$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft File: nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft (raw, json) Hash identifier: 4ftIvscsdGtfBap6+3msfmNE8YzzJU4bO97L0OHAajg= Subject key identifier: 42:3E:03:F8:18:E8:62:E3:40:6A:2D:3A:2D:C9:F6:B0:DB:17:66:B0 Authority key identifier: 9E:29:B0:F5:1B:BB:6D:60:33:C0:EF:00:62:3C:C4:BB:AC:EA:58:41 Certificate issuer: /CN=A9172CE3/serialNumber=9E29B0F51BBB6D6033C0EF00623CC4BBACEA5841 Certificate serial: 0534 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft Manifest number: 0534 Signing time: Tue 12 May 2026 23:35:51 +0000 Manifest this update: Tue 12 May 2026 23:35:50 +0000 Manifest next update: Tue 19 May 2026 23:35:50 +0000 Files and hashes: 1: nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl (hash: MxJyhr0nYCksizKi7Dvk2du3HmrGyDrs2/Tc3lS5cZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 23:35:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1332 (0x534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172CE3, serialNumber=9E29B0F51BBB6D6033C0EF00623CC4BBACEA5841 Validity Not Before: May 12 23:35:50 2026 GMT Not After : May 19 23:35:50 2026 GMT Subject: CN=6a03b957-8d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c9:f3:36:3b:43:34:4c:16:64:fb:02:73:c2: 97:18:ae:48:a5:d9:99:3b:e6:2e:ed:04:70:a8:f5: 5f:cf:c3:dc:31:6b:4b:eb:45:a4:f2:7a:fd:d0:6f: fa:f5:6d:9b:72:76:5e:d2:16:ec:63:be:fe:4f:fa: 2c:2f:03:8a:83:aa:65:f4:c0:ed:f9:75:48:16:e7: bd:47:da:6c:58:71:19:41:05:43:78:a1:86:d7:17: 6b:8b:58:2c:59:69:33:6e:fc:09:c8:db:c5:13:1b: 1b:65:fa:d4:e4:15:a3:c2:00:b8:76:ba:14:47:3e: 35:ca:b6:4c:f3:03:61:71:79:02:a2:5c:dc:f7:a5: 2f:c8:b3:be:e2:9b:03:6c:33:08:4d:30:b6:2f:44: 54:f5:4e:7e:ad:46:c9:16:f7:82:c6:e3:26:6d:dd: eb:3b:49:e9:e7:82:56:13:4f:77:ca:bc:12:df:a8: 66:9c:99:f0:56:34:61:6c:6d:f4:82:ba:21:64:05: 4b:2a:7b:cf:db:54:48:e1:02:43:fe:2a:da:d0:17: 54:48:66:65:34:39:8d:df:fc:4d:a8:87:6d:a8:70: 23:9e:d7:32:81:2b:b3:10:f7:eb:3d:4d:72:91:5e: aa:f1:de:37:2c:b9:ca:4a:9b:52:0f:ad:ce:3d:b0: b9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3E:03:F8:18:E8:62:E3:40:6A:2D:3A:2D:C9:F6:B0:DB:17:66:B0 X509v3 Authority Key Identifier: keyid:9E:29:B0:F5:1B:BB:6D:60:33:C0:EF:00:62:3C:C4:BB:AC:EA:58:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:83:c4:eb:41:cc:b2:2b:ae:e0:4d:f0:90:49:16:8c:67:f5: 7f:e2:44:7a:f2:c4:03:bc:30:b4:ee:15:9b:a3:ac:7f:57:b3: cd:18:ea:07:99:f3:61:9e:88:2d:ba:50:53:4c:9c:dc:a8:6f: fd:26:8e:cf:11:4f:68:02:86:5d:79:0d:88:87:37:a4:a1:01: 8c:78:cb:fc:d0:d4:ab:a6:a1:42:56:30:dd:e4:e9:24:74:e2: d1:1a:c1:09:ab:8c:52:a6:5e:85:b2:35:43:b3:72:90:84:21: 2c:c4:4a:76:9f:e9:67:ef:da:d9:00:fc:f8:2b:17:84:c6:c4: 9c:54:a5:1e:cc:46:91:04:b2:1e:2b:e0:f3:0c:2f:d9:a1:d6: ea:c3:6c:77:b6:15:0b:5c:07:05:a7:57:81:07:8e:44:7c:47: ac:06:ae:89:fe:b9:ba:2b:59:7f:d7:6d:31:67:10:97:6d:d9: 42:52:ae:7e:1d:3e:1a:1a:6d:e2:6b:24:1c:31:3a:7f:3a:43: 0a:4e:06:7a:78:54:11:38:1c:50:83:06:81:1e:4f:17:ab:85: e8:87:fc:54:77:26:18:22:5c:b4:67:f2:81:09:ee:18:be:04: 4a:f3:51:f4:3e:ab:60:0e:d6:63:36:7f:ca:f9:af:d0:0b:1b: 53:4d:c1:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDRTMxMTAvBgNVBAUTKDlFMjlCMEY1MUJCQjZENjAzM0MwRUYwMDYyM0NDNEJC QUNFQTU4NDEwHhcNMjYwNTEyMjMzNTUwWhcNMjYwNTE5MjMzNTUwWjAYMRYwFAYD VQQDEw02YTAzYjk1Ny04ZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMnzNjtDNEwWZPsCc8KXGK5IpdmZO+Yu7QRwqPVfz8PcMWtL60Wk8nr90G/6 9W2bcnZe0hbsY77+T/osLwOKg6pl9MDt+XVIFue9R9psWHEZQQVDeKGG1xdri1gs WWkzbvwJyNvFExsbZfrU5BWjwgC4droURz41yrZM8wNhcXkColzc96UvyLO+4psD bDMITTC2L0RU9U5+rUbJFveCxuMmbd3rO0np54JWE093yrwS36hmnJnwVjRhbG30 grohZAVLKnvP21RI4QJD/ira0BdUSGZlNDmN3/xNqIdtqHAjntcygSuzEPfrPU1y kV6q8d43LLnKSptSD63OPbC5+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEI+A/gY 6GLjQGotOi3J9rDbF2awMB8GA1UdIwQYMBaAFJ4psPUbu21gM8DvAGI8xLus6lhB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkNFMy82NzI4QzRDNDQw NTkxMUVDQTBBRkFBNERDNEY5QUUwMi9uaW13OVJ1N2JXQXp3TzhBWWp6RXU2enFX RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25pbXc5UnU3YldBendPOEFZanpFdTZ6cVdFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkNFMy82NzI4QzRDNDQwNTkxMUVDQTBBRkFBNERDNEY5QUUwMi9uaW13OVJ1N2JX QXp3TzhBWWp6RXU2enFXRUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyoPE60HMsiuu4E3wkEkWjGf1f+JEevLEA7wwtO4Vm6Osf1ezzRjqB5nzYZ6I LbpQU0yc3Khv/SaOzxFPaAKGXXkNiIc3pKEBjHjL/NDUq6ahQlYw3eTpJHTi0RrB CauMUqZehbI1Q7NykIQhLMRKdp/pZ+/a2QD8+CsXhMbEnFSlHsxGkQSyHivg8wwv 2aHW6sNsd7YVC1wHBadXgQeORHxHrAauif65uitZf9dtMWcQl23ZQlKufh0+Ghpt 4mskHDE6fzpDCk4GenhUETgcUIMGgR5PF6uF6If8VHcmGCJctGfygQnuGL4ESvNR 9D6rYA7WYzZ/yvmv0AsbU03BuA== -----END CERTIFICATE-----Generated at Wed May 13 10:38:13 2026 by rpki-client