$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft File: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft (raw, json) Hash identifier: oOKplW1Cn2l293CCWn8r3dYcVFBfVQUWKIL9GnPFSZI= Subject key identifier: 1D:B6:77:50:1B:54:7F:6A:9D:B8:62:2F:2D:F0:62:06:31:B1:E9:ED Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Certificate serial: 09DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft Manifest number: 093A Signing time: Thu 16 Apr 2026 20:33:11 +0000 Manifest this update: Thu 16 Apr 2026 20:33:11 +0000 Manifest next update: Thu 23 Apr 2026 20:33:11 +0000 Files and hashes: 1: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl (hash: BO4a6PszerHzXAD/BAVveYYD7zhi4p6TGe3KTo+sg/8=) 2: A98F7960A41F11F0A133244EC4F9AE02.roa (hash: Fkicx7CSwAUsnDPdfHvB6HsA9q0BYXagiCWHfaLV4Bg=) 3: B84CC7D2A41A11F08EC1655BC4F9AE02.roa (hash: LpD49WPYOZPaHio5ZklNa5sGnt+yU3gxsH0FPSNIjpQ=) 4: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (hash: bBolaE4J+ODeMaCpkUYIkQ/PrlqstuijFxA7VnkQpuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2526 (0x9de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Validity Not Before: Apr 16 20:33:11 2026 GMT Not After : Apr 23 20:33:11 2026 GMT Subject: CN=69e14787-fd7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c3:d0:84:57:5f:ab:55:0a:2f:87:39:c3:8f: 81:44:05:37:83:0b:d6:46:e0:77:ae:bf:1f:1e:33: 06:df:2b:08:74:4a:48:50:b8:cd:89:a3:88:bb:51: d2:4a:cc:c4:98:63:a1:7e:8e:7e:a6:bb:e6:05:21: 5b:a5:d5:d6:e3:24:16:2e:97:28:fb:26:e8:f1:6d: a3:bc:d9:3b:93:a7:48:ea:fa:6a:98:5f:f1:82:46: ce:eb:d8:f5:1c:f1:42:d5:01:96:b6:cc:4e:04:ae: d3:50:fa:b4:58:9c:38:0d:82:51:c4:47:d6:75:57: 38:39:c3:9d:b4:f4:3b:c2:6b:48:e9:f9:f0:f7:15: 36:4a:da:9a:63:86:e4:08:3a:27:34:ba:0c:b2:87: 52:f8:c5:b3:43:97:2d:17:df:58:81:78:2e:50:6a: e4:d9:a9:d3:2d:7d:71:35:4d:0b:5e:25:77:c3:9b: 33:95:9a:ff:78:4a:ce:b0:f4:a9:8f:5b:ab:d0:34: ff:88:ef:e8:f6:16:c2:27:c5:0f:40:53:41:03:85: d4:34:e1:36:36:06:dd:5e:e4:c6:d3:31:5e:2c:d3: 97:24:b9:4a:87:3e:90:8d:5e:39:10:eb:a1:36:7e: fe:e2:db:86:f6:d5:3e:b4:22:ea:43:3c:4d:af:e4: dc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B6:77:50:1B:54:7F:6A:9D:B8:62:2F:2D:F0:62:06:31:B1:E9:ED X509v3 Authority Key Identifier: keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:7a:46:4a:cd:68:22:2b:af:30:56:9a:25:3f:05:9f:05:7c: 4d:b0:ce:a7:f4:47:87:aa:fa:bc:2c:67:8f:96:3c:8f:91:2f: 38:06:8e:4f:b0:18:3f:6f:3b:d4:8d:ad:b7:33:ed:a8:42:4c: 56:6b:fa:cd:81:7d:7d:a3:2d:40:42:e3:d1:76:c4:5b:29:c4: 3c:76:c4:c2:2f:9c:fd:00:3b:1e:41:5d:68:30:01:fe:5e:37: 96:c5:87:cf:16:07:26:d7:e7:d2:9f:d1:97:cc:0a:bb:bb:4c: 68:0d:9c:7f:f3:59:05:9f:d9:5d:85:42:a8:96:65:67:d1:5b: 76:33:cf:c8:6e:a4:f4:35:75:a5:74:10:81:40:6b:13:f6:ea: 1d:d7:e6:44:e9:1b:15:47:4b:76:e8:69:8c:38:50:6f:e8:ff: 14:3b:1d:5f:0b:8b:e2:26:a5:a0:ec:fa:91:bd:fd:1f:45:0f: e8:a5:8f:c6:6c:ea:8c:99:cd:7f:cd:37:61:5d:7c:aa:b5:06: 16:48:5b:a0:e1:08:c7:19:c2:75:bf:ed:13:e1:70:a9:51:27: 03:50:00:45:e9:be:cf:88:00:92:b0:56:dd:18:78:22:91:b2: a3:52:53:63:4e:fc:48:8c:ba:73:bd:30:0c:80:86:69:90:7a: d0:a4:dc:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0 OTQ5OTcxNjIwHhcNMjYwNDE2MjAzMzExWhcNMjYwNDIzMjAzMzExWjAYMRYwFAYD VQQDEw02OWUxNDc4Ny1mZDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssPQhFdfq1UKL4c5w4+BRAU3gwvWRuB3rr8fHjMG3ysIdEpIULjNiaOIu1HS SszEmGOhfo5+prvmBSFbpdXW4yQWLpco+ybo8W2jvNk7k6dI6vpqmF/xgkbO69j1 HPFC1QGWtsxOBK7TUPq0WJw4DYJRxEfWdVc4OcOdtPQ7wmtI6fnw9xU2StqaY4bk CDonNLoMsodS+MWzQ5ctF99YgXguUGrk2anTLX1xNU0LXiV3w5szlZr/eErOsPSp j1ur0DT/iO/o9hbCJ8UPQFNBA4XUNOE2NgbdXuTG0zFeLNOXJLlKhz6QjV45EOuh Nn7+4tuG9tU+tCLqQzxNr+TcNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB22d1Ab VH9qnbhiLy3wYgYxsentMB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDA0RS9CQzAzMEM3NkYxREExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFE S0Q4TXEwUGkzR0ZKU1pjV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcXpGSs1oIiuvMFaaJT8FnwV8TbDOp/RHh6r6vCxnj5Y8j5EvOAaOT7AYP287 1I2ttzPtqEJMVmv6zYF9faMtQELj0XbEWynEPHbEwi+c/QA7HkFdaDAB/l43lsWH zxYHJtfn0p/Rl8wKu7tMaA2cf/NZBZ/ZXYVCqJZlZ9FbdjPPyG6k9DV1pXQQgUBr E/bqHdfmROkbFUdLduhpjDhQb+j/FDsdXwuL4ialoOz6kb39H0UP6KWPxmzqjJnN f803YV18qrUGFkhboOEIxxnCdb/tE+FwqVEnA1AARem+z4gAkrBW3Rh4IpGyo1JT Y078SIy6c70wDICGaZB60KTc5Q== -----END CERTIFICATE-----Generated at Fri Apr 17 05:52:54 2026 by rpki-client