$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft File: nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft (raw, json) Hash identifier: mizUfZPuNqheREsQqagEjxvupAJfOdxggbiSGxtYb3g= Subject key identifier: FE:CE:63:FD:A1:37:4B:03:3D:0F:B6:A3:06:3D:57:47:0F:0F:91:36 Authority key identifier: 9E:29:B0:F5:1B:BB:6D:60:33:C0:EF:00:62:3C:C4:BB:AC:EA:58:41 Certificate issuer: /CN=A9172CE3/serialNumber=9E29B0F51BBB6D6033C0EF00623CC4BBACEA5841 Certificate serial: 0527 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft Manifest number: 0527 Signing time: Thu 16 Apr 2026 23:26:35 +0000 Manifest this update: Thu 16 Apr 2026 23:26:35 +0000 Manifest next update: Thu 23 Apr 2026 23:26:35 +0000 Files and hashes: 1: nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl (hash: CAKPsZgtRbm0Qcjpsgy9TALRMq08Y3vjsyejbK/YltE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:26:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1319 (0x527) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172CE3, serialNumber=9E29B0F51BBB6D6033C0EF00623CC4BBACEA5841 Validity Not Before: Apr 16 23:26:35 2026 GMT Not After : Apr 23 23:26:35 2026 GMT Subject: CN=69e1702b-6088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:54:97:8a:b1:cd:83:b7:d2:f4:c9:b6:26:0c: 33:9b:cb:79:e6:da:2a:2c:28:ef:eb:9d:32:14:88: 1c:c8:ca:50:7e:73:9d:9e:2f:7b:23:f4:f1:04:cd: 66:f9:f9:8c:eb:ff:14:6c:9d:b3:5a:ab:a5:57:58: a9:c5:a9:67:e1:1e:bb:16:73:15:9c:73:a5:09:47: 70:c7:f3:39:4e:f7:2d:12:42:c3:72:8d:cd:f9:88: f0:2f:79:45:79:28:e3:75:45:84:34:ad:01:0b:b8: 17:08:9e:c8:93:b7:a3:81:e7:8d:30:47:db:0c:a0: ed:3e:c6:35:53:3a:30:82:33:b4:2e:ba:7e:64:ec: d6:7e:35:71:c6:ad:5d:c0:75:00:24:a8:af:31:da: ea:3c:4b:40:24:80:40:4b:f9:53:50:42:f3:00:b4: d3:ea:c4:3b:ef:40:f5:ab:44:55:66:e1:6b:bb:f6: 5f:99:b8:10:ef:f4:f9:f7:bf:43:05:d9:e5:d0:07: b5:a9:86:7b:11:0a:76:e0:73:6a:bf:46:b7:a8:40: c7:1e:34:75:aa:da:9a:6c:f1:6c:5a:b9:44:60:37: f7:a7:5d:a4:06:37:5a:9c:eb:e2:61:ea:28:5e:01: 05:3c:c0:5f:04:7f:93:32:ce:46:cd:15:14:5f:c9: 54:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CE:63:FD:A1:37:4B:03:3D:0F:B6:A3:06:3D:57:47:0F:0F:91:36 X509v3 Authority Key Identifier: keyid:9E:29:B0:F5:1B:BB:6D:60:33:C0:EF:00:62:3C:C4:BB:AC:EA:58:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:9f:5f:e6:b3:4e:fe:c9:e1:52:b4:33:a9:91:95:6b:74:ba: 2a:dc:d0:99:df:a4:af:5c:02:f3:ad:0c:6f:f9:98:bc:48:6f: c4:a6:b4:05:36:6e:2f:c8:50:b9:68:d7:ca:33:e8:63:33:c2: 66:4f:55:40:8c:66:c5:f1:85:b4:01:13:95:34:c4:f4:56:57: 16:4e:5d:f6:eb:3b:fe:e2:b2:af:63:c0:9b:7e:2b:0c:b7:ee: a2:bd:3c:e4:99:d9:81:f3:56:da:2a:6b:de:bc:40:1a:59:4c: d5:c8:ab:02:87:c3:1e:34:f0:8c:a8:7b:0f:ce:86:d0:af:8e: d2:31:19:92:2a:b2:d9:57:25:9a:1d:3b:30:c0:d7:44:c9:73: 0f:94:59:c2:b8:c6:73:b6:48:4c:a8:74:e6:47:4a:35:0b:7f: e9:6a:8a:c7:33:a4:ba:34:31:83:7f:42:81:7a:a8:2e:1d:21: 53:58:59:b4:c0:5b:a1:4d:7f:5c:3c:a4:e4:09:de:3e:6c:ec: 55:30:71:6b:9e:ad:eb:ee:2a:c7:9b:6c:06:e7:a3:1a:2d:e3: 0e:03:ff:1f:fd:25:da:4d:16:04:89:8e:6a:b0:a3:5b:e6:b7: c4:dd:75:8f:01:9c:60:53:6d:62:be:19:d1:46:6a:a1:93:e7: db:36:40:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDRTMxMTAvBgNVBAUTKDlFMjlCMEY1MUJCQjZENjAzM0MwRUYwMDYyM0NDNEJC QUNFQTU4NDEwHhcNMjYwNDE2MjMyNjM1WhcNMjYwNDIzMjMyNjM1WjAYMRYwFAYD VQQDEw02OWUxNzAyYi02MDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlSXirHNg7fS9Mm2Jgwzm8t55toqLCjv650yFIgcyMpQfnOdni97I/TxBM1m +fmM6/8UbJ2zWqulV1ipxaln4R67FnMVnHOlCUdwx/M5TvctEkLDco3N+YjwL3lF eSjjdUWENK0BC7gXCJ7Ik7ejgeeNMEfbDKDtPsY1UzowgjO0Lrp+ZOzWfjVxxq1d wHUAJKivMdrqPEtAJIBAS/lTUELzALTT6sQ770D1q0RVZuFru/ZfmbgQ7/T5979D Bdnl0Ae1qYZ7EQp24HNqv0a3qEDHHjR1qtqabPFsWrlEYDf3p12kBjdanOviYeoo XgEFPMBfBH+TMs5GzRUUX8lUhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP7OY/2h N0sDPQ+2owY9V0cPD5E2MB8GA1UdIwQYMBaAFJ4psPUbu21gM8DvAGI8xLus6lhB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkNFMy82NzI4QzRDNDQw NTkxMUVDQTBBRkFBNERDNEY5QUUwMi9uaW13OVJ1N2JXQXp3TzhBWWp6RXU2enFX RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25pbXc5UnU3YldBendPOEFZanpFdTZ6cVdFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkNFMy82NzI4QzRDNDQwNTkxMUVDQTBBRkFBNERDNEY5QUUwMi9uaW13OVJ1N2JX QXp3TzhBWWp6RXU2enFXRUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAw59f5rNO/snhUrQzqZGVa3S6KtzQmd+kr1wC860Mb/mYvEhvxKa0BTZuL8hQ uWjXyjPoYzPCZk9VQIxmxfGFtAETlTTE9FZXFk5d9us7/uKyr2PAm34rDLfuor08 5JnZgfNW2ipr3rxAGllM1cirAofDHjTwjKh7D86G0K+O0jEZkiqy2Vclmh07MMDX RMlzD5RZwrjGc7ZITKh05kdKNQt/6WqKxzOkujQxg39CgXqoLh0hU1hZtMBboU1/ XDyk5AnePmzsVTBxa56t6+4qx5tsBuejGi3jDgP/H/0l2k0WBImOarCjW+a3xN11 jwGcYFNtYr4Z0UZqoZPn2zZA7Q== -----END CERTIFICATE-----Generated at Fri Apr 17 16:49:28 2026 by rpki-client