$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft File: nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft (raw, json) Hash identifier: ft+RQiRznVz2ForBoHHZTn/1bot3xfpkRm+E68MqRlM= Subject key identifier: EE:80:B0:86:9E:A8:24:A0:49:E4:24:1A:9E:6D:18:86:B3:7E:32:D5 Authority key identifier: 9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39 Certificate issuer: /CN=A91AE8D7/serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft Manifest number: D2 Signing time: Fri 17 Apr 2026 06:24:26 +0000 Manifest this update: Fri 17 Apr 2026 06:24:26 +0000 Manifest next update: Fri 24 Apr 2026 06:24:26 +0000 Files and hashes: 1: nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl (hash: YQ+OIJIqBlxSdJzQGEIpLgDZZuCvrnSCAAR24+n7Iqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:24:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE8D7, serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39 Validity Not Before: Apr 17 06:24:26 2026 GMT Not After : Apr 24 06:24:26 2026 GMT Subject: CN=69e1d21a-a7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:16:d5:33:e9:c7:4d:a4:2f:b6:cb:5a:76:b0: a6:81:fb:1f:38:52:4f:3a:dc:cb:e9:73:79:74:08: 8a:82:53:2e:b5:68:9e:ec:7a:bc:a0:4f:17:23:57: 3b:63:57:3a:ad:94:b6:07:77:a3:05:64:00:3e:d6: 77:1c:97:45:bd:00:6f:d9:31:53:5d:b0:05:61:7f: 62:e6:91:37:9f:32:ed:c5:e1:d6:f6:ef:b6:c0:55: dd:25:32:40:eb:7c:67:0d:d5:67:94:20:ee:3a:37: 08:a8:22:3f:59:a6:7e:ec:2c:1b:c3:fd:84:c0:56: 87:94:15:48:1f:07:b6:68:17:cc:6c:94:17:e8:bd: f6:3e:b5:8d:75:1b:b9:6b:31:f6:10:6a:34:9e:4f: d5:89:6a:09:a1:96:93:f2:bc:3d:d2:46:c6:1a:cc: 44:9c:cc:27:4e:07:36:64:a6:d1:af:bb:d0:24:28: 78:a0:0b:5b:12:cb:3f:c4:30:dd:3a:7e:c7:27:e0: 25:32:fb:45:6b:62:37:23:ea:a7:1c:c7:5f:0e:02: b0:cf:3f:03:05:8e:81:08:f4:31:8d:fa:5e:0b:28: 8b:79:18:0b:52:59:3b:e4:3c:e3:8e:67:2a:2b:48: 02:43:47:e1:98:67:cb:07:b4:2e:f7:2e:00:a8:00: 39:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:80:B0:86:9E:A8:24:A0:49:E4:24:1A:9E:6D:18:86:B3:7E:32:D5 X509v3 Authority Key Identifier: keyid:9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:61:5e:a4:1e:40:52:52:32:33:c4:fc:9a:82:cb:aa:1c:8d: 05:68:36:aa:5d:57:1f:6f:ea:a8:03:92:53:04:9a:e8:bf:de: 88:a9:ae:60:15:e0:fb:cc:e3:24:04:e5:3f:42:2e:2b:49:3d: f0:f5:12:8b:48:a3:09:43:3f:ed:96:aa:dd:dd:45:7b:04:65: e1:cb:f7:e4:40:49:e6:63:48:0c:c4:af:c9:20:b8:1e:89:79: c5:fc:25:29:e4:55:71:12:41:35:fb:6e:70:05:44:ef:03:11: 4a:87:10:b3:9e:83:58:64:dc:ce:87:05:2b:ba:d2:22:3d:48: f8:66:20:bf:3d:30:a9:94:05:f4:de:63:7d:e2:49:39:f0:06: ad:a7:3d:ca:48:eb:fe:b0:1a:74:6f:33:fc:27:e6:61:76:68: 2b:27:7a:8a:56:ea:82:e0:28:46:4a:98:62:df:07:69:ac:5c: dd:1a:7b:36:64:b8:98:bf:02:59:9b:74:46:4b:86:ba:b4:57: ac:0b:19:9e:eb:13:58:01:d4:bc:03:bd:9d:34:a5:f5:3b:df: e9:5e:a8:ac:10:de:2f:75:d8:fa:cd:dc:d8:ea:3f:f1:07:dc: bc:0a:05:43:17:af:04:89:25:71:1b:56:72:be:ea:9d:ed:7d: 95:71:cb:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4RDcxMTAvBgNVBAUTKDlFNzFGQjcxQjY3MDBDNDA0NUE1QzM0MEMxOEYxMzBG MDg2MEFBMzkwHhcNMjYwNDE3MDYyNDI2WhcNMjYwNDI0MDYyNDI2WjAYMRYwFAYD VQQDEw02OWUxZDIxYS1hN2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBbVM+nHTaQvtstadrCmgfsfOFJPOtzL6XN5dAiKglMutWie7Hq8oE8XI1c7 Y1c6rZS2B3ejBWQAPtZ3HJdFvQBv2TFTXbAFYX9i5pE3nzLtxeHW9u+2wFXdJTJA 63xnDdVnlCDuOjcIqCI/WaZ+7Cwbw/2EwFaHlBVIHwe2aBfMbJQX6L32PrWNdRu5 azH2EGo0nk/ViWoJoZaT8rw90kbGGsxEnMwnTgc2ZKbRr7vQJCh4oAtbEss/xDDd On7HJ+AlMvtFa2I3I+qnHMdfDgKwzz8DBY6BCPQxjfpeCyiLeRgLUlk75Dzjjmcq K0gCQ0fhmGfLB7Qu9y4AqAA5FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO6AsIae qCSgSeQkGp5tGIazfjLVMB8GA1UdIwQYMBaAFJ5x+3G2cAxARaXDQMGPEw8IYKo5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRThENy81NDY2NkIzQ0Y5 M0YxMUVGQjdFQUI0MjVDNEY5QUUwMi9ubkg3Y2Jad0RFQkZwY05Bd1k4VER3aGdx amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25uSDdjYlp3REVCRnBjTkF3WThURHdoZ3Fqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RThENy81NDY2NkIzQ0Y5M0YxMUVGQjdFQUI0MjVDNEY5QUUwMi9ubkg3Y2Jad0RF QkZwY05Bd1k4VER3aGdxamsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1WFepB5AUlIyM8T8moLLqhyNBWg2ql1XH2/qqAOSUwSa6L/eiKmuYBXg+8zj JATlP0IuK0k98PUSi0ijCUM/7Zaq3d1FewRl4cv35EBJ5mNIDMSvySC4Hol5xfwl KeRVcRJBNftucAVE7wMRSocQs56DWGTczocFK7rSIj1I+GYgvz0wqZQF9N5jfeJJ OfAGrac9ykjr/rAadG8z/CfmYXZoKyd6ilbqguAoRkqYYt8Haaxc3Rp7NmS4mL8C WZt0RkuGurRXrAsZnusTWAHUvAO9nTSl9Tvf6V6orBDeL3XY+s3c2Oo/8QfcvAoF QxevBIklcRtWcr7qne19lXHLwA== -----END CERTIFICATE-----Generated at Fri Apr 17 19:15:17 2026 by rpki-client