$ rpki-client -vvf rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft File: NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft (raw, json) Hash identifier: oQx/hYNMiMY//Qns/ujtOIn6BnoNzGRpe658IwV+6sM= Subject key identifier: BD:37:88:C4:18:E4:96:C5:61:42:60:37:E2:EF:0D:4A:B6:8C:9D:0D Authority key identifier: 34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B Certificate issuer: /CN=A91A56E7/serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Certificate serial: 0CAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft Manifest number: 0CA7 Signing time: Thu 16 Apr 2026 18:24:59 +0000 Manifest this update: Thu 16 Apr 2026 18:24:59 +0000 Manifest next update: Thu 23 Apr 2026 18:24:59 +0000 Files and hashes: 1: NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl (hash: k7WxfqtlFxdmao7LbwV6vWrNw3aIZydl06eB5qhSXFQ=) 2: 2157C3E011C211EA93417583C4F9AE02.roa (hash: yqBrYS+OQh89LeyuxvtAswEE9eX5g7RnQPP/zPqycgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3247 (0xcaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A56E7, serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Validity Not Before: Apr 16 18:24:59 2026 GMT Not After : Apr 23 18:24:59 2026 GMT Subject: CN=69e1297b-5da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:31:60:b5:22:29:6b:47:e7:58:fc:61:84:36: ef:24:45:0d:a8:ea:f9:0d:6d:c8:4b:f2:a9:76:e4: d6:b4:6e:c3:49:45:1c:af:0b:67:b6:5c:ba:88:1c: d6:60:bd:6f:21:cb:25:59:2a:1b:8d:08:a4:04:0b: 8f:7c:79:8e:b2:87:d9:dc:8b:16:ed:bf:f2:d7:4b: df:cb:ed:b1:a7:6a:0f:65:88:d0:03:b4:07:10:b9: f0:00:fa:5a:10:9e:c8:1a:af:1b:13:07:57:d5:a7: f7:8d:e1:4f:7b:5b:d7:39:f7:78:90:46:d6:cd:95: fe:72:3d:f5:eb:07:07:e9:81:9d:1b:4e:8c:9a:9f: b0:c0:d1:0c:a5:61:2a:89:c6:7b:25:c4:c4:24:f3: fa:c2:9f:d5:ce:e1:27:1f:33:11:83:42:8e:04:51: 19:71:26:2d:d1:af:5a:b3:2c:de:01:1b:54:54:81: 8d:a8:b4:c9:f1:d5:d8:6a:71:eb:bd:e8:e4:42:8b: 48:96:3f:9a:35:f8:0f:0e:85:d6:30:28:7f:e9:c4: 6c:cb:d0:dc:cc:55:ec:82:4b:04:0f:30:f9:55:0f: b9:09:5e:f9:83:55:97:9b:a1:a7:77:05:19:00:b5: 9a:4b:e0:52:59:ad:75:6a:ac:2e:bc:9f:ca:20:fb: 1b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:37:88:C4:18:E4:96:C5:61:42:60:37:E2:EF:0D:4A:B6:8C:9D:0D X509v3 Authority Key Identifier: keyid:34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:23:ee:dc:79:bc:64:60:c7:17:69:a7:68:ce:40:71:70:64: fd:bb:51:71:ff:dc:98:08:71:8c:06:26:c3:82:af:f2:f9:25: 9b:be:53:68:a6:82:81:86:c1:6c:e4:18:c0:81:ef:88:ee:aa: 0b:b8:c9:8e:b8:f2:ff:4e:0e:59:a7:c5:d0:65:c3:69:2d:32: 32:80:4f:70:43:33:c5:15:3b:61:7c:f2:7c:b2:d7:c3:5a:49: 32:24:f5:21:bf:fa:0a:df:1d:9a:c1:df:73:d5:bb:e7:44:6e: 20:25:b0:25:96:a4:56:31:cc:52:62:aa:81:8a:69:1a:16:1e: bc:e3:49:2e:8d:ea:cb:fd:5e:c3:94:6f:d6:fe:90:5b:9a:eb: ab:ec:a2:8f:30:ca:7f:3a:8a:b1:1d:95:6a:3a:90:f1:f6:a6: c6:83:07:c1:9a:0a:74:9b:d6:7c:98:96:be:ed:2a:54:56:47: a5:18:5e:5f:fb:d3:7b:64:56:03:95:69:75:71:0f:88:8d:d1: f6:e4:61:49:e2:76:f2:21:33:35:be:f7:2c:50:e3:c5:4c:2e: 1f:cf:c6:ca:26:41:ec:f3:c1:15:07:53:aa:53:72:87:91:6b: ff:18:13:63:91:8d:50:42:89:25:50:dd:69:98:cc:66:32:c0: 52:fc:6f:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2RTcxMTAvBgNVBAUTKDM0NzYzNkYwRTk4QUY4MjQ4MjZCMUJDRjk2RjNDNzc2 RDgxMkY1NUIwHhcNMjYwNDE2MTgyNDU5WhcNMjYwNDIzMTgyNDU5WjAYMRYwFAYD VQQDEw02OWUxMjk3Yi01ZGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzFgtSIpa0fnWPxhhDbvJEUNqOr5DW3IS/KpduTWtG7DSUUcrwtntly6iBzW YL1vIcslWSobjQikBAuPfHmOsofZ3IsW7b/y10vfy+2xp2oPZYjQA7QHELnwAPpa EJ7IGq8bEwdX1af3jeFPe1vXOfd4kEbWzZX+cj316wcH6YGdG06Mmp+wwNEMpWEq icZ7JcTEJPP6wp/VzuEnHzMRg0KOBFEZcSYt0a9asyzeARtUVIGNqLTJ8dXYanHr vejkQotIlj+aNfgPDoXWMCh/6cRsy9DczFXsgksEDzD5VQ+5CV75g1WXm6GndwUZ ALWaS+BSWa11aqwuvJ/KIPsbMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL03iMQY 5JbFYUJgN+LvDUq2jJ0NMB8GA1UdIwQYMBaAFDR2NvDpivgkgmsbz5bzx3bYEvVb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTZFNy83ODYwRjhCQTEx QzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1DU0NheHZQbHZQSGR0Z1M5 VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IWTI4T21LLUNTQ2F4dlBsdlBIZHRnUzlWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTZFNy83ODYwRjhCQTExQzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1D U0NheHZQbHZQSGR0Z1M5VnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhSPu3Hm8ZGDHF2mnaM5AcXBk/btRcf/cmAhxjAYmw4Kv8vklm75TaKaCgYbB bOQYwIHviO6qC7jJjrjy/04OWafF0GXDaS0yMoBPcEMzxRU7YXzyfLLXw1pJMiT1 Ib/6Ct8dmsHfc9W750RuICWwJZakVjHMUmKqgYppGhYevONJLo3qy/1ew5Rv1v6Q W5rrq+yijzDKfzqKsR2VajqQ8famxoMHwZoKdJvWfJiWvu0qVFZHpRheX/vTe2RW A5VpdXEPiI3R9uRhSeJ28iEzNb73LFDjxUwuH8/GyiZB7PPBFQdTqlNyh5Fr/xgT Y5GNUEKJJVDdaZjMZjLAUvxvZA== -----END CERTIFICATE-----Generated at Fri Apr 17 04:25:42 2026 by rpki-client