$ rpki-client -vvf rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft File: NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft (raw, json) Hash identifier: p7eGoXY6fo+Uwpxw3PyeRq6iJyzAT8NdmGsw+zXGpzo= Subject key identifier: 14:0D:FF:85:FA:C2:2E:CE:2C:B0:83:AD:8B:BA:B9:49:CE:03:C5:A7 Authority key identifier: 34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA Certificate issuer: /CN=A91C99B4/serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA Certificate serial: 07D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft Manifest number: 07A6 Signing time: Thu 16 Apr 2026 21:31:32 +0000 Manifest this update: Thu 16 Apr 2026 21:31:32 +0000 Manifest next update: Thu 23 Apr 2026 21:31:32 +0000 Files and hashes: 1: NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl (hash: UFeyM9PyD95JBI/BBILAuArpS8PSimJwKdK1HzomSq8=) 2: F3BEC03CE13B11F090F650ED6F6F56BC.roa (hash: 73pAfLSC8B0XWc6KcAo6RSi0u4KosXge+3h5CVJGLfw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2009 (0x7d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C99B4, serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA Validity Not Before: Apr 16 21:31:32 2026 GMT Not After : Apr 23 21:31:32 2026 GMT Subject: CN=69e15534-7837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c0:fc:c2:21:72:c2:95:ea:e4:bf:7e:f3:94: ce:22:7a:dd:96:7f:28:dc:d9:5f:89:5a:6b:47:5a: 45:ed:48:97:48:15:7c:67:69:28:79:bc:5e:15:46: 20:60:e2:11:e0:f9:40:e3:2d:af:d9:54:94:39:a6: 88:20:0d:06:8f:42:01:b8:c4:4d:71:7a:d7:9e:52: f5:92:90:c5:6b:fa:72:0b:45:c7:bd:13:14:a8:2c: 47:95:de:9d:3e:4c:5d:71:1a:d7:16:ec:3a:6b:32: 4b:0f:9f:84:57:82:72:04:6f:01:45:9f:5e:99:a4: 09:bc:03:06:f7:59:36:68:d5:5a:58:eb:19:ad:44: a5:92:39:b6:db:37:50:db:e4:0a:fc:db:b6:b2:38: 09:12:8e:2d:5d:37:45:cf:c0:fa:41:0d:ed:80:4f: 93:28:2e:54:59:2a:66:b2:0d:8d:cc:0d:bf:80:77: e7:90:cf:10:4e:1f:3b:cd:78:b0:21:99:ea:72:2d: 6f:f2:8b:4b:53:ea:ce:b4:54:72:56:a4:f6:3e:da: d0:ca:5e:d5:85:8e:8d:16:6a:d9:9d:bc:50:85:01: 8b:6b:e7:56:25:5d:cc:c0:5f:54:6e:90:ac:82:dc: e0:5f:bf:f5:be:d4:55:d5:3a:e6:9c:35:9b:72:1b: 33:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0D:FF:85:FA:C2:2E:CE:2C:B0:83:AD:8B:BA:B9:49:CE:03:C5:A7 X509v3 Authority Key Identifier: keyid:34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:61:86:ed:cf:58:0e:c9:31:d0:8e:c5:6e:61:f5:85:b2:01: 54:eb:01:1a:6f:6d:2c:27:ac:f4:17:54:a6:9d:26:9f:66:ef: 4f:dc:82:0e:50:35:bb:04:6b:0e:64:28:ee:e5:53:92:e1:01: b9:8d:93:0c:5b:d0:1f:ec:ce:66:09:d1:11:ee:d9:2f:c7:ad: 4d:56:3c:ae:db:3c:9c:44:eb:f0:87:c7:5a:13:b6:57:8b:7c: 6d:8c:31:db:09:49:40:69:49:a1:06:85:2f:fa:18:01:9a:17: 2a:33:ef:37:1a:19:77:7c:71:cf:dc:b6:24:7b:91:d3:94:29: c5:f3:9d:86:6e:e7:96:7c:06:ca:77:fa:78:39:1a:e7:f6:f1: 2f:99:ce:a5:ee:8c:c3:b4:c4:48:45:ba:47:06:b4:d4:21:70: de:a8:ad:00:7d:54:54:f3:a9:c4:6e:c3:86:d4:7b:be:bf:3b: 63:51:b7:e8:22:71:70:66:00:dc:6f:b4:05:5b:7a:1d:9c:2c: dc:f1:73:06:45:9b:2d:1a:80:e1:a4:00:f3:6b:5f:f7:32:26: 52:62:ee:07:1b:71:4f:d5:6a:71:70:91:d9:e9:2d:d3:49:9f: 8f:3c:b9:92:4e:f7:53:96:6e:34:2d:f8:00:8b:33:2c:08:76: ba:68:4a:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5QjQxMTAvBgNVBAUTKDM0OEJFNjY5NEVENzA0MUFBRjI4RDBFQzhDNkM2NTY1 NTkxRjJEREEwHhcNMjYwNDE2MjEzMTMyWhcNMjYwNDIzMjEzMTMyWjAYMRYwFAYD VQQDEw02OWUxNTUzNC03ODM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8D8wiFywpXq5L9+85TOInrdln8o3NlfiVprR1pF7UiXSBV8Z2koebxeFUYg YOIR4PlA4y2v2VSUOaaIIA0Gj0IBuMRNcXrXnlL1kpDFa/pyC0XHvRMUqCxHld6d PkxdcRrXFuw6azJLD5+EV4JyBG8BRZ9emaQJvAMG91k2aNVaWOsZrUSlkjm22zdQ 2+QK/Nu2sjgJEo4tXTdFz8D6QQ3tgE+TKC5UWSpmsg2NzA2/gHfnkM8QTh87zXiw IZnqci1v8otLU+rOtFRyVqT2PtrQyl7VhY6NFmrZnbxQhQGLa+dWJV3MwF9UbpCs gtzgX7/1vtRV1TrmnDWbchszCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBQN/4X6 wi7OLLCDrYu6uUnOA8WnMB8GA1UdIwQYMBaAFDSL5mlO1wQaryjQ7IxsZWVZHy3a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTlCNC81REU1OTY5NjU5 NDkxMUVCQTQ4Qzc4NzFDNEY5QUUwMi9OSXZtYVU3WEJCcXZLTkRzakd4bFpWa2ZM ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Jdm1hVTdYQkJxdktORHNqR3hsWlZrZkxkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTlCNC81REU1OTY5NjU5NDkxMUVCQTQ4Qzc4NzFDNEY5QUUwMi9OSXZtYVU3WEJC cXZLTkRzakd4bFpWa2ZMZG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB2GG7c9YDskx0I7FbmH1hbIBVOsBGm9tLCes9BdUpp0mn2bvT9yCDlA1uwRr DmQo7uVTkuEBuY2TDFvQH+zOZgnREe7ZL8etTVY8rts8nETr8IfHWhO2V4t8bYwx 2wlJQGlJoQaFL/oYAZoXKjPvNxoZd3xxz9y2JHuR05QpxfOdhm7nlnwGynf6eDka 5/bxL5nOpe6Mw7TESEW6Rwa01CFw3qitAH1UVPOpxG7DhtR7vr87Y1G36CJxcGYA 3G+0BVt6HZws3PFzBkWbLRqA4aQA82tf9zImUmLuBxtxT9VqcXCR2ekt00mfjzy5 kk73U5ZuNC34AIszLAh2umhKwg== -----END CERTIFICATE-----Generated at Sat Apr 18 06:34:47 2026 by rpki-client