$ rpki-client -vvf rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft File: NfWNhhxBvf6ka4xykLGqxnDnzBs.mft (raw, json) Hash identifier: 3boW/vw+ybXWtQBDSq/SRg13iL1YreiYheELG6sttlg= Subject key identifier: 50:70:87:81:91:BA:DA:CA:58:19:3B:B1:69:E7:8F:BA:26:BD:07:2E Authority key identifier: 35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B Certificate issuer: /CN=A91B35BB/serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Certificate serial: 0BE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft Manifest number: 0BD1 Signing time: Thu 16 Apr 2026 18:50:14 +0000 Manifest this update: Thu 16 Apr 2026 18:50:13 +0000 Manifest next update: Thu 23 Apr 2026 18:50:13 +0000 Files and hashes: 1: NfWNhhxBvf6ka4xykLGqxnDnzBs.crl (hash: 5acTuJIEmehdcmN9m9vEfI9pRwJswvCOkaWHuuQkSN4=) 2: 902F47663C0111EAB6CB9936C4F9AE02.roa (hash: VuSr3kOQUjg9+28LT7ROPq/HuUEw9XEa1A4ZWRbVfXk=) 3: 8F9F2F823C0111EAB6CB9936C4F9AE02.roa (hash: 3Z/JPqjZbXTvwbBYHDVc+0ddb1oxhY9tStpnOx9ITdQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3042 (0xbe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B35BB, serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Validity Not Before: Apr 16 18:50:13 2026 GMT Not After : Apr 23 18:50:13 2026 GMT Subject: CN=69e12f66-8b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3e:71:92:c6:3b:b2:1c:90:ba:05:88:c2:22: 40:0f:94:ba:c1:4f:94:72:09:d1:60:20:96:32:0b: bf:9b:3e:0f:98:55:ee:bd:ff:6b:a6:88:c6:ce:37: ad:18:c5:99:e1:17:78:34:a4:f5:76:17:54:de:46: 4d:8b:80:7b:09:04:2d:13:2e:0b:0f:75:eb:3c:85: 4a:2b:e3:ef:6e:2e:d4:0d:ef:5a:8f:57:39:48:b2: 1b:8d:84:3f:15:a7:7b:25:0d:8b:69:1b:ec:96:e4: 94:d5:e8:5b:0c:82:73:67:18:36:0c:6e:23:6b:b4: ed:19:18:0e:b0:b1:53:21:88:5a:ed:43:fb:95:96: 7d:91:73:77:f3:31:bf:20:8c:f2:a9:8d:19:0e:95: d9:a3:ab:f2:f6:47:23:84:b4:59:5b:2e:8a:44:93: 20:b0:a4:67:5e:18:17:76:b4:d0:f9:e3:bc:5c:17: 8a:1c:63:a4:7d:51:e7:27:d1:40:d8:49:19:ba:ee: 50:df:63:2c:9a:c4:19:1c:03:b8:2a:8e:64:fd:b4: 14:8c:86:c2:c0:f7:4e:f0:fc:74:af:66:ef:31:62: 43:15:13:47:ac:b6:03:e5:83:93:2d:69:88:84:97: 6e:fe:5c:24:8f:eb:90:b9:f0:a5:40:8c:5b:71:4c: 15:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:70:87:81:91:BA:DA:CA:58:19:3B:B1:69:E7:8F:BA:26:BD:07:2E X509v3 Authority Key Identifier: keyid:35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:9f:a5:48:67:d5:24:62:0e:af:11:17:64:41:06:f9:e9:2c: c9:ce:f9:85:06:cd:e4:70:b4:51:aa:6f:63:b1:36:6a:74:70: 2e:a2:0b:f3:b6:9a:14:ec:d9:99:e0:54:c9:92:f8:d4:52:e7: 42:2b:b5:33:d7:01:10:2b:3d:94:c8:17:52:55:59:97:41:66: f1:92:a8:f3:dd:52:5b:a9:35:b1:ae:64:46:6c:9f:29:f2:86: 19:49:f1:43:2f:88:da:8f:a0:49:dd:dd:0c:28:b9:d7:a2:92: e8:29:7c:a3:f5:f7:3d:75:9c:13:eb:60:d0:f9:17:c5:b0:eb: 1f:40:cf:8a:df:9d:31:61:c0:9d:67:c6:72:4a:fa:16:88:14: 75:2e:ea:2c:1b:f0:a0:a1:70:72:43:c8:47:47:95:ed:94:d2: 5f:a1:ab:9b:6e:b7:d9:63:22:ed:44:f3:75:b0:7d:c9:fd:9c: cc:b5:5b:86:a8:95:fc:15:bc:36:f6:83:cd:f6:c5:83:b6:68: e0:c6:8c:1d:d1:d5:d2:5f:53:af:ed:6e:e2:9a:21:82:25:1c: 8c:d3:86:3c:15:33:0b:8c:96:ab:0d:46:02:b0:58:d4:7e:7d: 43:65:8b:d4:27:de:f5:74:9e:45:b5:da:3b:d9:60:9f:f9:aa: ff:f1:4b:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1QkIxMTAvBgNVBAUTKDM1RjU4RDg2MUM0MUJERkVBNDZCOEM3MjkwQjFBQUM2 NzBFN0NDMUIwHhcNMjYwNDE2MTg1MDEzWhcNMjYwNDIzMTg1MDEzWjAYMRYwFAYD VQQDEw02OWUxMmY2Ni04YjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsT5xksY7shyQugWIwiJAD5S6wU+UcgnRYCCWMgu/mz4PmFXuvf9rpojGzjet GMWZ4Rd4NKT1dhdU3kZNi4B7CQQtEy4LD3XrPIVKK+Pvbi7UDe9aj1c5SLIbjYQ/ Fad7JQ2LaRvsluSU1ehbDIJzZxg2DG4ja7TtGRgOsLFTIYha7UP7lZZ9kXN38zG/ IIzyqY0ZDpXZo6vy9kcjhLRZWy6KRJMgsKRnXhgXdrTQ+eO8XBeKHGOkfVHnJ9FA 2EkZuu5Q32MsmsQZHAO4Ko5k/bQUjIbCwPdO8Px0r2bvMWJDFRNHrLYD5YOTLWmI hJdu/lwkj+uQufClQIxbcUwV3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFBwh4GR utrKWBk7sWnnj7omvQcuMB8GA1UdIwQYMBaAFDX1jYYcQb3+pGuMcpCxqsZw58wb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzVCQi81Nzg5QjFBNDND MDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZmNmthNHh5a0xHcXhuRG56 QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mV05oaHhCdmY2a2E0eHlrTEdxeG5EbnpCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzVCQi81Nzg5QjFBNDNDMDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZm NmthNHh5a0xHcXhuRG56QnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhZ+lSGfVJGIOrxEXZEEG+eksyc75hQbN5HC0UapvY7E2anRwLqIL87aaFOzZ meBUyZL41FLnQiu1M9cBECs9lMgXUlVZl0Fm8ZKo891SW6k1sa5kRmyfKfKGGUnx Qy+I2o+gSd3dDCi516KS6Cl8o/X3PXWcE+tg0PkXxbDrH0DPit+dMWHAnWfGckr6 FogUdS7qLBvwoKFwckPIR0eV7ZTSX6Grm2632WMi7UTzdbB9yf2czLVbhqiV/BW8 NvaDzfbFg7Zo4MaMHdHV0l9Tr+1u4pohgiUcjNOGPBUzC4yWqw1GArBY1H59Q2WL 1Cfe9XSeRbXaO9lgn/mq//FLpg== -----END CERTIFICATE-----Generated at Sat Apr 18 00:43:16 2026 by rpki-client