$ rpki-client -vvf rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft File: NaA6oUeNBoHAZxl2yftD9pMTgr4.mft (raw, json) Hash identifier: aX79Up0L17JVaUlhWD2WrmkYzUjJiUcaFOyJBw4LkHo= Subject key identifier: 97:C7:7A:BB:ED:E2:09:45:63:39:CB:1E:55:EC:BB:C7:E9:DC:2C:2E Authority key identifier: 35:A0:3A:A1:47:8D:06:81:C0:67:19:76:C9:FB:43:F6:93:13:82:BE Certificate issuer: /CN=A91161EB/serialNumber=35A03AA1478D0681C0671976C9FB43F6931382BE Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft Manifest number: 04 Signing time: Wed 15 Apr 2026 08:47:05 +0000 Manifest this update: Wed 15 Apr 2026 08:47:05 +0000 Manifest next update: Wed 22 Apr 2026 08:47:05 +0000 Files and hashes: 1: NaA6oUeNBoHAZxl2yftD9pMTgr4.crl (hash: ei4NTB6xiQFZwMO3xR1oklDtNNYsp5z3uDaMS2iwWWY=) 2: 9C495BB2350211F18A0989F29B833773.roa (hash: Lmv32oZY3NRP9K5M+STvV+c8q6SioI1nyA5nw3Qh/DE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.crl rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 08:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91161EB, serialNumber=35A03AA1478D0681C0671976C9FB43F6931382BE Validity Not Before: Apr 15 08:47:05 2026 GMT Not After : Apr 22 08:47:05 2026 GMT Subject: CN=69df5089-138b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:da:94:1e:d7:e6:14:dd:21:d5:9a:79:c3:c7: 49:fd:9c:5a:08:2a:79:e5:36:a5:ec:60:93:9c:f5: c4:d7:0d:5f:3b:f7:21:48:48:dc:59:5c:d9:e8:43: 8b:26:60:ac:81:1c:89:be:82:5d:e0:a2:1c:b6:51: 5c:c8:40:3f:f1:37:2a:ec:d8:e9:38:0b:c3:6b:00: c4:75:0e:43:2a:16:aa:6b:d1:a3:c0:70:4d:01:94: 81:ca:08:86:a6:e2:86:b7:c0:30:d5:9f:1c:53:34: 8b:3c:3d:d0:52:4f:dc:7d:41:aa:39:19:95:53:b2: a1:db:49:79:8a:0d:a0:cb:59:84:6b:a2:0e:8d:50: 3f:24:bd:31:14:27:54:30:10:33:09:63:56:e5:00: e6:29:fe:65:1d:50:d4:c6:72:b4:fb:4b:ad:5b:2c: 84:b1:15:96:c0:cc:20:3c:ea:92:98:8a:8a:b7:bb: 4e:11:9c:af:3b:d2:64:3f:52:6d:46:97:8e:54:01: 87:9b:dc:8a:4b:c9:5d:39:d6:36:52:2f:93:b0:56: f2:77:f4:eb:fa:01:45:e4:83:e1:97:84:9a:96:c5: 09:20:05:43:e4:37:98:50:02:54:09:b9:d8:71:13: 1d:25:bc:72:4d:a5:67:ad:f1:91:28:99:a6:68:1e: 94:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C7:7A:BB:ED:E2:09:45:63:39:CB:1E:55:EC:BB:C7:E9:DC:2C:2E X509v3 Authority Key Identifier: keyid:35:A0:3A:A1:47:8D:06:81:C0:67:19:76:C9:FB:43:F6:93:13:82:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:83:79:8b:a8:ad:bd:93:39:1c:18:93:4a:e9:8d:00:87:04: c1:cb:01:cc:25:d2:2e:e7:01:36:61:45:10:87:e9:87:6d:b8: 0c:1d:02:bf:ab:f7:65:77:23:61:b0:d5:4f:ec:e0:ad:cb:96: f7:7d:27:c8:ac:89:ef:46:ac:e5:16:6a:04:f1:f9:51:7c:77: c6:d8:3b:f0:c6:b4:18:fa:97:1a:5b:f1:a7:a4:a7:3d:2a:7f: 0a:24:cb:4b:0c:82:ee:aa:8f:d9:c7:7b:0f:e7:82:3b:5f:e4: b1:76:ec:54:1d:36:68:32:30:75:b2:3f:59:07:c2:70:13:38: 7f:15:63:bc:57:90:b4:ef:cc:f7:e7:dd:14:f4:82:59:63:af: 66:e8:03:ab:9f:ec:2f:d6:a4:9b:db:8c:db:36:c9:fd:ca:f6: 95:1e:e1:55:81:a6:c9:e2:f1:31:fc:37:81:49:da:38:ac:7c: fc:dd:bf:cf:d8:a9:28:54:c6:ea:15:78:a7:58:c5:3f:05:9a: 0c:0b:d4:90:79:32:1b:69:6b:cf:b2:b7:aa:17:5d:b6:a4:b6: 4b:ce:3a:0f:43:85:b4:18:9b:94:79:7c:ad:d3:14:ce:ab:20: 9e:39:46:b0:92:1d:03:cb:27:ff:02:b9:48:d9:8d:20:f5:15: 48:c1:ea:bf -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjFFQjExMC8GA1UEBRMoMzVBMDNBQTE0NzhEMDY4MUMwNjcxOTc2QzlGQjQzRjY5 MzEzODJCRTAeFw0yNjA0MTUwODQ3MDVaFw0yNjA0MjIwODQ3MDVaMBgxFjAUBgNV BAMTDTY5ZGY1MDg5LTEzOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDT2pQe1+YU3SHVmnnDx0n9nFoIKnnlNqXsYJOc9cTXDV879yFISNxZXNnoQ4sm YKyBHIm+gl3gohy2UVzIQD/xNyrs2Ok4C8NrAMR1DkMqFqpr0aPAcE0BlIHKCIam 4oa3wDDVnxxTNIs8PdBST9x9Qao5GZVTsqHbSXmKDaDLWYRrog6NUD8kvTEUJ1Qw EDMJY1blAOYp/mUdUNTGcrT7S61bLISxFZbAzCA86pKYioq3u04RnK870mQ/Um1G l45UAYeb3IpLyV051jZSL5OwVvJ39Ov6AUXkg+GXhJqWxQkgBUPkN5hQAlQJudhx Ex0lvHJNpWet8ZEomaZoHpRrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUl8d6u+3i CUVjOcseVey7x+ncLC4wHwYDVR0jBBgwFoAUNaA6oUeNBoHAZxl2yftD9pMTgr4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2MUVCLzBBOTM4NUQwMzUw MjExRjFCMUZENkQ3NDlCODMzNzczL05hQTZvVWVOQm9IQVp4bDJ5ZnREOXBNVGdy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTmFBNm9VZU5Cb0hBWnhsMnlmdEQ5cE1UZ3I0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 MUVCLzBBOTM4NUQwMzUwMjExRjFCMUZENkQ3NDlCODMzNzczL05hQTZvVWVOQm9I QVp4bDJ5ZnREOXBNVGdyNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQASg3mLqK29kzkcGJNK6Y0AhwTBywHMJdIu5wE2YUUQh+mHbbgMHQK/q/dldyNh sNVP7OCty5b3fSfIrInvRqzlFmoE8flRfHfG2DvwxrQY+pcaW/GnpKc9Kn8KJMtL DILuqo/Zx3sP54I7X+SxduxUHTZoMjB1sj9ZB8JwEzh/FWO8V5C078z3590U9IJZ Y69m6AOrn+wv1qSb24zbNsn9yvaVHuFVgabJ4vEx/DeBSdo4rHz83b/P2KkoVMbq FXinWMU/BZoMC9SQeTIbaWvPsreqF122pLZLzjoPQ4W0GJuUeXyt0xTOqyCeOUaw kh0Dyyf/ArlI2Y0g9RVIweq/ -----END CERTIFICATE-----Generated at Fri Apr 17 05:26:22 2026 by rpki-client