$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: 5P1eufaCcNobdiOBnFqpN68NvcyqRHx2c95JUjNZsCY= Subject key identifier: E2:2E:03:03:98:94:65:50:41:95:35:D7:56:71:CD:9A:A5:FE:50:8B Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 01E5 Signing time: Fri 17 Apr 2026 03:09:10 +0000 Manifest this update: Fri 17 Apr 2026 03:09:09 +0000 Manifest next update: Fri 24 Apr 2026 03:09:09 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: TOfbkMkk0tFnR2yAYzYqQZXfIcbu5lUYftblBnHaqwk=) 2: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: zqESw+IWbG5U3Oh2cbA+9ioqV8DZZkTNSVndFvkCcIc=) 3: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: 2Pvyl2Pg+rvxhHMBAknVnfhicVn7ercKKujcqDRSopc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: Apr 17 03:09:09 2026 GMT Not After : Apr 24 03:09:09 2026 GMT Subject: CN=69e1a456-d8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f1:e0:55:bf:11:2e:1d:84:4c:bd:55:75:95: cc:e8:85:1c:70:95:12:3f:27:5b:97:35:80:f5:81: 39:31:5e:4b:10:a9:f2:f7:06:a3:27:36:53:e7:6d: 0d:92:df:22:1a:76:67:e1:80:36:96:47:bf:9b:00: 00:ee:80:e1:99:5d:2d:b6:34:db:22:f3:25:d4:93: 6a:75:f4:cc:70:cd:3d:6a:0c:87:96:db:ce:d2:96: 0c:8b:06:74:dd:4e:55:a0:5c:2f:12:4c:23:2b:71: 2d:a4:3e:7a:f8:32:23:8f:88:9a:1e:66:92:9d:7b: 4b:d2:79:39:4a:bb:9c:8d:29:3b:69:9e:39:7e:51: 3b:64:7f:d2:69:25:74:c8:19:c9:7c:2a:d5:d0:a4: f8:5e:3d:d6:2e:6b:32:da:6e:a0:a5:da:e6:2c:59: 59:15:f1:38:aa:56:d4:dc:2b:37:0c:8a:7e:6f:fc: f0:72:e9:c3:32:8b:a3:79:9d:96:25:44:1a:a3:ba: 08:72:40:9a:02:f3:81:f1:14:c1:d7:fb:66:77:1f: d6:f1:47:ea:25:0c:b3:9c:06:99:1a:29:fe:e4:b3: 8b:ed:5b:c0:15:83:11:0e:8f:e8:fe:ce:69:f9:3b: 93:01:70:08:02:80:7b:dd:8b:7a:4a:c3:08:9a:f3: 28:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:2E:03:03:98:94:65:50:41:95:35:D7:56:71:CD:9A:A5:FE:50:8B X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:d2:dd:07:b4:3d:47:22:43:78:f0:53:84:6b:c6:f4:88:df: 84:79:a9:9d:35:79:ee:07:f9:76:ff:6a:72:c2:78:e6:a1:2a: 7d:6d:c9:44:6a:78:7b:31:36:dc:dd:ae:d7:a2:44:6c:d4:b8: 06:5c:a8:b4:52:c1:9f:99:c2:a6:46:f1:ef:1a:91:3e:64:f0: 68:5b:96:e0:a9:37:cb:6c:c5:c5:23:71:41:b4:6e:4b:08:cd: 09:a3:bb:a2:74:f3:69:dd:29:79:af:69:e3:ea:d1:6e:ea:df: 5c:52:02:f7:00:da:5a:14:5a:6a:0e:24:0e:e9:06:27:f9:c1: 88:0e:61:2f:6a:2d:c3:c3:f6:e7:3e:8d:e7:4e:0f:73:fd:e9: e0:ad:a0:53:82:95:70:c0:70:d3:b6:e9:b3:13:63:35:d9:9d: 52:e6:fd:d6:7a:c0:94:4d:ca:6e:af:56:58:c7:75:a7:ab:b0: 55:41:34:21:9c:f1:36:5b:b0:31:ef:0c:fa:77:d8:da:56:bb: 7a:db:13:28:c9:12:cb:c2:5f:ff:ee:f4:50:3f:cc:ca:9c:fa: 51:3e:bd:b9:81:00:de:21:76:75:65:88:5a:5e:19:96:2a:04: 36:5b:1b:d5:f5:62:9f:f2:2e:0d:42:ae:16:d2:74:6e:34:c8: ad:d6:8f:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjYwNDE3MDMwOTA5WhcNMjYwNDI0MDMwOTA5WjAYMRYwFAYD VQQDEw02OWUxYTQ1Ni1kOGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlPHgVb8RLh2ETL1VdZXM6IUccJUSPydblzWA9YE5MV5LEKny9wajJzZT520N kt8iGnZn4YA2lke/mwAA7oDhmV0ttjTbIvMl1JNqdfTMcM09agyHltvO0pYMiwZ0 3U5VoFwvEkwjK3EtpD56+DIjj4iaHmaSnXtL0nk5SrucjSk7aZ45flE7ZH/SaSV0 yBnJfCrV0KT4Xj3WLmsy2m6gpdrmLFlZFfE4qlbU3Cs3DIp+b/zwcunDMoujeZ2W JUQao7oIckCaAvOB8RTB1/tmdx/W8UfqJQyznAaZGin+5LOL7VvAFYMRDo/o/s5p +TuTAXAIAoB73Yt6SsMImvMouQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOIuAwOY lGVQQZU111ZxzZql/lCLMB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFNLdB7Q9RyJDePBThGvG9IjfhHmpnTV57gf5dv9qcsJ45qEqfW3JRGp4ezE2 3N2u16JEbNS4BlyotFLBn5nCpkbx7xqRPmTwaFuW4Kk3y2zFxSNxQbRuSwjNCaO7 onTzad0pea9p4+rRburfXFIC9wDaWhRaag4kDukGJ/nBiA5hL2otw8P25z6N504P c/3p4K2gU4KVcMBw07bpsxNjNdmdUub91nrAlE3Kbq9WWMd1p6uwVUE0IZzxNluw Me8M+nfY2la7etsTKMkSy8Jf/+70UD/Mypz6UT69uYEA3iF2dWWIWl4ZlioENlsb 1fVin/IuDUKuFtJ0bjTIrdaPjw== -----END CERTIFICATE-----Generated at Fri Apr 17 15:52:50 2026 by rpki-client