$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft File: nOkX3Drgxboud8t3WjrZnGhcQGs.mft (raw, json) Hash identifier: SruF7TzeaTCsN8RzkuX2W85dI6Gr+iaP4PuLv2G1RGo= Subject key identifier: 07:B1:AC:F0:93:B2:CC:98:51:BF:82:91:1A:EA:5A:5D:45:10:7B:0C Authority key identifier: 9C:E9:17:DC:3A:E0:C5:BA:2E:77:CB:77:5A:3A:D9:9C:68:5C:40:6B Certificate issuer: /CN=A9161F3E/serialNumber=9CE917DC3AE0C5BA2E77CB775A3AD99C685C406B Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft Manifest number: D1 Signing time: Wed 13 May 2026 06:53:24 +0000 Manifest this update: Wed 13 May 2026 06:53:23 +0000 Manifest next update: Wed 20 May 2026 06:53:23 +0000 Files and hashes: 1: nOkX3Drgxboud8t3WjrZnGhcQGs.crl (hash: sjyREKk4lwUGJgAqQnaeUBUFbJ4L09PTl19ZI5HyEsw=) 2: 49DEAEDC12A711F099020A73C4F9AE02.roa (hash: 73STUG9MRsTj+UMDTuA4X0z5fGUTYqhKS5W5S7xFgxs=) 3: 4A3C802012A711F099020A73C4F9AE02.roa (hash: iEuV0+5znqF8f5T5Ps6WIUoKRiKa2jw2dHDVVLuYtWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.crl rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 06:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161F3E, serialNumber=9CE917DC3AE0C5BA2E77CB775A3AD99C685C406B Validity Not Before: May 13 06:53:23 2026 GMT Not After : May 20 06:53:23 2026 GMT Subject: CN=6a041fe4-1c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6c:fa:b6:92:0a:58:d5:d4:6e:27:88:99:5f: c1:fe:1e:cd:46:3a:fb:b1:6b:3a:21:20:86:4f:ce: 84:f2:50:e7:48:7e:bc:71:1d:84:94:d2:d0:f2:ba: 7f:a5:f0:7c:1a:a1:5e:97:b2:c7:49:27:67:c6:00: f6:80:79:03:7b:de:a4:6c:91:24:75:d7:ef:84:51: 39:4f:2a:8f:68:19:10:a6:3b:9b:27:18:df:61:72: be:ce:d6:31:f7:3c:d3:1c:d3:12:e2:3d:64:2d:ad: 5c:b8:93:07:f3:dd:06:93:5e:24:d5:96:a2:b2:43: fe:cc:76:65:ca:2e:f9:ef:7c:ac:56:ed:e4:5d:a0: 6b:58:b6:87:b3:1a:9c:bc:98:e4:62:fa:70:b9:04: 2e:c1:6d:6e:77:17:e0:c9:81:72:0a:4f:15:e0:fb: 04:48:ff:93:8f:74:f0:9a:59:3b:c6:a8:6a:1d:32: da:24:4c:1a:68:c5:68:99:a3:9b:d0:8e:86:ec:2a: 5f:9d:94:9c:6c:28:e1:83:61:e7:cc:19:8d:f9:1e: f9:69:a3:89:86:5b:63:ab:62:70:91:dd:96:10:b4: e5:13:70:e5:41:d3:4b:4b:d1:3f:a6:c4:1c:7b:ab: c2:cf:ce:8c:a3:65:46:9a:ca:e9:51:83:b3:1a:7e: e1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B1:AC:F0:93:B2:CC:98:51:BF:82:91:1A:EA:5A:5D:45:10:7B:0C X509v3 Authority Key Identifier: keyid:9C:E9:17:DC:3A:E0:C5:BA:2E:77:CB:77:5A:3A:D9:9C:68:5C:40:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:4b:33:be:10:ee:62:14:e8:90:32:c4:2f:f7:e2:9c:c5:cb: b3:86:04:34:d9:13:f1:d3:57:58:99:dc:23:30:d5:05:75:f5: 1a:0e:37:4e:19:40:a0:0e:9c:39:4e:29:96:01:69:bb:4c:fe: 24:ee:df:e2:91:a1:07:4b:ad:08:81:af:95:6c:62:23:56:b0: 1e:e4:fe:9c:be:9e:c7:3f:c7:0d:42:2a:f1:fe:d1:1d:23:c0: 3d:51:05:ee:87:fb:05:28:e2:86:14:16:f0:17:07:7d:af:ce: 0f:ce:a8:04:45:10:bd:4e:52:6a:a1:45:df:62:bb:42:8a:01: 41:df:4e:51:dc:9b:82:0e:b7:6f:69:97:6b:98:f4:9d:a9:bd: 9c:05:48:e5:02:c1:c3:d5:4c:9d:52:e7:51:23:e4:96:91:cc: 23:b3:e7:b3:6e:fb:49:30:21:b8:b3:62:09:17:d5:a9:d4:54: f0:62:9f:6d:55:ba:f1:c4:90:d3:cf:68:a5:df:a5:1e:be:16: b2:c4:09:d7:96:ce:43:56:20:eb:35:20:9b:1d:b3:bc:53:d0: e6:8e:72:ad:75:aa:ea:bb:57:60:8e:0f:db:3e:36:67:20:0f: ec:4f:84:c4:6b:69:80:eb:84:23:77:4c:3c:de:88:b5:72:28: 63:9d:82:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGM0UxMTAvBgNVBAUTKDlDRTkxN0RDM0FFMEM1QkEyRTc3Q0I3NzVBM0FEOTlD Njg1QzQwNkIwHhcNMjYwNTEzMDY1MzIzWhcNMjYwNTIwMDY1MzIzWjAYMRYwFAYD VQQDEw02YTA0MWZlNC0xYzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Gz6tpIKWNXUbieImV/B/h7NRjr7sWs6ISCGT86E8lDnSH68cR2ElNLQ8rp/ pfB8GqFel7LHSSdnxgD2gHkDe96kbJEkddfvhFE5TyqPaBkQpjubJxjfYXK+ztYx 9zzTHNMS4j1kLa1cuJMH890Gk14k1ZaiskP+zHZlyi7573ysVu3kXaBrWLaHsxqc vJjkYvpwuQQuwW1udxfgyYFyCk8V4PsESP+Tj3Twmlk7xqhqHTLaJEwaaMVomaOb 0I6G7CpfnZScbCjhg2HnzBmN+R75aaOJhltjq2Jwkd2WELTlE3DlQdNLS9E/psQc e6vCz86Mo2VGmsrpUYOzGn7hhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAexrPCT ssyYUb+CkRrqWl1FEHsMMB8GA1UdIwQYMBaAFJzpF9w64MW6LnfLd1o62ZxoXEBr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUYzRS8zMzlFREU2ODEw RTQxMUYwQjc1QjgxNjZDNEY5QUUwMi9uT2tYM0RyZ3hib3VkOHQzV2pyWm5HaGNR R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25Pa1gzRHJneGJvdWQ4dDNXanJabkdoY1FHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUYzRS8zMzlFREU2ODEwRTQxMUYwQjc1QjgxNjZDNEY5QUUwMi9uT2tYM0RyZ3hi b3VkOHQzV2pyWm5HaGNRR3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqEszvhDuYhTokDLEL/finMXLs4YENNkT8dNXWJncIzDVBXX1Gg43ThlAoA6c OU4plgFpu0z+JO7f4pGhB0utCIGvlWxiI1awHuT+nL6exz/HDUIq8f7RHSPAPVEF 7of7BSjihhQW8BcHfa/OD86oBEUQvU5SaqFF32K7QooBQd9OUdybgg63b2mXa5j0 nam9nAVI5QLBw9VMnVLnUSPklpHMI7Pns277STAhuLNiCRfVqdRU8GKfbVW68cSQ 089opd+lHr4WssQJ15bOQ1Yg6zUgmx2zvFPQ5o5yrXWq6rtXYI4P2z42ZyAP7E+E xGtpgOuEI3dMPN6ItXIoY52CYA== -----END CERTIFICATE-----Generated at Wed May 13 15:46:19 2026 by rpki-client