$ rpki-client -vvf rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft File: NfWNhhxBvf6ka4xykLGqxnDnzBs.mft (raw, json) Hash identifier: B8WravzU1oFtx7syFMTftBaE+mE9QltXnGkpIpKpjlo= Subject key identifier: AB:10:23:31:72:D9:7E:61:18:84:00:A2:DC:51:42:BD:8D:5A:A5:2E Authority key identifier: 35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B Certificate issuer: /CN=A91B35BB/serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Certificate serial: 0BF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft Manifest number: 0BE0 Signing time: Tue 12 May 2026 18:56:40 +0000 Manifest this update: Tue 12 May 2026 18:56:39 +0000 Manifest next update: Tue 19 May 2026 18:56:39 +0000 Files and hashes: 1: NfWNhhxBvf6ka4xykLGqxnDnzBs.crl (hash: tW5/neTAHR8doAJBAap3wTNgauU+UH5OBj2sUbvpD7w=) 2: 8F9F2F823C0111EAB6CB9936C4F9AE02.roa (hash: zrbEpdPJC+D2d8+tTb0MQGcYEqeI6Y60eS+Lp/wlgrg=) 3: 902F47663C0111EAB6CB9936C4F9AE02.roa (hash: Gs/OJqCKd+Z2MrNkjskkMTrkotmVzq3GXlJl1vTfx3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3059 (0xbf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B35BB, serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Validity Not Before: May 12 18:56:39 2026 GMT Not After : May 19 18:56:39 2026 GMT Subject: CN=6a0377e8-e290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:11:15:a5:61:c5:11:9f:c4:6e:c0:f4:e8:6f: 54:b0:1e:93:e4:41:f5:e0:d6:5f:74:25:92:f8:9a: e5:cd:41:df:4b:be:25:54:b0:35:26:1a:57:b2:69: 51:49:05:c3:b1:38:7d:d7:9f:f0:a4:85:d6:87:f0: 44:cd:3a:2b:cc:3b:1d:f5:df:6d:1f:72:4d:c9:b4: b4:5f:9c:a3:38:e7:5b:47:b5:72:2c:b5:41:ab:e7: 9f:80:f5:c6:82:c7:db:ec:7d:9b:d1:fc:7f:d0:0a: 5b:8f:ea:db:af:55:59:bb:15:c6:e5:e3:4d:d5:1a: d6:4a:54:ff:2d:9d:41:84:99:71:a7:92:13:f4:b4: ac:82:31:2d:13:ba:8b:7d:46:a8:1c:30:e8:90:bb: a0:67:07:8a:03:0a:94:f3:7e:fa:21:b0:66:3b:3e: 7c:45:da:73:bc:b3:b9:b1:06:b9:48:27:8d:67:59: 7a:69:69:70:75:fa:0e:ae:9e:8b:c2:ea:f9:4f:f6: 8f:33:e8:73:b2:b2:0f:3f:ea:a4:66:54:fe:15:58: de:ca:c2:3c:f0:05:72:f8:6b:b8:67:ff:a6:22:07: ac:11:b9:02:3c:f9:55:07:55:43:bb:26:e2:12:8b: e0:05:81:f1:74:b0:90:3b:47:8f:4d:72:7a:97:4e: 3a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:10:23:31:72:D9:7E:61:18:84:00:A2:DC:51:42:BD:8D:5A:A5:2E X509v3 Authority Key Identifier: keyid:35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:56:0b:06:57:1d:91:a4:1a:2d:19:9c:52:32:7e:6a:8a:04: f3:c8:40:32:9f:f8:5a:38:d0:ee:c0:2e:76:40:3c:19:a1:fb: 9d:e4:62:ba:62:12:82:a2:69:57:24:36:b7:cb:46:20:cd:88: 1f:f6:f3:c8:e1:13:64:33:58:12:75:a2:e3:74:7b:71:af:6d: 70:24:8c:d5:00:39:97:67:1c:a7:f9:c6:49:be:20:a8:00:d0: 88:fd:c4:38:d2:67:bb:8a:c4:d2:bc:12:23:0d:bb:2c:ad:a9: 51:da:7c:0e:b9:ed:56:88:37:88:08:c4:da:4b:77:85:35:07: 77:a3:d9:ca:1f:a1:87:71:d1:c0:36:43:59:18:c7:22:2c:8c: c1:ce:4b:fc:e2:38:53:dc:ec:56:c3:b4:79:f0:82:05:9b:31: de:f1:2e:fb:c6:a8:ae:fc:94:b0:f2:61:a8:56:7e:50:60:a6: ba:31:47:f1:17:a1:b5:33:0e:6a:f3:8c:e9:03:17:b7:3e:46: 6e:99:6c:fb:5c:ea:dd:f8:4d:ed:64:5f:2a:5e:04:77:c3:6b: c1:6c:bb:20:84:5b:05:c1:36:e8:4e:1c:30:e2:26:fb:7f:4b: c3:4d:5b:88:ce:87:a0:99:78:66:5e:d4:e0:fc:c4:49:36:a5: 35:85:b3:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1QkIxMTAvBgNVBAUTKDM1RjU4RDg2MUM0MUJERkVBNDZCOEM3MjkwQjFBQUM2 NzBFN0NDMUIwHhcNMjYwNTEyMTg1NjM5WhcNMjYwNTE5MTg1NjM5WjAYMRYwFAYD VQQDEw02YTAzNzdlOC1lMjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxEVpWHFEZ/EbsD06G9UsB6T5EH14NZfdCWS+JrlzUHfS74lVLA1JhpXsmlR SQXDsTh915/wpIXWh/BEzTorzDsd9d9tH3JNybS0X5yjOOdbR7VyLLVBq+efgPXG gsfb7H2b0fx/0Apbj+rbr1VZuxXG5eNN1RrWSlT/LZ1BhJlxp5IT9LSsgjEtE7qL fUaoHDDokLugZweKAwqU8376IbBmOz58RdpzvLO5sQa5SCeNZ1l6aWlwdfoOrp6L wur5T/aPM+hzsrIPP+qkZlT+FVjeysI88AVy+Gu4Z/+mIgesEbkCPPlVB1VDuybi EovgBYHxdLCQO0ePTXJ6l046/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKsQIzFy 2X5hGIQAotxRQr2NWqUuMB8GA1UdIwQYMBaAFDX1jYYcQb3+pGuMcpCxqsZw58wb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzVCQi81Nzg5QjFBNDND MDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZmNmthNHh5a0xHcXhuRG56 QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mV05oaHhCdmY2a2E0eHlrTEdxeG5EbnpCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzVCQi81Nzg5QjFBNDNDMDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZm NmthNHh5a0xHcXhuRG56QnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAelYLBlcdkaQaLRmcUjJ+aooE88hAMp/4WjjQ7sAudkA8GaH7neRiumISgqJp VyQ2t8tGIM2IH/bzyOETZDNYEnWi43R7ca9tcCSM1QA5l2ccp/nGSb4gqADQiP3E ONJnu4rE0rwSIw27LK2pUdp8DrntVog3iAjE2kt3hTUHd6PZyh+hh3HRwDZDWRjH IiyMwc5L/OI4U9zsVsO0efCCBZsx3vEu+8aorvyUsPJhqFZ+UGCmujFH8RehtTMO avOM6QMXtz5Gbpls+1zq3fhN7WRfKl4Ed8NrwWy7IIRbBcE26E4cMOIm+39Lw01b iM6HoJl4Zl7U4PzESTalNYWzsg== -----END CERTIFICATE-----Generated at Wed May 13 16:24:22 2026 by rpki-client