$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft File: nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json) Hash identifier: QIRHylm/O//lUgAEmf39O7LqnfWsRgh1M8IaAyXUyOI= Subject key identifier: 8E:FB:EB:7A:EC:E9:A4:55:21:96:3C:FF:2B:88:0A:CA:5B:27:B6:46 Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft Manifest number: 01E2 Signing time: Sun 19 Apr 2026 03:38:04 +0000 Manifest this update: Sun 19 Apr 2026 03:38:03 +0000 Manifest next update: Sun 26 Apr 2026 03:38:03 +0000 Files and hashes: 1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: Pb0DPQzNlD8gt4uC6nTySqxsT5QkJ9csipA/gzzv8GQ=) 2: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: cMO5zU9AD/RoFLcnPT+DXNczqdbBJpb9yT+lZHAEick=) 3: 908E69B20D4311F0B83AB36BC4F9AE02.roa (hash: 0rCihLa1R/JwK4jlGINRooaKzW7UBmX+YQfpTQsJlgY=) 4: 551036FCF1CA11EFA1495230C4F9AE02.roa (hash: ph9mjxQXcLl4fEECl4pEGWMTp7mLbB/lR7kFkW96rzY=) 5: CA364B681A1711F0A1D93523C4F9AE02.roa (hash: VMXxFIYcOcmwdzE0TfKotJbGv4ASOkRQEsgw2BaIwTw=) 6: 31C9441E68ED11F0BA447B41C4F9AE02.roa (hash: Tw/mmccci9TsCg4wjjeIfCh0v/cTONBZG05kzKfAujc=) 7: 3C880EBABEEF11EF9178186BC4F9AE02.roa (hash: gDBNV8FCQoQRlF4+Z0of3x2gK+wLXaHl7XFSFbaKadM=) 8: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: RuIzPpPmU5SYBxbzVmTPm1exsa1irL+SD8QrPzFj6WU=) 9: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: BmXwbaUB2PnwCtWWwqTCrL/Z4ZUCXb6in34aW4SAhII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 03:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Validity Not Before: Apr 19 03:38:03 2026 GMT Not After : Apr 26 03:38:03 2026 GMT Subject: CN=69e44e1b-52c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:87:21:d7:cc:8a:64:a9:cc:5d:36:8d:7d:a2: 16:ab:5b:bf:da:b6:03:51:36:57:de:3d:c1:d6:51: 8d:44:87:d8:f5:47:5b:d6:27:b8:0a:bc:a9:ef:14: 43:00:eb:e1:f5:2a:69:12:af:30:3a:c3:d7:42:84: 79:dd:7d:e7:d7:b6:b4:cf:3f:1c:df:79:c5:3a:f9: bb:5c:06:f7:e0:7c:b1:99:2c:0b:8b:7f:a5:ae:05: b3:ad:50:6b:a2:f7:1c:26:31:33:a6:ca:ee:82:c6: d0:38:5c:ac:62:91:a1:90:fd:fa:1c:77:28:c5:c0: 12:94:25:bc:05:4a:d8:83:6a:b4:9c:d5:be:46:33: c8:94:41:da:79:5b:9c:c4:eb:b4:01:9b:01:f0:bb: da:a5:3e:ce:83:c0:fb:03:68:21:3e:90:bd:6a:be: af:18:5a:20:dc:a9:74:94:c0:36:61:8d:cc:8e:d7: 4c:da:87:53:73:80:62:bc:9b:59:80:6f:ce:d5:bb: 58:da:05:76:e5:82:af:c4:e3:b1:dc:1a:aa:de:0b: d2:22:4b:08:e5:88:ab:96:e9:a6:7d:27:fa:44:f2: 9b:52:27:c1:97:71:19:ab:64:3d:81:49:e3:d3:12: 8e:57:2a:82:4f:6a:2e:4e:6e:29:ec:e1:7a:59:a4: eb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FB:EB:7A:EC:E9:A4:55:21:96:3C:FF:2B:88:0A:CA:5B:27:B6:46 X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:40:cf:1c:c4:db:ec:f0:e8:94:d5:e4:1b:64:4b:53:00:b9: 0a:1e:bb:f6:3b:7e:a9:79:ed:05:f4:e0:89:b7:82:7a:33:ed: 02:9d:4b:2c:ef:02:d3:fb:e2:c0:7a:db:97:18:8b:62:8c:6b: 88:23:ff:31:cd:bd:96:df:47:9d:be:e1:cf:00:8f:92:9c:b5: c2:02:6d:91:a3:18:1b:c8:88:fd:46:78:43:0e:d0:0a:7b:a0: 47:4c:96:e3:b6:f5:d2:59:25:3b:77:f1:2a:86:61:f3:7b:c0: e6:86:9b:73:49:5a:ee:01:e6:aa:d4:14:ba:64:2d:91:7d:99: c4:8f:00:46:86:0f:3b:f4:52:3f:d4:63:db:b7:9d:3a:26:d2: 1d:0c:15:02:c3:36:c5:29:3f:cc:59:42:c8:16:ac:b3:7a:6b: cf:99:3e:a6:b7:a8:06:1b:7f:de:1c:b6:2a:2b:f9:0b:d0:38: 34:e6:f9:1b:a4:1a:f5:7b:f3:6e:05:75:bb:a2:b3:4b:84:02: 88:d6:9d:6d:c6:d8:13:a2:3e:0c:7a:58:9a:0f:db:32:4d:69: 12:e1:25:0e:04:fa:b2:22:39:c1:73:9d:46:df:54:32:eb:d7: f6:83:d5:90:a9:c0:60:5e:3b:16:3e:e9:5d:71:79:60:d4:9b: 74:c1:0c:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjYwNDE5MDMzODAzWhcNMjYwNDI2MDMzODAzWjAYMRYwFAYD VQQDEw02OWU0NGUxYi01MmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA44ch18yKZKnMXTaNfaIWq1u/2rYDUTZX3j3B1lGNRIfY9Udb1ie4Cryp7xRD AOvh9SppEq8wOsPXQoR53X3n17a0zz8c33nFOvm7XAb34HyxmSwLi3+lrgWzrVBr ovccJjEzpsrugsbQOFysYpGhkP36HHcoxcASlCW8BUrYg2q0nNW+RjPIlEHaeVuc xOu0AZsB8LvapT7Og8D7A2ghPpC9ar6vGFog3Kl0lMA2YY3MjtdM2odTc4BivJtZ gG/O1btY2gV25YKvxOOx3Bqq3gvSIksI5YirlummfSf6RPKbUifBl3EZq2Q9gUnj 0xKOVyqCT2ouTm4p7OF6WaTrjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI7763rs 6aRVIZY8/yuICspbJ7ZGMB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUQyQy8wMDM3M0M2QzlCQkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0 OVJMekJmS3MyMFBONmVUUkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj0DPHMTb7PDolNXkG2RLUwC5Ch679jt+qXntBfTgibeCejPtAp1LLO8C0/vi wHrblxiLYoxriCP/Mc29lt9Hnb7hzwCPkpy1wgJtkaMYG8iI/UZ4Qw7QCnugR0yW 47b10lklO3fxKoZh83vA5oabc0la7gHmqtQUumQtkX2ZxI8ARoYPO/RSP9Rj27ed OibSHQwVAsM2xSk/zFlCyBass3prz5k+preoBht/3hy2Kiv5C9A4NOb5G6Qa9Xvz bgV1u6KzS4QCiNadbcbYE6I+DHpYmg/bMk1pEuElDgT6siI5wXOdRt9UMuvX9oPV kKnAYF47Fj7pXXF5YNSbdMEMQg== -----END CERTIFICATE-----Generated at Sun Apr 19 11:27:40 2026 by rpki-client