$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft File: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft (raw, json) Hash identifier: JSFgUzVP+LyjlyDHIb22ozcAvzIqWcp0PJyS9hgHy6M= Subject key identifier: E7:DD:A3:D8:01:35:98:13:17:2F:A8:99:8D:FD:1B:2E:DA:4A:A7:33 Authority key identifier: 34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B Certificate issuer: /CN=A914C725/serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft Manifest number: 31 Signing time: Tue 12 May 2026 16:22:59 +0000 Manifest this update: Tue 12 May 2026 16:22:59 +0000 Manifest next update: Tue 19 May 2026 16:22:59 +0000 Files and hashes: 1: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl (hash: uIA1CqkLsFfUj+Fr6wf7IeEN6xWxK7O4HBf7TrxtEjY=) 2: 2D89A3B4139A11F182E65A043E3D8C67.roa (hash: BbN77RAFkHR083nGQLeFhiO7qnoHJJbIlHS/xJ/7E5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C725, serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B Validity Not Before: May 12 16:22:59 2026 GMT Not After : May 19 16:22:59 2026 GMT Subject: CN=6a0353e3-8bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b8:42:ab:78:94:e8:03:5b:80:cd:59:7d:f1: 84:e3:ba:a4:c6:36:de:28:bf:23:4f:83:74:65:24: 9f:b5:86:62:ad:09:37:e7:10:a9:97:9c:ec:12:f8: ee:67:46:1e:60:30:b0:04:ba:5e:8b:a3:70:09:35: 71:81:21:ed:f5:7b:d2:a6:ac:fc:71:3f:28:aa:9b: 20:8f:e3:0e:b4:bd:96:fb:a5:68:28:1d:f3:ee:24: 21:c1:ca:71:75:9b:eb:cb:4f:8e:83:d8:be:dc:e5: cc:e1:97:95:dc:57:3a:ad:2c:93:f7:8c:ad:26:54: 72:3b:52:cc:b1:0b:ab:dd:4a:88:e5:7b:40:a6:9e: f8:d6:66:ae:6b:8c:5e:f9:ba:d6:c3:2e:4e:88:92: ee:74:27:02:62:d4:0c:12:4b:b3:9f:f5:9c:6b:bb: fe:36:22:c0:56:42:da:ff:20:0d:0b:32:37:52:c6: 40:8d:ce:bb:db:41:8f:c8:0e:f6:9f:01:7b:8c:9e: 5e:f6:76:b3:03:36:cc:e2:41:04:7a:7a:ed:51:64: b1:77:f3:78:d7:cb:e6:87:2a:5e:5a:5d:fd:e5:60: 77:6c:d9:95:3f:ee:d2:64:4c:2b:73:e0:6e:a0:d1: 5e:72:bf:25:fd:f8:68:83:83:ce:87:26:dc:4a:e6: 45:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:DD:A3:D8:01:35:98:13:17:2F:A8:99:8D:FD:1B:2E:DA:4A:A7:33 X509v3 Authority Key Identifier: keyid:34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:6d:b8:22:ae:2b:47:91:bb:43:fc:a1:09:8a:c2:bc:25:01: 6c:b7:61:a9:59:fa:cc:65:60:8b:cf:47:47:f4:91:58:52:87: d5:97:03:52:e6:6a:3e:d0:b0:5c:6c:db:bc:c2:2a:bd:83:44: a3:e5:cd:fb:93:ed:e2:30:89:91:0e:f6:36:8d:d3:92:3d:60: c9:70:2f:c2:7e:6b:73:11:2a:04:27:23:ff:e6:db:e0:37:7b: e1:22:af:4c:ae:04:8e:21:07:82:d6:36:92:31:e9:c5:2f:00: f5:c4:e3:01:23:36:a7:a6:e8:d8:d2:88:bd:88:37:1d:a8:b3: 22:7e:00:41:71:19:85:75:ea:a3:50:79:1d:8b:5a:4e:a2:41: d5:4b:30:de:ea:6e:58:a1:7a:36:5e:be:58:72:06:b2:3c:4a: 02:d5:ac:da:1a:64:f6:64:8b:55:8f:89:1a:5b:2e:74:49:76: 56:e5:d0:60:76:2a:b4:5f:62:b9:a9:22:0b:f1:d3:45:39:73: 27:c4:ad:98:39:49:5b:bc:a6:c7:b8:69:61:83:1b:a2:38:bf: 84:86:f2:09:b7:59:78:9b:6f:6c:f6:cd:9a:0b:3f:7e:60:77: 41:46:8b:91:1a:e5:51:e3:00:0a:41:5a:66:7f:47:e3:49:8e: 7c:c9:68:f8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QzcyNTExMC8GA1UEBRMoMzQ4MThCQ0YwRDg0RTE1OTlCRDk5ODE3OTk1RTVFQzM5 QjFCMDE0QjAeFw0yNjA1MTIxNjIyNTlaFw0yNjA1MTkxNjIyNTlaMBgxFjAUBgNV BAMTDTZhMDM1M2UzLThiZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5uEKreJToA1uAzVl98YTjuqTGNt4ovyNPg3RlJJ+1hmKtCTfnEKmXnOwS+O5n Rh5gMLAEul6Lo3AJNXGBIe31e9KmrPxxPyiqmyCP4w60vZb7pWgoHfPuJCHBynF1 m+vLT46D2L7c5czhl5XcVzqtLJP3jK0mVHI7UsyxC6vdSojle0CmnvjWZq5rjF75 utbDLk6Iku50JwJi1AwSS7Of9Zxru/42IsBWQtr/IA0LMjdSxkCNzrvbQY/IDvaf AXuMnl72drMDNsziQQR6eu1RZLF383jXy+aHKl5aXf3lYHds2ZU/7tJkTCtz4G6g 0V5yvyX9+GiDg86HJtxK5kV3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU592j2AE1 mBMXL6iZjf0bLtpKpzMwHwYDVR0jBBgwFoAUNIGLzw2E4Vmb2ZgXmV5ew5sbAUsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDNzI1L0FDNkNEMTVDMTM5 OTExRjE5QzI0NzBCMUIzRUU1MjhFL05JR0x6dzJFNFZtYjJaZ1htVjVldzVzYkFV cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTklHTHp3MkU0Vm1iMlpnWG1WNWV3NXNiQVVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD NzI1L0FDNkNEMTVDMTM5OTExRjE5QzI0NzBCMUIzRUU1MjhFL05JR0x6dzJFNFZt YjJaZ1htVjVldzVzYkFVcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAcbbgiritHkbtD/KEJisK8JQFst2GpWfrMZWCLz0dH9JFYUofVlwNS5mo+0LBc bNu8wiq9g0Sj5c37k+3iMImRDvY2jdOSPWDJcC/CfmtzESoEJyP/5tvgN3vhIq9M rgSOIQeC1jaSMenFLwD1xOMBIzanpujY0oi9iDcdqLMifgBBcRmFdeqjUHkdi1pO okHVSzDe6m5YoXo2Xr5YcgayPEoC1azaGmT2ZItVj4kaWy50SXZW5dBgdiq0X2K5 qSIL8dNFOXMnxK2YOUlbvKbHuGlhgxuiOL+EhvIJt1l4m29s9s2aCz9+YHdBRouR GuVR4wAKQVpmf0fjSY58yWj4 -----END CERTIFICATE-----Generated at Wed May 13 11:41:49 2026 by rpki-client