$ rpki-client -vvf rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft File: NUOeC_NciIu4TRsk7N5wYM90TpE.mft (raw, json) Hash identifier: PecIr4+Bvfri5fLNa/cdQ0nkA2ezRDI7BgaStqcrLXg= Subject key identifier: 71:49:03:3B:65:EF:2B:0A:09:D3:07:DB:5B:77:B3:3B:13:A8:05:70 Authority key identifier: 35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91 Certificate issuer: /CN=A917C422/serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91 Certificate serial: 2C3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft Manifest number: 2C20 Signing time: Fri 12 Jun 2026 14:26:02 +0000 Manifest this update: Fri 12 Jun 2026 14:26:02 +0000 Manifest next update: Fri 19 Jun 2026 14:26:02 +0000 Files and hashes: 1: NUOeC_NciIu4TRsk7N5wYM90TpE.crl (hash: Jj9HbjHFIdY2y9at69+RV7itjsDNE/BwcTfc6vebm6s=) 2: 6313DADA500011EBB74A2C2AC4F9AE02.roa (hash: h/xjw2uGVTtL8b2ydd+g45aswVdSOXMWt+z5VztwbYw=) 3: F645F318500C11EBA2295426C4F9AE02.roa (hash: T/3Qd5JLkUZ8axH+b8NITt79vh28jc8CtqLL9xCu9/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 14:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11322 (0x2c3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C422, serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91 Validity Not Before: Jun 12 14:26:02 2026 GMT Not After : Jun 19 14:26:02 2026 GMT Subject: CN=6a2c16fa-05cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:98:57:13:33:4b:2e:ba:1d:bf:71:4a:8f:87: 2b:c5:58:7d:c4:4b:c8:e0:24:30:4b:66:cc:72:09: a3:e6:a0:39:33:a5:90:cf:11:29:2c:fa:26:0c:20: da:29:6a:bf:02:05:5a:74:37:74:81:d9:13:8c:81: c3:6f:3e:b9:bf:f7:95:02:c0:9a:ae:09:53:83:a2: a6:71:21:e0:f6:47:92:3d:b4:30:8d:60:d2:f8:4d: 7f:89:2c:88:71:4f:2e:20:dd:3e:f9:0f:ee:c5:58: 2a:cc:9c:e5:e6:85:6f:9b:4c:c6:13:9b:08:29:61: 6f:e1:8f:aa:cf:6e:4a:2c:36:5b:14:5f:55:ca:56: 0a:b3:2b:73:9c:a7:46:43:d9:61:34:fc:d6:2d:0a: c7:80:d8:21:22:81:fc:b8:73:ce:33:45:67:7d:b9: b5:7a:bf:be:c2:aa:3e:eb:0b:ab:b6:f7:a4:71:3f: 56:57:17:8c:70:20:78:c0:b4:09:46:01:00:24:d7: 6e:8e:d4:f8:f7:34:76:b7:3e:a1:67:01:ed:93:35: 86:85:75:42:5c:43:48:e0:fa:02:69:d6:0f:95:da: 6b:e1:31:dd:60:aa:0c:ed:f9:a4:f7:f0:90:6b:fa: de:8f:0f:88:b6:5d:06:53:ab:89:ae:54:b5:69:0f: 3c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:49:03:3B:65:EF:2B:0A:09:D3:07:DB:5B:77:B3:3B:13:A8:05:70 X509v3 Authority Key Identifier: keyid:35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:6d:8d:b9:b6:16:ea:3b:f3:fa:db:9f:16:7e:dc:92:04:5e: c9:27:2b:de:cb:c6:e9:ea:f1:de:0c:9b:ee:6a:6f:6c:5e:a1: 9b:03:51:65:4c:c5:22:1e:d6:cd:b7:64:42:75:85:c1:19:e0: 43:47:58:d1:2c:83:31:c3:c5:ae:f0:ac:9f:93:3c:87:75:a9: 62:1c:63:d6:9a:1d:9d:57:ce:d4:0f:8a:a9:d2:a3:08:37:38: 28:7e:13:92:56:a9:fe:93:32:f2:f5:4e:ff:2b:82:57:13:cf: f5:aa:06:03:61:b3:3f:e7:24:67:c1:f2:58:c4:42:d6:a8:5f: 06:83:b9:ed:e7:85:2f:db:97:40:29:fe:76:5b:68:21:70:13: 9e:a6:89:41:78:e0:44:b3:d8:3c:82:2f:77:4a:21:77:42:da: 03:3d:5e:31:64:00:42:70:65:f9:c8:6c:8a:12:c2:62:06:55: f7:fc:95:44:0e:18:9b:33:10:28:0f:3b:53:a5:4a:af:58:72: fa:88:86:4d:61:6d:93:6c:bf:50:fd:ea:07:6d:d5:ac:7c:0b: 8e:f2:14:d7:db:69:e9:c4:18:fa:8c:82:5b:d9:3e:31:88:d6: 78:a2:59:30:f3:9b:13:9a:fc:c8:3c:cc:ba:37:9f:c3:97:4f: 4c:bb:c3:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0MjIxMTAvBgNVBAUTKDM1NDM5RTBCRjM1Qzg4OEJCODREMUIyNEVDREU3MDYw Q0Y3NDRFOTEwHhcNMjYwNjEyMTQyNjAyWhcNMjYwNjE5MTQyNjAyWjAYMRYwFAYD VQQDEw02YTJjMTZmYS0wNWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3phXEzNLLrodv3FKj4crxVh9xEvI4CQwS2bMcgmj5qA5M6WQzxEpLPomDCDa KWq/AgVadDd0gdkTjIHDbz65v/eVAsCarglTg6KmcSHg9keSPbQwjWDS+E1/iSyI cU8uIN0++Q/uxVgqzJzl5oVvm0zGE5sIKWFv4Y+qz25KLDZbFF9VylYKsytznKdG Q9lhNPzWLQrHgNghIoH8uHPOM0Vnfbm1er++wqo+6wurtvekcT9WVxeMcCB4wLQJ RgEAJNdujtT49zR2tz6hZwHtkzWGhXVCXENI4PoCadYPldpr4THdYKoM7fmk9/CQ a/rejw+Itl0GU6uJrlS1aQ88dQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHFJAztl 7ysKCdMH21t3szsTqAVwMB8GA1UdIwQYMBaAFDVDngvzXIiLuE0bJOzecGDPdE6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQyMi8zRTc0NTM2OEVE NTUxMUUzODA3MkM1N0U1OTExRUEzMi9OVU9lQ19OY2lJdTRUUnNrN041d1lNOTBU cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05VT2VDX05jaUl1NFRSc2s3TjV3WU05MFRwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzQyMi8zRTc0NTM2OEVENTUxMUUzODA3MkM1N0U1OTExRUEzMi9OVU9lQ19OY2lJ dTRUUnNrN041d1lNOTBUcEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOG2NubYW6jvz+tufFn7ckgReyScr3svG6erx3gyb7mpvbF6hmwNRZUzFIh7W zbdkQnWFwRngQ0dY0SyDMcPFrvCsn5M8h3WpYhxj1podnVfO1A+KqdKjCDc4KH4T klap/pMy8vVO/yuCVxPP9aoGA2GzP+ckZ8HyWMRC1qhfBoO57eeFL9uXQCn+dlto IXATnqaJQXjgRLPYPIIvd0ohd0LaAz1eMWQAQnBl+chsihLCYgZV9/yVRA4YmzMQ KA87U6VKr1hy+oiGTWFtk2y/UP3qB23VrHwLjvIU19tp6cQY+oyCW9k+MYjWeKJZ MPObE5r8yDzMujefw5dPTLvDyA== -----END CERTIFICATE-----Generated at Sun Jun 14 03:14:01 2026 by rpki-client