$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft File: NHTJTDbo-aDToNIuHdoQjNNAqyg.mft (raw, json) Hash identifier: 85Dh1f5kfMUbtxdMbQ5EmV96uv1b9Zs81EcpU5B9oXU= Subject key identifier: 4D:A9:4C:DC:A9:D4:FE:3B:82:07:8C:93:97:AE:23:4E:64:49:EB:96 Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Certificate serial: 1058 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft Manifest number: 1023 Signing time: Thu 16 Apr 2026 17:21:55 +0000 Manifest this update: Thu 16 Apr 2026 17:21:54 +0000 Manifest next update: Thu 23 Apr 2026 17:21:54 +0000 Files and hashes: 1: NHTJTDbo-aDToNIuHdoQjNNAqyg.crl (hash: 7ChWXKo8id8kM9O8w0x7alu8fVN2IbXjOtLHttorxso=) 2: 5E0253B6232111EB9896B783C4F9AE02.roa (hash: cy1EAKkmCpvxtLdJ2bDIgftrpdXjCjIIbkKyTgzxurw=) 3: B2B24A4221D711EB9CFAC46EC4F9AE02.roa (hash: 8Q2Umx0r6YNO2pXY3Lo7bQVhFA22tejYLTjwhgeqaHk=) 4: B3682FEC21D711EB9CFAC46EC4F9AE02.roa (hash: FMxmnJD1FXOVdBqe3Z4UNVeqTWvxDWlAMcRI0DJm40o=) 5: B47C278021D711EB9CFAC46EC4F9AE02.roa (hash: 7cB2NpUwnHlJv3jC+1znrL/Qm2Z6pF6ooyV5GUqjg6w=) 6: A7BDC50C7A4811EBA907BB5BC4F9AE02.roa (hash: jnSlzy/THB1Xqx0QebCD+P4sZeJxQXMsWdBpFyTBfb4=) 7: 08CD1510027011EB98FEC44BC4F9AE02.roa (hash: sNgY8hpVgWEWzONQb/rYzqSGD7aaEvSPCGOCTH5nhGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4184 (0x1058) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131690, serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Validity Not Before: Apr 16 17:21:54 2026 GMT Not After : Apr 23 17:21:54 2026 GMT Subject: CN=69e11ab2-f6fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d1:a1:11:46:ce:71:cc:cb:49:b2:62:b4:0a: 9b:a1:95:ec:be:1e:aa:14:a8:2c:e0:72:ee:75:8d: 8e:6b:7f:9c:47:26:21:6d:ad:c7:09:cd:3b:32:60: 86:74:46:04:70:1e:ea:1a:38:35:56:9c:4b:56:c7: 67:1b:1f:fd:42:0c:49:f5:d5:d5:d6:2b:5c:35:05: 96:4d:fe:bb:07:89:22:3c:eb:ae:df:c7:84:04:f3: 22:0d:b4:59:7f:c9:68:a6:90:39:44:76:e2:f1:6c: 70:01:cf:58:92:38:c6:30:57:57:0e:6b:44:0c:1e: 6a:16:f0:cd:66:31:1b:a5:9d:2a:02:7f:c4:24:ea: 1b:8a:57:d6:7d:ee:1a:cd:9d:20:bf:2c:b7:62:2d: a0:3b:5d:f7:f1:32:a4:c7:23:b7:40:e5:fd:c7:a9: eb:0e:b1:4b:b4:aa:9b:7a:a2:36:b7:ba:ad:d5:16: dd:2e:97:e2:d1:95:65:b1:f0:37:36:74:a4:6f:ea: f6:dc:be:da:64:16:69:8f:cc:81:8c:fd:9e:a7:51: d7:5a:5c:c9:5b:a8:d8:95:3b:a6:7f:fb:9f:32:91: 25:d4:8f:9e:0c:e3:94:b3:6d:73:3e:d0:43:64:1f: a9:e4:22:48:55:cd:7b:b8:b7:42:17:b8:81:6b:b1: 20:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A9:4C:DC:A9:D4:FE:3B:82:07:8C:93:97:AE:23:4E:64:49:EB:96 X509v3 Authority Key Identifier: keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:ce:13:12:5a:17:39:cb:bf:9d:72:6d:9b:5b:8b:ae:3e:a0: 57:d5:e5:bd:15:97:46:c5:12:ba:03:1f:05:61:eb:fe:91:f7: 53:f7:4f:2a:d3:1d:6e:44:3f:02:fe:29:8a:d4:36:b9:1b:ff: 73:26:5d:3a:f9:2b:47:59:c4:8f:61:89:54:0a:89:be:2e:f7: 5f:77:52:c6:8b:cc:0f:03:8c:28:93:dd:db:55:d7:bf:6c:8c: be:cd:ed:e9:c1:7c:04:7c:70:5e:63:30:3f:a2:6d:ac:ee:03: 1e:ec:73:9d:a2:bd:a7:e8:31:bc:22:b3:61:15:1e:d4:95:fb: 26:32:9a:bd:fd:67:aa:7c:fe:c0:a9:b1:e1:b4:31:3f:1e:3c: 9c:7e:14:50:8a:bb:04:23:02:fe:f9:6d:38:bd:ca:30:1a:04: 71:a3:34:24:7f:8a:81:93:e9:a5:0b:36:b5:b2:e0:73:7f:ec: ba:62:d6:a9:67:e3:30:58:a0:f2:02:59:c7:47:94:a9:6e:5c: d4:22:d8:de:24:d1:df:5d:bf:3a:a4:94:a0:15:95:25:03:da: ba:21:a1:33:65:35:e8:f7:8e:22:0f:05:17:7f:4c:80:82:e4: 10:03:ca:98:cc:af:bd:a0:90:88:90:ce:4b:4e:00:3e:65:01: 28:97:87:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2OTAxMTAvBgNVBAUTKDM0NzRDOTRDMzZFOEY5QTBEM0EwRDIyRTFEREExMDhD RDM0MEFCMjgwHhcNMjYwNDE2MTcyMTU0WhcNMjYwNDIzMTcyMTU0WjAYMRYwFAYD VQQDEw02OWUxMWFiMi1mNmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAltGhEUbOcczLSbJitAqboZXsvh6qFKgs4HLudY2Oa3+cRyYhba3HCc07MmCG dEYEcB7qGjg1VpxLVsdnGx/9QgxJ9dXV1itcNQWWTf67B4kiPOuu38eEBPMiDbRZ f8loppA5RHbi8WxwAc9YkjjGMFdXDmtEDB5qFvDNZjEbpZ0qAn/EJOobilfWfe4a zZ0gvyy3Yi2gO1338TKkxyO3QOX9x6nrDrFLtKqbeqI2t7qt1RbdLpfi0ZVlsfA3 NnSkb+r23L7aZBZpj8yBjP2ep1HXWlzJW6jYlTumf/ufMpEl1I+eDOOUs21zPtBD ZB+p5CJIVc17uLdCF7iBa7EgawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE2pTNyp 1P47ggeMk5euI05kSeuWMB8GA1UdIwQYMBaAFDR0yUw26Pmg06DSLh3aEIzTQKso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTY5MC8xNUI0MUI4ODYz RjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1hRFRvTkl1SGRvUWpOTkFx eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IVEpURGJvLWFEVG9OSXVIZG9Rak5OQXF5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTY5MC8xNUI0MUI4ODYzRjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1h RFRvTkl1SGRvUWpOTkFxeWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAac4TEloXOcu/nXJtm1uLrj6gV9XlvRWXRsUSugMfBWHr/pH3U/dPKtMdbkQ/ Av4pitQ2uRv/cyZdOvkrR1nEj2GJVAqJvi73X3dSxovMDwOMKJPd21XXv2yMvs3t 6cF8BHxwXmMwP6JtrO4DHuxznaK9p+gxvCKzYRUe1JX7JjKavf1nqnz+wKmx4bQx Px48nH4UUIq7BCMC/vltOL3KMBoEcaM0JH+KgZPppQs2tbLgc3/sumLWqWfjMFig 8gJZx0eUqW5c1CLY3iTR312/OqSUoBWVJQPauiGhM2U16PeOIg8FF39MgILkEAPK mMyvvaCQiJDOS04APmUBKJeHkA== -----END CERTIFICATE-----Generated at Fri Apr 17 19:47:54 2026 by rpki-client