$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft File: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft (raw, json) Hash identifier: TNZD6Fm7TOUQNO5Zht3lFsNda/SCNGIPiE2zt+y1zyM= Subject key identifier: DA:BA:30:0A:30:EC:D3:E7:1C:90:3D:7D:1F:64:1B:A4:53:16:52:8A Authority key identifier: 34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B Certificate issuer: /CN=A914C725/serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft Manifest number: 1E Signing time: Thu 16 Apr 2026 16:19:42 +0000 Manifest this update: Thu 16 Apr 2026 16:19:41 +0000 Manifest next update: Thu 23 Apr 2026 16:19:41 +0000 Files and hashes: 1: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl (hash: LKt1ja6evgXB33XvZIx8YiBPAwGUAbnplBcWhcBp1J0=) 2: 2D89A3B4139A11F182E65A043E3D8C67.roa (hash: WzPoHRZ+sD0Tq4NDMGpvPyaJehMoEm7aBtLHe8LWFq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C725, serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B Validity Not Before: Apr 16 16:19:41 2026 GMT Not After : Apr 23 16:19:41 2026 GMT Subject: CN=69e10c1e-81fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e1:01:b7:27:9d:02:4c:85:00:ae:32:6e:55: d4:47:ad:8e:8c:36:af:21:26:c4:0a:ef:47:4e:97: ca:a1:8a:9c:47:c6:0a:a2:5f:9c:e4:5e:67:98:54: 0e:5a:8d:f5:e4:f9:e7:53:28:89:fb:b7:7f:39:09: ae:94:da:1d:d8:a1:05:a3:da:a4:15:27:72:17:d7: 4b:79:f0:6c:8a:d3:ce:e1:9e:17:c8:fa:44:04:47: ab:71:ed:ca:cc:68:8e:f2:63:0e:87:b1:e2:cd:1b: d5:e6:ea:4b:be:a9:37:ca:cc:59:8e:16:90:f8:d4: e9:c8:f0:c6:84:af:c8:93:ca:60:eb:4a:d4:7e:26: 3c:ab:90:71:cc:9d:10:44:55:5b:c8:70:c5:f6:04: 14:00:1e:1a:2f:98:75:c4:40:26:3f:8d:52:2e:c9: 5f:a2:98:e2:d8:da:e2:6a:c2:bc:57:96:70:6d:4b: a0:58:fb:2f:24:01:30:ea:ff:4a:de:25:bc:69:98: 07:17:bb:88:4d:f4:8c:80:6c:b5:1e:41:95:5b:bc: 4a:6b:9f:d7:45:93:56:94:ce:ef:fb:fb:d3:f8:7b: b5:38:0c:42:f0:da:f9:6f:e1:8e:b6:00:b1:f2:01: fe:4d:6c:6b:60:05:7c:e0:03:bd:33:97:f5:a8:72: 03:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BA:30:0A:30:EC:D3:E7:1C:90:3D:7D:1F:64:1B:A4:53:16:52:8A X509v3 Authority Key Identifier: keyid:34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:c5:32:f0:31:7b:03:e5:f4:b8:1a:d1:e9:ff:54:fb:d7:95: 03:bf:4a:0c:3c:87:3b:90:cf:5a:51:65:ae:da:13:f7:6d:05: e5:cf:79:de:0f:99:6f:04:2c:e1:3e:00:bd:6f:b4:2f:98:b6: ed:20:0a:f7:61:da:04:a8:cb:50:96:0a:cb:37:90:15:93:3f: 44:8f:43:fb:bb:99:1c:ca:18:e7:a2:12:f6:68:13:0e:f4:9d: 2f:9e:40:53:6b:56:7a:93:57:8d:8b:cd:1b:e2:44:c9:ce:91: 4f:25:24:d9:e6:dd:1b:05:83:e1:16:46:a5:e4:cc:9f:e0:14: 1f:34:ce:8b:d9:6e:6f:5b:4b:d8:16:ca:7a:5c:4b:fa:95:ed: b0:a6:c0:12:6a:32:f2:57:c4:a4:90:95:14:9f:0b:4d:c4:37: c9:8c:ea:4a:77:21:2c:cc:a9:95:12:59:89:27:ea:f0:cd:c3: 5b:c1:75:17:d0:36:01:24:ed:22:ad:da:1c:8e:3d:9c:a2:72: 6e:a8:70:a2:a3:59:4c:43:03:cc:6c:42:f0:ac:b2:2e:06:d8: 6c:a8:79:f6:13:4b:ea:40:ea:ea:76:e0:73:16:36:9b:5e:1d: 36:fe:47:8e:92:0f:c3:34:8c:c3:82:ae:e1:c6:5c:9e:9d:a9: 82:1d:a2:27 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QzcyNTExMC8GA1UEBRMoMzQ4MThCQ0YwRDg0RTE1OTlCRDk5ODE3OTk1RTVFQzM5 QjFCMDE0QjAeFw0yNjA0MTYxNjE5NDFaFw0yNjA0MjMxNjE5NDFaMBgxFjAUBgNV BAMTDTY5ZTEwYzFlLTgxZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC4QG3J50CTIUArjJuVdRHrY6MNq8hJsQK70dOl8qhipxHxgqiX5zkXmeYVA5a jfXk+edTKIn7t385Ca6U2h3YoQWj2qQVJ3IX10t58GyK087hnhfI+kQER6tx7crM aI7yYw6HseLNG9Xm6ku+qTfKzFmOFpD41OnI8MaEr8iTymDrStR+JjyrkHHMnRBE VVvIcMX2BBQAHhovmHXEQCY/jVIuyV+imOLY2uJqwrxXlnBtS6BY+y8kATDq/0re JbxpmAcXu4hN9IyAbLUeQZVbvEprn9dFk1aUzu/7+9P4e7U4DELw2vlv4Y62ALHy Af5NbGtgBXzgA70zl/WocgN1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2rowCjDs 0+cckD19H2QbpFMWUoowHwYDVR0jBBgwFoAUNIGLzw2E4Vmb2ZgXmV5ew5sbAUsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDNzI1L0FDNkNEMTVDMTM5 OTExRjE5QzI0NzBCMUIzRUU1MjhFL05JR0x6dzJFNFZtYjJaZ1htVjVldzVzYkFV cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTklHTHp3MkU0Vm1iMlpnWG1WNWV3NXNiQVVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD NzI1L0FDNkNEMTVDMTM5OTExRjE5QzI0NzBCMUIzRUU1MjhFL05JR0x6dzJFNFZt YjJaZ1htVjVldzVzYkFVcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB4xTLwMXsD5fS4GtHp/1T715UDv0oMPIc7kM9aUWWu2hP3bQXlz3neD5lvBCzh PgC9b7QvmLbtIAr3YdoEqMtQlgrLN5AVkz9Ej0P7u5kcyhjnohL2aBMO9J0vnkBT a1Z6k1eNi80b4kTJzpFPJSTZ5t0bBYPhFkal5Myf4BQfNM6L2W5vW0vYFsp6XEv6 le2wpsASajLyV8SkkJUUnwtNxDfJjOpKdyEszKmVElmJJ+rwzcNbwXUX0DYBJO0i rdocjj2conJuqHCio1lMQwPMbELwrLIuBthsqHn2E0vqQOrqduBzFjabXh02/keO kg/DNIzDgq7hxlyenamCHaIn -----END CERTIFICATE-----Generated at Fri Apr 17 17:09:03 2026 by rpki-client