$ rpki-client -vvf rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft File: NaA6oUeNBoHAZxl2yftD9pMTgr4.mft (raw, json) Hash identifier: Z9Kab5iqijPMeJrINAvbWfWKqu/ZDUm+s+2Gpiza5a0= Subject key identifier: EF:D3:AA:30:14:B0:79:E6:EE:DF:93:93:E3:F3:66:FF:09:45:C1:81 Authority key identifier: 35:A0:3A:A1:47:8D:06:81:C0:67:19:76:C9:FB:43:F6:93:13:82:BE Certificate issuer: /CN=A91161EB/serialNumber=35A03AA1478D0681C0671976C9FB43F6931382BE Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft Manifest number: 11 Signing time: Mon 11 May 2026 09:14:23 +0000 Manifest this update: Mon 11 May 2026 09:14:23 +0000 Manifest next update: Mon 18 May 2026 09:14:23 +0000 Files and hashes: 1: NaA6oUeNBoHAZxl2yftD9pMTgr4.crl (hash: 2fshSXhGwMY7yAhPGh45fd6zaavWfxNmNnoYgExfBRI=) 2: 9C495BB2350211F18A0989F29B833773.roa (hash: Lmv32oZY3NRP9K5M+STvV+c8q6SioI1nyA5nw3Qh/DE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.crl rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91161EB, serialNumber=35A03AA1478D0681C0671976C9FB43F6931382BE Validity Not Before: May 11 09:14:23 2026 GMT Not After : May 18 09:14:23 2026 GMT Subject: CN=6a019def-5f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:eb:3e:16:58:7c:24:c9:10:3d:6f:78:29:9d: fc:15:c8:ec:41:9a:8e:ea:df:fc:8d:c4:5b:39:85: 4e:c6:ce:d6:9d:d5:08:1b:b2:cf:ea:87:83:7c:ef: 4a:e5:8d:c1:17:d4:7f:27:01:bc:12:c1:56:f6:2d: 35:cb:06:05:52:02:d1:7a:4f:be:28:f5:7f:f6:91: 85:84:6c:4d:bf:30:d9:97:09:07:b1:b9:fd:71:f8: da:5c:3f:78:ec:fc:bf:6c:0a:8c:35:2d:e5:d0:4d: 74:f2:07:b4:32:ee:0d:23:25:50:e4:4a:19:4a:0a: 97:ab:26:d9:5c:ea:96:ab:b0:e6:78:a1:61:56:3a: 16:1f:43:10:09:c0:a0:2d:9e:8a:ae:b1:45:f4:37: 50:af:f4:43:ca:48:1b:50:33:13:20:65:3b:76:29: 89:9a:fa:9e:f0:07:94:53:a6:64:73:4b:78:1c:64: 91:ea:96:50:55:5c:ec:a7:a4:0d:26:dc:3c:a7:c2: 21:6b:89:6e:dc:af:e7:ef:40:59:ef:2c:9e:90:e3: e1:74:ec:14:c3:d5:04:84:b0:16:bb:16:f6:e4:84: 66:44:e1:ab:91:a7:cb:f6:e4:0b:73:4e:34:4c:3c: a9:44:21:c4:57:e3:73:fe:4b:d0:7e:33:c0:2c:71: ae:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D3:AA:30:14:B0:79:E6:EE:DF:93:93:E3:F3:66:FF:09:45:C1:81 X509v3 Authority Key Identifier: keyid:35:A0:3A:A1:47:8D:06:81:C0:67:19:76:C9:FB:43:F6:93:13:82:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:93:33:66:c9:14:1e:2a:7f:3e:d4:1b:d1:cb:bd:28:62:25: 0c:02:f5:5e:2c:0f:a5:9f:cc:0e:e6:3c:e1:46:9d:54:8f:f7: 36:93:c1:98:68:7d:f8:3b:dd:9d:d4:c9:e7:da:15:ad:14:60: a2:d8:88:3e:05:50:10:fa:59:7b:01:85:ff:0a:92:d1:ce:a0: 70:76:c3:fb:0f:71:2b:26:dc:12:db:26:2b:2e:de:d3:04:ee: 1e:59:34:32:a5:be:98:07:b0:50:cc:90:cc:8c:7e:07:dd:2c: f0:3e:c2:09:f0:5e:d8:86:ec:c5:27:ea:a2:31:ad:82:2a:65: 7e:35:9a:8e:9c:d6:44:03:c2:85:d0:cf:83:37:3a:8a:6e:c2: b4:cd:fa:e1:54:a4:06:45:d0:74:cb:8d:9e:d1:c5:ad:b9:93: ff:20:96:ec:c1:02:aa:23:8f:ec:81:c9:0f:29:56:11:68:8e: ff:a7:67:48:88:28:9b:b3:4d:49:b7:a5:07:fc:04:eb:3d:0f: 5e:15:ed:87:14:4b:d2:16:4a:c3:fb:53:8b:4a:68:cd:fd:69: 73:49:40:9a:0c:27:ed:4b:78:f1:ee:25:14:7e:7b:5b:f4:fe: 03:a3:8f:3b:f1:fd:33:e6:1e:61:e2:94:0c:43:fe:a1:c0:13: 18:e9:46:4a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjFFQjExMC8GA1UEBRMoMzVBMDNBQTE0NzhEMDY4MUMwNjcxOTc2QzlGQjQzRjY5 MzEzODJCRTAeFw0yNjA1MTEwOTE0MjNaFw0yNjA1MTgwOTE0MjNaMBgxFjAUBgNV BAMTDTZhMDE5ZGVmLTVmMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDu6z4WWHwkyRA9b3gpnfwVyOxBmo7q3/yNxFs5hU7Gztad1Qgbss/qh4N870rl jcEX1H8nAbwSwVb2LTXLBgVSAtF6T74o9X/2kYWEbE2/MNmXCQexuf1x+NpcP3js /L9sCow1LeXQTXTyB7Qy7g0jJVDkShlKCperJtlc6parsOZ4oWFWOhYfQxAJwKAt noqusUX0N1Cv9EPKSBtQMxMgZTt2KYma+p7wB5RTpmRzS3gcZJHqllBVXOynpA0m 3DynwiFriW7cr+fvQFnvLJ6Q4+F07BTD1QSEsBa7FvbkhGZE4auRp8v25AtzTjRM PKlEIcRX43P+S9B+M8Asca47AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU79OqMBSw eebu35OT4/Nm/wlFwYEwHwYDVR0jBBgwFoAUNaA6oUeNBoHAZxl2yftD9pMTgr4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2MUVCLzBBOTM4NUQwMzUw MjExRjFCMUZENkQ3NDlCODMzNzczL05hQTZvVWVOQm9IQVp4bDJ5ZnREOXBNVGdy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTmFBNm9VZU5Cb0hBWnhsMnlmdEQ5cE1UZ3I0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 MUVCLzBBOTM4NUQwMzUwMjExRjFCMUZENkQ3NDlCODMzNzczL05hQTZvVWVOQm9I QVp4bDJ5ZnREOXBNVGdyNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCzkzNmyRQeKn8+1BvRy70oYiUMAvVeLA+ln8wO5jzhRp1Uj/c2k8GYaH34O92d 1Mnn2hWtFGCi2Ig+BVAQ+ll7AYX/CpLRzqBwdsP7D3ErJtwS2yYrLt7TBO4eWTQy pb6YB7BQzJDMjH4H3SzwPsIJ8F7YhuzFJ+qiMa2CKmV+NZqOnNZEA8KF0M+DNzqK bsK0zfrhVKQGRdB0y42e0cWtuZP/IJbswQKqI4/sgckPKVYRaI7/p2dIiCibs01J t6UH/ATrPQ9eFe2HFEvSFkrD+1OLSmjN/WlzSUCaDCftS3jx7iUUfntb9P4Do487 8f0z5h5h4pQMQ/6hwBMY6UZK -----END CERTIFICATE-----Generated at Wed May 13 03:48:18 2026 by rpki-client