$ rpki-client -vvf rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft File: NS1M7Db4784NhRINl9keIqNY9Ys.mft (raw, json) Hash identifier: 2BUTCEqz2EI6/n94TKRZaxTbJ+oH6bRvr6abQkiLGj8= Subject key identifier: F7:41:E8:E2:CC:63:23:D9:A6:00:6F:B7:1E:C5:B1:91:B6:2A:C0:A6 Authority key identifier: 35:2D:4C:EC:36:F8:EF:CE:0D:85:12:0D:97:D9:1E:22:A3:58:F5:8B Certificate issuer: /CN=A9151AC7/serialNumber=352D4CEC36F8EFCE0D85120D97D91E22A358F58B Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft Manifest number: D9 Signing time: Fri 17 Apr 2026 06:21:12 +0000 Manifest this update: Fri 17 Apr 2026 06:21:12 +0000 Manifest next update: Fri 24 Apr 2026 06:21:12 +0000 Files and hashes: 1: NS1M7Db4784NhRINl9keIqNY9Ys.crl (hash: bqZEh6b79RCYq++nUoHVMopBAmlxMJWAYiRspf7tMRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.crl rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151AC7, serialNumber=352D4CEC36F8EFCE0D85120D97D91E22A358F58B Validity Not Before: Apr 17 06:21:12 2026 GMT Not After : Apr 24 06:21:12 2026 GMT Subject: CN=69e1d158-35f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2f:e7:a6:bc:da:0f:92:2e:ad:c0:c8:d8:37: f0:52:e2:1a:fe:8d:77:a3:1e:3c:29:a6:41:67:14: 0f:4b:de:55:74:be:13:04:42:84:13:a0:c7:95:6f: 39:06:87:f7:a5:9c:d6:15:c4:b9:82:c1:ee:53:a2: 95:49:01:80:12:71:c4:f9:c2:5b:47:ff:f5:9d:15: 10:0a:de:d8:26:19:f6:76:b6:cb:68:45:8d:c0:86: 6b:42:e6:11:0a:a0:b2:09:35:d9:cf:1b:70:08:06: 38:c1:29:60:ed:60:7b:a7:11:ec:5a:c3:c3:ba:ce: eb:6c:6b:dc:23:ef:ea:8b:4d:93:b8:ff:a5:b9:ab: 58:78:78:46:c1:3a:5a:2b:56:98:60:0c:fb:07:65: 7e:bc:bf:4d:4a:88:33:bc:89:8e:bf:90:c8:7e:65: 18:72:1a:fd:a6:3b:cf:82:a1:02:a8:04:7c:90:b5: 90:fe:d7:3e:6d:f4:b5:33:a2:c0:f7:b3:66:bb:37: 18:86:e1:d8:ca:be:c5:1f:72:56:a7:f2:20:a2:21: bf:d1:cc:7b:5f:50:c6:e0:ae:a0:cf:c8:50:0a:58: 7b:b3:b4:7a:2b:75:02:a2:c4:ae:b3:0c:6d:cb:f0: 3c:30:86:69:be:12:16:87:82:20:3c:16:65:b2:00: 8e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:41:E8:E2:CC:63:23:D9:A6:00:6F:B7:1E:C5:B1:91:B6:2A:C0:A6 X509v3 Authority Key Identifier: keyid:35:2D:4C:EC:36:F8:EF:CE:0D:85:12:0D:97:D9:1E:22:A3:58:F5:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:7b:d3:d2:1e:42:1d:33:42:34:f8:0b:b5:b1:80:13:4c:b0: 01:80:35:c4:5e:38:f0:9b:10:c1:14:a7:95:70:70:0f:f2:f5: 2a:fe:74:b5:b6:c1:4e:9d:73:82:b6:2f:ff:50:c7:c7:67:ea: c6:33:92:4d:f9:1d:34:f4:a1:c5:50:59:7e:68:69:af:6c:cc: bc:ef:86:7e:ce:9a:f4:ca:fe:e0:25:9d:77:0b:25:a4:16:49: 1e:54:9a:1b:e3:31:20:13:6a:16:08:79:e4:4a:cf:16:1f:8c: e0:85:32:78:28:ef:c0:c4:eb:d0:ba:be:cb:1f:6f:03:71:8c: 69:94:a7:91:a6:9c:ae:32:ef:26:a6:58:91:ee:29:c6:83:7c: 60:27:a8:c9:66:85:b2:f0:6e:19:8e:70:9b:2c:f1:ac:56:28: 02:36:c2:f0:17:19:d5:d9:27:7f:a3:97:e9:14:0c:8e:3a:70: 39:e0:06:b4:9c:3a:0e:e6:99:3f:57:c2:ca:62:eb:84:70:08: c4:96:76:b8:c3:b1:82:56:73:69:56:41:63:df:03:22:6a:1d: 10:d8:4a:db:d1:74:47:e3:4b:07:59:03:e8:08:0a:9a:7a:4c: 44:06:56:f7:6a:83:6b:b1:da:17:f6:68:7c:7b:a5:16:d5:59: fa:e0:3c:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFBQzcxMTAvBgNVBAUTKDM1MkQ0Q0VDMzZGOEVGQ0UwRDg1MTIwRDk3RDkxRTIy QTM1OEY1OEIwHhcNMjYwNDE3MDYyMTEyWhcNMjYwNDI0MDYyMTEyWjAYMRYwFAYD VQQDEw02OWUxZDE1OC0zNWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAti/nprzaD5IurcDI2DfwUuIa/o13ox48KaZBZxQPS95VdL4TBEKEE6DHlW85 Bof3pZzWFcS5gsHuU6KVSQGAEnHE+cJbR//1nRUQCt7YJhn2drbLaEWNwIZrQuYR CqCyCTXZzxtwCAY4wSlg7WB7pxHsWsPDus7rbGvcI+/qi02TuP+luatYeHhGwTpa K1aYYAz7B2V+vL9NSogzvImOv5DIfmUYchr9pjvPgqECqAR8kLWQ/tc+bfS1M6LA 97NmuzcYhuHYyr7FH3JWp/IgoiG/0cx7X1DG4K6gz8hQClh7s7R6K3UCosSuswxt y/A8MIZpvhIWh4IgPBZlsgCOyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPdB6OLM YyPZpgBvtx7FsZG2KsCmMB8GA1UdIwQYMBaAFDUtTOw2+O/ODYUSDZfZHiKjWPWL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUFDNy80MUE0NkI1MEYz OTcxMUVGOTEwMUQyMTBDNEY5QUUwMi9OUzFNN0RiNDc4NE5oUklObDlrZUlxTlk5 WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05TMU03RGI0Nzg0TmhSSU5sOWtlSXFOWTlZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUFDNy80MUE0NkI1MEYzOTcxMUVGOTEwMUQyMTBDNEY5QUUwMi9OUzFNN0RiNDc4 NE5oUklObDlrZUlxTlk5WXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK3vT0h5CHTNCNPgLtbGAE0ywAYA1xF448JsQwRSnlXBwD/L1Kv50tbbBTp1z grYv/1DHx2fqxjOSTfkdNPShxVBZfmhpr2zMvO+Gfs6a9Mr+4CWddwslpBZJHlSa G+MxIBNqFgh55ErPFh+M4IUyeCjvwMTr0Lq+yx9vA3GMaZSnkaacrjLvJqZYke4p xoN8YCeoyWaFsvBuGY5wmyzxrFYoAjbC8BcZ1dknf6OX6RQMjjpwOeAGtJw6DuaZ P1fCymLrhHAIxJZ2uMOxglZzaVZBY98DImodENhK29F0R+NLB1kD6AgKmnpMRAZW 92qDa7HaF/ZofHulFtVZ+uA8Wg== -----END CERTIFICATE-----Generated at Fri Apr 17 19:39:41 2026 by rpki-client