$ rpki-client -vvf rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft File: NtqOcqrHflUzc5DvTGHJVAtFldc.mft (raw, json) Hash identifier: m1oBUK4hVhLBmXcv89/L+wCOkrvpYHARv/X+ImvcT1o= Subject key identifier: 00:5F:14:A3:6C:0B:70:5A:8F:AC:92:6D:C2:DE:E7:31:D6:06:64:6C Authority key identifier: 36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7 Certificate issuer: /CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7 Certificate serial: 0ABF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft Manifest number: 0AA7 Signing time: Sat 18 Apr 2026 19:25:24 +0000 Manifest this update: Sat 18 Apr 2026 19:25:24 +0000 Manifest next update: Sat 25 Apr 2026 19:25:24 +0000 Files and hashes: 1: NtqOcqrHflUzc5DvTGHJVAtFldc.crl (hash: JzB5FMmhi36u5zU3lE4gSc63wjrC1siO+Xf5+qkypgY=) 2: 6A23E166499211ED879F2D11C4F9AE02.roa (hash: csZJdZSF6nTnFQn9EqcR/ZbPKFiCdQpZdY1Ll4yoD/w=) 3: 6B5765BC499211ED879F2D11C4F9AE02.roa (hash: Gij6YaDS1wfHNVRKMaJ5A1SN4efMb1QxYQGgmn19MtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 19:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2751 (0xabf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91577A2, serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7 Validity Not Before: Apr 18 19:25:24 2026 GMT Not After : Apr 25 19:25:24 2026 GMT Subject: CN=69e3daa4-00da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e6:5d:69:9e:4c:36:75:f9:f7:ce:a3:bf:00: 95:43:b4:03:ff:6b:6f:ed:64:09:0f:00:5d:62:7a: ed:ec:8b:b9:dd:ef:64:ee:5c:b3:40:7b:1e:58:ef: 85:96:42:71:a9:7e:66:cb:4d:46:1f:f1:5e:d1:88: ce:01:28:a4:2a:2a:a6:d3:64:2b:d3:f6:09:e4:be: 32:db:b7:0c:d6:74:6c:21:f7:70:4f:f4:75:43:33: 58:4b:47:2d:c6:35:a3:e8:dc:65:04:79:b9:e0:27: 6d:3c:5b:41:69:e3:67:f5:21:64:71:7c:ff:63:ee: 99:3a:5b:87:75:ca:19:70:b6:9a:39:79:1f:2f:f3: 4a:49:4f:f3:22:7f:ea:4c:31:0d:79:be:82:30:4f: 20:37:3c:20:ce:64:9e:e6:5f:2e:eb:f5:10:2e:8f: 76:87:22:ce:49:30:ef:9f:f5:4a:d3:1a:48:be:ff: 13:9d:0c:19:c2:50:9f:8c:8c:63:e3:dd:1a:e2:f9: ed:94:f1:3d:0a:56:d4:15:75:d3:d8:05:e3:03:6d: 95:b9:5d:02:83:60:8b:2f:4a:d0:3e:5a:11:25:3f: 79:43:a7:64:c2:6a:19:d1:65:15:aa:29:24:11:88: 78:c9:96:14:91:6e:f1:82:38:1c:bd:71:7d:8a:93: 37:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5F:14:A3:6C:0B:70:5A:8F:AC:92:6D:C2:DE:E7:31:D6:06:64:6C X509v3 Authority Key Identifier: keyid:36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:94:45:61:7a:6f:65:32:db:c2:64:9b:26:56:72:a8:e2:27: 9d:52:5c:56:86:d8:b9:80:43:e0:44:79:ec:18:1f:62:4d:2f: 11:65:dd:4f:f9:dc:98:98:48:35:e3:7f:a1:e5:b5:ae:a1:ca: 7f:8e:66:1f:bb:e1:8a:f8:88:d2:e8:44:7d:b9:8b:5c:7c:e8: 5a:78:82:36:15:e7:6c:0b:56:af:ee:3f:bb:c7:24:22:30:bd: 22:b6:e3:64:b5:3d:9f:78:80:7b:7d:84:be:e4:14:f3:57:82: 0d:2a:9d:d9:2d:39:26:22:ab:cf:d3:2b:78:79:3a:f3:50:cb: 26:01:73:31:33:fa:79:1b:6c:58:a2:fa:98:3e:a1:e4:f2:44: 26:f4:c4:54:ae:39:8c:e6:25:be:74:cc:10:53:bc:f2:68:c0: f1:86:97:fc:bf:12:c2:cf:5b:93:67:b9:0c:12:e2:42:f2:9b: 16:53:98:18:ec:92:5e:48:98:80:c9:87:5c:51:fb:74:17:fc: 16:31:4c:3b:ad:1a:76:f3:e3:9f:96:b4:0f:99:9e:3a:f0:d0: 4b:71:55:95:2b:08:07:10:c0:67:c2:2b:77:27:ca:2e:04:1e: 86:06:f6:97:d5:3f:cf:76:89:62:26:ec:67:8c:82:29:65:c6: 6a:e2:81:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3QTIxMTAvBgNVBAUTKDM2REE4RTcyQUFDNzdFNTUzMzczOTBFRjRDNjFDOTU0 MEI0NTk1RDcwHhcNMjYwNDE4MTkyNTI0WhcNMjYwNDI1MTkyNTI0WjAYMRYwFAYD VQQDEw02OWUzZGFhNC0wMGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAouZdaZ5MNnX5986jvwCVQ7QD/2tv7WQJDwBdYnrt7Iu53e9k7lyzQHseWO+F lkJxqX5my01GH/Fe0YjOASikKiqm02Qr0/YJ5L4y27cM1nRsIfdwT/R1QzNYS0ct xjWj6NxlBHm54CdtPFtBaeNn9SFkcXz/Y+6ZOluHdcoZcLaaOXkfL/NKSU/zIn/q TDENeb6CME8gNzwgzmSe5l8u6/UQLo92hyLOSTDvn/VK0xpIvv8TnQwZwlCfjIxj 490a4vntlPE9ClbUFXXT2AXjA22VuV0Cg2CLL0rQPloRJT95Q6dkwmoZ0WUVqikk EYh4yZYUkW7xgjgcvXF9ipM3/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABfFKNs C3Baj6ySbcLe5zHWBmRsMB8GA1UdIwQYMBaAFDbajnKqx35VM3OQ70xhyVQLRZXX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzdBMi84QkMxNUM0MDdC MDQxMUVBOURBQUQ0MzJDNEY5QUUwMi9OdHFPY3FySGZsVXpjNUR2VEdISlZBdEZs ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL050cU9jcXJIZmxVemM1RHZUR0hKVkF0RmxkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzdBMi84QkMxNUM0MDdCMDQxMUVBOURBQUQ0MzJDNEY5QUUwMi9OdHFPY3FySGZs VXpjNUR2VEdISlZBdEZsZGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfJRFYXpvZTLbwmSbJlZyqOInnVJcVobYuYBD4ER57BgfYk0vEWXdT/ncmJhI NeN/oeW1rqHKf45mH7vhiviI0uhEfbmLXHzoWniCNhXnbAtWr+4/u8ckIjC9Irbj ZLU9n3iAe32EvuQU81eCDSqd2S05JiKrz9MreHk681DLJgFzMTP6eRtsWKL6mD6h 5PJEJvTEVK45jOYlvnTMEFO88mjA8YaX/L8Sws9bk2e5DBLiQvKbFlOYGOySXkiY gMmHXFH7dBf8FjFMO60advPjn5a0D5meOvDQS3FVlSsIBxDAZ8IrdyfKLgQehgb2 l9U/z3aJYibsZ4yCKWXGauKBUg== -----END CERTIFICATE-----Generated at Sun Apr 19 10:18:45 2026 by rpki-client