$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json) Hash identifier: ImOpsf2wlv9KK1MKijZwa8PuCzuFWW2jeQhsEnnTOfY= Subject key identifier: 15:F9:DD:A8:E5:29:FF:F8:F7:17:33:24:B4:BE:69:3C:87:F4:8A:6D Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft Manifest number: 01F2 Signing time: Wed 13 May 2026 03:25:21 +0000 Manifest this update: Wed 13 May 2026 03:25:21 +0000 Manifest next update: Wed 20 May 2026 03:25:21 +0000 Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: 6zaw7db+hfIvXf+05dg/b2UeWQzfwgw+qAZFkzLquMc=) 2: 36020660DD2411EF9F4FB925C4F9AE02.roa (hash: i1Pu+9UVIaU6wY+KGS3N0zfxP0rOfpHG8M6EeBicwr4=) 3: 0B421064DD2411EFA5DECA6CC4F9AE02.roa (hash: +S1F0zYbzMvWkIw6OtTYzr4kRvSGMZIIi7dYMQVKPYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD, serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: May 13 03:25:21 2026 GMT Not After : May 20 03:25:21 2026 GMT Subject: CN=6a03ef21-8287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:98:25:db:0b:62:40:7c:86:51:a5:e8:4d:48: 95:16:db:ec:bf:d5:3a:03:6b:f9:34:29:1c:cd:22: f4:1b:78:82:32:3e:fa:e9:cd:ea:4b:17:96:88:cb: 68:37:68:72:c9:68:0a:d7:f1:c9:3e:91:fa:2b:25: 45:7a:4b:ea:25:6c:41:95:fc:e7:49:ee:a0:f2:18: c4:7c:3f:bc:22:4b:17:d8:46:ef:5e:83:36:d6:61: 71:90:c0:83:ed:62:65:15:59:72:37:54:46:3f:d3: d2:4e:ff:8d:9b:4d:2b:90:5e:ea:2f:b0:1d:16:c9: 8f:df:65:9e:fc:f7:0d:b7:6c:d9:18:4d:87:ba:93: 4d:a2:64:77:9d:fe:8c:5f:13:0f:5b:d5:52:5b:a6: ce:e6:35:af:c2:60:45:c1:03:c2:5d:6d:b4:d8:e1: 89:8d:ae:a2:38:b4:aa:46:da:99:a5:b2:79:46:24: 83:e0:8b:a7:7b:cd:ca:9f:7d:55:17:aa:c9:e7:49: 76:fc:90:6b:06:ad:d2:ec:45:54:2e:ef:5d:c0:a9: 3d:f7:85:4b:de:c5:a2:ff:76:da:b8:e3:74:8f:7e: 4b:bf:95:09:95:ba:b3:2e:47:97:86:74:bc:65:40: 04:54:6f:93:74:45:42:ea:5f:9a:30:ab:f4:9e:30: a4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F9:DD:A8:E5:29:FF:F8:F7:17:33:24:B4:BE:69:3C:87:F4:8A:6D X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:dd:2a:2a:6d:9d:4c:4e:4a:a3:1f:32:d3:c6:03:93:1a:fb: 80:fd:29:56:2c:a6:08:40:55:37:31:3e:01:d4:02:9a:51:4f: bb:31:aa:6d:b1:e7:01:fc:43:07:07:f8:d9:04:79:86:d8:7c: 25:0b:78:52:d8:d0:71:24:80:22:06:2a:ad:d3:76:31:43:e9: 28:c0:9f:b8:6d:83:87:ec:8b:8a:db:3e:d3:14:95:4e:fa:5f: 95:6a:53:3d:e8:1e:03:a0:fb:67:88:3d:1c:fd:aa:7b:09:0b: 71:4b:60:3c:5c:1c:e3:22:3e:24:cf:cb:84:6f:cc:2d:42:fa: d9:01:70:ab:12:e7:ef:a7:3f:2e:dd:3b:d5:7c:4c:85:62:c0: 69:c0:95:fc:5d:9f:44:da:14:2a:b3:54:d2:9b:49:0a:c8:20: 75:bf:24:1f:7e:96:45:57:ae:a0:75:51:27:9d:c6:ab:34:33: 81:9b:be:dc:62:8c:69:27:93:80:99:98:3a:f6:32:b6:16:30: c2:f4:61:f1:a9:c2:86:e5:2b:21:60:59:71:38:b7:0d:7b:7b: 16:6f:09:d2:00:13:87:95:f9:11:43:40:92:4c:b9:fd:3e:43: b1:2d:70:59:ec:0a:07:e2:ad:1e:66:00:67:8e:8a:e8:2c:9f: 5c:09:5b:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjYwNTEzMDMyNTIxWhcNMjYwNTIwMDMyNTIxWjAYMRYwFAYD VQQDEw02YTAzZWYyMS04Mjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJgl2wtiQHyGUaXoTUiVFtvsv9U6A2v5NCkczSL0G3iCMj766c3qSxeWiMto N2hyyWgK1/HJPpH6KyVFekvqJWxBlfznSe6g8hjEfD+8IksX2EbvXoM21mFxkMCD 7WJlFVlyN1RGP9PSTv+Nm00rkF7qL7AdFsmP32We/PcNt2zZGE2HupNNomR3nf6M XxMPW9VSW6bO5jWvwmBFwQPCXW202OGJja6iOLSqRtqZpbJ5RiSD4Iune83Kn31V F6rJ50l2/JBrBq3S7EVULu9dwKk994VL3sWi/3bauON0j35Lv5UJlbqzLkeXhnS8 ZUAEVG+TdEVC6l+aMKv0njCkgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBX53ajl Kf/49xczJLS+aTyH9IptMB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzhGRC9BNUE2RjM3QTYxRjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFj NEZWYVlBc2hlU0RybmhyRTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm90qKm2dTE5Kox8y08YDkxr7gP0pViymCEBVNzE+AdQCmlFPuzGqbbHnAfxD Bwf42QR5hth8JQt4UtjQcSSAIgYqrdN2MUPpKMCfuG2Dh+yLits+0xSVTvpflWpT PegeA6D7Z4g9HP2qewkLcUtgPFwc4yI+JM/LhG/MLUL62QFwqxLn76c/Lt071XxM hWLAacCV/F2fRNoUKrNU0ptJCsggdb8kH36WRVeuoHVRJ53GqzQzgZu+3GKMaSeT gJmYOvYythYwwvRh8anChuUrIWBZcTi3DXt7Fm8J0gATh5X5EUNAkky5/T5DsS1w WewKB+KtHmYAZ46K6CyfXAlb2g== -----END CERTIFICATE-----Generated at Wed May 13 06:53:36 2026 by rpki-client