$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft File: NFMkWvnnaQX2mpDxzs2F6og_6hY.mft (raw, json) Hash identifier: l6koU4Nx/zrs8dZ0WSJi0j4A0Tsoy9jLxA8pTefrAaQ= Subject key identifier: 71:F9:99:17:37:D5:E1:FC:AA:4B:BE:8F:8A:FE:68:55:DE:0E:2F:28 Authority key identifier: 34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 Certificate issuer: /CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Certificate serial: 07F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft Manifest number: 07EC Signing time: Thu 16 Apr 2026 21:10:06 +0000 Manifest this update: Thu 16 Apr 2026 21:10:05 +0000 Manifest next update: Thu 23 Apr 2026 21:10:05 +0000 Files and hashes: 1: NFMkWvnnaQX2mpDxzs2F6og_6hY.crl (hash: mr7qPpDmGEVm9hsb6l0AmanZSutFZtyPcTV6H0/QoAQ=) 2: E9D321CEF2F611EE95E10935C4F9AE02.roa (hash: uGgUAHKjFCdKGRYwfRLplSrRPtlghY9PMVrAiNXtlcY=) 3: 0BAA4608297211EB99ECF956C4F9AE02.roa (hash: wKAEYn7N0s61lmDabEnuaSxEMJJCyF8MvcXmo7hrc/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:10:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2041 (0x7f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6064, serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Validity Not Before: Apr 16 21:10:05 2026 GMT Not After : Apr 23 21:10:05 2026 GMT Subject: CN=69e1502e-f47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:39:31:d6:1b:05:bd:44:10:ae:79:e8:d4:3a: 7e:cf:75:fa:60:33:5c:59:31:1e:e7:04:45:74:39: 9c:87:97:9e:c6:37:36:d4:89:3b:2e:f4:3a:82:07: eb:7c:f1:0d:2d:ee:1b:01:64:25:33:c5:04:c9:b2: 1c:89:ab:16:4a:82:e9:f7:76:5b:b3:7b:8e:12:9e: eb:fc:f7:b9:67:80:9b:28:78:60:67:4f:f2:91:6d: 65:37:ce:cb:f1:d5:cd:67:e7:2c:4d:ec:48:fe:95: 37:05:a3:3c:d3:5c:94:63:07:9e:2a:a7:88:f5:fb: ca:89:26:30:9a:4a:91:df:38:99:fb:4d:52:ce:4a: a9:f1:e1:1d:50:d5:0c:b3:cf:a0:da:ac:c1:1e:cb: 76:d3:85:67:7f:be:e3:84:bd:3f:26:c4:1a:70:13: 3e:b5:07:ab:e2:a6:2f:e9:9a:37:00:3d:bf:0d:7a: 89:7b:fa:32:33:05:0f:ac:6b:f8:33:33:ef:96:67: 8d:16:13:ff:0b:75:cc:e9:d4:a9:e7:79:ea:7a:3c: a0:a3:9d:ae:03:42:be:c6:fb:ea:62:a1:8e:36:4a: 73:00:74:20:89:4d:d5:27:56:fe:e9:52:61:bb:ff: 6f:ab:2f:f6:f3:d8:b5:45:40:b7:d5:ed:6f:08:67: 2e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F9:99:17:37:D5:E1:FC:AA:4B:BE:8F:8A:FE:68:55:DE:0E:2F:28 X509v3 Authority Key Identifier: keyid:34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:fc:fa:be:ef:a9:fd:c4:9c:00:e4:df:d3:2d:e1:a7:8d:47: f1:08:95:a2:b3:0d:da:96:3e:81:74:94:f1:d9:31:a3:6b:29: 39:a9:59:3d:b1:f7:5c:1c:44:86:cf:fd:bf:1b:c1:20:c3:d0: df:ff:63:2d:2d:40:29:1f:f9:99:87:7a:59:e1:f4:81:c1:d1: 71:79:39:eb:db:51:4b:42:f9:66:01:9f:1e:f6:b9:94:35:ac: 31:9e:60:c1:21:5f:b6:41:f3:61:3d:8c:6b:5c:b7:c7:7e:6d: 27:fe:55:11:6a:3b:d7:79:5e:7a:81:b1:29:52:a6:7d:80:8e: 28:80:de:55:f5:74:ec:5d:9e:20:89:9e:bc:08:a0:60:70:01: cd:ca:87:4e:46:fc:3b:79:7a:f8:55:be:f2:94:a9:f4:7c:b9: 4b:d5:51:8d:1a:b9:27:6d:9c:dd:01:d3:53:ee:c2:c3:71:18: 77:be:38:28:cb:49:e5:9a:4b:c9:d2:f0:e9:c3:35:b4:4a:de: ab:40:37:4c:ed:e2:76:75:8e:30:8c:8b:55:88:69:7e:00:e5: cd:7a:16:38:c0:6c:b4:1b:75:ca:74:0c:24:0c:5f:cc:fa:56: 3a:6e:10:43:59:22:91:c6:87:2b:59:a2:9a:b6:0a:3a:a1:01: dc:80:59:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwNjQxMTAvBgNVBAUTKDM0NTMyNDVBRjlFNzY5MDVGNjlBOTBGMUNFQ0Q4NUVB ODgzRkVBMTYwHhcNMjYwNDE2MjExMDA1WhcNMjYwNDIzMjExMDA1WjAYMRYwFAYD VQQDEw02OWUxNTAyZS1mNDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjkx1hsFvUQQrnno1Dp+z3X6YDNcWTEe5wRFdDmch5eexjc21Ik7LvQ6ggfr fPENLe4bAWQlM8UEybIciasWSoLp93Zbs3uOEp7r/Pe5Z4CbKHhgZ0/ykW1lN87L 8dXNZ+csTexI/pU3BaM801yUYweeKqeI9fvKiSYwmkqR3ziZ+01Szkqp8eEdUNUM s8+g2qzBHst204Vnf77jhL0/JsQacBM+tQer4qYv6Zo3AD2/DXqJe/oyMwUPrGv4 MzPvlmeNFhP/C3XM6dSp53nqejygo52uA0K+xvvqYqGONkpzAHQgiU3VJ1b+6VJh u/9vqy/289i1RUC31e1vCGcu1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHH5mRc3 1eH8qku+j4r+aFXeDi8oMB8GA1UdIwQYMBaAFDRTJFr552kF9pqQ8c7NheqIP+oW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA2NC81MkZFRjczQTI5 NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFRWDJtcER4enMyRjZvZ182 aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GTWtXdm5uYVFYMm1wRHh6czJGNm9nXzZoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA2NC81MkZFRjczQTI5NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFR WDJtcER4enMyRjZvZ182aFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqfz6vu+p/cScAOTf0y3hp41H8QiVorMN2pY+gXSU8dkxo2spOalZPbH3XBxE hs/9vxvBIMPQ3/9jLS1AKR/5mYd6WeH0gcHRcXk569tRS0L5ZgGfHva5lDWsMZ5g wSFftkHzYT2Ma1y3x35tJ/5VEWo713leeoGxKVKmfYCOKIDeVfV07F2eIImevAig YHABzcqHTkb8O3l6+FW+8pSp9Hy5S9VRjRq5J22c3QHTU+7Cw3EYd744KMtJ5ZpL ydLw6cM1tEreq0A3TO3idnWOMIyLVYhpfgDlzXoWOMBstBt1ynQMJAxfzPpWOm4Q Q1kikcaHK1mimrYKOqEB3IBZhA== -----END CERTIFICATE-----Generated at Fri Apr 17 16:45:05 2026 by rpki-client