$ rpki-client -vvf rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft File: pi_NZFSmighl9rlcwOh3RJ7z76k.mft (raw, json) Hash identifier: ZZHlzqw4MvxR6jUeLLVqB9N5ow9qjmZQGU5GffLn7TM= Subject key identifier: D4:4B:78:5C:53:91:6E:23:7C:4E:3F:98:CD:71:F3:70:B5:F7:09:08 Authority key identifier: A6:2F:CD:64:54:A6:8A:08:65:F6:B9:5C:C0:E8:77:44:9E:F3:EF:A9 Certificate issuer: /CN=A911BA76/serialNumber=A62FCD6454A68A0865F6B95CC0E877449EF3EFA9 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft Manifest number: 5F Signing time: Fri 17 Apr 2026 07:45:52 +0000 Manifest this update: Fri 17 Apr 2026 07:45:52 +0000 Manifest next update: Fri 24 Apr 2026 07:45:52 +0000 Files and hashes: 1: pi_NZFSmighl9rlcwOh3RJ7z76k.crl (hash: 5HHOlIviE7uX0pPrkqKFVX2sLo7Y5Tr528ePZcv4cSk=) 2: 82CDD7C4B0C011F09232CD7BC4F9AE02.roa (hash: KXtLMxhNV80b7UVLzNEenAj/lw44i+8q+VpDj2RXMEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.crl rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BA76, serialNumber=A62FCD6454A68A0865F6B95CC0E877449EF3EFA9 Validity Not Before: Apr 17 07:45:52 2026 GMT Not After : Apr 24 07:45:52 2026 GMT Subject: CN=69e1e530-a3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:58:9f:4b:c7:fe:59:b9:ed:f4:0a:99:36: 18:dc:4a:b0:fe:af:80:c3:c5:95:aa:c1:f6:71:a4: b0:7b:2c:c5:bd:a0:a6:c7:b3:a3:ee:e5:e1:0b:20: 2b:2f:e5:d6:4b:dd:e5:b1:48:68:7e:fd:e0:cd:64: 76:83:27:54:a6:d3:7e:c6:a5:19:0d:48:b0:1c:8b: 34:bb:45:95:15:a7:a6:d6:ad:44:71:ed:ab:45:75: 75:bb:e0:31:ee:93:d0:af:7f:66:f7:e5:23:e5:ee: c2:0a:f3:4c:7b:d3:07:7d:95:58:56:05:0e:13:9d: d2:09:b4:d4:4c:2a:43:9a:b6:42:f7:9f:75:ed:85: 35:f1:8a:d3:a8:ac:65:c6:e1:94:81:66:70:92:a1: 70:8f:02:dd:44:b3:79:73:69:0e:ca:20:64:42:ea: f1:f6:71:88:8c:1b:18:87:bd:bb:3e:af:6b:8f:df: 1c:7f:59:64:65:4b:30:14:56:8a:44:b5:2a:93:96: 43:da:f7:c6:63:1f:3c:d9:88:3c:db:af:e4:0a:bb: 7b:ad:5b:55:5f:9d:7f:f5:55:90:d6:36:12:45:e5: bc:23:87:ab:79:70:e8:04:c0:f5:d6:3c:3a:9a:99: c5:07:8b:75:90:31:18:68:cd:b1:22:5b:82:81:ea: 29:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4B:78:5C:53:91:6E:23:7C:4E:3F:98:CD:71:F3:70:B5:F7:09:08 X509v3 Authority Key Identifier: keyid:A6:2F:CD:64:54:A6:8A:08:65:F6:B9:5C:C0:E8:77:44:9E:F3:EF:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:08:12:73:73:be:fc:d4:b5:ac:4d:6f:0a:f5:2c:2c:1d:68: 7b:69:20:aa:62:12:3f:66:f3:7e:f4:a8:33:9e:59:c1:e3:5d: 6d:f0:04:b0:0c:17:d1:75:5a:a1:44:4b:b5:e8:5a:60:a5:66: e3:93:af:16:7a:c0:3d:3b:11:ca:a1:be:98:ee:ac:a8:80:63: a3:a5:d9:46:e0:91:2f:1e:56:36:51:7b:5f:cf:ae:39:6f:36: 24:28:c9:65:17:cd:4b:43:c3:d2:55:16:80:30:f6:38:ce:df: f9:db:e3:ef:1e:04:d5:24:9c:fa:eb:69:44:c3:db:95:e3:b1: e9:cb:05:80:7d:f8:4c:b5:1e:21:59:89:b4:ee:e8:c3:9e:3c: 86:09:db:20:19:de:38:4c:17:21:56:18:70:8b:e4:b6:d0:49: 0b:76:80:dd:c0:9b:ce:ca:58:b7:14:6b:bd:c7:28:76:a5:62: aa:23:20:d4:72:38:fa:d7:9d:d1:d7:cd:7c:68:6e:9b:db:f1: 0c:16:80:e8:5d:d4:34:db:98:3a:4a:53:fd:16:8e:5f:a2:41: 1c:fc:16:cc:1d:b0:20:2e:1c:04:38:9b:08:bb:eb:5f:c7:95: 32:71:52:e1:cf:39:e9:07:99:48:c6:f0:ca:ad:c7:6e:a4:38: ba:d6:c7:de -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkE3NjExMC8GA1UEBRMoQTYyRkNENjQ1NEE2OEEwODY1RjZCOTVDQzBFODc3NDQ5 RUYzRUZBOTAeFw0yNjA0MTcwNzQ1NTJaFw0yNjA0MjQwNzQ1NTJaMBgxFjAUBgNV BAMTDTY5ZTFlNTMwLWEzZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7dFifS8f+Wbnt9AqZNhjcSrD+r4DDxZWqwfZxpLB7LMW9oKbHs6Pu5eELICsv 5dZL3eWxSGh+/eDNZHaDJ1Sm037GpRkNSLAcizS7RZUVp6bWrURx7atFdXW74DHu k9Cvf2b35SPl7sIK80x70wd9lVhWBQ4TndIJtNRMKkOatkL3n3XthTXxitOorGXG 4ZSBZnCSoXCPAt1Es3lzaQ7KIGRC6vH2cYiMGxiHvbs+r2uP3xx/WWRlSzAUVopE tSqTlkPa98ZjHzzZiDzbr+QKu3utW1VfnX/1VZDWNhJF5bwjh6t5cOgEwPXWPDqa mcUHi3WQMRhozbEiW4KB6ilvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1Et4XFOR biN8Tj+YzXHzcLX3CQgwHwYDVR0jBBgwFoAUpi/NZFSmighl9rlcwOh3RJ7z76kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCQTc2LzA4N0NDN0EwQjBD MDExRjBCNjlFQTI1NkM0RjlBRTAyL3BpX05aRlNtaWdobDlybGN3T2gzUko3ejc2 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGlfTlpGU21pZ2hsOXJsY3dPaDNSSjd6NzZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC QTc2LzA4N0NDN0EwQjBDMDExRjBCNjlFQTI1NkM0RjlBRTAyL3BpX05aRlNtaWdo bDlybGN3T2gzUko3ejc2ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQASCBJzc7781LWsTW8K9SwsHWh7aSCqYhI/ZvN+9KgznlnB411t8ASwDBfRdVqh REu16FpgpWbjk68WesA9OxHKob6Y7qyogGOjpdlG4JEvHlY2UXtfz645bzYkKMll F81LQ8PSVRaAMPY4zt/52+PvHgTVJJz662lEw9uV47HpywWAffhMtR4hWYm07ujD njyGCdsgGd44TBchVhhwi+S20EkLdoDdwJvOyli3FGu9xyh2pWKqIyDUcjj6153R 1818aG6b2/EMFoDoXdQ025g6SlP9Fo5fokEc/BbMHbAgLhwEOJsIu+tfx5UycVLh zznpB5lIxvDKrcdupDi61sfe -----END CERTIFICATE-----Generated at Fri Apr 17 16:17:00 2026 by rpki-client