$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json) Hash identifier: wdzycFJvCgEDzFZazKlNVj+UsHlxqHlcQNr6qcwKijA= Subject key identifier: 6B:64:F7:6C:5C:02:2B:1A:A7:48:63:5B:03:3C:13:E1:73:37:47:C2 Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft Manifest number: 01E5 Signing time: Fri 17 Apr 2026 03:13:05 +0000 Manifest this update: Fri 17 Apr 2026 03:13:04 +0000 Manifest next update: Fri 24 Apr 2026 03:13:04 +0000 Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: WcSOJsMWTGK4N5VhSWjKm856fvhqCcp2yjvE3HcoeaU=) 2: 0B421064DD2411EFA5DECA6CC4F9AE02.roa (hash: +S1F0zYbzMvWkIw6OtTYzr4kRvSGMZIIi7dYMQVKPYc=) 3: 36020660DD2411EF9F4FB925C4F9AE02.roa (hash: i1Pu+9UVIaU6wY+KGS3N0zfxP0rOfpHG8M6EeBicwr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:13:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD, serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: Apr 17 03:13:04 2026 GMT Not After : Apr 24 03:13:04 2026 GMT Subject: CN=69e1a540-1e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:25:7b:4a:08:9e:ae:de:79:ec:80:0e:68:f4: ac:b5:0d:0e:29:c0:6d:ef:d6:cd:85:62:bb:6f:cf: bf:f6:48:e5:79:c6:2e:56:1a:55:35:00:75:1f:f9: 03:22:c0:b0:bb:63:e6:25:a2:b2:8d:84:93:db:c3: b4:50:2a:1c:b3:37:4e:31:1a:63:b4:c4:16:0e:09: b0:0c:0d:3f:6b:6f:1c:72:6b:5d:4b:8a:d3:c4:3c: a2:09:02:47:5f:72:ef:00:4c:d0:8c:1d:1f:d0:ab: 88:63:72:e8:e0:11:05:95:14:45:cb:9f:77:ea:bb: 96:a0:02:22:35:f8:0a:f5:ea:6a:b7:6f:65:32:fe: 19:05:27:d1:14:46:06:7a:72:55:5b:0c:8c:7c:75: 2f:95:11:a5:80:80:76:84:ef:72:67:08:ab:eb:7d: 7e:9a:e1:b4:37:da:e5:6c:81:72:19:e0:93:43:29: 3e:b5:b0:3f:34:8b:6e:ed:96:3a:e1:5a:c8:c2:85: ae:0c:03:57:c3:b4:70:37:f2:d7:7f:6d:24:db:29: 33:d8:54:59:f9:1b:d1:ff:62:67:e6:b9:3c:af:af: 90:50:29:c5:f2:87:62:b3:16:02:5f:30:d1:78:61: 91:3a:6e:e2:3e:28:65:3c:6f:03:bc:4c:3f:5f:ef: 6c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:64:F7:6C:5C:02:2B:1A:A7:48:63:5B:03:3C:13:E1:73:37:47:C2 X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:d0:da:38:89:d9:f6:48:c8:6f:92:73:60:0e:fe:d6:e8:8f: 99:65:b5:2d:8d:f4:20:d6:29:72:1b:c8:20:56:33:a6:80:2f: 13:77:30:a2:91:ac:a2:e2:56:2d:f6:6c:8c:c5:45:12:ae:97: 5e:7a:7c:a6:43:5d:e8:50:1b:a7:12:c0:35:f5:4b:43:c3:3c: 21:f1:d3:b4:21:ef:a2:39:14:b8:b2:71:ec:17:43:6f:5b:d3: f2:2a:e4:47:e8:46:f3:e6:03:66:1d:89:bd:80:9d:a2:c9:ba: 56:40:a0:6a:a7:13:1e:1d:f5:78:82:59:f5:21:8f:96:31:04: e6:2c:0e:f2:6f:64:48:72:dd:72:df:db:80:97:8e:03:0f:5c: 81:f3:45:00:42:4c:4b:97:f0:9d:3d:3d:9f:75:9e:a3:14:26: b7:ea:60:c6:1e:f1:8e:35:b9:6a:f2:7b:17:93:7e:3b:8a:fc: db:b2:2e:64:a1:92:9b:77:7c:6e:13:ca:2d:74:19:0a:f3:aa: 7c:7d:1c:f2:bf:17:73:d1:91:5f:18:25:6d:7f:a9:62:73:7d: 98:25:08:50:c6:53:b0:2b:3b:82:37:05:c8:3c:c0:2c:50:00: c9:8e:db:78:fc:53:e9:ed:b1:49:d6:f8:f6:de:59:53:ee:9a: 21:a6:48:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjYwNDE3MDMxMzA0WhcNMjYwNDI0MDMxMzA0WjAYMRYwFAYD VQQDEw02OWUxYTU0MC0xZTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSV7Sgiert557IAOaPSstQ0OKcBt79bNhWK7b8+/9kjlecYuVhpVNQB1H/kD IsCwu2PmJaKyjYST28O0UCocszdOMRpjtMQWDgmwDA0/a28ccmtdS4rTxDyiCQJH X3LvAEzQjB0f0KuIY3Lo4BEFlRRFy5936ruWoAIiNfgK9epqt29lMv4ZBSfRFEYG enJVWwyMfHUvlRGlgIB2hO9yZwir631+muG0N9rlbIFyGeCTQyk+tbA/NItu7ZY6 4VrIwoWuDANXw7RwN/LXf20k2ykz2FRZ+RvR/2Jn5rk8r6+QUCnF8odisxYCXzDR eGGROm7iPihlPG8DvEw/X+9svwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGtk92xc Aisap0hjWwM8E+FzN0fCMB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzhGRC9BNUE2RjM3QTYxRjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFj NEZWYVlBc2hlU0RybmhyRTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJtDaOInZ9kjIb5JzYA7+1uiPmWW1LY30INYpchvIIFYzpoAvE3cwopGsouJW LfZsjMVFEq6XXnp8pkNd6FAbpxLANfVLQ8M8IfHTtCHvojkUuLJx7BdDb1vT8irk R+hG8+YDZh2JvYCdosm6VkCgaqcTHh31eIJZ9SGPljEE5iwO8m9kSHLdct/bgJeO Aw9cgfNFAEJMS5fwnT09n3WeoxQmt+pgxh7xjjW5avJ7F5N+O4r827IuZKGSm3d8 bhPKLXQZCvOqfH0c8r8Xc9GRXxglbX+pYnN9mCUIUMZTsCs7gjcFyDzALFAAyY7b ePxT6e2xSdb49t5ZU+6aIaZIRA== -----END CERTIFICATE-----Generated at Fri Apr 17 20:17:50 2026 by rpki-client