$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft File: nNdxObeuQMY2CS0SiGlE3j8a_-I.mft (raw, json) Hash identifier: Z9xDnvubXEw5j8+TZSTdvDZ9O44HO3UlHDtzZuM9R0Y= Subject key identifier: 40:24:7E:37:5C:60:86:EB:1F:AA:FC:C8:D4:C5:AE:8D:F1:FC:B4:69 Authority key identifier: 9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2 Certificate issuer: /CN=A91F3BDE/serialNumber=9CD77139B7AE40C636092D12886944DE3F1AFFE2 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft Manifest number: 38 Signing time: Thu 16 Apr 2026 18:14:48 +0000 Manifest this update: Thu 16 Apr 2026 18:14:48 +0000 Manifest next update: Thu 23 Apr 2026 18:14:48 +0000 Files and hashes: 1: nNdxObeuQMY2CS0SiGlE3j8a_-I.crl (hash: /syTE5AyA2ygCDq/7lALMfslKXuZynSPzGQK9l/zNr4=) 2: 0FFE750C1EAF11F195BB007D1D3D8C67.roa (hash: BrK0FrMPMwFevxo3blKFfc/tytf2FzSWadOgigE4AiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.crl rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3BDE, serialNumber=9CD77139B7AE40C636092D12886944DE3F1AFFE2 Validity Not Before: Apr 16 18:14:48 2026 GMT Not After : Apr 23 18:14:48 2026 GMT Subject: CN=69e12718-8757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:73:6f:bb:9d:9c:c2:4a:28:77:fa:72:38:e8: 7b:f2:95:a9:c5:bc:e4:f3:fe:7c:8a:e0:f3:3b:54: d2:76:3f:40:69:b9:b9:3c:33:d5:06:88:2d:37:4b: 5c:be:91:48:76:69:97:b3:3e:11:5d:0d:33:12:6d: 99:04:2f:d6:f4:7f:a4:65:0e:3a:82:7f:65:95:c3: c7:d6:21:82:05:f8:3d:3e:c6:ff:d1:76:45:d3:cc: 3a:4c:e2:a6:be:7a:9b:34:19:b1:eb:7b:19:8e:47: 83:14:54:37:a5:14:a8:88:40:1d:a2:9c:15:f5:2e: 20:14:1d:76:f8:ff:78:ea:b5:e4:6e:29:a4:00:fb: 87:04:12:84:12:52:ff:31:90:ab:c2:a7:d3:eb:1e: e3:aa:a7:53:d3:d0:79:ea:0b:68:d1:c8:e1:66:21: 84:6e:c4:2e:2c:42:ce:72:2b:6d:7c:31:ef:ce:0a: a1:3e:3a:f9:27:7d:c6:51:4e:04:6b:f1:be:b3:27: d5:85:04:08:a1:0a:e2:25:60:85:33:05:5e:d0:4e: a7:1c:87:83:ac:ff:04:de:6a:fd:a9:b8:6e:41:79: 3e:f3:db:23:fe:32:7d:e6:7c:e6:89:a2:65:69:c3: 41:af:1f:33:73:44:19:63:fc:c6:df:24:98:68:c1: f1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:24:7E:37:5C:60:86:EB:1F:AA:FC:C8:D4:C5:AE:8D:F1:FC:B4:69 X509v3 Authority Key Identifier: keyid:9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f0:23:ea:5d:68:52:6e:3a:d7:96:8c:fc:65:0d:59:91:ee: ec:b1:ea:35:06:de:cb:2d:70:4d:e3:2e:bd:93:2f:d1:a0:ff: 1c:bb:0b:1b:83:af:da:b1:19:5b:ca:dc:9a:ed:7f:d2:8b:53: 58:ab:ec:da:65:af:4c:8b:64:eb:9e:26:2a:48:f3:13:a1:ab: 8b:15:aa:80:0f:52:0a:cc:7f:71:69:ab:2b:1a:f8:1e:b3:66: 0e:8c:ff:8d:60:53:aa:7a:7d:58:fd:f0:24:01:05:70:0e:cb: d5:64:71:a7:8d:37:b8:dd:ea:5d:69:4f:1c:06:19:02:6e:98: 00:ca:23:d4:64:27:63:59:86:a5:bc:42:42:67:d0:e1:c0:1f: 04:a1:fa:20:ac:89:45:13:eb:1b:87:3e:e2:61:04:83:23:d7: 22:e8:bd:cd:f0:30:65:53:cc:7e:28:a5:29:50:48:cd:5b:5e: 75:07:fb:0b:d9:77:0e:17:21:e5:a0:27:37:d1:a7:0b:0d:b7: 56:67:1e:9a:51:51:c3:48:07:a8:2d:ef:9f:0a:c5:86:a7:f4: 58:f8:e3:13:9e:d0:3f:b4:06:9a:10:a9:22:ea:51:b1:4d:7b: cb:6b:9b:1e:74:71:93:70:87:8e:ee:f4:63:00:1e:b1:f3:88: 5a:46:34:69 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG M0JERTExMC8GA1UEBRMoOUNENzcxMzlCN0FFNDBDNjM2MDkyRDEyODg2OTQ0REUz RjFBRkZFMjAeFw0yNjA0MTYxODE0NDhaFw0yNjA0MjMxODE0NDhaMBgxFjAUBgNV BAMTDTY5ZTEyNzE4LTg3NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfc2+7nZzCSih3+nI46HvylanFvOTz/nyK4PM7VNJ2P0Bpubk8M9UGiC03S1y+ kUh2aZezPhFdDTMSbZkEL9b0f6RlDjqCf2WVw8fWIYIF+D0+xv/RdkXTzDpM4qa+ eps0GbHrexmOR4MUVDelFKiIQB2inBX1LiAUHXb4/3jqteRuKaQA+4cEEoQSUv8x kKvCp9PrHuOqp1PT0HnqC2jRyOFmIYRuxC4sQs5yK218Me/OCqE+OvknfcZRTgRr 8b6zJ9WFBAihCuIlYIUzBV7QTqcch4Os/wTeav2puG5BeT7z2yP+Mn3mfOaJomVp w0GvHzNzRBlj/MbfJJhowfFxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQCR+N1xg husfqvzI1MWujfH8tGkwHwYDVR0jBBgwFoAUnNdxObeuQMY2CS0SiGlE3j8a/+Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzQkRFLzZGRjIzQjkwRjAx NzExRjA4NTU0MUYyNDQ3NkY1NkJDL25OZHhPYmV1UU1ZMkNTMFNpR2xFM2o4YV8t SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbk5keE9iZXVRTVkyQ1MwU2lHbEUzajhhXy1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz QkRFLzZGRjIzQjkwRjAxNzExRjA4NTU0MUYyNDQ3NkY1NkJDL25OZHhPYmV1UU1Z MkNTMFNpR2xFM2o4YV8tSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBd8CPqXWhSbjrXloz8ZQ1Zke7sseo1Bt7LLXBN4y69ky/RoP8cuwsbg6/asRlb ytya7X/Si1NYq+zaZa9Mi2TrniYqSPMToauLFaqAD1IKzH9xaasrGvges2YOjP+N YFOqen1Y/fAkAQVwDsvVZHGnjTe43epdaU8cBhkCbpgAyiPUZCdjWYalvEJCZ9Dh wB8EofogrIlFE+sbhz7iYQSDI9ci6L3N8DBlU8x+KKUpUEjNW151B/sL2XcOFyHl oCc30acLDbdWZx6aUVHDSAeoLe+fCsWGp/RY+OMTntA/tAaaEKki6lGxTXvLa5se dHGTcIeO7vRjAB6x84haRjRp -----END CERTIFICATE-----Generated at Fri Apr 17 07:21:12 2026 by rpki-client