$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: eqW3t0Lt15kAVwDiEiTYXz6PRIGAAIdJrCqCLlkoYHY= Subject key identifier: 96:D3:91:B3:AC:32:14:92:D2:3A:F4:0B:D7:0E:CF:E3:30:A5:38:E1 Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 01FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 01F2 Signing time: Wed 13 May 2026 03:21:24 +0000 Manifest this update: Wed 13 May 2026 03:21:24 +0000 Manifest next update: Wed 20 May 2026 03:21:24 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: L+4F48xuJNJEqzIvm/4/hrnPAaq06MpeHZP+IVoto6g=) 2: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: zqESw+IWbG5U3Oh2cbA+9ioqV8DZZkTNSVndFvkCcIc=) 3: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: 2Pvyl2Pg+rvxhHMBAknVnfhicVn7ercKKujcqDRSopc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 03:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: May 13 03:21:24 2026 GMT Not After : May 20 03:21:24 2026 GMT Subject: CN=6a03ee34-7470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1e:ff:13:99:6d:8a:e9:73:07:89:56:59:e3: 8a:b4:09:98:68:61:f7:06:e5:f6:74:ee:80:d4:53: 76:4e:02:2e:26:fd:4f:f2:36:f2:db:d2:dd:27:21: 41:ed:6c:df:b4:43:22:7e:9c:76:a6:ec:2b:53:b5: 6b:2a:a3:69:f7:a7:20:e3:56:93:70:4c:96:bb:4e: 33:bc:63:7b:af:9e:fa:89:e5:b4:ea:49:1b:c3:9a: af:65:3f:11:53:15:35:e8:ef:7b:a3:13:de:2e:1b: 8a:80:1c:c2:4e:34:05:5a:f5:61:18:39:5c:b1:c1: ad:ca:dc:a0:92:6d:ef:28:d5:bb:d1:4e:83:ee:ca: 3f:ea:1f:38:bc:34:6e:ac:cf:86:6d:fa:a5:3e:bf: 46:e0:88:4a:4b:e9:92:c3:99:ef:5f:bf:2e:d8:bf: f5:42:80:6b:b6:89:4a:2d:3a:ce:bb:68:cc:cf:c0: 6d:ce:dc:58:36:bf:97:b3:f8:9d:86:18:13:3d:52: b3:0f:2c:99:5c:fe:7a:b4:37:b3:f2:81:6e:18:eb: 19:14:ee:f1:39:a1:0d:24:ee:d7:85:fb:10:e4:86: cc:92:05:d5:2b:72:26:ca:b5:0a:e9:1b:85:27:9d: 40:76:0e:3c:82:bf:c8:ae:46:60:64:9b:68:3d:67: 9c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D3:91:B3:AC:32:14:92:D2:3A:F4:0B:D7:0E:CF:E3:30:A5:38:E1 X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:27:e3:3d:aa:11:3c:fb:cf:50:88:33:51:0c:de:e0:db:75: 95:38:19:c9:8f:35:32:60:60:b4:45:d5:84:86:95:a9:55:17: 8f:26:0b:2c:47:bd:14:7f:9a:9d:a7:98:67:b3:7c:91:28:e8: d5:fd:12:33:90:45:40:f4:c0:2e:66:2e:00:46:47:80:91:30: 0f:de:b4:52:a5:5e:fd:c6:22:a8:61:28:cb:b6:b1:13:b6:30: 4f:fc:c9:d1:0f:f8:75:cb:9f:ba:f0:7b:32:c3:93:e3:33:6e: 05:16:d6:f7:7b:30:9f:f4:91:f2:e1:13:4f:e4:b9:29:b5:ee: 33:05:27:5f:5a:39:fa:76:a1:81:f6:ad:50:01:b3:7b:ec:51: 7e:92:c1:0a:8f:bd:05:76:ee:14:ce:85:83:8e:1f:76:7a:84: 2f:cd:39:ee:7e:d7:fb:07:13:bd:29:ed:ab:27:f0:3e:40:bd: 95:6d:b9:7c:5c:fe:63:2c:ea:57:4f:7e:85:1f:15:80:b1:26: 1c:ca:9b:52:3e:42:a9:d8:f7:15:3a:b3:73:ba:05:9a:0d:a7: 0a:1e:b4:3f:29:69:ac:40:6f:f5:26:80:71:e9:9c:6c:97:a0: 12:ca:3b:a5:2a:eb:26:3d:8a:99:3a:c0:40:00:de:9b:ab:b1: 5c:4a:5d:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjYwNTEzMDMyMTI0WhcNMjYwNTIwMDMyMTI0WjAYMRYwFAYD VQQDEw02YTAzZWUzNC03NDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8h7/E5ltiulzB4lWWeOKtAmYaGH3BuX2dO6A1FN2TgIuJv1P8jby29LdJyFB 7WzftEMifpx2puwrU7VrKqNp96cg41aTcEyWu04zvGN7r576ieW06kkbw5qvZT8R UxU16O97oxPeLhuKgBzCTjQFWvVhGDlcscGtytygkm3vKNW70U6D7so/6h84vDRu rM+GbfqlPr9G4IhKS+mSw5nvX78u2L/1QoBrtolKLTrOu2jMz8BtztxYNr+Xs/id hhgTPVKzDyyZXP56tDez8oFuGOsZFO7xOaENJO7XhfsQ5IbMkgXVK3ImyrUK6RuF J51Adg48gr/IrkZgZJtoPWec/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJbTkbOs MhSS0jr0C9cOz+MwpTjhMB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAyfjPaoRPPvPUIgzUQze4Nt1lTgZyY81MmBgtEXVhIaVqVUXjyYLLEe9FH+a naeYZ7N8kSjo1f0SM5BFQPTALmYuAEZHgJEwD960UqVe/cYiqGEoy7axE7YwT/zJ 0Q/4dcufuvB7MsOT4zNuBRbW93swn/SR8uETT+S5KbXuMwUnX1o5+nahgfatUAGz e+xRfpLBCo+9BXbuFM6Fg44fdnqEL8057n7X+wcTvSntqyfwPkC9lW25fFz+Yyzq V09+hR8VgLEmHMqbUj5Cqdj3FTqzc7oFmg2nCh60PylprEBv9SaAcemcbJegEso7 pSrrJj2KmTrAQADem6uxXEpdeQ== -----END CERTIFICATE-----Generated at Wed May 13 07:48:33 2026 by rpki-client