$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft File: NkbrHzcLfmPR823rNsJHbJbmuug.mft (raw, json) Hash identifier: cFqhY8ZEQZKTAcmLVLqpMaWeIlFGRZTyyDJtFJVu5jU= Subject key identifier: AB:B2:B8:9B:12:0C:A1:65:AC:3F:D5:63:A3:8A:EF:F6:38:78:F4:A8 Authority key identifier: 36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 Certificate issuer: /CN=A9113BE5/serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Certificate serial: 037D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft Manifest number: 036D Signing time: Fri 17 Apr 2026 00:46:45 +0000 Manifest this update: Fri 17 Apr 2026 00:46:44 +0000 Manifest next update: Fri 24 Apr 2026 00:46:44 +0000 Files and hashes: 1: NkbrHzcLfmPR823rNsJHbJbmuug.crl (hash: GxxaXpz4G+oqZJwZdczjm/ovJpX8Y6lXdLM7T7nB4ww=) 2: 627A6758DF2A11EEBC440C5EC4F9AE02.roa (hash: xCxlkxmn+IYoOztMvnfz1vMt3zyfROldaTyC72io/60=) 3: F3B00CD2666C11EEB1B4711CC4F9AE02.roa (hash: a5mqDS8csnFhirJVB+mELKo1bbKHlBbrnlgJKARZXz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 893 (0x37d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BE5, serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Validity Not Before: Apr 17 00:46:44 2026 GMT Not After : Apr 24 00:46:44 2026 GMT Subject: CN=69e182f5-2960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:29:ef:d1:cb:61:f3:4a:c3:d2:d7:a5:66:36: 5c:d0:99:2b:3e:34:ad:11:0e:d1:d4:a9:fa:b7:2c: 39:7f:19:8b:02:14:b4:2f:9b:dd:ee:a8:f5:e7:7b: 01:f3:ed:35:89:86:3b:23:05:33:6a:38:59:04:d2: b4:44:88:18:f1:cb:be:53:8f:89:1f:83:b6:d2:be: 77:a1:01:7e:eb:d4:7d:1f:86:3a:0e:18:d2:b8:1a: f4:ae:e7:70:1a:de:d5:f8:e5:bc:3a:fd:a5:96:24: ef:c1:19:ce:c5:0c:ee:78:f7:69:a6:cf:75:58:a6: 12:bf:c4:65:25:be:27:2e:08:f6:f5:e7:36:d7:df: ec:b3:32:84:68:25:51:2c:55:c6:be:10:a1:12:bc: 18:82:cb:0d:7c:13:fa:d1:1d:a8:f0:61:ef:1e:c8: 99:11:35:89:17:cd:02:36:0a:d5:8d:69:96:b9:e0: 68:33:49:38:f1:2a:e5:19:75:0e:51:89:9e:76:3d: d0:d2:e1:55:c5:82:ee:1b:cd:c9:04:62:be:19:a9: 23:7f:9c:e2:22:ca:81:df:8b:4e:a3:59:95:ab:0b: b7:7c:fa:97:86:45:13:d0:fe:a2:5f:da:57:be:20: ab:b1:5d:d2:56:45:3f:25:07:36:fd:87:94:ef:9c: 2d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B2:B8:9B:12:0C:A1:65:AC:3F:D5:63:A3:8A:EF:F6:38:78:F4:A8 X509v3 Authority Key Identifier: keyid:36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:b0:ca:4e:e7:28:db:1d:47:ab:b5:fd:66:86:bb:23:03:f5: f5:99:a8:59:65:89:a6:06:81:d7:be:a2:1d:c1:a1:12:27:72: ac:b9:71:34:98:09:1e:ab:09:f2:75:e3:65:65:d9:2f:2b:eb: e0:64:b9:08:58:d3:de:38:f6:89:88:54:0f:87:0b:21:aa:3d: 64:5f:7d:2b:0e:a4:09:d3:bd:dc:8b:4e:0c:73:02:3b:d5:e1: da:71:36:3c:c1:21:4b:b3:4a:17:db:29:af:28:02:55:65:35: c3:82:5d:25:24:45:42:22:2f:83:f1:e0:45:e7:a4:42:27:fd: 77:3d:c1:a1:3e:58:24:fc:20:16:13:f7:9d:e0:dd:14:7b:64: 92:0a:e6:7a:8a:33:a6:5d:0c:59:1d:e3:e3:a0:a6:c9:18:72: c3:05:a0:9c:22:8f:81:75:21:c1:73:94:75:2b:c6:0d:51:7e: 07:53:bb:c3:20:61:3d:4e:9e:bb:aa:0d:37:f7:d7:df:b1:f1: 91:d2:ae:1a:f0:23:ad:e9:56:79:a0:21:9f:ab:0a:83:7b:4e: 5e:1c:ef:52:19:d6:e1:6f:c5:36:95:e3:58:ba:cf:23:74:df: 0e:33:73:fa:74:7a:72:18:74:9c:f6:0e:69:c4:b7:5a:17:26: 45:61:ff:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCRTUxMTAvBgNVBAUTKDM2NDZFQjFGMzcwQjdFNjNEMUYzNkRFQjM2QzI0NzZD OTZFNkJBRTgwHhcNMjYwNDE3MDA0NjQ0WhcNMjYwNDI0MDA0NjQ0WjAYMRYwFAYD VQQDEw02OWUxODJmNS0yOTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyinv0cth80rD0telZjZc0JkrPjStEQ7R1Kn6tyw5fxmLAhS0L5vd7qj153sB 8+01iYY7IwUzajhZBNK0RIgY8cu+U4+JH4O20r53oQF+69R9H4Y6DhjSuBr0rudw Gt7V+OW8Ov2lliTvwRnOxQzuePdpps91WKYSv8RlJb4nLgj29ec219/sszKEaCVR LFXGvhChErwYgssNfBP60R2o8GHvHsiZETWJF80CNgrVjWmWueBoM0k48SrlGXUO UYmedj3Q0uFVxYLuG83JBGK+Gakjf5ziIsqB34tOo1mVqwu3fPqXhkUT0P6iX9pX viCrsV3SVkU/JQc2/YeU75wtTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKuyuJsS DKFlrD/VY6OK7/Y4ePSoMB8GA1UdIwQYMBaAFDZG6x83C35j0fNt6zbCR2yW5rro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0JFNS82MTFDNTEyQ0Yw RjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZtUFI4MjNyTnNKSGJKYm11 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rYnJIemNMZm1QUjgyM3JOc0pIYkpibXV1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0JFNS82MTFDNTEyQ0YwRjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZt UFI4MjNyTnNKSGJKYm11dWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgbDKTuco2x1Hq7X9Zoa7IwP19ZmoWWWJpgaB176iHcGhEidyrLlxNJgJHqsJ 8nXjZWXZLyvr4GS5CFjT3jj2iYhUD4cLIao9ZF99Kw6kCdO93ItODHMCO9Xh2nE2 PMEhS7NKF9sprygCVWU1w4JdJSRFQiIvg/HgReekQif9dz3BoT5YJPwgFhP3neDd FHtkkgrmeoozpl0MWR3j46CmyRhywwWgnCKPgXUhwXOUdSvGDVF+B1O7wyBhPU6e u6oNN/fX37HxkdKuGvAjrelWeaAhn6sKg3tOXhzvUhnW4W/FNpXjWLrPI3TfDjNz +nR6chh0nPYOacS3WhcmRWH/jw== -----END CERTIFICATE-----Generated at Fri Apr 17 08:05:28 2026 by rpki-client