$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft File: nflMM9P2R649kTYeHxcsIGhvWYk.mft (raw, json) Hash identifier: kUAgBjfChvZ//An2Q9tQCZXjnrGGv2b0uyje1MCuNEg= Subject key identifier: 3D:26:93:02:1A:ED:81:72:3F:62:08:34:C9:44:40:60:A2:6F:26:8E Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 Certificate issuer: /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Certificate serial: 0EA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft Manifest number: 0E79 Signing time: Thu 16 Apr 2026 17:41:12 +0000 Manifest this update: Thu 16 Apr 2026 17:41:11 +0000 Manifest next update: Thu 23 Apr 2026 17:41:11 +0000 Files and hashes: 1: nflMM9P2R649kTYeHxcsIGhvWYk.crl (hash: pnTDBP+ROCQjZ1XNHq/Ejh8dr9HiufrOwtpvx1uwUgo=) 2: 9F8B79C2C78E11EBB4983F5BC4F9AE02.roa (hash: d9F++wY6Y6kgkdiYtZ2QORaHxCioMHguW70TTV+zajY=) 3: 9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (hash: xnBTgZgKcT/ckvkR025VfmbRMRDm1gAIO/fOxIRSEIM=) 4: 47E67066B82A11E9843DEE0AC4F9AE02.roa (hash: zukV/SXcPzYBgJKVgWzwFqdqBSRV39PGc6HpPmopdXY=) 5: 46B27CC6B82A11E9843DEE0AC4F9AE02.roa (hash: 4N6uyRk5nJ01NdKd6SKeVxfMhzqmYtvkZXZd8f8mRwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3752 (0xea8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B4, serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Validity Not Before: Apr 16 17:41:11 2026 GMT Not After : Apr 23 17:41:11 2026 GMT Subject: CN=69e11f38-b1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:64:b3:4b:0e:6b:99:92:67:39:a8:95:cd:5a: bc:48:2c:9e:7b:fd:90:7a:6d:db:95:55:21:0c:bf: 8e:d0:c6:34:cf:6d:1c:bf:4a:3d:dd:3e:9b:b3:1c: e9:64:d2:9c:44:d2:cd:13:7f:1a:5b:69:af:52:db: 85:04:51:2e:5e:20:44:66:f3:9a:65:e0:25:9a:51: e5:c3:ab:aa:ff:29:32:c6:f8:24:ef:d6:79:79:c8: 06:e1:8b:f4:8c:21:53:34:e0:4e:0c:49:43:c3:30: ce:4c:0b:89:fc:53:a2:e8:72:2a:08:ea:2a:f5:00: a5:95:e6:44:c8:64:63:e1:7a:33:e7:ea:bc:ed:4f: ba:60:c0:64:89:f6:44:ec:25:90:8f:8d:02:91:ef: b7:b9:46:e7:3e:ff:77:3b:07:6f:48:5e:40:65:96: ee:e3:c7:4b:8c:a5:41:18:92:04:5d:bf:ee:1f:39: 72:38:fb:14:21:3e:a4:62:c7:c1:85:41:fa:ec:8e: a7:3d:e4:6f:ea:c2:5f:bc:00:31:13:30:f7:37:b3: 4c:a4:a9:bd:02:4e:32:a9:05:b4:9b:dc:e1:3b:d3: 49:68:e8:a0:e8:57:3d:b4:54:6a:bf:8b:ba:71:64: dd:94:a3:40:42:c0:d4:4a:4a:9d:6a:f4:b5:c7:a6: 62:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:26:93:02:1A:ED:81:72:3F:62:08:34:C9:44:40:60:A2:6F:26:8E X509v3 Authority Key Identifier: keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d5:6f:d2:f1:d1:9d:2a:34:0e:85:61:76:75:87:b4:29:a2: d8:f9:42:a9:c5:bc:c6:e4:65:45:ea:13:15:e8:d4:6d:0d:83: 5b:44:d5:a1:0d:2d:fc:b6:6e:26:ad:38:7a:24:d4:62:ee:13: ae:2b:a7:c2:08:76:c5:ac:4c:a7:50:c6:e2:74:ad:0a:92:7a: 00:cf:7c:02:27:29:d9:23:44:18:3e:bf:38:e6:01:d9:e7:88: 2c:5f:fe:59:6e:88:ae:dc:42:f5:2e:2e:96:54:be:9a:fd:8a: 5d:ab:f0:84:da:13:4c:ea:97:1c:d2:ba:5c:df:ef:4e:d7:50: ff:07:5a:89:93:04:e4:78:30:4f:95:d8:9a:b1:6f:f6:f4:92: d1:36:78:63:57:b7:6b:f6:15:d6:4a:bd:4b:c8:57:2a:a8:dd: 5f:b5:3e:b7:da:13:f6:01:bf:7e:2d:57:5d:c4:7f:4c:01:e5: 58:a8:62:a7:7a:59:fe:0d:0c:6c:b3:40:8a:e8:6b:9e:05:27: 3c:00:06:f9:48:9c:2a:c3:ce:d8:53:d9:65:b0:a2:bc:b0:e6: a6:eb:21:1f:bf:c0:cb:59:71:59:13:60:7c:06:c6:d1:82:3a: ad:1f:4d:65:3b:e4:b1:68:e8:44:e0:bd:b3:7c:c6:bc:fb:cf: ee:7c:cf:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjQxMTAvBgNVBAUTKDlERjk0QzMzRDNGNjQ3QUUzRDkxMzYxRTFGMTcyQzIw Njg2RjU5ODkwHhcNMjYwNDE2MTc0MTExWhcNMjYwNDIzMTc0MTExWjAYMRYwFAYD VQQDEw02OWUxMWYzOC1iMWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4mSzSw5rmZJnOaiVzVq8SCyee/2Qem3blVUhDL+O0MY0z20cv0o93T6bsxzp ZNKcRNLNE38aW2mvUtuFBFEuXiBEZvOaZeAlmlHlw6uq/ykyxvgk79Z5ecgG4Yv0 jCFTNOBODElDwzDOTAuJ/FOi6HIqCOoq9QClleZEyGRj4Xoz5+q87U+6YMBkifZE 7CWQj40Cke+3uUbnPv93OwdvSF5AZZbu48dLjKVBGJIEXb/uHzlyOPsUIT6kYsfB hUH67I6nPeRv6sJfvAAxEzD3N7NMpKm9Ak4yqQW0m9zhO9NJaOig6Fc9tFRqv4u6 cWTdlKNAQsDUSkqdavS1x6ZifwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0mkwIa 7YFyP2IINMlEQGCibyaOMB8GA1UdIwQYMBaAFJ35TDPT9keuPZE2Hh8XLCBob1mJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCNC83MDlGN0EyNkI4 MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2NDlrVFllSHhjc0lHaHZX WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25mbE1NOVAyUjY0OWtUWWVIeGNzSUdodldZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVCNC83MDlGN0EyNkI4MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2 NDlrVFllSHhjc0lHaHZXWWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa9Vv0vHRnSo0DoVhdnWHtCmi2PlCqcW8xuRlReoTFejUbQ2DW0TVoQ0t/LZu Jq04eiTUYu4Triunwgh2xaxMp1DG4nStCpJ6AM98Aicp2SNEGD6/OOYB2eeILF/+ WW6IrtxC9S4ullS+mv2KXavwhNoTTOqXHNK6XN/vTtdQ/wdaiZME5HgwT5XYmrFv 9vSS0TZ4Y1e3a/YV1kq9S8hXKqjdX7U+t9oT9gG/fi1XXcR/TAHlWKhip3pZ/g0M bLNAiuhrngUnPAAG+UicKsPO2FPZZbCivLDmpushH7/Ay1lxWRNgfAbG0YI6rR9N ZTvksWjoROC9s3zGvPvP7nzP/Q== -----END CERTIFICATE-----Generated at Fri Apr 17 07:09:42 2026 by rpki-client