$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft File: NSX5xUTpmw5jRgCZyS39lNSb9so.mft (raw, json) Hash identifier: TR4fB4n8uKkMw+1a/skuIUCNoL8hzu+rFFPwrhtd3/w= Subject key identifier: E3:31:6A:47:BE:33:05:65:91:96:C2:D3:15:7A:F6:66:99:6F:6B:0E Authority key identifier: 35:25:F9:C5:44:E9:9B:0E:63:46:00:99:C9:2D:FD:94:D4:9B:F6:CA Certificate issuer: /CN=A91D9D7A/serialNumber=3525F9C544E99B0E63460099C92DFD94D49BF6CA Certificate serial: 02EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft Manifest number: 02E8 Signing time: Wed 13 May 2026 01:25:51 +0000 Manifest this update: Wed 13 May 2026 01:25:50 +0000 Manifest next update: Wed 20 May 2026 01:25:50 +0000 Files and hashes: 1: NSX5xUTpmw5jRgCZyS39lNSb9so.crl (hash: CB3CENwE1DW8oTBgQVDlYp43t7sr+XwJVyAr70VXWYY=) 2: 81B7763C280211ED93948C10C4F9AE02.roa (hash: cFYWu32x1i7BJE6ej7tEMyDU8GB+7ACwMuOY9C/hNmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.crl rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 750 (0x2ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9D7A, serialNumber=3525F9C544E99B0E63460099C92DFD94D49BF6CA Validity Not Before: May 13 01:25:50 2026 GMT Not After : May 20 01:25:50 2026 GMT Subject: CN=6a03d31e-d953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:63:4c:76:2d:a7:88:21:b4:d0:5a:a5:40:67: f5:3b:36:ae:1b:0a:8b:b1:32:07:dc:fa:a8:3e:d4: b0:38:93:fe:c8:a7:37:1a:ea:87:77:af:c3:f1:61: ff:26:90:cb:3f:66:13:c7:3d:09:5d:ed:bf:3e:20: a2:e7:bc:21:7d:6b:f3:ed:6f:c5:95:47:f3:76:12: 5f:61:71:71:e0:2c:62:a9:26:e8:96:90:e4:3d:58: 18:42:4b:2c:ea:5c:01:19:af:b9:2f:5f:19:15:9c: 89:c5:1c:d2:63:06:7e:04:9e:a1:ea:11:ae:13:33: e6:3e:5d:00:1d:42:fc:30:04:a1:24:c0:fd:a7:3a: 7b:79:a8:0f:08:36:0d:fc:bc:8c:74:64:37:68:0f: ba:95:c4:10:41:ab:40:a1:00:e4:74:16:11:6c:22: 92:10:0f:93:a6:26:0e:2d:ff:b5:f3:52:78:3c:69: 6c:d8:1a:6a:8e:f1:3b:e2:f9:fd:85:73:cc:4c:93: c5:a0:b8:0a:b9:ce:9c:eb:09:6d:7a:73:d7:82:40: c3:d9:b6:d7:ae:3b:8d:6f:fc:f0:31:78:f7:87:63: 6d:41:76:c4:a3:6a:b8:08:4a:11:fa:55:55:2f:0c: dd:9f:82:28:4a:d2:bd:59:09:4b:ca:a5:25:9d:14: 8f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:31:6A:47:BE:33:05:65:91:96:C2:D3:15:7A:F6:66:99:6F:6B:0E X509v3 Authority Key Identifier: keyid:35:25:F9:C5:44:E9:9B:0E:63:46:00:99:C9:2D:FD:94:D4:9B:F6:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:f8:b4:9b:90:24:e8:65:fc:2e:6a:99:24:84:60:ed:03:95: 7a:a7:77:50:11:cf:6d:bc:ca:97:91:ef:bc:98:25:5b:78:84: 9d:f0:a8:6e:d1:5b:58:d3:77:30:83:e7:a5:e1:be:86:06:ba: 9b:1a:81:e3:90:73:e1:90:1e:db:76:df:a1:21:a7:f6:dc:73: 07:2b:13:20:f5:c1:f2:fb:a2:c1:51:76:81:9a:65:49:77:22: 21:9d:55:b4:46:25:ad:d9:94:53:79:27:da:4e:de:0a:06:44: 6b:e2:4c:cb:f2:88:f5:7d:1a:9c:6f:8c:3a:06:2f:bd:d6:89: 6a:33:81:45:b2:78:c2:58:ca:ef:75:e6:71:b4:9e:43:fa:22: 12:e3:05:42:51:78:3c:fa:b8:c3:13:8c:98:c4:98:b3:af:d0: 2a:0b:85:82:b1:32:b0:a5:4c:c7:2f:fc:09:55:49:f5:6d:a2: 9d:eb:7c:fe:a3:9c:12:0d:bc:17:28:f7:88:98:6f:64:ad:ae: d0:ef:ec:ea:18:14:8f:0d:1d:d1:cd:15:71:1a:8d:0b:80:60: e7:f1:84:f6:0e:df:f4:6d:18:8d:6e:9e:92:34:bf:7d:d7:1d: fa:90:ca:25:d1:d6:99:0d:37:d4:2d:06:07:44:1e:9d:ec:bd: a5:35:31:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlEN0ExMTAvBgNVBAUTKDM1MjVGOUM1NDRFOTlCMEU2MzQ2MDA5OUM5MkRGRDk0 RDQ5QkY2Q0EwHhcNMjYwNTEzMDEyNTUwWhcNMjYwNTIwMDEyNTUwWjAYMRYwFAYD VQQDEw02YTAzZDMxZS1kOTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGNMdi2niCG00FqlQGf1OzauGwqLsTIH3PqoPtSwOJP+yKc3GuqHd6/D8WH/ JpDLP2YTxz0JXe2/PiCi57whfWvz7W/FlUfzdhJfYXFx4CxiqSbolpDkPVgYQkss 6lwBGa+5L18ZFZyJxRzSYwZ+BJ6h6hGuEzPmPl0AHUL8MAShJMD9pzp7eagPCDYN /LyMdGQ3aA+6lcQQQatAoQDkdBYRbCKSEA+TpiYOLf+181J4PGls2BpqjvE74vn9 hXPMTJPFoLgKuc6c6wltenPXgkDD2bbXrjuNb/zwMXj3h2NtQXbEo2q4CEoR+lVV Lwzdn4IoStK9WQlLyqUlnRSPjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOMxake+ MwVlkZbC0xV69maZb2sOMB8GA1UdIwQYMBaAFDUl+cVE6ZsOY0YAmckt/ZTUm/bK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUQ3QS84OUE5QUEyNDI3 ODMxMUVEOUJBMDI0NTBDNEY5QUUwMi9OU1g1eFVUcG13NWpSZ0NaeVMzOWxOU2I5 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05TWDV4VVRwbXc1alJnQ1p5UzM5bE5TYjlzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUQ3QS84OUE5QUEyNDI3ODMxMUVEOUJBMDI0NTBDNEY5QUUwMi9OU1g1eFVUcG13 NWpSZ0NaeVMzOWxOU2I5c28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR/i0m5Ak6GX8LmqZJIRg7QOVeqd3UBHPbbzKl5HvvJglW3iEnfCobtFbWNN3 MIPnpeG+hga6mxqB45Bz4ZAe23bfoSGn9txzBysTIPXB8vuiwVF2gZplSXciIZ1V tEYlrdmUU3kn2k7eCgZEa+JMy/KI9X0anG+MOgYvvdaJajOBRbJ4wljK73XmcbSe Q/oiEuMFQlF4PPq4wxOMmMSYs6/QKguFgrEysKVMxy/8CVVJ9W2inet8/qOcEg28 Fyj3iJhvZK2u0O/s6hgUjw0d0c0VcRqNC4Bg5/GE9g7f9G0YjW6ekjS/fdcd+pDK JdHWmQ031C0GB0Qeney9pTUxEQ== -----END CERTIFICATE-----Generated at Wed May 13 08:12:15 2026 by rpki-client