$ rpki-client -vvf rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft File: NhN5wakOmU8oZFtzNWRe_DpeGs0.mft (raw, json) Hash identifier: UTh1dVa2dVHX2FqOXrdhMuQNdZ/yIWCCipLODn2ES6E= Subject key identifier: 97:EA:69:D9:3E:2C:5D:6F:7F:1B:25:F2:C7:B4:CD:91:69:2F:EF:DF Authority key identifier: 36:13:79:C1:A9:0E:99:4F:28:64:5B:73:35:64:5E:FC:3A:5E:1A:CD Certificate issuer: /CN=A914DCD4/serialNumber=361379C1A90E994F28645B7335645EFC3A5E1ACD Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft Manifest number: 42 Signing time: Fri 17 Apr 2026 08:12:14 +0000 Manifest this update: Fri 17 Apr 2026 08:12:13 +0000 Manifest next update: Fri 24 Apr 2026 08:12:13 +0000 Files and hashes: 1: NhN5wakOmU8oZFtzNWRe_DpeGs0.crl (hash: K8NkhcF/GlKe3jC13mYwDEBwhSGi7t51gzEVHF2QW0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.crl rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DCD4, serialNumber=361379C1A90E994F28645B7335645EFC3A5E1ACD Validity Not Before: Apr 17 08:12:13 2026 GMT Not After : Apr 24 08:12:13 2026 GMT Subject: CN=69e1eb5d-8125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a9:97:ad:37:46:df:2a:b9:f2:6f:7f:6b:d9: b0:3f:ca:d0:f3:03:f5:1b:19:fc:99:91:59:fe:a0: 20:74:77:b7:76:e6:54:a5:f1:ee:6c:62:9d:de:a9: 16:d0:24:1c:9b:80:ea:45:1d:a4:31:05:e8:80:3c: fb:97:e7:d5:c9:ab:cc:9b:f7:2c:ac:8d:d5:60:2b: da:44:49:4d:f4:d2:f1:00:d2:30:6d:ec:f2:1d:97: 85:db:36:da:6c:f5:ce:a4:ed:bf:53:0a:ef:ef:be: 27:ba:f2:0d:6e:b6:fa:02:dd:0c:06:b3:c2:6e:eb: 64:eb:01:4b:d4:cc:3b:45:03:3e:06:27:5e:ba:97: 1e:97:46:53:18:30:47:2b:11:c4:95:2f:d8:03:65: 68:e0:64:1c:05:0f:2d:54:bf:ee:35:8d:e3:d4:47: b8:b7:04:ac:bc:06:74:b2:0e:1a:0c:e8:0b:89:2f: ef:74:e1:82:6a:bc:ac:5c:72:8e:dc:f6:37:da:35: 56:89:64:76:df:2a:1a:95:f7:e6:0e:b8:ff:0d:13: c4:6e:98:c6:d8:55:64:00:e1:ec:b4:dd:11:79:f3: 30:66:95:53:16:0c:91:bb:fe:ce:d5:3d:f4:12:ac: cd:59:30:af:55:72:b0:c9:30:2c:7d:67:e8:ec:cc: dc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EA:69:D9:3E:2C:5D:6F:7F:1B:25:F2:C7:B4:CD:91:69:2F:EF:DF X509v3 Authority Key Identifier: keyid:36:13:79:C1:A9:0E:99:4F:28:64:5B:73:35:64:5E:FC:3A:5E:1A:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:06:d2:ee:21:51:f8:c4:92:bd:71:d8:9f:d9:12:48:6d:a9: 14:3d:18:b6:d5:52:59:a1:60:3a:c7:64:4c:0c:1b:af:45:c9: b7:da:1e:9a:80:d8:12:e4:62:c3:18:c5:18:cf:1c:d9:fd:f2: d9:47:23:96:34:81:7c:fc:bd:fa:a2:1a:81:7a:31:01:e1:0a: c8:1b:77:c3:d0:51:22:06:05:ef:36:a1:9f:77:14:77:b0:61: 21:f0:65:d6:a4:57:f8:05:b9:c9:e0:4e:2a:89:3b:3a:fe:d5: 75:3a:a2:2e:37:98:4c:bd:8c:20:96:11:08:32:81:7b:a7:81: e9:7b:fa:43:c1:cf:52:2e:47:7d:09:28:43:6d:4e:6e:8a:65: a7:52:5d:28:a9:3b:22:27:4e:48:ff:7d:b3:dc:69:12:ac:df: 7b:02:9c:9c:b4:ef:a8:09:37:7c:e0:51:5e:d6:06:c2:18:b7: 91:99:0b:1c:a3:80:72:8c:6e:9a:8e:ae:78:e5:46:ef:25:da: 00:73:29:7c:41:e9:36:89:b3:fc:5f:94:3a:b4:da:9d:42:96: 95:a8:18:fc:9d:97:98:11:d6:52:3a:3b:ae:1c:5b:be:9c:39: 30:cc:a0:81:5c:88:e1:23:c9:10:8b:03:4a:97:52:5f:fc:6b: 6f:68:5e:ef -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RENENDExMC8GA1UEBRMoMzYxMzc5QzFBOTBFOTk0RjI4NjQ1QjczMzU2NDVFRkMz QTVFMUFDRDAeFw0yNjA0MTcwODEyMTNaFw0yNjA0MjQwODEyMTNaMBgxFjAUBgNV BAMTDTY5ZTFlYjVkLTgxMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3qZetN0bfKrnyb39r2bA/ytDzA/UbGfyZkVn+oCB0d7d25lSl8e5sYp3eqRbQ JBybgOpFHaQxBeiAPPuX59XJq8yb9yysjdVgK9pESU300vEA0jBt7PIdl4XbNtps 9c6k7b9TCu/vvie68g1utvoC3QwGs8Ju62TrAUvUzDtFAz4GJ166lx6XRlMYMEcr EcSVL9gDZWjgZBwFDy1Uv+41jePUR7i3BKy8BnSyDhoM6AuJL+904YJqvKxcco7c 9jfaNVaJZHbfKhqV9+YOuP8NE8RumMbYVWQA4ey03RF58zBmlVMWDJG7/s7VPfQS rM1ZMK9VcrDJMCx9Z+jszNy7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUl+pp2T4s XW9/GyXyx7TNkWkv798wHwYDVR0jBBgwFoAUNhN5wakOmU8oZFtzNWRe/DpeGs0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREQ0Q0L0I5OEMzQTM4RTFB QTExRjBBRkNFODRCODRBNkY1NkJDL05oTjV3YWtPbVU4b1pGdHpOV1JlX0RwZUdz MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTmhONXdha09tVThvWkZ0ek5XUmVfRHBlR3MwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE Q0Q0L0I5OEMzQTM4RTFBQTExRjBBRkNFODRCODRBNkY1NkJDL05oTjV3YWtPbVU4 b1pGdHpOV1JlX0RwZUdzMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAVBtLuIVH4xJK9cdif2RJIbakUPRi21VJZoWA6x2RMDBuvRcm32h6agNgS5GLD GMUYzxzZ/fLZRyOWNIF8/L36ohqBejEB4QrIG3fD0FEiBgXvNqGfdxR3sGEh8GXW pFf4BbnJ4E4qiTs6/tV1OqIuN5hMvYwglhEIMoF7p4Hpe/pDwc9SLkd9CShDbU5u imWnUl0oqTsiJ05I/32z3GkSrN97ApyctO+oCTd84FFe1gbCGLeRmQsco4ByjG6a jq545UbvJdoAcyl8Qek2ibP8X5Q6tNqdQpaVqBj8nZeYEdZSOjuuHFu+nDkwzKCB XIjhI8kQiwNKl1Jf/GtvaF7v -----END CERTIFICATE-----Generated at Fri Apr 17 12:42:26 2026 by rpki-client