$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft File: nkKx9pFGDihG-nHwbcib8sdB25o.mft (raw, json) Hash identifier: rRySKxTfOEU4UM8rO6P9e0TT8qbYQqZPIvdCHLBgsCk= Subject key identifier: 4E:09:D7:28:72:CB:7F:F5:1D:30:3C:4A:B6:28:57:F3:1B:97:8E:91 Authority key identifier: 9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A Certificate issuer: /CN=A911BCDD/serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft Manifest number: 01C8 Signing time: Fri 17 Apr 2026 03:29:43 +0000 Manifest this update: Fri 17 Apr 2026 03:29:43 +0000 Manifest next update: Fri 24 Apr 2026 03:29:43 +0000 Files and hashes: 1: nkKx9pFGDihG-nHwbcib8sdB25o.crl (hash: +nRJIdqXZxmFHBpu/T5mY/v+0McQip45/+Y78dc9aj0=) 2: 5ED417AE869011EEA9011A36C4F9AE02.roa (hash: Qx6h3CTOkKIiFv1hoz1s6u5nieG3giT15j3ng44V7sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCDD, serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Validity Not Before: Apr 17 03:29:43 2026 GMT Not After : Apr 24 03:29:43 2026 GMT Subject: CN=69e1a927-6cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:89:cf:e8:00:ef:24:2c:07:56:aa:34:e1: d6:3c:2f:b8:d3:c1:4b:4b:0e:e9:a0:d6:6f:27:d6: 51:63:fd:29:6f:ca:73:31:34:7a:de:e0:5f:24:0a: 87:ec:25:20:73:52:5e:2c:5b:66:67:88:ed:ac:b7: dd:bc:09:55:28:66:11:d8:db:b7:c9:bb:16:28:eb: d2:c9:42:83:2d:77:0c:22:d2:ca:79:0f:9d:20:7f: 3e:0c:56:65:64:7c:04:8b:9b:76:d3:b4:e1:23:44: ab:71:b6:af:44:ac:14:e3:3e:25:ec:6b:cb:51:2f: e0:fa:0f:52:73:96:f5:b9:ac:96:1b:e5:ad:6f:0e: af:0f:89:84:9d:9c:71:1b:20:2d:4c:ad:35:c0:7b: 12:82:bf:96:cf:3f:0a:f4:77:de:de:fb:ed:b3:45: e9:67:a4:ec:30:f3:a6:91:0a:7e:87:5d:b0:45:55: 72:30:88:7a:14:30:ba:f1:d8:ac:49:c3:87:8b:57: df:14:15:b8:84:9e:18:e3:f3:2f:25:25:ba:10:fa: f8:54:bf:a9:a3:93:e6:bf:46:f6:3a:0a:1c:48:48: 30:47:77:9e:a6:09:21:52:5a:fe:1a:b5:de:45:2d: 8a:53:86:b7:d2:f9:41:72:6c:61:af:55:1c:92:81: 53:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:09:D7:28:72:CB:7F:F5:1D:30:3C:4A:B6:28:57:F3:1B:97:8E:91 X509v3 Authority Key Identifier: keyid:9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:2a:27:70:06:6f:12:94:d8:be:f0:7e:5f:ec:11:29:72:55: 3e:b7:c7:c5:52:60:b7:8d:65:1b:16:b8:1f:b6:48:96:e1:a9: 31:2a:dd:6d:a2:4b:64:7c:1b:ae:f4:57:af:5e:d7:a9:5e:43: 15:e4:9b:0b:a2:59:f2:a8:08:cd:28:bf:27:20:a3:fa:4a:79: 5b:9c:bf:f3:f3:f6:ee:65:7e:5e:ec:02:2a:f6:ad:48:8f:73: 44:7f:87:15:3b:38:a7:29:72:87:ff:8e:aa:dc:c2:e3:10:b8: 13:04:a1:35:96:4f:c9:f3:5f:a5:9b:29:22:ca:71:fa:aa:8c: ff:96:fd:fe:27:89:72:cf:3d:ab:1f:4f:15:b6:0d:b3:80:8a: e0:a4:1d:58:75:16:eb:8f:0e:97:68:f4:a0:2f:17:d8:3f:5a: d0:2b:4f:bc:7b:95:67:05:98:3b:f0:f4:2b:38:fc:29:11:7e: 64:68:98:f8:95:51:e9:fa:3f:03:26:c5:0a:53:ea:30:41:b1: a2:52:47:01:72:54:92:cd:6d:e3:f2:ef:1c:3a:08:4f:61:d3: f3:9f:a3:23:97:cf:15:0c:30:da:69:18:a9:c6:b5:85:21:0a: c1:67:c0:c1:d6:c8:9d:25:bf:db:ea:88:27:3c:15:47:4b:a9: 32:49:69:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDREQxMTAvBgNVBAUTKDlFNDJCMUY2OTE0NjBFMjg0NkZBNzFGMDZEQzg5QkYy Qzc0MURCOUEwHhcNMjYwNDE3MDMyOTQzWhcNMjYwNDI0MDMyOTQzWjAYMRYwFAYD VQQDEw02OWUxYTkyNy02Y2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAroKJz+gA7yQsB1aqNOHWPC+408FLSw7poNZvJ9ZRY/0pb8pzMTR63uBfJAqH 7CUgc1JeLFtmZ4jtrLfdvAlVKGYR2Nu3ybsWKOvSyUKDLXcMItLKeQ+dIH8+DFZl ZHwEi5t207ThI0SrcbavRKwU4z4l7GvLUS/g+g9Sc5b1uayWG+Wtbw6vD4mEnZxx GyAtTK01wHsSgr+Wzz8K9Hfe3vvts0XpZ6TsMPOmkQp+h12wRVVyMIh6FDC68dis ScOHi1ffFBW4hJ4Y4/MvJSW6EPr4VL+po5Pmv0b2OgocSEgwR3eepgkhUlr+GrXe RS2KU4a30vlBcmxhr1UckoFTqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE4J1yhy y3/1HTA8SrYoV/Mbl46RMB8GA1UdIwQYMBaAFJ5CsfaRRg4oRvpx8G3Im/LHQdua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNERC8zNDhBRDhBQzg2 MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0RpaEctbkh3YmNpYjhzZEIy NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25rS3g5cEZHRGloRy1uSHdiY2liOHNkQjI1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNERC8zNDhBRDhBQzg2MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0Rp aEctbkh3YmNpYjhzZEIyNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEyoncAZvEpTYvvB+X+wRKXJVPrfHxVJgt41lGxa4H7ZIluGpMSrdbaJLZHwb rvRXr17XqV5DFeSbC6JZ8qgIzSi/JyCj+kp5W5y/8/P27mV+XuwCKvatSI9zRH+H FTs4pylyh/+OqtzC4xC4EwShNZZPyfNfpZspIspx+qqM/5b9/ieJcs89qx9PFbYN s4CK4KQdWHUW648Ol2j0oC8X2D9a0CtPvHuVZwWYO/D0Kzj8KRF+ZGiY+JVR6fo/ AybFClPqMEGxolJHAXJUks1t4/LvHDoIT2HT85+jI5fPFQww2mkYqca1hSEKwWfA wdbInSW/2+qIJzwVR0upMklpqA== -----END CERTIFICATE-----Generated at Fri Apr 17 20:54:32 2026 by rpki-client