$ rpki-client -vvf rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft File: NmIvmQC0aq380FRk8Q1CsTBiUXY.mft (raw, json) Hash identifier: dvsDkwgSXVrn8VjKAFZq5IMv5tk0JfAuSxAGtE0FgcI= Subject key identifier: B6:19:98:7C:8F:1D:64:D6:F4:95:92:C5:E5:89:EA:09:3E:77:1B:1D Authority key identifier: 36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76 Certificate issuer: /CN=A919CE1D/serialNumber=36622F9900B46AADFCD05464F10D42B130625176 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft Manifest number: 8E Signing time: Fri 17 Apr 2026 07:15:38 +0000 Manifest this update: Fri 17 Apr 2026 07:15:38 +0000 Manifest next update: Fri 24 Apr 2026 07:15:38 +0000 Files and hashes: 1: NmIvmQC0aq380FRk8Q1CsTBiUXY.crl (hash: J2iJk3oi1l6pTTeiu+oVNXIXGLHBNwB9D55tWFkSQ8k=) 2: 2518C04062E011F08D04F42EC4F9AE02.roa (hash: rrBoaZeZAYohnofQuu333DPGl97BqUXv9lxtd9Vptcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CE1D, serialNumber=36622F9900B46AADFCD05464F10D42B130625176 Validity Not Before: Apr 17 07:15:38 2026 GMT Not After : Apr 24 07:15:38 2026 GMT Subject: CN=69e1de1a-115f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ad:88:86:d8:f3:e1:ac:4a:13:2a:9e:73:37: a6:c5:b6:0c:25:cf:03:af:f6:6f:35:fb:06:f8:e6: 8c:db:21:37:5d:7c:d1:52:35:ea:33:df:66:64:f8: 9c:91:7b:a8:b2:92:17:d3:a4:5b:68:27:bc:16:81: 68:a3:25:ad:69:08:73:65:19:4b:18:50:9c:c1:10: 3e:50:3f:01:61:ac:71:7c:04:6f:57:da:7e:0e:ef: 72:73:14:60:48:78:8d:1d:a2:76:5c:bf:3e:16:a9: 9e:fd:b0:7c:5c:1e:e1:12:54:80:88:c5:83:8c:a1: 78:ed:07:41:59:c0:c7:6a:d1:23:be:88:35:72:de: ed:d2:2a:bb:75:0f:28:e4:33:df:0f:90:e6:26:5a: 16:97:38:b2:f9:de:ff:b0:87:06:fa:79:7d:a5:8d: 4b:94:25:2a:72:2a:a6:4f:2d:cd:64:66:8e:eb:f9: 7c:1e:e3:60:c9:58:22:e9:a4:c6:3d:37:05:9e:54: dc:b2:68:1f:91:d3:f7:69:68:5d:1d:71:43:2a:37: 5b:c6:35:72:22:75:65:8c:75:04:ac:75:93:cb:da: 9a:fb:a5:33:7a:3c:76:b8:b6:f2:89:36:70:4e:d2: 21:88:01:86:88:2c:4c:7c:72:3d:af:cb:eb:fe:9e: b0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:19:98:7C:8F:1D:64:D6:F4:95:92:C5:E5:89:EA:09:3E:77:1B:1D X509v3 Authority Key Identifier: keyid:36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:17:6f:ae:02:28:e3:32:1e:be:e1:17:fa:8d:72:58:33:e9: 04:06:dc:0e:ef:c6:64:3f:49:96:92:dc:63:a6:0e:2c:dc:52: f2:e6:57:5a:f1:8c:16:5c:3c:b2:06:f2:ea:b8:58:74:13:2a: e1:15:6d:1c:5f:47:af:46:5c:2a:fb:9a:10:ac:29:90:3e:03: d9:ad:25:29:93:82:8e:dd:08:c1:7f:b3:1f:fc:70:09:0c:9a: 32:ff:7d:ce:4c:bb:fe:77:5b:d3:0f:05:8e:b3:3c:b0:65:4e: 7d:ff:c6:ef:f7:1b:ef:5b:0b:93:7b:cd:87:b0:bd:82:04:32: 2e:1c:a7:30:a5:94:7e:c8:bd:e9:6f:ff:42:57:3f:2f:69:d5: b8:0f:21:9c:8e:6a:58:d1:68:d8:e1:c1:fc:a9:60:b9:f4:71: 16:b4:b9:bb:b5:28:82:c3:ca:98:6b:e4:f9:ae:41:95:dd:86: 91:30:de:de:f7:b8:8f:bf:21:13:ee:07:db:39:92:b7:41:2a: 03:36:cb:68:ca:4b:30:02:64:10:04:f5:10:d6:4c:7e:5e:f0: 71:20:3f:2d:7f:90:be:72:4f:f2:20:45:de:82:18:56:1d:8a: 14:90:f3:8e:2a:99:a6:58:65:3d:37:11:1f:61:e7:1e:84:81: 64:90:43:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNFMUQxMTAvBgNVBAUTKDM2NjIyRjk5MDBCNDZBQURGQ0QwNTQ2NEYxMEQ0MkIx MzA2MjUxNzYwHhcNMjYwNDE3MDcxNTM4WhcNMjYwNDI0MDcxNTM4WjAYMRYwFAYD VQQDEw02OWUxZGUxYS0xMTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwK2Ihtjz4axKEyqeczemxbYMJc8Dr/ZvNfsG+OaM2yE3XXzRUjXqM99mZPic kXuospIX06RbaCe8FoFooyWtaQhzZRlLGFCcwRA+UD8BYaxxfARvV9p+Du9ycxRg SHiNHaJ2XL8+Fqme/bB8XB7hElSAiMWDjKF47QdBWcDHatEjvog1ct7t0iq7dQ8o 5DPfD5DmJloWlziy+d7/sIcG+nl9pY1LlCUqciqmTy3NZGaO6/l8HuNgyVgi6aTG PTcFnlTcsmgfkdP3aWhdHXFDKjdbxjVyInVljHUErHWTy9qa+6Uzejx2uLbyiTZw TtIhiAGGiCxMfHI9r8vr/p6wrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLYZmHyP HWTW9JWSxeWJ6gk+dxsdMB8GA1UdIwQYMBaAFDZiL5kAtGqt/NBUZPENQrEwYlF2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0UxRC9CNTQ4REJFMjYy REYxMUYwQTFFMzdFMEVDNEY5QUUwMi9ObUl2bVFDMGFxMzgwRlJrOFExQ3NUQmlV WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05tSXZtUUMwYXEzODBGUms4UTFDc1RCaVVYWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0UxRC9CNTQ4REJFMjYyREYxMUYwQTFFMzdFMEVDNEY5QUUwMi9ObUl2bVFDMGFx MzgwRlJrOFExQ3NUQmlVWFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATRdvrgIo4zIevuEX+o1yWDPpBAbcDu/GZD9JlpLcY6YOLNxS8uZXWvGMFlw8 sgby6rhYdBMq4RVtHF9Hr0ZcKvuaEKwpkD4D2a0lKZOCjt0IwX+zH/xwCQyaMv99 zky7/ndb0w8FjrM8sGVOff/G7/cb71sLk3vNh7C9ggQyLhynMKWUfsi96W//Qlc/ L2nVuA8hnI5qWNFo2OHB/KlgufRxFrS5u7UogsPKmGvk+a5Bld2GkTDe3ve4j78h E+4H2zmSt0EqAzbLaMpLMAJkEAT1ENZMfl7wcSA/LX+QvnJP8iBF3oIYVh2KFJDz jiqZplhlPTcRH2HnHoSBZJBDgg== -----END CERTIFICATE-----Generated at Fri Apr 17 10:13:17 2026 by rpki-client