$ rpki-client -vvf rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft File: NAcoRkbqh4WDwlsPqefW7aCRMpg.mft (raw, json) Hash identifier: vHFe0Si5+K5YP5U8Kc5N5RhUseEbXa703an9M2KD7bM= Subject key identifier: 45:04:C8:18:8A:59:9A:AC:E5:E7:52:59:1E:E4:90:E8:28:D1:85:83 Authority key identifier: 34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98 Certificate issuer: /CN=A919C318/serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298 Certificate serial: 09BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft Manifest number: 09B2 Signing time: Tue 12 May 2026 19:59:15 +0000 Manifest this update: Tue 12 May 2026 19:59:14 +0000 Manifest next update: Tue 19 May 2026 19:59:14 +0000 Files and hashes: 1: NAcoRkbqh4WDwlsPqefW7aCRMpg.crl (hash: wlef8cm3g5wW/rAkefhrpcxKYK4VU4lKHqn+rd9rxxU=) 2: 9AA539E6A82411EA996D5F41C4F9AE02.roa (hash: i1dwOevc3k9bwU5TzewRLrZW6NUS+x25YAF0oiOhGhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2490 (0x9ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C318, serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298 Validity Not Before: May 12 19:59:14 2026 GMT Not After : May 19 19:59:14 2026 GMT Subject: CN=6a038693-b538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:96:64:54:11:1b:46:f1:a2:49:e5:74:30:c3: 93:41:e2:ea:74:c1:14:54:a0:da:42:d3:61:0f:20: 03:71:4e:31:61:18:b5:00:ad:bc:a7:ba:b9:8b:b8: ab:09:ce:59:c8:24:0b:95:1d:f6:e6:d0:bd:ae:09: bb:6e:58:31:e8:06:fe:78:e9:b5:72:18:62:a0:c1: c8:21:b6:de:14:d5:b1:38:14:4b:b0:73:37:86:9b: d1:08:0a:6d:3c:46:09:35:09:f2:4e:2c:a7:bc:e4: d7:07:93:ad:7d:3d:7e:b8:78:ab:d1:fb:53:fd:9c: 73:bd:1c:3d:e1:9a:85:59:f4:cf:82:6c:51:19:3c: e1:f9:a8:a7:7d:13:3c:0e:34:7d:df:a4:4f:58:69: 6a:11:db:c4:95:f9:36:3a:47:ed:f6:1f:c1:52:a4: b4:28:98:ed:94:33:f3:b3:55:45:c0:e6:f4:25:5a: 23:51:34:0b:b6:3c:9f:31:56:2c:88:23:02:3d:dc: 72:55:c6:a6:90:83:bf:f2:e0:00:69:d8:eb:89:17: d2:49:77:da:2f:07:bc:ad:6e:d9:19:ad:e6:46:96: 43:8f:6c:b2:98:d9:e2:ca:81:08:e3:00:dc:30:cb: a2:18:4a:15:e5:08:04:db:3e:09:7f:08:45:57:ee: 00:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:04:C8:18:8A:59:9A:AC:E5:E7:52:59:1E:E4:90:E8:28:D1:85:83 X509v3 Authority Key Identifier: keyid:34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:25:41:4d:92:ea:f3:fd:4c:55:25:b3:bc:f3:6b:9a:8a:20: 2c:9c:32:97:32:34:02:48:e7:0c:a6:4b:5b:c5:9e:7d:03:d8: 46:c6:f7:9e:33:a6:9f:57:ba:16:03:32:34:13:0c:31:4c:3f: ac:80:c2:c5:e9:03:4c:79:a2:d9:b6:66:3e:95:52:a1:34:7d: 7d:3f:28:de:f5:bb:20:8c:81:60:9c:99:4b:65:21:48:92:30: d3:85:3b:ec:68:5f:93:f6:e2:7f:29:ff:13:58:d0:fb:80:d6: 30:57:12:fe:37:c7:b8:06:8e:35:0c:10:94:94:19:4c:16:09: ee:66:cb:d8:a9:7a:5a:38:6d:bc:2c:75:24:63:ad:76:77:96: a9:d3:77:45:67:1e:d7:26:0a:4c:a0:e6:78:05:9e:9d:65:27: 5c:52:a5:33:d9:c4:98:c1:ff:c9:a1:f0:ad:00:b6:4a:e5:cc: 8f:ad:cf:7c:e8:8e:92:44:1f:95:2e:04:1f:f4:af:9f:4a:d3: 43:96:54:98:26:98:82:cb:be:8d:0b:3e:ea:c4:74:7d:2c:a4: cc:7c:b1:95:91:ea:0c:a9:b9:0f:a0:59:16:78:a7:d7:d6:e1: c6:7d:05:bf:f3:29:13:e4:4b:01:3d:ac:89:fb:f3:3d:af:2e: c5:1a:0a:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzMTgxMTAvBgNVBAUTKDM0MDcyODQ2NDZFQTg3ODU4M0MyNUIwRkE5RTdENkVE QTA5MTMyOTgwHhcNMjYwNTEyMTk1OTE0WhcNMjYwNTE5MTk1OTE0WjAYMRYwFAYD VQQDEw02YTAzODY5My1iNTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15ZkVBEbRvGiSeV0MMOTQeLqdMEUVKDaQtNhDyADcU4xYRi1AK28p7q5i7ir Cc5ZyCQLlR325tC9rgm7blgx6Ab+eOm1chhioMHIIbbeFNWxOBRLsHM3hpvRCApt PEYJNQnyTiynvOTXB5OtfT1+uHir0ftT/ZxzvRw94ZqFWfTPgmxRGTzh+ainfRM8 DjR936RPWGlqEdvElfk2Okft9h/BUqS0KJjtlDPzs1VFwOb0JVojUTQLtjyfMVYs iCMCPdxyVcamkIO/8uAAadjriRfSSXfaLwe8rW7ZGa3mRpZDj2yymNniyoEI4wDc MMuiGEoV5QgE2z4JfwhFV+4A0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEUEyBiK WZqs5edSWR7kkOgo0YWDMB8GA1UdIwQYMBaAFDQHKEZG6oeFg8JbD6nn1u2gkTKY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzMxOC82NUI2NzFCNkE4 MjIxMUVBQUJBQTJGMTlDNEY5QUUwMi9OQWNvUmticWg0V0R3bHNQcWVmVzdhQ1JN cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BY29Sa2JxaDRXRHdsc1BxZWZXN2FDUk1wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzMxOC82NUI2NzFCNkE4MjIxMUVBQUJBQTJGMTlDNEY5QUUwMi9OQWNvUmticWg0 V0R3bHNQcWVmVzdhQ1JNcGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABiVBTZLq8/1MVSWzvPNrmoogLJwylzI0AkjnDKZLW8WefQPYRsb3njOmn1e6 FgMyNBMMMUw/rIDCxekDTHmi2bZmPpVSoTR9fT8o3vW7IIyBYJyZS2UhSJIw04U7 7Ghfk/bifyn/E1jQ+4DWMFcS/jfHuAaONQwQlJQZTBYJ7mbL2Kl6WjhtvCx1JGOt dneWqdN3RWce1yYKTKDmeAWenWUnXFKlM9nEmMH/yaHwrQC2SuXMj63PfOiOkkQf lS4EH/Svn0rTQ5ZUmCaYgsu+jQs+6sR0fSykzHyxlZHqDKm5D6BZFnin19bhxn0F v/MpE+RLAT2sifvzPa8uxRoKaw== -----END CERTIFICATE-----Generated at Wed May 13 04:28:58 2026 by rpki-client