$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft File: nZwAihKi96YP7_liJmsFAqHKC6I.mft (raw, json) Hash identifier: k3l7G2Bu6LfOUu+L35zUlttyiFw4Peghe4s1RuGmA3c= Subject key identifier: 8D:E4:98:2F:B9:40:1D:04:7E:85:D2:AC:6C:49:DB:F0:6A:16:00:18 Authority key identifier: 9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 Certificate issuer: /CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Certificate serial: 05CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft Manifest number: 05BF Signing time: Thu 16 Apr 2026 23:00:31 +0000 Manifest this update: Thu 16 Apr 2026 23:00:30 +0000 Manifest next update: Thu 23 Apr 2026 23:00:30 +0000 Files and hashes: 1: nZwAihKi96YP7_liJmsFAqHKC6I.crl (hash: HsjICjq2uuue9duCx8W0CPNH8htU+JrnG3YFV3Td++Q=) 2: 46A2104603CF11ECA480B07CC4F9AE02.roa (hash: YWL2tnOxZhR6Kv+bhZGzV6FUKHaCEBSKA7cxdxelpv4=) 3: 460AA4AE03CF11ECA480B07CC4F9AE02.roa (hash: 8wbWE+NHbm5WX/IacxW1nTlGzZjirDSvgH7MSKpS2Nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1485 (0x5cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB85A, serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Validity Not Before: Apr 16 23:00:30 2026 GMT Not After : Apr 23 23:00:30 2026 GMT Subject: CN=69e16a0f-acce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:27:80:36:52:94:e0:2e:25:16:cc:8f:25:4a: d0:62:10:f2:ae:3b:fb:43:7d:b1:9f:79:a3:d7:44: a4:6b:a8:76:2f:76:d6:ab:fc:df:f0:6f:d8:ee:38: cd:02:d1:7f:d0:92:10:f9:bd:1c:6d:20:48:50:f7: 22:a3:4c:6b:ab:b4:eb:60:21:4f:33:d7:cc:f2:c8: a4:03:81:22:a8:fc:52:68:55:aa:e8:7e:b9:f1:04: b9:4a:53:5c:05:90:ef:e4:e2:c0:ef:2c:81:35:8e: 64:c2:a5:d9:c6:09:95:a0:44:39:dd:e8:c4:db:9c: 65:76:86:b6:be:2e:08:91:c6:a7:7a:ec:f6:d2:c4: ab:3c:d5:87:53:34:94:84:f9:a8:c7:15:92:05:33: 46:e9:3b:3a:59:43:ce:ab:93:1d:76:7b:1d:1f:ce: 56:35:da:33:b5:90:f2:6d:47:77:d4:ba:b7:12:97: 34:fe:ed:55:05:34:dc:98:dc:ae:f5:b1:ee:5e:c9: 66:7d:ec:b7:c7:20:ae:54:0a:22:fd:0a:93:09:62: 32:2c:44:23:72:d3:ee:8d:c5:a4:f1:04:80:f1:98: 3c:07:c6:56:c9:ae:59:3c:59:8d:57:2b:cb:04:75: 6e:0a:bf:44:ef:3a:56:31:a5:97:34:7a:7b:ee:f0: 64:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E4:98:2F:B9:40:1D:04:7E:85:D2:AC:6C:49:DB:F0:6A:16:00:18 X509v3 Authority Key Identifier: keyid:9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:47:ac:ff:92:cf:ef:5e:c7:72:28:ea:59:6a:0a:86:93:86: 9d:87:c1:08:00:97:c8:5d:aa:ee:c3:db:61:f8:7d:96:78:e9: b7:81:0c:77:08:f0:dd:51:d9:73:3b:6f:c4:d5:3f:e9:42:92: 2a:32:cb:ce:f7:81:67:20:19:f0:01:93:9b:47:82:97:15:71: a8:e3:a6:f8:f8:d4:d4:89:ac:1b:9f:a5:10:36:76:49:81:42: fa:ac:44:26:8a:3e:59:22:54:5f:a6:f9:ca:34:ae:d0:1a:48: 0d:82:0b:39:e7:f6:c0:b6:c1:c8:73:c9:64:db:ec:fd:a5:cd: 70:2c:99:4a:6a:b1:6e:c2:6e:ae:e2:02:03:4d:f9:18:e8:bc: ec:a1:aa:f4:6b:64:75:1c:50:60:99:00:4d:71:7e:42:31:20: 0c:25:46:16:0e:e7:e5:36:df:eb:1c:b4:73:be:d4:e2:05:f9: 61:6a:e5:ce:94:f5:5d:20:5a:dc:44:0d:80:6d:10:5f:d6:b1: e5:56:c6:fb:53:e3:77:5b:89:1a:1c:7d:c3:98:1b:77:67:5d: bd:7a:d6:a6:0f:39:51:0d:f5:1d:61:10:e0:bc:f4:88:13:e4: 56:7c:03:0c:da:f7:1d:6c:fb:1f:5f:43:43:e9:97:37:f7:0c: 7a:a3:46:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI4NUExMTAvBgNVBAUTKDlEOUMwMDhBMTJBMkY3QTYwRkVGRjk2MjI2NkIwNTAy QTFDQTBCQTIwHhcNMjYwNDE2MjMwMDMwWhcNMjYwNDIzMjMwMDMwWjAYMRYwFAYD VQQDEw02OWUxNmEwZi1hY2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSeANlKU4C4lFsyPJUrQYhDyrjv7Q32xn3mj10Ska6h2L3bWq/zf8G/Y7jjN AtF/0JIQ+b0cbSBIUPcio0xrq7TrYCFPM9fM8sikA4EiqPxSaFWq6H658QS5SlNc BZDv5OLA7yyBNY5kwqXZxgmVoEQ53ejE25xldoa2vi4Ikcaneuz20sSrPNWHUzSU hPmoxxWSBTNG6Ts6WUPOq5MddnsdH85WNdoztZDybUd31Lq3Epc0/u1VBTTcmNyu 9bHuXslmfey3xyCuVAoi/QqTCWIyLEQjctPujcWk8QSA8Zg8B8ZWya5ZPFmNVyvL BHVuCr9E7zpWMaWXNHp77vBkowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI3kmC+5 QB0EfoXSrGxJ2/BqFgAYMB8GA1UdIwQYMBaAFJ2cAIoSovemD+/5YiZrBQKhygui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjg1QS8xODVDMzlCNjAz Q0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2WVA3X2xpSm1zRkFxSEtD NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25ad0FpaEtpOTZZUDdfbGlKbXNGQXFIS0M2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjg1QS8xODVDMzlCNjAzQ0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2 WVA3X2xpSm1zRkFxSEtDNkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmkes/5LP717HcijqWWoKhpOGnYfBCACXyF2q7sPbYfh9lnjpt4EMdwjw3VHZ cztvxNU/6UKSKjLLzveBZyAZ8AGTm0eClxVxqOOm+PjU1ImsG5+lEDZ2SYFC+qxE Joo+WSJUX6b5yjSu0BpIDYILOef2wLbByHPJZNvs/aXNcCyZSmqxbsJuruICA035 GOi87KGq9GtkdRxQYJkATXF+QjEgDCVGFg7n5Tbf6xy0c77U4gX5YWrlzpT1XSBa 3EQNgG0QX9ax5VbG+1Pjd1uJGhx9w5gbd2ddvXrWpg85UQ31HWEQ4Lz0iBPkVnwD DNr3HWz7H19DQ+mXN/cMeqNG1Q== -----END CERTIFICATE-----Generated at Fri Apr 17 09:52:13 2026 by rpki-client