$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft File: NQcxtmBE00o9LadYm9gzHRRf5Jg.mft (raw, json) Hash identifier: e5yRlokG/MEyxhS3XwiK5HjW1wq+xvr+1AuAN8N6+OA= Subject key identifier: 5A:3D:19:C0:96:AC:0B:AE:59:63:60:B6:D8:E5:67:18:DF:E4:53:7F Authority key identifier: 35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98 Certificate issuer: /CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498 Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft Manifest number: 016D Signing time: Wed 15 Apr 2026 04:23:14 +0000 Manifest this update: Wed 15 Apr 2026 04:23:14 +0000 Manifest next update: Wed 22 Apr 2026 04:23:14 +0000 Files and hashes: 1: NQcxtmBE00o9LadYm9gzHRRf5Jg.crl (hash: JKJ30N8W9F4ZIGJVrJG/idTXjLmBnMhiFuEDrxSfoz4=) 2: 7036FFF00E9611EF8B4CB827C4F9AE02.roa (hash: UjpEnJbWEEameT5NyA6GTtZ6l6bxgo6wSQmSr5ohGUM=) 3: 6FC4A52C0E9611EF8B4CB827C4F9AE02.roa (hash: wmNPnDvvzaXNcEvPjVuLtrgnnHPLzw2rLFktnj5ROwE=) 4: BB90D9FECF4B11F08EB76486C4F9AE02.roa (hash: rXEcC70BHU9BGaTrOUEVMio2SeHlBdWNjj8ucac2NAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 04:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118A69, serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498 Validity Not Before: Apr 15 04:23:14 2026 GMT Not After : Apr 22 04:23:14 2026 GMT Subject: CN=69df12b2-acca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:b6:f8:72:36:f5:59:7f:5b:94:09:0b:17: a4:ea:65:ac:ea:0d:56:7b:57:57:aa:63:33:2d:14: 8d:23:5c:47:16:64:e3:4b:9e:ee:8b:cc:9b:52:13: 37:3c:2c:e2:4f:31:27:43:33:a3:40:d0:30:94:13: c7:bb:2c:94:81:cf:c3:63:9e:a2:0a:a9:60:93:fe: b1:c2:bb:1f:bf:09:de:ff:d7:e3:93:50:4d:f0:9c: be:e4:3d:fb:2d:0c:7b:7f:81:d5:7c:13:d2:f2:a8: f9:bc:70:df:2a:a4:70:45:01:e3:a6:44:15:99:a2: 4b:09:35:e0:6d:25:47:03:0b:1a:0c:e1:2a:5f:83: e0:ac:a9:a5:29:b3:eb:37:4a:ed:53:63:2f:57:3f: 0b:ee:1f:65:72:33:dd:51:f3:4e:9c:a3:2d:ba:a0: a6:4a:a9:56:37:6b:de:a4:a4:6c:65:05:db:9e:fa: 40:70:7e:8b:5b:54:00:59:d5:4d:dd:cd:2c:65:e4: cb:25:85:c7:4e:30:8d:63:2f:21:b2:4d:f5:de:bd: 1c:e2:33:3a:56:02:c5:ba:e1:7c:5b:d8:ca:a7:01: fd:68:da:83:20:31:9f:40:06:68:71:26:be:23:25: 16:ac:91:05:04:af:8c:71:46:f3:3c:f4:5f:96:24: 04:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3D:19:C0:96:AC:0B:AE:59:63:60:B6:D8:E5:67:18:DF:E4:53:7F X509v3 Authority Key Identifier: keyid:35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:6d:d5:b8:75:90:6e:23:be:7d:f1:03:89:5f:41:e3:71:d1: a2:9c:5e:5c:82:2f:52:3c:b6:a9:f6:f4:62:fa:1e:d9:77:e2: f5:29:fc:ff:9a:98:82:0a:fb:9f:d9:1a:41:3b:91:d9:4c:bb: 9c:af:2b:f5:71:df:fc:98:56:0f:01:77:ee:2e:db:ab:8f:d7: 1d:fd:f4:b8:f1:51:3d:5e:0f:39:ab:b5:b6:78:ba:6a:63:ab: b1:6d:20:32:72:0d:2b:94:38:00:ee:2f:4b:e6:3e:57:3f:0e: 11:1c:84:f3:a9:73:a0:f1:3b:2a:d3:de:50:ea:ed:0e:bc:4c: 58:8f:92:cb:80:ce:c0:ce:92:84:55:0f:d6:d9:e4:43:31:c7: 19:fa:59:aa:6c:d8:dc:62:b7:88:e1:e3:10:a5:52:aa:12:37: af:a7:2c:df:d7:2a:cd:b8:c7:e0:40:46:d1:e2:a6:9d:40:3f: ef:93:a3:a8:63:b3:a4:51:b6:b6:94:30:73:5e:cd:03:3c:36: 2f:cf:99:ea:77:b7:cd:d2:b4:b5:3d:cb:9f:ab:9d:6d:9f:cd: a7:02:fd:4e:55:90:82:50:4f:5f:bd:b6:e6:b4:ac:0b:86:f6: 9b:fc:ab:5e:d4:a5:a0:50:d7:4d:e4:73:81:6b:04:c0:5f:e7: 5f:d0:f0:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThBNjkxMTAvBgNVBAUTKDM1MDczMUI2NjA0NEQzNEEzRDJEQTc1ODlCRDgzMzFE MTQ1RkU0OTgwHhcNMjYwNDE1MDQyMzE0WhcNMjYwNDIyMDQyMzE0WjAYMRYwFAYD VQQDEw02OWRmMTJiMi1hY2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvN22+HI29Vl/W5QJCxek6mWs6g1We1dXqmMzLRSNI1xHFmTjS57ui8ybUhM3 PCziTzEnQzOjQNAwlBPHuyyUgc/DY56iCqlgk/6xwrsfvwne/9fjk1BN8Jy+5D37 LQx7f4HVfBPS8qj5vHDfKqRwRQHjpkQVmaJLCTXgbSVHAwsaDOEqX4PgrKmlKbPr N0rtU2MvVz8L7h9lcjPdUfNOnKMtuqCmSqlWN2vepKRsZQXbnvpAcH6LW1QAWdVN 3c0sZeTLJYXHTjCNYy8hsk313r0c4jM6VgLFuuF8W9jKpwH9aNqDIDGfQAZocSa+ IyUWrJEFBK+McUbzPPRfliQEXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFo9GcCW rAuuWWNgttjlZxjf5FN/MB8GA1UdIwQYMBaAFDUHMbZgRNNKPS2nWJvYMx0UX+SY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEE2OS9DNjIwMTFENjBD RTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAwbzlMYWRZbTlnekhSUmY1 SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05RY3h0bUJFMDBvOUxhZFltOWd6SFJSZjVKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEE2OS9DNjIwMTFENjBDRTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAw bzlMYWRZbTlnekhSUmY1SmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArG3VuHWQbiO+ffEDiV9B43HRopxeXIIvUjy2qfb0Yvoe2Xfi9Sn8/5qYggr7 n9kaQTuR2Uy7nK8r9XHf/JhWDwF37i7bq4/XHf30uPFRPV4POau1tni6amOrsW0g MnINK5Q4AO4vS+Y+Vz8OERyE86lzoPE7KtPeUOrtDrxMWI+Sy4DOwM6ShFUP1tnk QzHHGfpZqmzY3GK3iOHjEKVSqhI3r6cs39cqzbjH4EBG0eKmnUA/75OjqGOzpFG2 tpQwc17NAzw2L8+Z6ne3zdK0tT3Ln6udbZ/NpwL9TlWQglBPX7225rSsC4b2m/yr XtSloFDXTeRzgWsEwF/nX9Dwng== -----END CERTIFICATE-----Generated at Fri Apr 17 00:04:19 2026 by rpki-client