$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft File: NFMkWvnnaQX2mpDxzs2F6og_6hY.mft (raw, json) Hash identifier: yZF/DNQmKEN+didOe3/A7NjD6D5UMxLZJG4PXLZYzW0= Subject key identifier: 39:CC:C2:4D:CC:D8:2C:94:3F:A0:91:FE:E7:B1:A2:08:B3:6E:56:2E Authority key identifier: 34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 Certificate issuer: /CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Certificate serial: 0806 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft Manifest number: 07F9 Signing time: Tue 12 May 2026 21:18:02 +0000 Manifest this update: Tue 12 May 2026 21:18:01 +0000 Manifest next update: Tue 19 May 2026 21:18:01 +0000 Files and hashes: 1: NFMkWvnnaQX2mpDxzs2F6og_6hY.crl (hash: gyrP0ZkeMjaYVz6h83AF9+euzF8x1QZnieNrJNGESOc=) 2: E9D321CEF2F611EE95E10935C4F9AE02.roa (hash: uGgUAHKjFCdKGRYwfRLplSrRPtlghY9PMVrAiNXtlcY=) 3: 0BAA4608297211EB99ECF956C4F9AE02.roa (hash: wKAEYn7N0s61lmDabEnuaSxEMJJCyF8MvcXmo7hrc/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 21:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2054 (0x806) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6064, serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Validity Not Before: May 12 21:18:01 2026 GMT Not After : May 19 21:18:01 2026 GMT Subject: CN=6a039909-97ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ea:bc:b2:a2:89:72:70:ee:c4:e9:a2:a2:45: de:c6:90:d0:7b:53:b2:4d:53:47:8a:2e:58:5f:a2: c0:73:82:49:9d:89:c8:7c:64:01:ab:a4:85:91:3a: f4:d8:b4:d7:da:af:32:1c:e4:8b:c2:c0:25:d4:49: f5:98:50:4a:de:2f:d9:d9:64:df:db:0d:35:fd:5d: 21:3a:b1:55:3b:53:84:c3:2d:bc:89:f2:29:01:28: b8:38:5b:68:1b:a4:fe:90:6b:07:f0:42:8f:80:bb: d4:c9:a9:3e:de:56:ab:73:11:47:78:35:c0:6f:2b: 02:7c:32:de:73:01:51:29:ff:f8:a4:4f:22:a7:a8: db:2a:d5:36:6e:64:a5:2c:bd:5d:d8:6a:c6:5b:b3: 7d:27:02:51:eb:4e:02:eb:d9:65:d1:c9:2f:ba:4b: 33:a0:7e:3e:7c:f3:44:54:40:db:7e:46:53:55:6c: d7:85:03:1e:99:c5:9d:00:eb:07:ca:cd:7b:bf:f3: 1b:41:b7:60:74:b0:a5:c5:5d:62:1a:c5:71:5e:26: f0:95:92:86:29:4d:c6:d2:27:f8:0c:69:ef:c7:21: 09:88:96:d5:49:dd:4f:d4:bd:82:36:a2:0b:25:3f: 20:34:91:89:72:ae:ae:5d:c9:6d:5b:4e:f5:3a:72: 95:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CC:C2:4D:CC:D8:2C:94:3F:A0:91:FE:E7:B1:A2:08:B3:6E:56:2E X509v3 Authority Key Identifier: keyid:34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ac:cc:fa:3c:7a:c5:9d:6a:8e:6f:f4:01:4f:d6:f2:32:68: 27:b2:1d:a1:bd:cd:07:9d:be:96:43:69:b5:b2:33:9b:1c:94: cd:2f:10:c0:cd:e6:e4:d8:50:c4:93:96:5e:6f:df:22:7a:8e: 7c:1e:5a:02:46:b0:20:dd:bf:0c:fd:d8:ce:88:f8:62:8f:6e: 2d:7f:2a:3e:6c:e6:48:5f:3e:d2:86:60:c6:09:df:4f:40:cd: de:55:8d:16:85:0e:2b:fa:b4:3a:aa:1b:ab:97:17:4d:c0:b1: 0a:fb:9e:ba:02:d4:5c:76:5a:e0:88:1d:03:27:33:39:e1:af: 08:f6:8c:7d:7e:71:96:bf:33:41:70:42:75:64:f1:8a:16:ae: b2:d0:86:a7:4c:e7:a3:cf:73:12:c6:9f:b2:48:53:ec:35:3b: 2e:2e:0b:94:00:89:29:4d:5b:8a:7d:82:51:01:7e:7f:b4:d7: 64:85:8c:f2:15:56:c4:eb:8c:a4:e3:e6:d0:e0:37:a3:89:d7: c8:f0:12:b5:c2:f0:bf:40:d8:2a:f1:71:8c:9b:04:04:be:3f: 1a:83:a9:05:fc:bd:20:c1:b2:1d:17:98:db:81:35:50:01:73: 6f:67:3d:2f:76:91:ad:4c:70:ca:75:7d:75:1b:ed:7c:1c:80: 91:81:48:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwNjQxMTAvBgNVBAUTKDM0NTMyNDVBRjlFNzY5MDVGNjlBOTBGMUNFQ0Q4NUVB ODgzRkVBMTYwHhcNMjYwNTEyMjExODAxWhcNMjYwNTE5MjExODAxWjAYMRYwFAYD VQQDEw02YTAzOTkwOS05N2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+q8sqKJcnDuxOmiokXexpDQe1OyTVNHii5YX6LAc4JJnYnIfGQBq6SFkTr0 2LTX2q8yHOSLwsAl1En1mFBK3i/Z2WTf2w01/V0hOrFVO1OEwy28ifIpASi4OFto G6T+kGsH8EKPgLvUyak+3larcxFHeDXAbysCfDLecwFRKf/4pE8ip6jbKtU2bmSl LL1d2GrGW7N9JwJR604C69ll0ckvukszoH4+fPNEVEDbfkZTVWzXhQMemcWdAOsH ys17v/MbQbdgdLClxV1iGsVxXibwlZKGKU3G0if4DGnvxyEJiJbVSd1P1L2CNqIL JT8gNJGJcq6uXcltW071OnKVuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDnMwk3M 2CyUP6CR/uexogizblYuMB8GA1UdIwQYMBaAFDRTJFr552kF9pqQ8c7NheqIP+oW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA2NC81MkZFRjczQTI5 NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFRWDJtcER4enMyRjZvZ182 aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GTWtXdm5uYVFYMm1wRHh6czJGNm9nXzZoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA2NC81MkZFRjczQTI5NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFR WDJtcER4enMyRjZvZ182aFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASqzM+jx6xZ1qjm/0AU/W8jJoJ7Idob3NB52+lkNptbIzmxyUzS8QwM3m5NhQ xJOWXm/fInqOfB5aAkawIN2/DP3Yzoj4Yo9uLX8qPmzmSF8+0oZgxgnfT0DN3lWN FoUOK/q0Oqobq5cXTcCxCvueugLUXHZa4IgdAyczOeGvCPaMfX5xlr8zQXBCdWTx ihaustCGp0zno89zEsafskhT7DU7Li4LlACJKU1bin2CUQF+f7TXZIWM8hVWxOuM pOPm0OA3o4nXyPAStcLwv0DYKvFxjJsEBL4/GoOpBfy9IMGyHReY24E1UAFzb2c9 L3aRrUxwynV9dRvtfByAkYFIeQ== -----END CERTIFICATE-----Generated at Wed May 13 08:49:55 2026 by rpki-client