$ rpki-client -vvf rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft File: nlcX9fFLsp9ntXrX2dXweRWunEM.mft (raw, json) Hash identifier: ZMBTYFdRhdD1eDbH3qkYsqna+4vgqZkxjEcCXurVzCw= Subject key identifier: F8:BF:F1:71:56:E3:75:5C:65:A8:AE:F7:D4:5F:A8:DA:58:65:67:63 Authority key identifier: 9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 Certificate issuer: /CN=A914E01E/serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43 Certificate serial: 0440 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft Manifest number: 0439 Signing time: Fri 17 Apr 2026 00:10:51 +0000 Manifest this update: Fri 17 Apr 2026 00:10:50 +0000 Manifest next update: Fri 24 Apr 2026 00:10:50 +0000 Files and hashes: 1: nlcX9fFLsp9ntXrX2dXweRWunEM.crl (hash: GM3V+nolGPFgmmlw0mFbeZqzeCxHsrsz+mrxEyRuzEU=) 2: B775BD7A9EA911EC95EBD87CC4F9AE02.roa (hash: AIiAPtcEdSGDtm5Xu/SA/2I+9nLKM1Ar3r+Ob3EnuAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1088 (0x440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E01E, serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43 Validity Not Before: Apr 17 00:10:50 2026 GMT Not After : Apr 24 00:10:50 2026 GMT Subject: CN=69e17a8b-79f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f6:99:33:b9:7d:41:3d:87:59:87:dd:6f:83: 44:df:31:d1:ee:f9:d0:6c:43:69:3b:6d:a7:0f:7d: 2c:09:90:83:ca:7d:e0:92:42:b9:7b:dc:87:ee:2e: 45:c2:71:d3:5e:9b:3a:c9:e9:22:5c:a0:3d:99:40: a2:8b:4f:93:06:45:da:3c:a6:d6:69:ae:3a:c8:b7: 6b:9b:8d:a9:17:c4:29:d3:9a:b3:52:ac:d1:2f:a0: 15:56:aa:54:b6:37:d3:d3:02:9d:f5:9d:e0:de:80: e4:0c:1f:a7:67:11:50:4d:00:5c:d4:ee:3e:bc:bc: 6f:5d:51:a9:8a:32:35:94:f3:10:55:55:54:e8:c1: 77:98:45:bf:d6:af:c6:fa:28:38:03:b9:09:ea:fa: 5e:cb:f1:5d:84:66:11:83:5a:87:ae:85:52:fa:a7: 15:48:d8:02:f9:f1:37:0e:da:07:54:81:bc:9f:97: 7b:a8:d3:88:ab:4b:dd:59:22:8f:3e:82:76:a0:24: 9f:03:25:e3:7d:c1:76:f0:4a:41:11:72:64:de:d8: a7:f6:d8:25:9a:b3:6d:0e:d3:6e:10:bd:98:00:51: bc:6c:81:09:d9:fb:b6:85:e5:cf:41:6b:3c:66:26: 06:64:cc:8e:5a:e3:fb:74:a0:c3:4b:a7:df:b9:a6: 97:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BF:F1:71:56:E3:75:5C:65:A8:AE:F7:D4:5F:A8:DA:58:65:67:63 X509v3 Authority Key Identifier: keyid:9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:85:35:7f:a4:dd:bf:ae:49:d8:38:05:8a:2e:be:0e:ac:bb: 0c:e4:63:c2:1b:fb:34:a9:91:15:11:1f:db:15:67:7f:3f:79: 19:c0:d7:ab:ad:d5:1b:04:ea:57:66:cb:c0:50:2e:ba:41:4a: a7:06:3d:6e:f8:43:3b:83:40:4f:36:89:74:a0:fd:9c:8e:5d: 53:b5:2a:68:a0:81:e9:97:5e:bc:00:27:d0:f3:ff:8d:57:32: 98:c1:1c:d7:b9:6e:da:ca:66:df:c0:fb:29:c9:8b:d2:dd:47: 31:67:9c:1b:a1:70:9d:39:88:d6:27:b1:42:57:9a:05:cb:59: a0:ac:6a:be:9c:e7:b0:42:03:57:82:3a:a6:b3:4d:66:60:8f: 4e:e0:19:d7:98:11:1c:1b:30:d1:ab:77:5e:2a:2f:26:0a:f3: f1:dd:52:75:c7:5c:69:d9:24:5b:e4:3b:8c:74:fa:a2:d1:99: 46:69:db:46:f9:c9:82:78:4b:04:e4:30:64:e3:42:ad:56:b9: e0:29:d6:7a:49:02:de:73:1d:c6:bd:5d:38:51:db:51:1d:f9: 67:92:1b:39:6d:70:e4:3a:02:59:ba:be:69:09:01:9e:c6:33: 53:76:69:a5:f4:6d:fb:ae:17:54:f9:88:a8:d0:85:be:fb:45: 96:16:30:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMUUxMTAvBgNVBAUTKDlFNTcxN0Y1RjE0QkIyOUY2N0I1N0FEN0Q5RDVGMDc5 MTVBRTlDNDMwHhcNMjYwNDE3MDAxMDUwWhcNMjYwNDI0MDAxMDUwWjAYMRYwFAYD VQQDEw02OWUxN2E4Yi03OWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/aZM7l9QT2HWYfdb4NE3zHR7vnQbENpO22nD30sCZCDyn3gkkK5e9yH7i5F wnHTXps6yekiXKA9mUCii0+TBkXaPKbWaa46yLdrm42pF8Qp05qzUqzRL6AVVqpU tjfT0wKd9Z3g3oDkDB+nZxFQTQBc1O4+vLxvXVGpijI1lPMQVVVU6MF3mEW/1q/G +ig4A7kJ6vpey/FdhGYRg1qHroVS+qcVSNgC+fE3DtoHVIG8n5d7qNOIq0vdWSKP PoJ2oCSfAyXjfcF28EpBEXJk3tin9tglmrNtDtNuEL2YAFG8bIEJ2fu2heXPQWs8 ZiYGZMyOWuP7dKDDS6ffuaaXaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPi/8XFW 43VcZaiu99RfqNpYZWdjMB8GA1UdIwQYMBaAFJ5XF/XxS7KfZ7V619nV8HkVrpxD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAxRS9DNUM2RjA1RTlF QTYxMUVDOEZCMDM2NTRDNEY5QUUwMi9ubGNYOWZGTHNwOW50WHJYMmRYd2VSV3Vu RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25sY1g5ZkZMc3A5bnRYclgyZFh3ZVJXdW5FTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAxRS9DNUM2RjA1RTlFQTYxMUVDOEZCMDM2NTRDNEY5QUUwMi9ubGNYOWZGTHNw OW50WHJYMmRYd2VSV3VuRU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUoU1f6Tdv65J2DgFii6+Dqy7DORjwhv7NKmRFREf2xVnfz95GcDXq63VGwTq V2bLwFAuukFKpwY9bvhDO4NATzaJdKD9nI5dU7UqaKCB6ZdevAAn0PP/jVcymMEc 17lu2spm38D7KcmL0t1HMWecG6FwnTmI1iexQleaBctZoKxqvpznsEIDV4I6prNN ZmCPTuAZ15gRHBsw0at3XiovJgrz8d1SdcdcadkkW+Q7jHT6otGZRmnbRvnJgnhL BOQwZONCrVa54CnWekkC3nMdxr1dOFHbUR35Z5IbOW1w5DoCWbq+aQkBnsYzU3Zp pfRt+64XVPmIqNCFvvtFlhYw4Q== -----END CERTIFICATE-----Generated at Fri Apr 17 09:48:12 2026 by rpki-client