$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft File: nag9eBUvVmRHEvSlgLqVNV-IgUc.mft (raw, json) Hash identifier: 1LbcoQhkBBACdLeOr23tM0SeCcOWGf8KJlk2IK6Xqzk= Subject key identifier: 2C:DB:6D:B3:C6:8A:6D:6B:A8:2C:14:DA:2D:96:D1:00:90:10:30:1E Authority key identifier: 9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 Certificate issuer: /CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Certificate serial: 09AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft Manifest number: 09A3 Signing time: Thu 16 Apr 2026 19:52:21 +0000 Manifest this update: Thu 16 Apr 2026 19:52:21 +0000 Manifest next update: Thu 23 Apr 2026 19:52:21 +0000 Files and hashes: 1: nag9eBUvVmRHEvSlgLqVNV-IgUc.crl (hash: nZvK2pD4ZmSh1svh2GCow0vv9x5pwRqoqMPMnvuiVAY=) 2: 9C3E2D18A98111EAB4B3FD50C4F9AE02.roa (hash: NZTaCCKyWOItzetpiVNKukcwafnTRr5S69WrKLXkglo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2477 (0x9ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8E33, serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Validity Not Before: Apr 16 19:52:21 2026 GMT Not After : Apr 23 19:52:21 2026 GMT Subject: CN=69e13df5-0034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f7:ee:4b:62:45:3f:f5:d9:a8:2e:32:1f:8c: 3d:4b:f0:f9:01:82:5b:93:b9:a4:00:7d:da:37:97: cc:7a:85:04:fd:70:0e:9f:2d:c4:50:d0:7c:d9:c7: 96:1b:9c:1b:80:ac:fe:68:56:b4:1b:09:c2:65:fe: d2:49:29:4c:d2:dd:b1:2d:fe:08:4c:8d:45:16:b2: 3b:1d:a2:ab:00:15:73:a7:dd:c4:08:ae:80:da:b7: d5:ab:4e:aa:72:08:91:5a:26:4d:f6:33:71:c7:71: 2e:2b:6f:96:83:6c:2b:be:74:cc:53:ec:86:e4:f2: 99:d2:a6:94:3a:cf:a3:a5:13:4e:ff:07:8d:0d:65: 08:40:4a:81:95:a0:d1:7d:64:db:a5:14:87:21:91: d8:d6:4d:b7:0b:1d:8e:66:8b:4d:16:d3:72:a0:fc: 37:01:1c:ef:04:cd:1e:44:06:bf:04:61:66:c1:3f: ce:97:f0:b4:4d:99:c6:ad:17:91:1f:c0:6f:84:a3: ff:50:69:da:6b:23:2e:33:41:ed:b2:b4:f8:bb:f5: 7b:6d:15:9c:02:09:0d:06:88:36:65:ed:a2:d2:dc: 68:3b:01:6b:57:02:f0:6b:8c:57:7e:d7:4b:98:09: 74:b1:70:b7:71:85:af:a4:bd:8d:84:28:cc:6e:12: 1b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DB:6D:B3:C6:8A:6D:6B:A8:2C:14:DA:2D:96:D1:00:90:10:30:1E X509v3 Authority Key Identifier: keyid:9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:04:1c:97:2c:79:9c:74:5e:94:43:f8:c7:fd:21:d9:5f:a0: 39:9c:41:3e:cc:82:45:25:a1:5a:c7:c2:79:a0:b2:1f:b5:b6: 0f:b8:f0:19:57:19:12:48:7f:24:0b:66:1a:23:48:03:84:b1: d9:76:a2:4d:19:4d:3c:e9:22:86:5c:18:a1:67:17:20:3d:f7: dc:36:cd:88:11:a6:ea:c9:ef:42:28:4b:a3:24:b5:f8:f3:ce: b6:e6:43:18:3f:1b:0b:5b:d5:91:63:76:b2:9c:69:90:0b:23: 0b:ff:82:3b:85:20:e5:f4:49:a6:b7:87:a0:f6:57:2f:5d:08: 25:e9:1f:66:63:66:89:55:61:83:23:ae:d0:14:1e:5a:e0:10: 83:65:c4:6f:f8:e8:b6:ca:10:89:dd:e3:fb:b3:76:0a:8e:45: 1d:40:a5:e2:52:7b:95:04:3c:a7:d2:e9:4c:a8:3d:2e:58:e5: 71:f7:0f:d0:6f:a5:b8:dd:73:5a:7f:6e:05:6f:fc:90:62:0e: 9b:b1:a5:17:6b:47:37:97:7b:ea:a6:64:39:fd:66:f7:6f:d0: 20:d2:df:52:52:e7:2e:83:56:4b:de:5a:34:77:82:b7:e1:7e: ad:c1:32:ad:01:c4:d5:7a:4a:78:a8:0a:ba:f6:bf:d4:bc:c5: 30:a5:79:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFMzMxMTAvBgNVBAUTKDlEQTgzRDc4MTUyRjU2NjQ0NzEyRjRBNTgwQkE5NTM1 NUY4ODgxNDcwHhcNMjYwNDE2MTk1MjIxWhcNMjYwNDIzMTk1MjIxWjAYMRYwFAYD VQQDEw02OWUxM2RmNS0wMDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/fuS2JFP/XZqC4yH4w9S/D5AYJbk7mkAH3aN5fMeoUE/XAOny3EUNB82ceW G5wbgKz+aFa0GwnCZf7SSSlM0t2xLf4ITI1FFrI7HaKrABVzp93ECK6A2rfVq06q cgiRWiZN9jNxx3EuK2+Wg2wrvnTMU+yG5PKZ0qaUOs+jpRNO/weNDWUIQEqBlaDR fWTbpRSHIZHY1k23Cx2OZotNFtNyoPw3ARzvBM0eRAa/BGFmwT/Ol/C0TZnGrReR H8BvhKP/UGnaayMuM0HtsrT4u/V7bRWcAgkNBog2Ze2i0txoOwFrVwLwa4xXftdL mAl0sXC3cYWvpL2NhCjMbhIb+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCzbbbPG im1rqCwU2i2W0QCQEDAeMB8GA1UdIwQYMBaAFJ2oPXgVL1ZkRxL0pYC6lTVfiIFH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEUzMy9BRDJDRjIxRUE5 N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZtUkhFdlNsZ0xxVk5WLUln VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25hZzllQlV2Vm1SSEV2U2xnTHFWTlYtSWdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEUzMy9BRDJDRjIxRUE5N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZt UkhFdlNsZ0xxVk5WLUlnVWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZQQclyx5nHRelEP4x/0h2V+gOZxBPsyCRSWhWsfCeaCyH7W2D7jwGVcZEkh/ JAtmGiNIA4Sx2XaiTRlNPOkihlwYoWcXID333DbNiBGm6snvQihLoyS1+PPOtuZD GD8bC1vVkWN2spxpkAsjC/+CO4Ug5fRJpreHoPZXL10IJekfZmNmiVVhgyOu0BQe WuAQg2XEb/jotsoQid3j+7N2Co5FHUCl4lJ7lQQ8p9LpTKg9LljlcfcP0G+luN1z Wn9uBW/8kGIOm7GlF2tHN5d76qZkOf1m92/QINLfUlLnLoNWS95aNHeCt+F+rcEy rQHE1XpKeKgKuva/1LzFMKV5Qg== -----END CERTIFICATE-----Generated at Fri Apr 17 09:56:13 2026 by rpki-client