$ rpki-client -vvf rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft File: NdqtT3Wuk43GUzSEzejIF93Csig.mft (raw, json) Hash identifier: sekKeq3vHJVersGNcZuqTp7OCiW2EjCWOqQYUF/5Ihs= Subject key identifier: 6D:D9:0B:E2:5A:61:77:7B:79:DD:84:67:FE:3F:26:1B:85:4C:3E:CC Authority key identifier: 35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 Certificate issuer: /CN=A911E351/serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Certificate serial: 04A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft Manifest number: 049F Signing time: Sat 18 Apr 2026 23:51:59 +0000 Manifest this update: Sat 18 Apr 2026 23:51:58 +0000 Manifest next update: Sat 25 Apr 2026 23:51:58 +0000 Files and hashes: 1: NdqtT3Wuk43GUzSEzejIF93Csig.crl (hash: /5zWfQr1WgUzBEMt+uc18on3QeTK3NuHQdFKNjd0lUc=) 2: E9ED080A785011ECBD2B6A10C4F9AE02.roa (hash: 0VJSSuNZNqd6Mi6Fcfyrw/oW75/x9p5H40HqIw6BOBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 23:51:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1190 (0x4a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E351, serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Validity Not Before: Apr 18 23:51:58 2026 GMT Not After : Apr 25 23:51:58 2026 GMT Subject: CN=69e4191f-2f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8e:80:e2:80:bc:15:88:0a:52:93:07:0f:17: 1c:aa:79:f0:c6:5b:bc:83:c4:87:d3:79:3c:98:bb: 80:ac:e0:67:86:6c:04:ab:52:8d:aa:4a:4e:b2:6b: c3:70:7c:03:f2:fe:9c:af:29:f1:46:79:de:55:98: 9e:6e:b5:d2:32:6b:8d:cd:bc:f7:c9:1a:32:a4:50: 18:73:fd:b9:96:5a:5a:31:a0:70:62:26:f7:c0:f3: 31:60:db:cd:da:c3:2a:de:9a:10:10:16:e5:71:8f: c5:29:39:14:cb:e5:2e:1e:a3:97:a3:fe:85:d7:d5: 2f:2b:46:c3:96:43:00:da:27:54:18:0d:df:67:b1: 8f:4e:6e:c2:bb:06:6a:ff:3e:00:4a:6d:11:a4:e1: e0:15:0e:8b:fe:ec:a4:c9:8f:cd:42:2b:4d:42:b2: dd:30:a5:71:96:15:33:78:38:72:16:cf:94:e7:e1: ac:d4:96:fb:2a:79:b8:b0:0a:3c:dd:64:3e:67:8c: ee:f3:f5:fd:ac:12:6d:99:d1:69:c7:e9:e6:69:6e: 64:83:39:48:04:16:94:e7:6f:94:53:cc:ea:b8:df: 2e:d0:e3:86:8d:26:17:4a:56:1f:76:a8:fb:be:4f: 68:1f:08:46:00:9c:04:1a:5d:55:ee:5c:bf:d4:b7: 21:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D9:0B:E2:5A:61:77:7B:79:DD:84:67:FE:3F:26:1B:85:4C:3E:CC X509v3 Authority Key Identifier: keyid:35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:75:35:b1:4d:7a:0f:fa:bc:b0:6c:37:a3:f7:1a:4e:6b:c6: 66:5e:11:e5:6d:47:b1:c5:e0:4b:9b:e6:60:d3:69:1c:ac:f4: 39:2b:67:d5:04:8e:01:a2:9d:9c:e1:c3:30:57:99:2a:05:a6: 73:30:a8:1e:f0:f9:18:5a:37:8d:14:05:b3:0a:db:e6:d2:73: 59:ae:e0:ce:b0:a8:e1:78:10:aa:a1:86:ef:c8:ba:51:6b:a7: b6:7f:96:16:25:4b:54:b2:6f:78:c0:08:ef:46:5d:e2:34:a2: cf:e8:ac:cc:ce:f7:2f:a4:1e:14:e3:98:21:31:50:b2:5f:f9: e2:ab:93:8b:73:51:61:4e:bf:3f:92:e4:db:10:ee:ac:d7:d5: 55:aa:2f:82:84:ea:67:b7:f6:3f:ed:08:af:c2:0c:36:3a:12: 90:89:ec:63:06:cb:a5:d4:af:f4:e5:f1:c4:8e:b7:6c:24:8c: e2:bf:02:47:01:1b:04:9b:a7:55:5a:65:4a:4c:7f:49:9f:3c: 59:a5:24:ae:ba:dc:0d:4b:7e:aa:d9:6a:be:5e:c4:22:60:21: 6f:f8:08:16:67:dc:03:5f:ae:bb:d2:02:8b:46:1f:41:f1:83: 85:a0:ba:85:3f:0c:d7:68:a2:c9:8c:6d:fd:ff:ad:3c:fd:24: 78:f8:fd:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUzNTExMTAvBgNVBAUTKDM1REFBRDRGNzVBRTkzOERDNjUzMzQ4NENERThDODE3 RERDMkIyMjgwHhcNMjYwNDE4MjM1MTU4WhcNMjYwNDI1MjM1MTU4WjAYMRYwFAYD VQQDEw02OWU0MTkxZi0yZjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA646A4oC8FYgKUpMHDxccqnnwxlu8g8SH03k8mLuArOBnhmwEq1KNqkpOsmvD cHwD8v6crynxRnneVZiebrXSMmuNzbz3yRoypFAYc/25llpaMaBwYib3wPMxYNvN 2sMq3poQEBblcY/FKTkUy+UuHqOXo/6F19UvK0bDlkMA2idUGA3fZ7GPTm7CuwZq /z4ASm0RpOHgFQ6L/uykyY/NQitNQrLdMKVxlhUzeDhyFs+U5+Gs1Jb7Knm4sAo8 3WQ+Z4zu8/X9rBJtmdFpx+nmaW5kgzlIBBaU52+UU8zquN8u0OOGjSYXSlYfdqj7 vk9oHwhGAJwEGl1V7ly/1Lch6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG3ZC+Ja YXd7ed2EZ/4/JhuFTD7MMB8GA1UdIwQYMBaAFDXarU91rpONxlM0hM3oyBfdwrIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTM1MS81QkNGODhBNjc4 NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0M0dVelNFemVqSUY5M0Nz aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05kcXRUM1d1azQzR1V6U0V6ZWpJRjkzQ3NpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTM1MS81QkNGODhBNjc4NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0 M0dVelNFemVqSUY5M0NzaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAw3U1sU16D/q8sGw3o/caTmvGZl4R5W1HscXgS5vmYNNpHKz0OStn1QSOAaKd nOHDMFeZKgWmczCoHvD5GFo3jRQFswrb5tJzWa7gzrCo4XgQqqGG78i6UWuntn+W FiVLVLJveMAI70Zd4jSiz+iszM73L6QeFOOYITFQsl/54quTi3NRYU6/P5Lk2xDu rNfVVaovgoTqZ7f2P+0Ir8IMNjoSkInsYwbLpdSv9OXxxI63bCSM4r8CRwEbBJun VVplSkx/SZ88WaUkrrrcDUt+qtlqvl7EImAhb/gIFmfcA1+uu9ICi0YfQfGDhaC6 hT8M12iiyYxt/f+tPP0kePj9mQ== -----END CERTIFICATE-----Generated at Sun Apr 19 13:02:00 2026 by rpki-client