$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft File: nQi_OKDTi4yrfP2I9djE7WZ3jME.mft (raw, json) Hash identifier: W1KjBICk8rPdU2CC8XlbWsA0DQ7uPrgVAPYQ1PPf9Ts= Subject key identifier: E2:5A:60:F0:B8:20:5D:09:71:78:7E:BD:96:AA:39:91:C3:46:8C:47 Authority key identifier: 9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 Certificate issuer: /CN=A913F0DF/serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft Manifest number: 01BD Signing time: Sun 19 Apr 2026 03:37:02 +0000 Manifest this update: Sun 19 Apr 2026 03:37:02 +0000 Manifest next update: Sun 26 Apr 2026 03:37:02 +0000 Files and hashes: 1: nQi_OKDTi4yrfP2I9djE7WZ3jME.crl (hash: JYX5/DTBiFAXR+xr3TjSmBZpYp0hQFsHoReg67i6fpY=) 2: 7C7AF8E6E67011EEB76DCB76C4F9AE02.roa (hash: KcnRjC7T6Kcnl9YrWn5mYyKPUtty/r1wIebOb0MFfxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 03:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0DF, serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Validity Not Before: Apr 19 03:37:02 2026 GMT Not After : Apr 26 03:37:02 2026 GMT Subject: CN=69e44dde-3448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:96:f0:02:a4:e9:3e:a9:de:33:83:25:3e:52: 18:36:eb:47:31:75:58:28:d7:97:53:55:0b:5d:e9: 43:ba:9e:30:0d:95:8d:f9:7b:5d:44:18:d2:3a:f6: f9:3d:fe:4b:23:4b:c7:ba:c5:75:38:0a:7c:7f:fa: 4f:04:65:e4:c2:e7:d8:ab:14:20:e8:8d:ac:5a:b2: 76:ec:4b:5b:2a:d6:c4:f0:23:52:8d:ec:10:5a:b9: 02:34:85:94:2c:1b:60:25:b3:7b:c1:5b:ef:03:4a: 5d:c1:c7:81:a9:df:a3:d8:fc:62:a9:9b:27:eb:9a: 43:1d:6d:a4:d1:02:f5:13:ac:34:b2:3a:f3:38:15: 08:17:78:54:cf:ee:3d:e3:40:f4:78:28:05:50:0c: 95:37:f2:7e:02:4c:7d:25:57:9d:42:84:29:e0:4d: 6c:f5:e6:8b:fd:7b:7a:8b:07:be:01:5f:d5:2e:a6: 43:0e:0d:44:11:8a:fc:cb:b9:3c:02:52:81:0b:98: 2d:f4:70:b9:f6:30:15:9d:0d:7f:1e:64:ad:60:1d: 1b:83:59:84:a0:37:c2:0c:55:0a:d3:d1:10:00:7c: c0:42:ae:56:34:57:5a:13:63:7a:75:55:97:7e:c0: f1:56:66:ee:e9:b5:1a:c3:67:75:72:15:47:66:e6: f4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5A:60:F0:B8:20:5D:09:71:78:7E:BD:96:AA:39:91:C3:46:8C:47 X509v3 Authority Key Identifier: keyid:9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:32:d0:42:57:bc:a7:c8:e0:90:e8:b5:f0:5a:47:fa:1a:63: e4:45:05:f4:73:26:23:5c:41:f3:51:aa:df:22:c3:2b:68:fc: d8:e2:7d:57:19:1c:d1:3c:c4:03:fe:0b:fe:1e:c7:b1:79:00: 7f:df:32:e7:54:63:aa:0d:ee:f2:03:f7:1d:57:7a:bb:4d:6a: 7e:79:02:47:9b:e1:6e:da:67:93:da:1d:d0:39:7f:b9:39:ef: 6d:80:53:94:d7:e3:cc:c3:0d:55:b0:28:ef:19:c3:49:c4:bd: 36:d6:94:d7:46:10:a4:41:e8:f9:dd:71:bb:43:11:13:d4:36: 3b:89:af:36:67:99:6d:41:61:8f:a0:13:65:22:ba:ec:60:70: 20:05:1b:d9:60:44:df:a8:ad:39:2b:2a:75:a0:1f:85:1d:8e: 86:79:bd:93:79:fc:d0:e4:c1:f6:77:dd:96:ba:e6:cc:2c:d5: 8b:cb:bc:8e:c8:ff:c6:04:11:ba:cc:7e:b4:72:12:f2:e5:8b: a9:1b:42:ec:b4:e7:cf:45:10:54:8c:4f:21:73:7f:1c:e1:5a: 17:de:89:a7:32:48:74:11:8b:4d:44:45:ba:bd:95:c2:66:b9: 38:9d:43:d3:62:92:9a:cb:6f:28:20:80:35:6c:4d:1a:97:9f: fd:7a:60:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwREYxMTAvBgNVBAUTKDlEMDhCRjM4QTBEMzhCOENBQjdDRkQ4OEY1RDhDNEVE NjY3NzhDQzEwHhcNMjYwNDE5MDMzNzAyWhcNMjYwNDI2MDMzNzAyWjAYMRYwFAYD VQQDEw02OWU0NGRkZS0zNDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpbwAqTpPqneM4MlPlIYNutHMXVYKNeXU1ULXelDup4wDZWN+XtdRBjSOvb5 Pf5LI0vHusV1OAp8f/pPBGXkwufYqxQg6I2sWrJ27EtbKtbE8CNSjewQWrkCNIWU LBtgJbN7wVvvA0pdwceBqd+j2PxiqZsn65pDHW2k0QL1E6w0sjrzOBUIF3hUz+49 40D0eCgFUAyVN/J+Akx9JVedQoQp4E1s9eaL/Xt6iwe+AV/VLqZDDg1EEYr8y7k8 AlKBC5gt9HC59jAVnQ1/HmStYB0bg1mEoDfCDFUK09EQAHzAQq5WNFdaE2N6dVWX fsDxVmbu6bUaw2d1chVHZub0VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOJaYPC4 IF0JcXh+vZaqOZHDRoxHMB8GA1UdIwQYMBaAFJ0Ivzig04uMq3z9iPXYxO1md4zB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBERi9FNTA4MzY0ODk5 MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0eXJmUDJJOWRqRTdXWjNq TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RaV9PS0RUaTR5cmZQMkk5ZGpFN1daM2pNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBERi9FNTA4MzY0ODk5MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0 eXJmUDJJOWRqRTdXWjNqTUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvDLQQle8p8jgkOi18FpH+hpj5EUF9HMmI1xB81Gq3yLDK2j82OJ9Vxkc0TzE A/4L/h7HsXkAf98y51Rjqg3u8gP3HVd6u01qfnkCR5vhbtpnk9od0Dl/uTnvbYBT lNfjzMMNVbAo7xnDScS9NtaU10YQpEHo+d1xu0MRE9Q2O4mvNmeZbUFhj6ATZSK6 7GBwIAUb2WBE36itOSsqdaAfhR2Ohnm9k3n80OTB9nfdlrrmzCzVi8u8jsj/xgQR usx+tHIS8uWLqRtC7LTnz0UQVIxPIXN/HOFaF96JpzJIdBGLTURFur2Vwma5OJ1D 02KSmstvKCCANWxNGpef/XpgLQ== -----END CERTIFICATE-----Generated at Sun Apr 19 12:57:48 2026 by rpki-client