$ rpki-client -vvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft File: nxsx-ncAt0WPwYibhiVBzp1IJMo.mft (raw, json) Hash identifier: v2gx8yXwFZiakC3zov9b7rmujGm5bzSo9fWIZEKLVN0= Subject key identifier: 44:55:76:2E:57:03:0C:F6:DA:22:C6:9C:68:99:45:10:B7:19:A1:46 Authority key identifier: 9F:1B:31:FA:77:00:B7:45:8F:C1:88:9B:86:25:41:CE:9D:48:24:CA Certificate issuer: /CN=A912963D/serialNumber=9F1B31FA7700B7458FC1889B862541CE9D4824CA Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft Manifest number: 101D Signing time: Thu 16 Apr 2026 17:25:41 +0000 Manifest this update: Thu 16 Apr 2026 17:25:41 +0000 Manifest next update: Thu 23 Apr 2026 17:25:41 +0000 Files and hashes: 1: nxsx-ncAt0WPwYibhiVBzp1IJMo.crl (hash: At2kNIWJwvJLJyWpMcTbmRTw2sepXgdxAwqIaAXuotc=) 2: B2F3EE3C12C911F1AFB167917BEE528E.roa (hash: VhqZnu8kzqQxVrcP2wLUdoKfWprmpAgRyy5IRUHDzoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.crl rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912963D, serialNumber=9F1B31FA7700B7458FC1889B862541CE9D4824CA Validity Not Before: Apr 16 17:25:41 2026 GMT Not After : Apr 23 17:25:41 2026 GMT Subject: CN=69e11b95-311e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cb:78:e8:8f:d3:21:a5:fd:2a:1e:25:57:78: 45:b6:0b:31:e1:76:ca:54:df:71:4c:ed:71:25:84: 1c:a7:10:54:e1:78:5e:ab:bd:16:33:1d:4c:02:ff: 07:e0:e0:82:2a:df:8f:53:8c:6c:e9:f8:dd:6a:83: 21:f5:95:34:5c:28:43:a2:bf:92:f6:01:1f:53:20: 05:b5:2c:4c:d3:12:e1:6e:a1:2c:de:de:cc:72:b8: 1b:07:7e:2e:ae:79:49:75:dc:b7:82:0b:90:67:eb: 37:0a:fc:e8:ad:a8:c5:a1:10:80:e2:66:52:3f:32: 93:a5:12:5c:2a:bb:44:f3:4a:3e:6f:0a:18:b8:c9: 7a:02:81:a2:1a:32:e4:c2:b7:28:b1:ce:69:5d:88: fc:66:3b:10:c6:82:d4:02:59:da:03:ad:60:b4:92: 8e:3f:59:a0:7c:12:14:6f:b5:11:3b:85:e7:62:7d: 88:a6:b6:dc:a1:5d:4f:fc:a7:81:e1:94:b6:f6:2c: 2a:15:83:08:29:c0:b5:91:7e:69:d3:49:86:38:fd: 0d:3f:43:78:e3:f3:99:be:50:c5:8d:aa:3f:43:26: 0c:fc:f4:ee:07:4b:a8:9a:14:8f:d0:ce:e3:ee:08: e5:e7:73:a2:bf:75:a8:1e:fe:7c:eb:60:cb:15:c6: f7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:55:76:2E:57:03:0C:F6:DA:22:C6:9C:68:99:45:10:B7:19:A1:46 X509v3 Authority Key Identifier: keyid:9F:1B:31:FA:77:00:B7:45:8F:C1:88:9B:86:25:41:CE:9D:48:24:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ff:c6:ca:28:10:cd:69:b2:d7:7c:ca:0e:46:f4:28:5b:22: 84:d1:97:0b:d6:dd:f0:51:0d:52:72:64:e9:17:f6:b6:1b:ab: 61:e4:a8:16:75:05:a2:92:49:b5:02:5c:e8:a0:25:6e:52:0a: 89:0e:72:cf:82:63:6b:fe:b1:05:f4:40:8b:fd:7f:b7:9e:06: 2a:d4:80:28:d4:6a:1e:14:2a:0f:8e:45:6e:b0:f8:90:e4:8f: 79:b6:a5:78:6e:99:f3:30:c7:5e:83:cf:28:4a:96:18:55:0d: 21:30:e6:1f:31:95:46:0b:e4:2d:1e:dd:81:7c:9b:90:ea:77: 04:11:cc:dd:86:96:11:aa:cf:bc:fa:99:53:8c:22:9a:da:13: e1:e5:a9:26:a1:39:a0:11:d1:28:8b:df:94:58:f7:e1:28:42: ba:0a:48:38:f4:a4:21:7f:84:4e:70:69:e1:48:18:4b:fe:c4: 53:18:6c:2f:c2:39:7e:c4:65:78:d5:2d:14:9b:c3:f3:e9:a0: 60:50:f0:6b:27:04:98:48:93:f8:66:ca:ce:cc:22:9a:d7:96: 1e:57:6a:9f:28:f7:23:7b:7c:a5:03:84:12:37:6d:b7:61:aa: dd:6e:a0:f2:f4:48:4b:6e:b6:a0:d6:1f:28:2f:77:8a:78:e3: ac:06:fa:66 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTYzRDExMC8GA1UEBRMoOUYxQjMxRkE3NzAwQjc0NThGQzE4ODlCODYyNTQxQ0U5 RDQ4MjRDQTAeFw0yNjA0MTYxNzI1NDFaFw0yNjA0MjMxNzI1NDFaMBgxFjAUBgNV BAMTDTY5ZTExYjk1LTMxMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8y3joj9Mhpf0qHiVXeEW2CzHhdspU33FM7XElhBynEFTheF6rvRYzHUwC/wfg 4IIq349TjGzp+N1qgyH1lTRcKEOiv5L2AR9TIAW1LEzTEuFuoSze3sxyuBsHfi6u eUl13LeCC5Bn6zcK/OitqMWhEIDiZlI/MpOlElwqu0TzSj5vChi4yXoCgaIaMuTC tyixzmldiPxmOxDGgtQCWdoDrWC0ko4/WaB8EhRvtRE7hedifYimttyhXU/8p4Hh lLb2LCoVgwgpwLWRfmnTSYY4/Q0/Q3jj85m+UMWNqj9DJgz89O4HS6iaFI/QzuPu COXnc6K/dage/nzrYMsVxvcVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURFV2LlcD DPbaIsacaJlFELcZoUYwHwYDVR0jBBgwFoAUnxsx+ncAt0WPwYibhiVBzp1IJMow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NjNEL0Y5Qzk3NjZDNzI2 NTExRTk4QjcxQkIzNEM0RjlBRTAyL254c3gtbmNBdDBXUHdZaWJoaVZCenAxSUpN by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnhzeC1uY0F0MFdQd1lpYmhpVkJ6cDFJSk1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 NjNEL0Y5Qzk3NjZDNzI2NTExRTk4QjcxQkIzNEM0RjlBRTAyL254c3gtbmNBdDBX UHdZaWJoaVZCenAxSUpNby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCf/8bKKBDNabLXfMoORvQoWyKE0ZcL1t3wUQ1ScmTpF/a2G6th5KgWdQWikkm1 AlzooCVuUgqJDnLPgmNr/rEF9ECL/X+3ngYq1IAo1GoeFCoPjkVusPiQ5I95tqV4 bpnzMMdeg88oSpYYVQ0hMOYfMZVGC+QtHt2BfJuQ6ncEEczdhpYRqs+8+plTjCKa 2hPh5akmoTmgEdEoi9+UWPfhKEK6Ckg49KQhf4ROcGnhSBhL/sRTGGwvwjl+xGV4 1S0Um8Pz6aBgUPBrJwSYSJP4ZsrOzCKa15YeV2qfKPcje3ylA4QSN223YardbqDy 9EhLbrag1h8oL3eKeOOsBvpm -----END CERTIFICATE-----Generated at Fri Apr 17 18:28:09 2026 by rpki-client