$ rpki-client -vvf rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft File: NAcoRkbqh4WDwlsPqefW7aCRMpg.mft (raw, json) Hash identifier: b6tsEB71jT6OtKaCbSixqS3wf0K7Hs+MooZ7owoBwTM= Subject key identifier: E6:5F:29:5A:F5:72:0F:7E:15:44:72:44:4D:6E:DA:5F:4A:47:8D:00 Authority key identifier: 34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98 Certificate issuer: /CN=A919C318/serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298 Certificate serial: 09AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft Manifest number: 09A5 Signing time: Thu 16 Apr 2026 19:52:01 +0000 Manifest this update: Thu 16 Apr 2026 19:52:00 +0000 Manifest next update: Thu 23 Apr 2026 19:52:00 +0000 Files and hashes: 1: NAcoRkbqh4WDwlsPqefW7aCRMpg.crl (hash: Hcc/1+zfAZ3pgpd5uy+6yQDCOoo3aG0kcWls8GpTCwY=) 2: 9AA539E6A82411EA996D5F41C4F9AE02.roa (hash: i1dwOevc3k9bwU5TzewRLrZW6NUS+x25YAF0oiOhGhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2477 (0x9ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C318, serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298 Validity Not Before: Apr 16 19:52:00 2026 GMT Not After : Apr 23 19:52:00 2026 GMT Subject: CN=69e13de1-aa23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f1:87:ad:4a:4c:ed:e8:93:4f:a1:51:7b:73: 02:f8:56:d5:e9:88:ba:4e:f6:5f:a3:62:61:d9:f7: 52:d4:6e:20:4c:9f:67:8e:03:f7:95:f8:40:65:63: 37:2d:c2:90:e4:96:92:e9:7f:fe:89:57:5a:fa:72: 30:7f:52:ad:c3:37:43:36:fa:5b:51:6f:93:a1:6a: 20:b0:cf:99:01:64:03:6d:bc:1f:ce:e7:c1:0a:2c: 36:f1:29:c2:b0:81:df:6b:b0:05:f6:7d:bc:b4:fd: 03:96:01:c4:64:fe:a0:3d:a8:69:77:a4:7a:1b:8b: 68:ed:9b:e3:4a:67:d3:6b:78:e1:44:d3:ef:27:9b: 31:24:31:9f:4d:be:c4:e5:f4:36:68:c8:3c:a0:ee: 32:10:ce:36:9c:e2:99:da:96:8d:4b:26:e5:2f:c9: ae:80:21:db:8d:c5:cc:c7:ec:f9:0e:5e:e7:89:e5: 31:a6:f9:1e:67:bd:3c:94:07:ab:84:7d:c9:f5:1c: 60:31:ed:29:6e:09:b9:db:d0:ca:27:64:4c:d8:75: 25:00:9e:dd:06:5c:9a:f0:ed:6f:14:fb:1b:fd:7b: de:13:da:f5:98:5b:78:c0:a3:93:3c:34:54:c6:67: 8b:56:73:ef:db:9c:24:5a:11:2f:72:88:e5:29:6c: 35:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5F:29:5A:F5:72:0F:7E:15:44:72:44:4D:6E:DA:5F:4A:47:8D:00 X509v3 Authority Key Identifier: keyid:34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:66:66:aa:e6:9e:c7:ed:12:0d:bb:46:76:c2:19:b7:d7:9e: 8b:b6:27:99:53:86:a9:66:5c:12:41:0c:7e:5c:df:cb:2a:56: df:58:8c:8d:ef:58:2f:3a:7c:23:0d:bb:3a:d4:dc:d6:a2:40: f0:00:83:a4:84:da:8e:cb:c0:51:09:f5:f0:62:7c:69:f5:ee: fb:6a:a2:b0:aa:b0:51:d1:be:f3:11:a0:2b:02:4b:af:64:7a: 10:a2:44:6a:fc:5e:7e:0e:e2:5e:69:ba:ea:ea:3f:f1:5f:3e: 2d:15:81:91:f0:55:2b:ce:57:06:76:95:e1:d3:4e:57:53:39: ce:c4:67:50:2c:90:e7:8c:cc:f3:75:60:89:a7:b2:1b:ed:61: 96:07:a0:e7:9f:8d:81:41:7f:2d:4f:8e:1e:db:b7:0c:db:e4: 9a:77:f5:a1:92:6e:e3:96:45:62:a5:bc:9e:ce:38:d6:df:eb: c2:b3:ad:3c:47:12:c6:47:da:e5:f8:37:e4:3e:6b:a8:19:21: ee:aa:20:8a:a5:ee:d3:fe:bf:bd:fc:aa:a3:fc:fd:75:c7:72: b6:1b:ec:f1:8d:b5:3e:55:e1:7b:ef:cb:d7:04:26:54:48:12: 6e:2b:cb:00:fe:be:1b:38:81:02:57:4b:28:a1:ab:a6:38:e3: 1d:08:75:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzMTgxMTAvBgNVBAUTKDM0MDcyODQ2NDZFQTg3ODU4M0MyNUIwRkE5RTdENkVE QTA5MTMyOTgwHhcNMjYwNDE2MTk1MjAwWhcNMjYwNDIzMTk1MjAwWjAYMRYwFAYD VQQDEw02OWUxM2RlMS1hYTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPGHrUpM7eiTT6FRe3MC+FbV6Yi6TvZfo2Jh2fdS1G4gTJ9njgP3lfhAZWM3 LcKQ5JaS6X/+iVda+nIwf1KtwzdDNvpbUW+ToWogsM+ZAWQDbbwfzufBCiw28SnC sIHfa7AF9n28tP0DlgHEZP6gPahpd6R6G4to7ZvjSmfTa3jhRNPvJ5sxJDGfTb7E 5fQ2aMg8oO4yEM42nOKZ2paNSyblL8mugCHbjcXMx+z5Dl7nieUxpvkeZ708lAer hH3J9RxgMe0pbgm529DKJ2RM2HUlAJ7dBlya8O1vFPsb/XveE9r1mFt4wKOTPDRU xmeLVnPv25wkWhEvcojlKWw1BwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOZfKVr1 cg9+FURyRE1u2l9KR40AMB8GA1UdIwQYMBaAFDQHKEZG6oeFg8JbD6nn1u2gkTKY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzMxOC82NUI2NzFCNkE4 MjIxMUVBQUJBQTJGMTlDNEY5QUUwMi9OQWNvUmticWg0V0R3bHNQcWVmVzdhQ1JN cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BY29Sa2JxaDRXRHdsc1BxZWZXN2FDUk1wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzMxOC82NUI2NzFCNkE4MjIxMUVBQUJBQTJGMTlDNEY5QUUwMi9OQWNvUmticWg0 V0R3bHNQcWVmVzdhQ1JNcGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFGZmquaex+0SDbtGdsIZt9eei7YnmVOGqWZcEkEMflzfyypW31iMje9YLzp8 Iw27OtTc1qJA8ACDpITajsvAUQn18GJ8afXu+2qisKqwUdG+8xGgKwJLr2R6EKJE avxefg7iXmm66uo/8V8+LRWBkfBVK85XBnaV4dNOV1M5zsRnUCyQ54zM83Vgiaey G+1hlgeg55+NgUF/LU+OHtu3DNvkmnf1oZJu45ZFYqW8ns441t/rwrOtPEcSxkfa 5fg35D5rqBkh7qogiqXu0/6/vfyqo/z9dcdythvs8Y21PlXhe+/L1wQmVEgSbivL AP6+GziBAldLKKGrpjjjHQh13g== -----END CERTIFICATE-----Generated at Fri Apr 17 11:36:51 2026 by rpki-client