$ rpki-client -vvf rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft File: NhKQaSiZCCzeI_UEU6QVXgqreXg.mft (raw, json) Hash identifier: XEC+lnNw/QTGcYQWa/C3Sh01Ko3rhDjW7tLkEYvvAwQ= Subject key identifier: D2:0A:42:B9:CE:32:A8:D3:EE:F1:3B:E3:50:D3:C1:30:C5:E7:8E:92 Authority key identifier: 36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 Certificate issuer: /CN=A911894F/serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Certificate serial: 2715 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft Manifest number: 2700 Signing time: Tue 12 May 2026 15:40:31 +0000 Manifest this update: Tue 12 May 2026 15:40:30 +0000 Manifest next update: Tue 19 May 2026 15:40:30 +0000 Files and hashes: 1: NhKQaSiZCCzeI_UEU6QVXgqreXg.crl (hash: QisrY96xGYrzU20cnZzNA+EOfUJrJiqAAH4CpitByEQ=) 2: 802FBE707FEB11EB8B5E2817C4F9AE02.roa (hash: 9SaubkE1hKAflSM+TwpjxuILNivfO85uaXddylqE/9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10005 (0x2715) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911894F, serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Validity Not Before: May 12 15:40:30 2026 GMT Not After : May 19 15:40:30 2026 GMT Subject: CN=6a0349ef-9626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cc:23:0a:50:b2:3e:34:a5:3b:1d:df:f8:76: 4b:19:71:53:cf:93:a7:5b:53:00:93:1e:0e:d7:7b: 0b:58:e1:c3:31:06:f2:11:7e:c1:27:d7:bd:0e:d1: a2:6f:48:c2:b0:00:21:14:f0:77:e2:f6:d2:f4:31: da:6d:d8:f6:d8:41:94:ac:7f:40:11:57:ae:3b:27: 78:0c:9c:7b:20:97:c9:83:86:95:e8:07:50:58:0d: 84:b4:6e:9e:ad:b7:b9:f5:6d:3e:c5:75:69:81:df: 5b:67:56:dc:2c:d0:b4:51:50:5c:79:d1:40:01:09: 54:a0:a3:80:4d:d5:d2:b8:36:93:e6:f0:da:01:2b: 0b:3c:99:0c:a7:ce:41:b7:ab:3a:91:10:ca:cc:ec: 8d:19:b1:d3:5b:a3:fe:95:1d:9b:a4:d7:9e:f3:45: a2:27:d6:3c:22:c3:a1:16:d5:4f:70:90:f9:d5:94: a2:74:2b:68:06:4d:12:e5:8f:9f:3d:f3:01:80:92: 8c:5a:75:7c:71:d2:28:80:2b:9f:2d:56:34:d2:5e: ad:bc:6c:0a:34:a4:be:dd:ba:3f:40:97:65:7a:0b: ac:f6:ad:87:49:ad:ca:8b:01:bf:0e:c7:5c:a8:e2: 84:de:89:61:82:a8:dd:1f:4b:9c:81:22:e5:cd:5d: c1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0A:42:B9:CE:32:A8:D3:EE:F1:3B:E3:50:D3:C1:30:C5:E7:8E:92 X509v3 Authority Key Identifier: keyid:36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:e7:45:23:1a:61:4a:fa:02:03:56:a0:54:50:0a:a8:b3:a3: 28:0a:28:12:92:9e:80:fa:b4:bb:9e:e0:eb:4d:92:93:4a:9a: bb:c1:ae:b6:cb:74:5d:6e:da:ff:b6:15:af:c9:77:cc:40:ee: 3a:b0:53:9e:05:db:a6:9d:ee:12:18:14:d3:29:28:1c:d3:5c: 45:cf:dd:b6:e0:8b:9c:97:0c:fc:5d:7e:ab:79:84:42:bd:4e: 6e:16:de:b8:c6:41:c4:9d:52:88:1e:39:24:5d:92:a9:e8:51: 80:62:f8:4a:33:85:58:37:3f:fd:2b:b8:f2:13:4f:92:1a:d4: 31:18:a8:2c:af:84:30:94:f0:6e:74:b2:a9:81:2c:7e:93:68: 7d:18:af:fd:aa:08:c5:34:8a:ff:72:ac:d9:e9:9a:86:33:48: 71:b8:3f:1b:ce:1d:47:b7:f4:4d:13:7e:b4:c4:9a:6c:50:d0: bc:a2:7a:85:92:cb:22:27:dc:6e:3d:05:ad:3c:1f:3c:36:78: be:14:64:d5:80:87:b3:38:b3:ce:89:b0:24:46:be:a6:a2:c0: 2a:2b:3a:58:4b:07:c7:cc:47:5f:a2:d6:ef:e5:b3:8a:85:f9: 8c:21:dd:7c:be:1d:24:28:77:d2:31:b1:f9:96:85:ce:ae:85: b1:b1:5c:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg5NEYxMTAvBgNVBAUTKDM2MTI5MDY5Mjg5OTA4MkNERTIzRjUwNDUzQTQxNTVF MEFBQjc5NzgwHhcNMjYwNTEyMTU0MDMwWhcNMjYwNTE5MTU0MDMwWjAYMRYwFAYD VQQDEw02YTAzNDllZi05NjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxswjClCyPjSlOx3f+HZLGXFTz5OnW1MAkx4O13sLWOHDMQbyEX7BJ9e9DtGi b0jCsAAhFPB34vbS9DHabdj22EGUrH9AEVeuOyd4DJx7IJfJg4aV6AdQWA2EtG6e rbe59W0+xXVpgd9bZ1bcLNC0UVBcedFAAQlUoKOATdXSuDaT5vDaASsLPJkMp85B t6s6kRDKzOyNGbHTW6P+lR2bpNee80WiJ9Y8IsOhFtVPcJD51ZSidCtoBk0S5Y+f PfMBgJKMWnV8cdIogCufLVY00l6tvGwKNKS+3bo/QJdlegus9q2HSa3KiwG/Dsdc qOKE3olhgqjdH0ucgSLlzV3BeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNIKQrnO MqjT7vE741DTwTDF546SMB8GA1UdIwQYMBaAFDYSkGkomQgs3iP1BFOkFV4Kq3l4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk0Ri85NjNDRjBDRUVD NUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkNDemVJX1VFVTZRVlhncXJl WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05oS1FhU2laQ0N6ZUlfVUVVNlFWWGdxcmVYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODk0Ri85NjNDRjBDRUVDNUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkND emVJX1VFVTZRVlhncXJlWGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoOdFIxphSvoCA1agVFAKqLOjKAooEpKegPq0u57g602Sk0qau8Gutst0XW7a /7YVr8l3zEDuOrBTngXbpp3uEhgU0ykoHNNcRc/dtuCLnJcM/F1+q3mEQr1Obhbe uMZBxJ1SiB45JF2SqehRgGL4SjOFWDc//Su48hNPkhrUMRioLK+EMJTwbnSyqYEs fpNofRiv/aoIxTSK/3Ks2emahjNIcbg/G84dR7f0TRN+tMSabFDQvKJ6hZLLIifc bj0FrTwfPDZ4vhRk1YCHszizzomwJEa+pqLAKis6WEsHx8xHX6LW7+WzioX5jCHd fL4dJCh30jGx+ZaFzq6FsbFckA== -----END CERTIFICATE-----Generated at Wed May 13 07:29:54 2026 by rpki-client