$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft File: nL4Q18HdRLflkLUHi_xPhs-Nslo.mft (raw, json) Hash identifier: DLNlborrQd9Y+OXKnDeuIzITZXYbZXqgUHMSyi0ScUA= Subject key identifier: C1:F1:A4:D0:70:84:F9:3D:C5:A9:44:83:98:03:3C:BC:14:79:3D:2D Authority key identifier: 9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A Certificate issuer: /CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft Manifest number: 01CE Signing time: Fri 17 Apr 2026 03:28:08 +0000 Manifest this update: Fri 17 Apr 2026 03:28:08 +0000 Manifest next update: Fri 24 Apr 2026 03:28:08 +0000 Files and hashes: 1: nL4Q18HdRLflkLUHi_xPhs-Nslo.crl (hash: 9ZjU4ULPoCcs3epL63HA60OuQtukhanosnfx4tlJt4M=) 2: 43C5BAA282F411EE99AAAB12C4F9AE02.roa (hash: a1wzRh8XwhAFQd8Ja2EntSNyYcs9nQlwwooXA0U/t20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BCAC, serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Validity Not Before: Apr 17 03:28:08 2026 GMT Not After : Apr 24 03:28:08 2026 GMT Subject: CN=69e1a8c8-35de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:10:7d:94:24:9e:29:10:93:9c:d5:bb:0b:1c: aa:cb:19:76:91:90:7e:0a:6b:a6:76:54:9e:a7:bd: 28:12:70:c5:5c:26:8f:63:6b:50:ff:32:59:f0:d4: 51:ca:a4:fc:20:b7:39:73:f1:44:b9:41:e2:e5:f0: ad:22:f6:e3:f0:f2:12:bf:a4:b6:a3:ab:9c:63:1b: cd:63:06:12:41:3f:f8:cf:c6:cb:59:99:9e:e0:97: ed:de:d1:41:43:7b:eb:eb:b3:32:7e:71:20:f3:44: 68:c3:fa:87:ff:56:1c:d3:5e:e2:c5:8a:86:15:48: 1b:73:5e:90:b4:bf:6b:b2:44:56:d5:09:8e:25:fc: 44:77:bf:74:d8:56:b5:e7:d9:f9:a3:1d:d2:80:cf: 46:f3:17:5f:ba:6d:86:f7:f6:cc:29:cf:19:5f:94: cb:e2:30:b0:57:6b:6c:2b:d1:b4:f9:79:cb:91:dc: ce:e9:ed:ac:e8:2b:c7:56:72:4d:ca:7d:63:98:b3: b6:11:08:14:cc:0e:be:b5:40:d3:c6:99:61:1e:98: bc:cc:80:81:96:d8:c8:05:a2:df:a4:da:4a:b2:e1: c5:5d:51:24:1f:b1:79:b4:57:93:71:41:97:68:07: 94:31:de:b8:31:29:99:9f:97:b9:a6:ed:56:37:e5: 02:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F1:A4:D0:70:84:F9:3D:C5:A9:44:83:98:03:3C:BC:14:79:3D:2D X509v3 Authority Key Identifier: keyid:9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:2e:16:4b:11:f1:7b:87:d2:3f:7d:0c:1e:86:8d:4b:64:2d: e3:be:3d:ce:5a:92:26:ad:07:86:7a:08:56:a9:63:f5:6e:d6: e1:03:c5:83:19:9f:06:c1:c3:5e:f7:45:01:18:6f:5a:4d:0d: 55:05:68:8a:f6:85:8c:34:1d:41:ba:75:e9:53:66:14:5d:78: 44:ba:4f:42:be:9f:e6:f7:02:bb:10:5f:1f:37:28:ff:6c:4a: a5:28:4d:cf:ef:08:c4:29:54:68:24:09:3b:9c:b5:aa:da:09: 38:c5:32:67:ef:84:8f:05:dd:e7:8a:35:1b:75:b5:0a:a5:44: b2:1f:25:84:18:f0:13:0f:a0:64:ca:ed:7c:82:b8:2e:dc:af: 12:00:e7:5b:04:9a:76:41:4f:1a:01:49:7f:3d:5d:56:a9:71: d4:b6:5a:90:a8:22:22:00:fc:6f:44:4c:dc:8c:e7:57:81:31: f1:59:2e:28:ee:a0:13:a0:96:92:68:78:c4:da:97:25:c8:d4: 7e:cb:67:a7:04:45:39:d8:44:2a:20:04:83:3d:4e:dd:59:ba: df:02:77:bd:d8:66:8d:f0:4d:6d:9f:38:62:0f:de:0c:74:b5: 23:a3:d9:56:00:86:d0:9b:44:7c:2b:e2:a5:86:b0:2c:15:c6: 67:ef:42:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJDQUMxMTAvBgNVBAUTKDlDQkUxMEQ3QzFERDQ0QjdFNTkwQjUwNzhCRkM0Rjg2 Q0Y4REIyNUEwHhcNMjYwNDE3MDMyODA4WhcNMjYwNDI0MDMyODA4WjAYMRYwFAYD VQQDEw02OWUxYThjOC0zNWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRB9lCSeKRCTnNW7Cxyqyxl2kZB+CmumdlSep70oEnDFXCaPY2tQ/zJZ8NRR yqT8ILc5c/FEuUHi5fCtIvbj8PISv6S2o6ucYxvNYwYSQT/4z8bLWZme4Jft3tFB Q3vr67MyfnEg80Row/qH/1Yc017ixYqGFUgbc16QtL9rskRW1QmOJfxEd7902Fa1 59n5ox3SgM9G8xdfum2G9/bMKc8ZX5TL4jCwV2tsK9G0+XnLkdzO6e2s6CvHVnJN yn1jmLO2EQgUzA6+tUDTxplhHpi8zICBltjIBaLfpNpKsuHFXVEkH7F5tFeTcUGX aAeUMd64MSmZn5e5pu1WN+UCwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMHxpNBw hPk9xalEg5gDPLwUeT0tMB8GA1UdIwQYMBaAFJy+ENfB3US35ZC1B4v8T4bPjbJa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkNBQy8wMTUyMjU4RTgy RjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJMZmxrTFVIaV94UGhzLU5z bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MNFExOEhkUkxmbGtMVUhpX3hQaHMtTnNsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkNBQy8wMTUyMjU4RTgyRjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJM ZmxrTFVIaV94UGhzLU5zbG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcS4WSxHxe4fSP30MHoaNS2Qt4749zlqSJq0HhnoIVqlj9W7W4QPFgxmfBsHD XvdFARhvWk0NVQVoivaFjDQdQbp16VNmFF14RLpPQr6f5vcCuxBfHzco/2xKpShN z+8IxClUaCQJO5y1qtoJOMUyZ++EjwXd54o1G3W1CqVEsh8lhBjwEw+gZMrtfIK4 LtyvEgDnWwSadkFPGgFJfz1dVqlx1LZakKgiIgD8b0RM3IznV4Ex8VkuKO6gE6CW kmh4xNqXJcjUfstnpwRFOdhEKiAEgz1O3Vm63wJ3vdhmjfBNbZ84Yg/eDHS1I6PZ VgCG0JtEfCvipYawLBXGZ+9Crw== -----END CERTIFICATE-----Generated at Fri Apr 17 07:59:09 2026 by rpki-client