$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft File: NOt2jjwYUO8RSYszIMrNGyYdWSk.mft (raw, json) Hash identifier: Oi0K7l/zsnVG83LE1fJnMlhmqeY5sGTZ3M3Ygst/Ckg= Subject key identifier: 8C:43:35:E2:03:B5:1D:0B:1F:45:AF:B5:A6:0B:28:9E:A8:AA:FF:F4 Authority key identifier: 34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29 Certificate issuer: /CN=A9163EEB/serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929 Certificate serial: 352B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft Manifest number: 3529 Signing time: Thu 16 Apr 2026 15:07:10 +0000 Manifest this update: Thu 16 Apr 2026 15:07:10 +0000 Manifest next update: Thu 23 Apr 2026 15:07:10 +0000 Files and hashes: 1: NOt2jjwYUO8RSYszIMrNGyYdWSk.crl (hash: UNEcpl2Nugos113rjTJTmXEhAdHHhJQriJCBv19j67M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13611 (0x352b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EEB, serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929 Validity Not Before: Apr 16 15:07:10 2026 GMT Not After : Apr 23 15:07:10 2026 GMT Subject: CN=69e0fb1e-001c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2f:51:ce:80:f9:49:3a:97:b8:3f:53:fb:3f: d2:77:8a:f9:86:e3:f6:a0:18:a6:d4:3d:fb:71:5c: ff:6c:ba:06:74:d2:75:9e:73:58:85:4a:07:cf:8c: a2:6b:54:fd:ea:9d:05:b9:b1:0f:22:47:32:64:c9: 2d:d0:b9:63:6d:43:31:35:9d:a0:fc:9a:f6:83:4e: c0:c7:5d:4d:50:fa:55:be:b4:2d:1a:c0:a3:ef:cb: 43:e4:7d:f0:29:90:93:13:17:67:2e:46:45:2d:c0: c8:4d:74:09:15:81:f6:ab:ba:4c:d4:74:8a:96:eb: 44:d8:76:30:e1:bf:41:83:3a:77:a3:1c:04:64:1d: 30:16:ea:82:49:e1:c1:42:c0:68:1b:8f:38:f0:ac: f3:10:c2:f9:a2:d1:36:2c:e8:0f:f1:00:db:0c:68: bf:5b:77:37:06:a8:cf:3c:14:93:52:e2:f8:29:5b: 61:95:6d:49:15:4a:13:b0:f5:5d:0e:c6:cc:c6:44: 83:30:a5:fd:e3:02:d5:43:ac:41:f1:c9:07:cc:af: 3c:10:12:18:ab:a4:d2:0d:8a:8c:05:7f:a5:85:77: 30:6c:e2:93:7d:a2:09:fd:a6:4e:c9:50:3d:48:10: 66:10:fb:da:13:b0:6a:4e:05:58:65:e5:3e:c5:8e: 2c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:43:35:E2:03:B5:1D:0B:1F:45:AF:B5:A6:0B:28:9E:A8:AA:FF:F4 X509v3 Authority Key Identifier: keyid:34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:50:21:49:3d:71:61:7f:ee:4f:89:95:c4:f9:4e:c7:76:0d: 24:03:9c:f3:c0:3f:67:ea:ae:19:e3:af:71:48:1c:4a:48:a0: cb:16:87:09:18:c5:7f:88:ef:04:be:c0:11:3a:da:e9:ba:3d: 50:52:82:12:14:ea:42:64:9d:d7:89:67:ef:4e:b7:c1:00:f7: 91:f4:4c:54:93:07:17:ba:fa:d4:1c:2b:ac:96:b4:68:dc:55: 13:bf:0f:c3:d9:25:e9:62:1c:c9:4a:be:5a:b6:19:8e:d5:60: af:1b:3d:08:61:be:3e:95:80:f4:44:5a:da:2a:cb:64:5f:b9: 58:69:af:ca:33:ce:76:2d:3a:50:1c:c8:58:89:a5:10:2a:0d: c6:31:e1:b9:55:19:90:4d:33:2b:14:3b:1d:05:a9:28:06:af: 25:94:aa:c7:f6:8a:30:04:c8:1c:2c:e9:2f:2c:30:8e:45:c4: 2c:01:43:67:bf:64:46:c5:9c:34:db:57:18:a5:3a:1b:62:aa: 64:fd:af:e1:0d:e2:bc:ee:5c:65:77:3b:af:ca:58:45:af:0d: 57:dc:c3:a0:bf:fe:b3:d5:7c:54:02:42:eb:77:93:61:c5:9a: d5:a1:9d:e2:9a:ca:9b:ca:33:06:11:c7:cc:11:bc:4e:f5:60: f2:50:6d:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFRUIxMTAvBgNVBAUTKDM0RUI3NjhFM0MxODUwRUYxMTQ5OEIzMzIwQ0FDRDFC MjYxRDU5MjkwHhcNMjYwNDE2MTUwNzEwWhcNMjYwNDIzMTUwNzEwWjAYMRYwFAYD VQQDEw02OWUwZmIxZS0wMDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0y9RzoD5STqXuD9T+z/Sd4r5huP2oBim1D37cVz/bLoGdNJ1nnNYhUoHz4yi a1T96p0FubEPIkcyZMkt0LljbUMxNZ2g/Jr2g07Ax11NUPpVvrQtGsCj78tD5H3w KZCTExdnLkZFLcDITXQJFYH2q7pM1HSKlutE2HYw4b9Bgzp3oxwEZB0wFuqCSeHB QsBoG4848KzzEML5otE2LOgP8QDbDGi/W3c3BqjPPBSTUuL4KVthlW1JFUoTsPVd DsbMxkSDMKX94wLVQ6xB8ckHzK88EBIYq6TSDYqMBX+lhXcwbOKTfaIJ/aZOyVA9 SBBmEPvaE7BqTgVYZeU+xY4s/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIxDNeID tR0LH0WvtaYLKJ6oqv/0MB8GA1UdIwQYMBaAFDTrdo48GFDvEUmLMyDKzRsmHVkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VFQi82REU0Mjc2ODFE QTQxMUUyODA4MTcxOUEwOEIwMkNEMi9OT3Qyamp3WVVPOFJTWXN6SU1yTkd5WWRX U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PdDJqandZVU84UlNZc3pJTXJOR3lZZFdTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VFQi82REU0Mjc2ODFEQTQxMUUyODA4MTcxOUEwOEIwMkNEMi9OT3Qyamp3WVVP OFJTWXN6SU1yTkd5WWRXU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEFAhST1xYX/uT4mVxPlOx3YNJAOc88A/Z+quGeOvcUgcSkigyxaHCRjFf4jv BL7AETra6bo9UFKCEhTqQmSd14ln7063wQD3kfRMVJMHF7r61BwrrJa0aNxVE78P w9kl6WIcyUq+WrYZjtVgrxs9CGG+PpWA9ERa2irLZF+5WGmvyjPOdi06UBzIWIml ECoNxjHhuVUZkE0zKxQ7HQWpKAavJZSqx/aKMATIHCzpLywwjkXELAFDZ79kRsWc NNtXGKU6G2KqZP2v4Q3ivO5cZXc7r8pYRa8NV9zDoL/+s9V8VAJC63eTYcWa1aGd 4prKm8ozBhHHzBG8TvVg8lBtww== -----END CERTIFICATE-----Generated at Fri Apr 17 23:03:50 2026 by rpki-client