$ rpki-client -vvf rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft File: nL-xN0vpMpetwbIdvTeY0VvSdN8.mft (raw, json) Hash identifier: 0hZA3VFTGO4sjW0Zm8AUzobwfgdm5HSmdFCWR2U0Bqc= Subject key identifier: C9:E8:24:F7:DC:CE:C6:54:4E:F5:A9:28:CE:B7:62:38:E2:2B:92:68 Authority key identifier: 9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF Certificate issuer: /CN=A9152696/serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF Certificate serial: 0CEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft Manifest number: 0CE3 Signing time: Thu 16 Apr 2026 18:13:13 +0000 Manifest this update: Thu 16 Apr 2026 18:13:13 +0000 Manifest next update: Thu 23 Apr 2026 18:13:13 +0000 Files and hashes: 1: nL-xN0vpMpetwbIdvTeY0VvSdN8.crl (hash: /w5IDPBe4/SnKVTT5W9Vkv4/+CRD3L+fS/QY5mdeKkM=) 2: E905CD5808F111EA8E4F1D51C4F9AE02.roa (hash: isdogO69KQFGu46kiXPUMXjezpBNqbUl3557H/EGWLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3308 (0xcec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152696, serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF Validity Not Before: Apr 16 18:13:13 2026 GMT Not After : Apr 23 18:13:13 2026 GMT Subject: CN=69e126b9-cba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5c:7f:92:d2:7d:3c:e4:9c:4d:46:66:07:17: 2d:92:ed:02:c6:25:f6:79:d7:bc:8c:fb:87:6e:62: 21:e9:5f:28:d6:d0:00:c0:99:d2:5b:a0:c3:bc:9f: 8d:8f:e8:a7:fe:5d:91:0d:60:4e:6b:60:9e:b7:99: 12:7b:44:ec:13:48:92:93:77:37:90:01:5e:b8:d9: 0e:3d:66:db:37:db:f2:18:98:73:ea:7c:df:d1:7a: d7:fe:0b:87:67:21:2b:db:75:cf:dc:13:fb:56:b2: 50:53:c1:9e:11:67:7c:39:3c:ca:a4:e1:02:e5:9b: 1b:28:ff:c0:f5:5e:34:aa:2e:4f:dc:58:61:50:c1: a9:63:72:2b:1d:0c:56:d9:78:ca:82:9f:2f:4d:4c: b7:93:77:48:51:4a:b4:46:a9:9c:54:1c:5b:b9:c7: c7:de:66:7c:b9:67:0e:a9:df:d2:14:ac:cc:19:9a: 4a:61:4b:2b:29:be:94:0b:71:d7:09:3b:59:f5:b9: dd:41:44:3f:5a:80:51:4f:4e:a1:a0:3b:24:14:aa: 64:71:dd:4f:59:0b:55:b1:c0:69:bb:74:3d:94:c4: 92:73:08:3a:4c:9a:93:21:c6:a4:39:2a:2b:0d:c6: 55:46:d0:11:16:e6:c0:14:68:ab:b9:f1:e6:7a:c8: 68:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E8:24:F7:DC:CE:C6:54:4E:F5:A9:28:CE:B7:62:38:E2:2B:92:68 X509v3 Authority Key Identifier: keyid:9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:97:e2:da:38:86:75:45:96:7f:8c:e6:64:86:bd:67:ac:81: 04:18:ff:53:de:2c:7c:32:59:c2:a6:65:57:1b:48:01:ef:42: d6:89:3f:6a:4e:4e:87:91:bb:58:c0:dd:5b:5f:93:11:db:3f: a4:09:b1:f6:74:9d:a2:8a:84:62:21:3b:ba:75:4c:f6:e9:a3: 49:11:97:8e:e5:47:7d:58:dc:95:b9:27:2b:35:83:24:a3:4e: 40:92:60:01:ba:c5:b0:91:71:74:59:ff:98:ae:8d:2f:ff:7d: 86:c2:ef:1e:17:39:26:94:26:e0:e3:32:a8:bd:c8:c6:b1:b6: 81:de:48:b9:63:ac:5a:35:2d:96:39:5b:e3:47:57:63:d5:a4: 6d:36:65:c6:3a:22:45:85:f1:9b:4d:84:43:61:df:f9:e1:06: 65:72:cc:11:ea:5d:f8:c7:89:d5:81:8d:80:76:93:a0:61:7b: c3:7b:e3:ec:12:97:b6:29:48:04:de:49:40:1b:65:48:c3:81: 0d:6b:4f:94:a4:aa:42:22:56:3d:40:cb:76:8d:d0:c6:12:b2: 01:d7:30:cc:80:30:48:4b:76:30:0f:56:5b:08:39:f6:10:1b: 44:e7:f3:7e:34:47:4f:c5:d9:d9:20:99:34:69:d1:b4:e3:2c: 7b:ba:66:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI2OTYxMTAvBgNVBAUTKDlDQkZCMTM3NEJFOTMyOTdBREMxQjIxREJEMzc5OEQx NUJEMjc0REYwHhcNMjYwNDE2MTgxMzEzWhcNMjYwNDIzMTgxMzEzWjAYMRYwFAYD VQQDEw02OWUxMjZiOS1jYmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVx/ktJ9POScTUZmBxctku0CxiX2ede8jPuHbmIh6V8o1tAAwJnSW6DDvJ+N j+in/l2RDWBOa2Cet5kSe0TsE0iSk3c3kAFeuNkOPWbbN9vyGJhz6nzf0XrX/guH ZyEr23XP3BP7VrJQU8GeEWd8OTzKpOEC5ZsbKP/A9V40qi5P3FhhUMGpY3IrHQxW 2XjKgp8vTUy3k3dIUUq0RqmcVBxbucfH3mZ8uWcOqd/SFKzMGZpKYUsrKb6UC3HX CTtZ9bndQUQ/WoBRT06hoDskFKpkcd1PWQtVscBpu3Q9lMSScwg6TJqTIcakOSor DcZVRtARFubAFGirufHmesho7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMnoJPfc zsZUTvWpKM63YjjiK5JoMB8GA1UdIwQYMBaAFJy/sTdL6TKXrcGyHb03mNFb0nTf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjY5Ni83MjVDQTFENDA2 Q0QxMUVBQUU1RTc5MzRDNEY5QUUwMi9uTC14TjB2cE1wZXR3YklkdlRlWTBWdlNk TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MLXhOMHZwTXBldHdiSWR2VGVZMFZ2U2ROOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjY5Ni83MjVDQTFENDA2Q0QxMUVBQUU1RTc5MzRDNEY5QUUwMi9uTC14TjB2cE1w ZXR3YklkdlRlWTBWdlNkTjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJJfi2jiGdUWWf4zmZIa9Z6yBBBj/U94sfDJZwqZlVxtIAe9C1ok/ak5Oh5G7 WMDdW1+TEds/pAmx9nSdooqEYiE7unVM9umjSRGXjuVHfVjclbknKzWDJKNOQJJg AbrFsJFxdFn/mK6NL/99hsLvHhc5JpQm4OMyqL3IxrG2gd5IuWOsWjUtljlb40dX Y9WkbTZlxjoiRYXxm02EQ2Hf+eEGZXLMEepd+MeJ1YGNgHaToGF7w3vj7BKXtilI BN5JQBtlSMOBDWtPlKSqQiJWPUDLdo3QxhKyAdcwzIAwSEt2MA9WWwg59hAbROfz fjRHT8XZ2SCZNGnRtOMse7pmtA== -----END CERTIFICATE-----Generated at Fri Apr 17 22:31:13 2026 by rpki-client