$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft File: nnabVGgi7tWnPT9dAt-atImAA6k.mft (raw, json) Hash identifier: fPbS1aDMc3HEKt0yz82Q4/YHAendE67067v2b3mmau8= Subject key identifier: 50:28:1A:D0:ED:FD:DB:F5:B8:9F:4E:16:ED:B4:AE:40:C3:87:39:FA Authority key identifier: 9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 Certificate issuer: /CN=A914B1DB/serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft Manifest number: 0154 Signing time: Mon 11 May 2026 05:05:42 +0000 Manifest this update: Mon 11 May 2026 05:05:41 +0000 Manifest next update: Mon 18 May 2026 05:05:41 +0000 Files and hashes: 1: nnabVGgi7tWnPT9dAt-atImAA6k.crl (hash: RTUmcMAQ/CbwHf7hvYFk5OIDVZp+KQnQ7+wrlg7Z7ro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 05:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B1DB, serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Validity Not Before: May 11 05:05:41 2026 GMT Not After : May 18 05:05:41 2026 GMT Subject: CN=6a0163a5-69d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e6:86:35:85:af:22:30:b5:b5:70:8f:50:34: 5b:67:7c:60:cb:93:41:b8:a8:85:c9:e1:19:3a:88: 51:08:b2:f7:df:09:b1:ff:04:29:b9:91:b8:c8:d5: ea:29:b7:57:f2:73:71:0b:f0:42:9a:b8:ea:fe:d9: 20:47:39:56:2c:64:9c:b8:43:a8:23:68:17:c4:3c: ee:ae:e1:2b:8b:da:5e:31:09:8b:4c:24:dd:8f:bd: 41:8b:af:0a:41:75:f0:18:30:ef:8d:62:d9:7c:bc: c2:9e:60:f1:3a:ee:d1:60:01:d5:1d:0b:5f:32:35: 34:31:57:00:a4:8e:0d:2b:88:30:62:81:d4:52:9e: 48:d0:65:8f:1c:e9:54:00:17:60:8f:00:1a:a6:bd: ed:a7:81:fc:b1:0d:0c:5f:52:a8:88:66:30:03:86: dc:1a:c6:76:0d:57:c2:1b:2e:a2:01:45:52:7c:96: ec:9a:05:76:30:66:72:df:d4:50:43:66:40:da:ab: dc:34:9f:ef:47:9f:1a:a4:f7:26:14:01:85:af:08: f3:89:d6:8d:71:a8:5c:81:06:b2:38:32:e0:26:87: 74:c7:06:e8:66:62:78:de:6b:c9:a3:ef:b6:16:b9: 33:e9:d0:70:e3:2e:3b:ef:12:76:c6:ce:ee:76:5f: f6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:28:1A:D0:ED:FD:DB:F5:B8:9F:4E:16:ED:B4:AE:40:C3:87:39:FA X509v3 Authority Key Identifier: keyid:9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:75:07:18:05:2b:0c:3b:e7:21:3d:fe:d2:24:63:a9:ae:2c: 8a:87:e7:fd:0b:27:75:05:06:1e:9a:01:d2:32:30:b0:98:c9: 92:dd:13:76:83:63:fc:8e:ca:68:38:11:cb:c0:7b:2b:06:b7: 93:d3:67:03:59:79:4b:b6:76:79:b7:e2:e9:3e:e3:fc:a0:1e: b2:bf:4d:ac:7a:35:e2:ee:34:38:f0:9d:5d:d6:8a:6d:95:63: 07:c0:e1:a2:5c:75:fa:e8:2a:bc:8f:6f:d8:0c:bf:d7:7f:b1: a3:b1:8c:b0:a6:30:a5:3b:df:93:e3:4b:6b:1e:eb:ec:3c:23: 3b:32:e6:73:52:87:75:2f:64:d1:ae:cc:d8:fb:cc:90:4a:64: f0:7e:3c:fb:63:83:75:45:fa:44:73:93:7e:43:1e:ad:fa:d0: a7:e0:48:25:95:82:4d:f6:1b:06:70:21:5b:55:92:ec:23:e4: d4:08:ed:93:2f:f5:51:fc:f9:60:4e:df:c2:c3:59:59:87:ea: c5:17:fa:68:38:d0:2e:27:19:8e:d6:a0:b0:1c:4a:74:65:1b: e1:cf:bd:c3:ec:a5:72:5d:80:79:80:a3:24:a1:25:28:bf:1a: 8f:ad:65:04:64:e9:2f:19:e5:72:76:e0:ea:7a:13:b2:ab:bf: b2:a4:dc:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxREIxMTAvBgNVBAUTKDlFNzY5QjU0NjgyMkVFRDVBNzNEM0Y1RDAyREY5QUI0 ODk4MDAzQTkwHhcNMjYwNTExMDUwNTQxWhcNMjYwNTE4MDUwNTQxWjAYMRYwFAYD VQQDEw02YTAxNjNhNS02OWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquaGNYWvIjC1tXCPUDRbZ3xgy5NBuKiFyeEZOohRCLL33wmx/wQpuZG4yNXq KbdX8nNxC/BCmrjq/tkgRzlWLGScuEOoI2gXxDzuruEri9peMQmLTCTdj71Bi68K QXXwGDDvjWLZfLzCnmDxOu7RYAHVHQtfMjU0MVcApI4NK4gwYoHUUp5I0GWPHOlU ABdgjwAapr3tp4H8sQ0MX1KoiGYwA4bcGsZ2DVfCGy6iAUVSfJbsmgV2MGZy39RQ Q2ZA2qvcNJ/vR58apPcmFAGFrwjzidaNcahcgQayODLgJod0xwboZmJ43mvJo++2 Frkz6dBw4y477xJ2xs7udl/2PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFAoGtDt /dv1uJ9OFu20rkDDhzn6MB8GA1UdIwQYMBaAFJ52m1RoIu7Vpz0/XQLfmrSJgAOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjFEQi8yRDg3REZENjQz MTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0V25QVDlkQXQtYXRJbUFB NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25uYWJWR2dpN3RXblBUOWRBdC1hdEltQUE2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjFEQi8yRDg3REZENjQzMTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0 V25QVDlkQXQtYXRJbUFBNmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnXUHGAUrDDvnIT3+0iRjqa4siofn/QsndQUGHpoB0jIwsJjJkt0TdoNj/I7K aDgRy8B7Kwa3k9NnA1l5S7Z2ebfi6T7j/KAesr9NrHo14u40OPCdXdaKbZVjB8Dh olx1+ugqvI9v2Ay/13+xo7GMsKYwpTvfk+NLax7r7DwjOzLmc1KHdS9k0a7M2PvM kEpk8H48+2ODdUX6RHOTfkMerfrQp+BIJZWCTfYbBnAhW1WS7CPk1Ajtky/1Ufz5 YE7fwsNZWYfqxRf6aDjQLicZjtagsBxKdGUb4c+9w+ylcl2AeYCjJKElKL8aj61l BGTpLxnlcnbg6noTsqu/sqTcdw== -----END CERTIFICATE-----Generated at Wed May 13 04:43:53 2026 by rpki-client