 2c:80:27:b9:8f:2d:fe:73:e4:96:af:a9:a7:6a:0e: e8:b9:c4:80:ad:0d:d9:ee:dd:9d:0b:f9:81:24:e9: a0:91:41:71:49:86:4c:57:8b:60:0b:7b:34:c6:4f: 28:93:06:d1:8c:e2:d7:88:8a:ed:c9:21:63:4c:4d: 14:86:5e:81:a7:a2:b8:1d:00:4d:37:4a:4d:e3:ae: 82:b9:e7:71:63:b0:af:bf:38:c3:af:bb:9e:78:58: 77:5b:9a:13:53:4e:6f:ca:11:59:69:02:88:70:94: 83:be:6e:85:6f:34:46:bc:5f:6c:ec:da:0b:49:17: 55:a2:56:18:60:5f:bd:59:d8:33:72:28:e7:d0:55: 27:f7:f6:22:c2:e8:3f:f4:54:b2:98:b1:c9:81:a2: cc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:45:C3:71:37:5D:38:AC:D3:2F:1D:3D:94:5C:79:62:AD:7B:1B:91 X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:74:4f:5f:c0:d6:e5:51:b3:f8:50:c2:78:69:7a:3d:85:b4: 66:71:68:55:45:c7:47:bd:36:15:f9:c8:07:45:31:6e:58:89: 67:48:ce:29:c1:b1:c6:a3:b4:c4:21:db:43:39:9a:ac:23:d3: 86:d4:9b:ae:9b:cb:d4:91:e2:68:32:c1:b3:bf:bb:dc:4c:e9: f9:ea:c3:e8:f9:cc:72:af:df:9a:87:0a:be:bf:b4:64:82:0a: f9:64:44:55:27:56:7d:48:7b:3d:e6:df:8b:6c:db:0e:86:d9: e5:c4:d8:af:3c:d1:c0:d6:15:df:7b:df:b1:06:30:4a:c8:bf: 5a:93:49:8d:12:f6:c6:5b:f4:0f:0b:53:10:14:23:4e:a3:9f: df:8a:29:ce:fc:f8:41:32:f5:84:a0:c6:72:fe:fe:b7:fd:b4: 3e:06:d1:7c:52:72:d7:18:72:94:9b:ac:03:59:03:d9:ab:0d: 11:3d:ee:98:88:95:f4:9d:35:16:a0:6c:70:25:54:7f:ad:95: 4a:df:51:35:26:20:89:0a:46:7d:d7:ad:0e:7c:4d:89:dc:fd: 8e:da:5a:52:14:41:41:52:66:76:de:7b:65:15:43:73:5f:08: c4:20:b9:44:a3:54:d4:60:e0:19:e0:a7:2f:0d:59:dd:84:76: c2:70:ca:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjYxMDAxMDMyNzQzWhcNMjYxMDA4MDMyNzQzWjAYMRYwFAYD VQQDEw02YWJkZDMyZi04NTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskXYymJy8M8yslzXLUAOsmMtwhYghAmeKmbACXXGmoZSpwLh70x+2YRrAWrk yLThOTHcYPDUQ4sFjapxs4Z/FS10P/WnbKq3bOgE0ywdGmquKhRa3Kb2zO+DqP2w Npx11emPAMyuFiMsgCe5jy3+c+SWr6mnag7oucSArQ3Z7t2dC/mBJOmgkUFxSYZM V4tgC3s0xk8okwbRjOLXiIrtySFjTE0Uhl6Bp6K4HQBNN0pN466CuedxY7CvvzjD r7ueeFh3W5oTU05vyhFZaQKIcJSDvm6FbzRGvF9s7NoLSRdVolYYYF+9Wdgzcijn 0FUn9/Yiwug/9FSymLHJgaLMuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMpFw3E3 XTis0y8dPZRceWKtexuRMB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzhGRC9BNUE2RjM3QTYxRjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFj NEZWYVlBc2hlU0RybmhyRTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAenRPX8DW5VGz+FDCeGl6PYW0ZnFoVUXHR702FfnIB0UxbliJZ0jOKcGxxqO0 xCHbQzmarCPThtSbrpvL1JHiaDLBs7+73Ezp+erD6PnMcq/fmocKvr+0ZIIK+WRE VSdWfUh7Pebfi2zbDobZ5cTYrzzRwNYV33vfsQYwSsi/WpNJjRL2xlv0DwtTEBQj TqOf34opzvz4QTL1hKDGcv7+t/20PgbRfFJy1xhylJusA1kD2asNET3umIiV9J01 FqBscCVUf62VSt9RNSYgiQpGfdetDnxNidz9jtpaUhRBQVJmdt57ZRVDc18IxCC5 RKNU1GDgGeCnLw1Z3YR2wnDKFw== -----END CERTIFICATE-----Generated at Thu Oct 1 18:26:58 2026 by rpki-client