$ rpki-client -vvf rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft File: NtqOcqrHflUzc5DvTGHJVAtFldc.mft (raw, json) Hash identifier: QOraiwgL0BuGJKnq9JdPkGMl7eIZPZOsl6M557/oFFI= Subject key identifier: B9:29:F6:61:89:3C:80:19:44:8A:E5:65:36:24:55:52:9E:C7:26:CA Authority key identifier: 36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7 Certificate issuer: /CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7 Certificate serial: 0ACF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft Manifest number: 0AB5 Signing time: Tue 12 May 2026 19:34:28 +0000 Manifest this update: Tue 12 May 2026 19:34:27 +0000 Manifest next update: Tue 19 May 2026 19:34:27 +0000 Files and hashes: 1: NtqOcqrHflUzc5DvTGHJVAtFldc.crl (hash: ak6ltvakCobNYqQUej0dkxHw1NmdYICCuDj5UQUZndY=) 2: 6A23E166499211ED879F2D11C4F9AE02.roa (hash: Qr7OnU5cwXgYQ6DyrDnDHL3zNQ6VCMQTENBCUIMJfFg=) 3: 6B5765BC499211ED879F2D11C4F9AE02.roa (hash: /vzrtqQCcQVSvHagWxuB+gMULE9rVx3mbboeBNca//A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2767 (0xacf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91577A2, serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7 Validity Not Before: May 12 19:34:27 2026 GMT Not After : May 19 19:34:27 2026 GMT Subject: CN=6a0380c3-2c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:36:95:c9:eb:9e:5a:b2:28:29:65:9b:d6:de: 16:87:a8:fd:97:ca:e6:35:df:7d:6f:f9:7d:9d:65: 41:49:6e:b4:c0:a9:56:95:87:20:17:aa:2c:c3:55: 69:45:c4:db:d5:2b:ad:6f:20:e7:56:db:5a:97:e2: 62:27:54:27:00:32:80:fc:b3:88:de:c4:19:3c:95: 81:57:5a:d5:20:34:db:c3:89:cd:b5:01:19:09:59: 21:19:0a:5c:ac:e5:24:b6:c2:a4:b0:6f:99:3b:ec: a7:62:09:28:3c:ab:69:48:a9:c6:38:78:8e:5c:c4: 97:23:ec:e8:b3:f2:08:20:7d:2d:32:f6:f8:db:6c: b7:b6:ca:13:98:cb:b9:a7:8d:c6:16:d3:40:a0:5a: d1:f4:17:c8:4f:67:4b:69:41:8b:9c:7b:62:c6:85: d4:00:9e:fe:f2:24:da:2f:5a:65:50:af:0c:39:7e: a0:1c:41:50:7f:b8:7d:b7:16:72:ee:36:3a:91:ca: bc:ec:75:cb:77:22:d7:d0:2d:24:ac:a8:67:27:f0: db:3a:64:3c:15:a5:f8:3f:fb:10:a5:1e:9b:59:29: 39:e1:fd:c5:41:e1:94:25:34:ae:eb:de:66:10:f8: 0a:8b:2d:22:d9:04:52:8a:45:18:4a:1e:07:a6:68: 14:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:29:F6:61:89:3C:80:19:44:8A:E5:65:36:24:55:52:9E:C7:26:CA X509v3 Authority Key Identifier: keyid:36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:07:03:d3:2b:37:3f:42:4c:91:2b:36:e8:18:62:00:c6:fb: 4c:6a:73:3a:5c:c1:d5:a9:3f:02:26:0f:ec:3c:66:d1:d1:12: 95:e2:49:92:e9:1c:af:87:6d:3d:ca:9d:ac:23:b9:2f:fd:bf: 7d:1b:c9:40:38:62:fa:f4:b3:5d:ac:2d:64:cf:00:e7:13:b1: ed:77:6a:fb:b7:2e:bd:5c:b1:9f:ec:f0:76:bd:2f:f3:05:26: c6:f2:7d:1b:44:0e:c3:89:42:48:33:01:54:ea:d5:b0:b9:23: 4f:fc:5e:0b:22:a0:b9:c7:11:54:85:10:b3:1d:f4:25:87:c1: 1f:fd:34:07:44:c8:e6:a5:5c:99:b1:87:6e:2c:e6:9d:9e:f5: 26:02:56:17:36:b5:74:51:ca:c2:3f:92:ab:91:9f:ea:d0:bd: 3a:fc:88:24:5a:04:cb:6c:7e:ae:8c:bc:80:d7:e3:9b:29:2b: 87:e7:45:97:88:21:24:f2:14:68:18:51:d1:5e:0a:94:47:5d: db:93:cd:90:6b:9e:11:4b:dc:37:8a:a3:a9:03:27:14:63:ca: da:e5:4b:90:7f:cc:f1:89:0c:1e:73:e1:5f:d2:16:c5:2f:e3: 86:16:a5:6c:72:61:06:d0:d3:ac:f1:be:b0:a3:f8:f8:ae:11: 58:fb:2b:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3QTIxMTAvBgNVBAUTKDM2REE4RTcyQUFDNzdFNTUzMzczOTBFRjRDNjFDOTU0 MEI0NTk1RDcwHhcNMjYwNTEyMTkzNDI3WhcNMjYwNTE5MTkzNDI3WjAYMRYwFAYD VQQDEw02YTAzODBjMy0yYzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DaVyeueWrIoKWWb1t4Wh6j9l8rmNd99b/l9nWVBSW60wKlWlYcgF6osw1Vp RcTb1SutbyDnVttal+JiJ1QnADKA/LOI3sQZPJWBV1rVIDTbw4nNtQEZCVkhGQpc rOUktsKksG+ZO+ynYgkoPKtpSKnGOHiOXMSXI+zos/IIIH0tMvb422y3tsoTmMu5 p43GFtNAoFrR9BfIT2dLaUGLnHtixoXUAJ7+8iTaL1plUK8MOX6gHEFQf7h9txZy 7jY6kcq87HXLdyLX0C0krKhnJ/DbOmQ8FaX4P/sQpR6bWSk54f3FQeGUJTSu695m EPgKiy0i2QRSikUYSh4HpmgU3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLkp9mGJ PIAZRIrlZTYkVVKexybKMB8GA1UdIwQYMBaAFDbajnKqx35VM3OQ70xhyVQLRZXX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzdBMi84QkMxNUM0MDdC MDQxMUVBOURBQUQ0MzJDNEY5QUUwMi9OdHFPY3FySGZsVXpjNUR2VEdISlZBdEZs ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL050cU9jcXJIZmxVemM1RHZUR0hKVkF0RmxkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzdBMi84QkMxNUM0MDdCMDQxMUVBOURBQUQ0MzJDNEY5QUUwMi9OdHFPY3FySGZs VXpjNUR2VEdISlZBdEZsZGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApQcD0ys3P0JMkSs26BhiAMb7TGpzOlzB1ak/AiYP7Dxm0dESleJJkukcr4dt PcqdrCO5L/2/fRvJQDhi+vSzXawtZM8A5xOx7Xdq+7cuvVyxn+zwdr0v8wUmxvJ9 G0QOw4lCSDMBVOrVsLkjT/xeCyKguccRVIUQsx30JYfBH/00B0TI5qVcmbGHbizm nZ71JgJWFza1dFHKwj+Sq5Gf6tC9OvyIJFoEy2x+roy8gNfjmykrh+dFl4ghJPIU aBhR0V4KlEdd25PNkGueEUvcN4qjqQMnFGPK2uVLkH/M8YkMHnPhX9IWxS/jhhal bHJhBtDTrPG+sKP4+K4RWPsrtw== -----END CERTIFICATE-----Generated at Wed May 13 03:18:59 2026 by rpki-client