$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft File: nLbmSsdFgpqjwVQHs-QCsgahrxk.mft (raw, json) Hash identifier: zn7ND7p+q6sH+3mVKO6PQLiCil2hK1+CP5on4secyf8= Subject key identifier: 2A:8B:49:A7:D8:3A:41:DE:2C:DA:A4:D6:6A:BD:17:9D:38:B4:96:E6 Authority key identifier: 9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19 Certificate issuer: /CN=A91F9119/serialNumber=9CB6E64AC745829AA3C15407B3E402B206A1AF19 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft Manifest number: 5A Signing time: Fri 09 Oct 2026 08:56:41 +0000 Manifest this update: Fri 09 Oct 2026 08:56:40 +0000 Manifest next update: Fri 16 Oct 2026 08:56:40 +0000 Files and hashes: 1: nLbmSsdFgpqjwVQHs-QCsgahrxk.crl (hash: bcMX223vPe9m4BW1o4H/AeHbd12Q766l8TMt4zW1gio=) 2: 6B0AC84C3E1711F1A511DF78B0833773.roa (hash: V9OAtWmcfm4Nuv1e1Q4YP0cUaxGAb0f/aKkaOZRJSDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.crl rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 08:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9119, serialNumber=9CB6E64AC745829AA3C15407B3E402B206A1AF19 Validity Not Before: Oct 9 08:56:40 2026 GMT Not After : Oct 16 08:56:40 2026 GMT Subject: CN=6ac8ac49-586c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3e:cb:7d:22:7a:fc:51:c0:11:bc:40:b7:f7: cb:0c:81:1d:75:65:41:ff:ad:a8:b4:b4:3e:29:08: 65:be:70:23:00:d0:fe:89:0c:a8:58:18:ec:8e:7a: 5d:ff:fe:00:f3:b0:e7:d3:59:11:d5:1f:58:36:50: 76:bd:9a:1f:4d:cc:b0:0d:31:89:a1:0a:00:a9:7b: bf:25:d3:a4:79:69:92:95:65:99:21:30:41:6b:5b: c8:8c:04:47:93:b8:d4:d9:53:1a:46:29:6b:72:32: b7:78:a8:73:cb:ad:f6:28:aa:50:7e:cf:4c:ae:ff: 38:31:4b:ad:da:04:b6:86:05:9a:9c:df:f3:eb:b3: ee:31:5c:5a:e4:92:0a:4e:2f:f8:a5:ba:fc:47:86: 16:05:a5:93:a2:d0:fd:12:3d:b6:99:5c:87:6d:05: 77:dc:19:09:ef:28:3a:7e:f3:32:b2:fb:1e:ce:b6: a7:ee:99:ea:c3:df:2e:0c:c5:1e:96:7d:b4:a8:55: 59:d7:76:b3:45:7c:e1:d8:a3:69:68:91:2b:c2:be: cc:1e:07:0a:db:f4:c8:10:ba:a4:4f:c1:7d:33:4b: a3:32:23:63:b4:57:8a:50:4d:76:7e:0b:7f:de:e1: b0:2c:c6:0a:ca:86:d0:32:9f:bc:37:5b:72:0f:50: 26:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8B:49:A7:D8:3A:41:DE:2C:DA:A4:D6:6A:BD:17:9D:38:B4:96:E6 X509v3 Authority Key Identifier: keyid:9C:B6:E6:4A:C7:45:82:9A:A3:C1:54:07:B3:E4:02:B2:06:A1:AF:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLbmSsdFgpqjwVQHs-QCsgahrxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9119/E31CF9CA3E0F11F19BF823ACAA833773/nLbmSsdFgpqjwVQHs-QCsgahrxk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:b4:2f:36:a4:4b:79:12:10:bf:5c:15:bf:9c:42:d5:d2:86: f4:86:c9:06:fb:f0:c0:af:74:86:f7:b9:08:60:1a:9e:b8:73: 5c:fb:15:7e:da:ba:26:0f:4e:a7:a3:ed:93:e2:ae:31:46:31: 5b:f4:91:0f:2b:62:b5:4d:ac:f1:f5:83:2d:17:cc:91:14:30: 02:5e:5f:62:92:49:e0:a4:0c:f1:c3:d5:61:16:d1:4c:d0:d0: f5:9a:d2:a2:cf:a2:4f:67:81:16:14:7c:46:10:c0:04:21:e3: 1d:3b:16:76:df:40:56:98:f1:32:7d:c9:3e:ff:a0:a4:89:14: 87:ed:69:58:ec:f5:24:56:b4:6e:6f:47:d4:39:91:9c:13:5f: 0e:07:80:e0:a8:e5:24:dd:28:2c:26:9c:d3:fe:21:ea:7a:c1: 0a:e9:ff:65:1f:52:10:dc:6b:4a:fd:5f:a7:8c:1d:a6:70:44: 64:b7:60:60:1c:58:b3:2b:73:28:5f:c0:01:de:6c:83:99:fd: d8:48:1e:49:3f:ba:80:ae:b8:f4:4b:c2:eb:13:6b:84:42:cc: 1d:66:8f:08:6c:f4:f8:ee:ae:d2:ee:de:84:bd:a0:92:83:78: b5:0d:5f:f9:5b:dc:03:9d:d1:1d:76:aa:63:7c:de:ec:d0:19: d8:cd:b7:0e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OTExOTExMC8GA1UEBRMoOUNCNkU2NEFDNzQ1ODI5QUEzQzE1NDA3QjNFNDAyQjIw NkExQUYxOTAeFw0yNjEwMDkwODU2NDBaFw0yNjEwMTYwODU2NDBaMBgxFjAUBgNV BAMTDTZhYzhhYzQ5LTU4NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCePst9Inr8UcARvEC398sMgR11ZUH/rai0tD4pCGW+cCMA0P6JDKhYGOyOel3/ /gDzsOfTWRHVH1g2UHa9mh9NzLANMYmhCgCpe78l06R5aZKVZZkhMEFrW8iMBEeT uNTZUxpGKWtyMrd4qHPLrfYoqlB+z0yu/zgxS63aBLaGBZqc3/Prs+4xXFrkkgpO L/iluvxHhhYFpZOi0P0SPbaZXIdtBXfcGQnvKDp+8zKy+x7OtqfumerD3y4MxR6W fbSoVVnXdrNFfOHYo2lokSvCvsweBwrb9MgQuqRPwX0zS6MyI2O0V4pQTXZ+C3/e 4bAsxgrKhtAyn7w3W3IPUCY7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKotJp9g6 Qd4s2qTWar0XnTi0luYwHwYDVR0jBBgwFoAUnLbmSsdFgpqjwVQHs+QCsgahrxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5MTE5L0UzMUNGOUNBM0Uw RjExRjE5QkY4MjNBQ0FBODMzNzczL25MYm1Tc2RGZ3BxandWUUhzLVFDc2dhaHJ4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbkxibVNzZEZncHFqd1ZRSHMtUUNzZ2FocnhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 MTE5L0UzMUNGOUNBM0UwRjExRjE5QkY4MjNBQ0FBODMzNzczL25MYm1Tc2RGZ3Bx andWUUhzLVFDc2dhaHJ4ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA4tC82pEt5EhC/XBW/nELV0ob0hskG+/DAr3SG97kIYBqeuHNc+xV+2romD06n o+2T4q4xRjFb9JEPK2K1Tazx9YMtF8yRFDACXl9ikkngpAzxw9VhFtFM0ND1mtKi z6JPZ4EWFHxGEMAEIeMdOxZ230BWmPEyfck+/6CkiRSH7WlY7PUkVrRub0fUOZGc E18OB4DgqOUk3SgsJpzT/iHqesEK6f9lH1IQ3GtK/V+njB2mcERkt2BgHFizK3Mo X8AB3myDmf3YSB5JP7qArrj0S8LrE2uEQswdZo8IbPT47q7S7t6EvaCSg3i1DV/5 W9wDndEddqpjfN7s0BnYzbcO -----END CERTIFICATE-----Generated at Sat Oct 10 16:39:24 2026 by rpki-client