$ rpki-client -vvf rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft File: NhKQaSiZCCzeI_UEU6QVXgqreXg.mft (raw, json) Hash identifier: QgbqGBdV5BxnxhfVLKvnzjCNsyA6VYLr3OCWSABNnr4= Subject key identifier: 9B:BF:BA:02:47:EF:2E:A5:CD:B5:C4:5C:8D:FB:81:9E:92:6D:0C:46 Authority key identifier: 36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 Certificate issuer: /CN=A911894F/serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Certificate serial: 2708 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft Manifest number: 26F3 Signing time: Thu 16 Apr 2026 15:38:21 +0000 Manifest this update: Thu 16 Apr 2026 15:38:21 +0000 Manifest next update: Thu 23 Apr 2026 15:38:21 +0000 Files and hashes: 1: NhKQaSiZCCzeI_UEU6QVXgqreXg.crl (hash: +yqqjFMxNLtztOyeMmgBSPNgPQMuEZmhtirxLmHFdtQ=) 2: 802FBE707FEB11EB8B5E2817C4F9AE02.roa (hash: 9SaubkE1hKAflSM+TwpjxuILNivfO85uaXddylqE/9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9992 (0x2708) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911894F, serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Validity Not Before: Apr 16 15:38:21 2026 GMT Not After : Apr 23 15:38:21 2026 GMT Subject: CN=69e1026d-ef62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:14:53:77:9c:07:6e:78:e1:36:61:4d:e6:d8: 3f:29:dc:ad:49:2a:df:46:12:fe:e1:00:e5:15:61: 32:18:ae:e4:42:9a:fa:4f:fb:96:55:bc:ab:5a:10: 2b:72:29:8d:aa:cf:3f:b7:99:e3:77:f5:95:8f:2a: 78:87:67:61:18:d9:c3:23:18:82:19:33:ca:7f:77: 58:da:08:8c:a9:6d:92:e1:5d:dc:c9:34:7c:6f:1d: 91:03:e7:9c:53:d7:f5:ec:07:87:c7:18:f5:60:ff: 8d:eb:48:39:45:ca:8a:9a:a9:57:1e:2d:d6:83:7d: 95:e5:c7:f6:1d:98:37:4e:61:93:b5:d3:e4:52:d6: 4a:62:b2:40:cb:a0:05:45:99:d3:31:9a:8f:72:a6: c1:8c:22:62:bb:3a:cb:54:78:81:96:b8:06:11:72: 3e:0c:e8:68:41:13:78:c7:0e:56:2c:a8:ec:fe:ea: 3a:88:21:7e:c8:37:a1:da:6f:b4:09:78:bf:65:4d: 31:94:72:7d:9b:09:cd:cf:b8:2f:f3:26:58:d6:76: 36:88:19:21:c1:5b:89:c5:16:54:0e:e7:99:92:2a: 13:be:01:7b:56:77:fd:58:18:91:70:d1:6e:2d:dc: c9:56:ed:82:35:2a:13:7c:89:05:ca:87:3d:36:bc: 77:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BF:BA:02:47:EF:2E:A5:CD:B5:C4:5C:8D:FB:81:9E:92:6D:0C:46 X509v3 Authority Key Identifier: keyid:36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:2d:8f:3c:eb:d8:3a:4e:0f:34:97:06:21:ef:3b:66:ad:f1: 93:be:56:d7:3a:a6:75:3d:f2:d6:71:78:f9:67:fe:80:f2:44: c3:b0:d4:53:97:9c:4b:59:cb:69:17:ca:57:25:41:b2:f6:07: 01:90:12:eb:2c:3f:6f:2d:ff:3d:98:77:a7:44:b5:12:ee:ec: 1b:dc:07:7a:40:a2:14:0c:f0:b6:a5:f9:54:e3:e4:f5:be:76: fd:ff:47:05:46:4c:e6:36:46:1c:fe:b5:1a:5f:ca:4c:d3:ca: d6:c6:96:6c:60:61:68:3c:7a:f9:4a:d2:2a:79:39:d4:54:17: 2e:e9:1e:1f:e5:4e:52:48:33:0e:7e:65:17:9c:d3:93:b6:40: ec:1e:6b:fa:3b:92:c3:22:ad:9b:6d:5f:7c:8b:00:58:fe:da: 29:ee:3d:e6:41:d3:c4:db:6f:33:5a:14:61:f7:77:1c:9f:90: 04:da:c0:2c:18:7f:35:0c:7f:dd:03:67:3f:b9:b6:6b:a3:59: ff:b8:c4:37:be:7d:0a:6a:70:60:ce:11:90:ce:2e:69:e7:cf: 89:09:76:64:ce:39:3f:b3:3f:32:e7:52:4a:93:dd:ec:71:ba: 51:14:b9:ba:32:c5:e7:18:03:2c:a0:8e:d8:d7:93:d8:ca:4e: 61:25:1a:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg5NEYxMTAvBgNVBAUTKDM2MTI5MDY5Mjg5OTA4MkNERTIzRjUwNDUzQTQxNTVF MEFBQjc5NzgwHhcNMjYwNDE2MTUzODIxWhcNMjYwNDIzMTUzODIxWjAYMRYwFAYD VQQDEw02OWUxMDI2ZC1lZjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxRTd5wHbnjhNmFN5tg/KdytSSrfRhL+4QDlFWEyGK7kQpr6T/uWVbyrWhAr cimNqs8/t5njd/WVjyp4h2dhGNnDIxiCGTPKf3dY2giMqW2S4V3cyTR8bx2RA+ec U9f17AeHxxj1YP+N60g5RcqKmqlXHi3Wg32V5cf2HZg3TmGTtdPkUtZKYrJAy6AF RZnTMZqPcqbBjCJiuzrLVHiBlrgGEXI+DOhoQRN4xw5WLKjs/uo6iCF+yDeh2m+0 CXi/ZU0xlHJ9mwnNz7gv8yZY1nY2iBkhwVuJxRZUDueZkioTvgF7Vnf9WBiRcNFu LdzJVu2CNSoTfIkFyoc9Nrx3XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJu/ugJH 7y6lzbXEXI37gZ6SbQxGMB8GA1UdIwQYMBaAFDYSkGkomQgs3iP1BFOkFV4Kq3l4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk0Ri85NjNDRjBDRUVD NUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkNDemVJX1VFVTZRVlhncXJl WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05oS1FhU2laQ0N6ZUlfVUVVNlFWWGdxcmVYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODk0Ri85NjNDRjBDRUVDNUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkND emVJX1VFVTZRVlhncXJlWGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnC2PPOvYOk4PNJcGIe87Zq3xk75W1zqmdT3y1nF4+Wf+gPJEw7DUU5ecS1nL aRfKVyVBsvYHAZAS6yw/by3/PZh3p0S1Eu7sG9wHekCiFAzwtqX5VOPk9b52/f9H BUZM5jZGHP61Gl/KTNPK1saWbGBhaDx6+UrSKnk51FQXLukeH+VOUkgzDn5lF5zT k7ZA7B5r+juSwyKtm21ffIsAWP7aKe495kHTxNtvM1oUYfd3HJ+QBNrALBh/NQx/ 3QNnP7m2a6NZ/7jEN759CmpwYM4RkM4uaefPiQl2ZM45P7M/MudSSpPd7HG6URS5 ujLF5xgDLKCO2NeT2MpOYSUa2g== -----END CERTIFICATE-----Generated at Fri Apr 17 14:13:48 2026 by rpki-client