$ rpki-client -vvf rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft File: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft (raw, json) Hash identifier: y8pZ1eVdwKAhhvQCYx+LTiDx+KDlzFWJqWvMC0G2vUo= Subject key identifier: BB:8B:F9:E7:DD:C5:42:28:25:0C:8F:A6:D8:21:80:9A:9D:A0:96:05 Authority key identifier: 36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD Certificate issuer: /CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Certificate serial: 0303 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft Manifest number: 02F3 Signing time: Fri 17 Apr 2026 01:12:27 +0000 Manifest this update: Fri 17 Apr 2026 01:12:26 +0000 Manifest next update: Fri 24 Apr 2026 01:12:26 +0000 Files and hashes: 1: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl (hash: hqKFvWrR+4ncdJfoUtApzt0vrPvs8qlvLnSQvsyauBw=) 2: 134B439A91B611ED8BA25C80C4F9AE02.roa (hash: attv9ecZrF5kZRZeQ+lyJkiW+JXwe94b0M/AiRCsF3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 771 (0x303) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F333, serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Validity Not Before: Apr 17 01:12:26 2026 GMT Not After : Apr 24 01:12:26 2026 GMT Subject: CN=69e188fb-5f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4b:d9:b5:fb:ce:c6:62:04:22:e2:87:e6:a3: d0:31:3b:a0:d4:96:f1:8d:02:3f:b7:db:3f:4c:6a: 29:62:56:ef:cd:b3:54:c9:93:50:2f:02:05:e4:26: e3:78:8d:8f:c6:72:87:ec:fe:d7:2b:c1:d4:57:e1: f7:4f:ba:e2:7d:8e:ae:45:10:6a:d8:72:da:a2:fc: e7:4e:ea:d6:26:13:a5:c7:3d:e8:c1:8c:4c:d3:7c: 3b:19:f0:69:e3:1f:c2:9c:68:2f:59:46:ab:90:1d: 33:e4:ca:01:67:58:ca:bf:c5:76:da:dd:86:28:3a: 5a:50:25:38:bc:4f:88:a3:6e:08:ff:8b:5f:73:2f: 82:db:0d:78:85:59:55:07:09:1c:bb:ea:41:bf:77: ea:5f:7c:dc:3e:fd:96:ee:24:d1:0d:8e:e2:0d:c4: f6:23:a2:c0:5d:56:f8:70:76:a6:e5:2a:f2:ed:03: 54:b1:13:46:d0:dd:58:87:4c:53:dd:95:81:4e:5b: 50:8b:c1:82:29:3f:dd:e0:7b:57:50:15:51:9e:59: cf:88:83:27:a9:b7:75:e7:86:35:66:25:a4:07:0c: 02:fe:40:cb:5b:4e:1e:6a:aa:b9:c9:68:3f:9f:88: cb:f0:7d:cc:49:0e:fb:de:9c:74:96:e3:38:5f:ad: 7a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8B:F9:E7:DD:C5:42:28:25:0C:8F:A6:D8:21:80:9A:9D:A0:96:05 X509v3 Authority Key Identifier: keyid:36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:fe:91:17:a0:69:59:d9:57:ed:5f:2c:05:f7:78:0b:f7:b4: 7e:b3:98:60:60:94:1d:86:22:12:b9:53:68:9f:fa:53:16:06: f7:55:3b:62:f9:a0:e5:01:96:9b:a0:74:5e:3b:9b:1b:ae:89: 86:de:64:80:de:99:f3:ad:45:88:ae:37:6a:f5:43:42:fc:38: c9:cb:17:96:54:78:8d:7c:63:56:90:82:2e:b3:10:5b:17:d8: 7e:a1:91:b9:f0:92:b9:85:be:8e:62:4a:6c:ba:94:ec:8c:d9: 1e:c2:f8:80:16:11:3b:7f:18:d3:5c:9c:0d:d7:37:3d:e5:45: a3:72:5c:cb:48:dc:3b:c0:3b:1f:0c:d1:78:11:ab:43:a9:8b: 07:ef:73:32:80:9f:af:21:23:72:37:95:68:28:eb:aa:30:ba: 5a:d3:8e:c1:3c:6f:93:6f:c8:bd:f2:77:77:92:44:0d:33:b0: 9d:d6:22:ae:54:86:fa:bd:d8:1c:95:3b:49:19:85:f2:c0:0c: 39:11:7f:39:e0:9b:17:05:99:14:cc:5e:9b:2e:c4:01:0b:d5: 7c:bc:11:86:e1:c8:87:4f:aa:9c:92:d6:05:e4:2d:ac:4f:24: 62:be:23:f5:e9:04:f2:b2:a8:9a:76:6f:e9:80:ff:a7:36:81: 97:37:ef:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YzMzMxMTAvBgNVBAUTKDM2NDA4QzExQzU0NzJCODIyNDhBRkZFQkVFREJCMjBF M0UwN0E2Q0QwHhcNMjYwNDE3MDExMjI2WhcNMjYwNDI0MDExMjI2WjAYMRYwFAYD VQQDEw02OWUxODhmYi01ZjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmUvZtfvOxmIEIuKH5qPQMTug1JbxjQI/t9s/TGopYlbvzbNUyZNQLwIF5Cbj eI2PxnKH7P7XK8HUV+H3T7rifY6uRRBq2HLaovznTurWJhOlxz3owYxM03w7GfBp 4x/CnGgvWUarkB0z5MoBZ1jKv8V22t2GKDpaUCU4vE+Io24I/4tfcy+C2w14hVlV Bwkcu+pBv3fqX3zcPv2W7iTRDY7iDcT2I6LAXVb4cHam5Sry7QNUsRNG0N1Yh0xT 3ZWBTltQi8GCKT/d4HtXUBVRnlnPiIMnqbd154Y1ZiWkBwwC/kDLW04eaqq5yWg/ n4jL8H3MSQ773px0luM4X616mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLuL+efd xUIoJQyPptghgJqdoJYFMB8GA1UdIwQYMBaAFDZAjBHFRyuCJIr/6+7bsg4+B6bN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjMzMy9ERUNCNjVBNDIz OTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0SWtpdl9yN3R1eURqNEhw czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rQ01FY1ZISzRJa2l2X3I3dHV5RGo0SHBzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjMzMy9ERUNCNjVBNDIzOTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0 SWtpdl9yN3R1eURqNEhwczAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT/6RF6BpWdlX7V8sBfd4C/e0frOYYGCUHYYiErlTaJ/6UxYG91U7Yvmg5QGW m6B0XjubG66Jht5kgN6Z861FiK43avVDQvw4ycsXllR4jXxjVpCCLrMQWxfYfqGR ufCSuYW+jmJKbLqU7IzZHsL4gBYRO38Y01ycDdc3PeVFo3Jcy0jcO8A7HwzReBGr Q6mLB+9zMoCfryEjcjeVaCjrqjC6WtOOwTxvk2/IvfJ3d5JEDTOwndYirlSG+r3Y HJU7SRmF8sAMORF/OeCbFwWZFMxemy7EAQvVfLwRhuHIh0+qnJLWBeQtrE8kYr4j 9ekE8rKomnZv6YD/pzaBlzfviA== -----END CERTIFICATE-----Generated at Fri Apr 17 20:56:46 2026 by rpki-client