$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft File: NuogEr2z5hGaWu-_Zs7rOLWTHek.mft (raw, json) Hash identifier: pSSlv1A3qVDklz8IxADS7j/+2Y0HSK7p3OzBDnVHnyA= Subject key identifier: 87:81:48:3E:B2:5B:E0:04:7A:7D:7C:1E:E3:C6:86:2A:0B:46:CC:85 Authority key identifier: 36:EA:20:12:BD:B3:E6:11:9A:5A:EF:BF:66:CE:EB:38:B5:93:1D:E9 Certificate issuer: /CN=A914BE8E/serialNumber=36EA2012BDB3E6119A5AEFBF66CEEB38B5931DE9 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuogEr2z5hGaWu-_Zs7rOLWTHek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft Manifest number: 3F Signing time: Sun 19 Apr 2026 08:04:11 +0000 Manifest this update: Sun 19 Apr 2026 08:04:11 +0000 Manifest next update: Sun 26 Apr 2026 08:04:11 +0000 Files and hashes: 1: NuogEr2z5hGaWu-_Zs7rOLWTHek.crl (hash: RjugDO82Nu4VXaKLeam82DHdWSJajGx3pU4qM1Z/w9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.crl rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuogEr2z5hGaWu-_Zs7rOLWTHek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BE8E, serialNumber=36EA2012BDB3E6119A5AEFBF66CEEB38B5931DE9 Validity Not Before: Apr 19 08:04:11 2026 GMT Not After : Apr 26 08:04:11 2026 GMT Subject: CN=69e48c7b-7d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:53:bd:79:17:ac:f2:55:82:ad:b1:c3:7e:8e: ea:a5:c7:3a:11:09:3f:1e:a7:4f:64:28:8c:1a:85: 2f:8f:57:21:d6:69:b0:d2:08:d2:af:cc:7d:91:3f: 8c:d8:32:38:9c:15:05:c0:84:64:eb:94:2a:2f:29: ce:65:4a:25:18:63:60:a4:cb:3c:f6:b2:07:a4:52: 5c:2d:4f:42:84:c5:70:9d:35:dc:73:06:77:dc:7d: 91:c9:98:84:49:8c:87:cc:d9:3b:93:12:6b:0f:61: 1d:9a:93:ff:45:e8:92:d4:fd:3a:d6:07:0e:34:b6: 8e:a3:6e:a0:a8:c3:7c:e4:49:42:62:6b:36:3e:57: 64:d4:8f:e0:00:d5:fd:c1:22:91:87:00:fd:dc:91: d9:15:87:4f:b9:83:9f:90:00:1a:22:21:83:68:b3: f8:00:ca:89:8f:d7:9a:e9:e7:55:ea:38:26:76:ed: 68:ab:0b:5d:75:ec:83:e2:a5:44:95:de:6a:db:c3: c1:a5:fa:79:69:a0:d3:cd:9f:13:ff:ed:57:e2:4d: fc:8f:5e:6c:87:be:16:65:5c:e4:f1:e0:01:76:8b: 50:ad:c1:1d:1f:6d:c8:87:5f:ea:32:56:52:42:46: aa:96:76:dd:02:68:00:21:71:0c:93:f8:72:e6:01: 16:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:81:48:3E:B2:5B:E0:04:7A:7D:7C:1E:E3:C6:86:2A:0B:46:CC:85 X509v3 Authority Key Identifier: keyid:36:EA:20:12:BD:B3:E6:11:9A:5A:EF:BF:66:CE:EB:38:B5:93:1D:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuogEr2z5hGaWu-_Zs7rOLWTHek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:f6:56:f9:c8:3d:f9:58:f1:aa:f9:64:77:d0:ac:0a:65:28: 6d:64:38:99:e9:1d:af:69:3c:0e:3f:65:61:10:83:5f:cd:55: 1e:04:c2:88:de:c5:a7:ef:ec:7e:5a:04:99:c6:d8:c3:80:44: 13:24:21:f3:8b:f7:b0:ff:64:87:b8:ad:c5:26:30:9e:f8:ef: 38:c6:46:23:8d:81:97:2c:bf:4f:96:04:c3:7e:30:3e:cf:86: b4:c8:f1:e5:da:70:4a:c6:44:f2:88:25:19:0f:51:60:ad:4b: fa:da:56:c9:a9:e7:49:74:d7:6d:25:07:74:2e:62:f4:2b:93: 2c:d6:fa:41:d0:48:fb:8e:69:84:a5:57:c6:b0:c4:93:a5:3d: a3:4d:1e:19:dc:20:da:93:99:cd:87:b5:6f:68:80:a2:03:80: 87:61:0c:aa:58:b2:85:53:8f:57:b1:e7:7b:1e:71:c7:02:e8: 4f:51:3e:e2:68:2f:5e:3b:27:c6:2d:b9:b2:c5:fd:0c:13:c4: 2f:e6:ae:ce:ca:a3:4b:f1:c5:82:44:94:e3:e6:57:d1:9e:74: 0a:fe:b9:c9:4a:d3:03:4b:35:c4:99:d0:45:0f:e5:f2:af:4c: 00:b7:bc:b3:69:98:6c:1c:d4:00:96:c8:94:36:29:8c:c8:6b: 96:58:4c:9d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QkU4RTExMC8GA1UEBRMoMzZFQTIwMTJCREIzRTYxMTlBNUFFRkJGNjZDRUVCMzhC NTkzMURFOTAeFw0yNjA0MTkwODA0MTFaFw0yNjA0MjYwODA0MTFaMBgxFjAUBgNV BAMTDTY5ZTQ4YzdiLTdkOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBU715F6zyVYKtscN+juqlxzoRCT8ep09kKIwahS+PVyHWabDSCNKvzH2RP4zY MjicFQXAhGTrlCovKc5lSiUYY2Ckyzz2sgekUlwtT0KExXCdNdxzBnfcfZHJmIRJ jIfM2TuTEmsPYR2ak/9F6JLU/TrWBw40to6jbqCow3zkSUJiazY+V2TUj+AA1f3B IpGHAP3ckdkVh0+5g5+QABoiIYNos/gAyomP15rp51XqOCZ27WirC1117IPipUSV 3mrbw8Gl+nlpoNPNnxP/7VfiTfyPXmyHvhZlXOTx4AF2i1CtwR0fbciHX+oyVlJC RqqWdt0CaAAhcQyT+HLmARb3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUh4FIPrJb 4AR6fXwe48aGKgtGzIUwHwYDVR0jBBgwFoAUNuogEr2z5hGaWu+/Zs7rOLWTHekw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCRThFLzU0NjE5M0VDRTE0 NjExRjA5MTY0RTBBODcxNkY1NkJDL051b2dFcjJ6NWhHYVd1LV9aczdyT0xXVEhl ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnVvZ0VyMno1aEdhV3UtX1pzN3JPTFdUSGVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC RThFLzU0NjE5M0VDRTE0NjExRjA5MTY0RTBBODcxNkY1NkJDL051b2dFcjJ6NWhH YVd1LV9aczdyT0xXVEhlay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA59lb5yD35WPGq+WR30KwKZShtZDiZ6R2vaTwOP2VhEINfzVUeBMKI3sWn7+x+ WgSZxtjDgEQTJCHzi/ew/2SHuK3FJjCe+O84xkYjjYGXLL9PlgTDfjA+z4a0yPHl 2nBKxkTyiCUZD1FgrUv62lbJqedJdNdtJQd0LmL0K5Ms1vpB0Ej7jmmEpVfGsMST pT2jTR4Z3CDak5nNh7VvaICiA4CHYQyqWLKFU49Xsed7HnHHAuhPUT7iaC9eOyfG Lbmyxf0ME8Qv5q7OyqNL8cWCRJTj5lfRnnQK/rnJStMDSzXEmdBFD+Xyr0wAt7yz aZhsHNQAlsiUNimMyGuWWEyd -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:44 2026 by rpki-client