$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft File: NQcxtmBE00o9LadYm9gzHRRf5Jg.mft (raw, json) Hash identifier: 8pxSO0aIOHbzt1uhYQEIxpmebURfOLbP9woD8Cp+0q4= Subject key identifier: 7C:68:E0:4B:CD:CB:6D:13:DE:BC:D3:C4:E3:E4:9A:E5:9E:76:43:5E Authority key identifier: 35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98 Certificate issuer: /CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498 Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft Manifest number: 0169 Signing time: Tue 07 Apr 2026 04:17:28 +0000 Manifest this update: Tue 07 Apr 2026 04:17:27 +0000 Manifest next update: Tue 14 Apr 2026 04:17:27 +0000 Files and hashes: 1: NQcxtmBE00o9LadYm9gzHRRf5Jg.crl (hash: xmgoVh2KyMYSABYejil3dRU+kDKmes3cTP2aQCGylSU=) 2: 7036FFF00E9611EF8B4CB827C4F9AE02.roa (hash: UjpEnJbWEEameT5NyA6GTtZ6l6bxgo6wSQmSr5ohGUM=) 3: BB90D9FECF4B11F08EB76486C4F9AE02.roa (hash: rXEcC70BHU9BGaTrOUEVMio2SeHlBdWNjj8ucac2NAM=) 4: 6FC4A52C0E9611EF8B4CB827C4F9AE02.roa (hash: wmNPnDvvzaXNcEvPjVuLtrgnnHPLzw2rLFktnj5ROwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118A69, serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498 Validity Not Before: Apr 7 04:17:27 2026 GMT Not After : Apr 14 04:17:27 2026 GMT Subject: CN=69d48558-2f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:79:92:a8:e9:6b:d7:95:1f:8f:4d:a2:43:35: 51:2d:58:6c:32:83:a1:bd:d4:d1:84:77:0a:69:91: bc:70:bb:e8:8d:ec:bd:f9:7e:f1:34:3b:7b:7c:53: 9f:58:e3:9c:ec:f2:e2:29:c4:dd:38:48:3e:95:dd: 0d:be:c6:71:bf:ac:13:5b:3c:94:aa:ff:82:25:8a: bd:53:ef:72:c5:c6:1f:95:71:02:aa:d3:a9:a5:f9: 5e:03:10:aa:78:3f:30:c6:40:e9:66:3d:5d:ec:81: a6:d0:7f:e8:c2:cb:f5:11:78:f2:b9:3c:56:04:58: a3:57:c2:4d:85:42:e4:28:9b:fe:a5:eb:e8:fe:a2: e6:47:2b:80:2b:03:4e:6e:e3:de:9e:09:bd:f9:c4: 9e:d9:f3:ff:b1:15:16:bc:cd:de:81:d0:61:67:25: 90:cb:ff:eb:9c:c0:74:42:d3:4c:84:e5:3c:bc:a7: 95:82:51:bf:30:f9:15:21:43:40:44:56:77:b4:5e: 4f:17:0b:44:8c:d9:36:f6:0e:4f:6e:df:95:a7:25: 62:51:67:9b:7d:a9:9b:65:76:cb:c7:d1:2a:3a:c6: 15:6d:cb:54:a8:f5:3b:45:70:5d:cc:0c:7f:8c:ab: 0f:52:1a:72:52:aa:2b:da:41:a6:4c:da:8f:70:57: f4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:68:E0:4B:CD:CB:6D:13:DE:BC:D3:C4:E3:E4:9A:E5:9E:76:43:5E X509v3 Authority Key Identifier: keyid:35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:3f:a5:ae:40:f5:07:44:4f:ab:62:0f:e6:db:bf:f0:3c:7f: a4:71:fd:d6:27:24:e1:1f:de:f2:68:08:03:69:0d:7c:42:5c: 3a:ec:32:96:f1:13:d9:67:bd:f3:db:56:35:dd:f5:0d:e0:f0: f4:2d:db:e7:af:3a:cd:0b:b8:05:bc:68:52:dd:d7:85:03:ec: 84:da:76:6c:91:05:d8:cc:51:2c:e8:0c:de:c3:d1:02:e4:b1: 14:02:09:20:14:17:f2:33:ff:11:7b:52:ef:60:98:c3:db:c7: a7:71:df:6c:14:37:56:fa:5a:c9:39:45:b3:8d:a3:1a:03:f4: 42:f3:10:29:69:f2:05:f1:c4:b6:6d:95:90:36:06:7d:8a:ec: 4a:f6:cd:ea:17:e0:ab:96:de:b0:34:05:54:94:bb:f5:5a:bd: f3:e3:6d:ee:90:9f:3a:7a:4b:15:8a:61:e6:75:42:4e:55:20: 21:43:7c:e8:d0:39:34:6e:da:b0:b9:b9:a1:91:98:38:47:83: 8c:cf:ad:04:97:2b:70:ed:fb:42:6f:58:40:cc:ed:2a:33:be: 97:20:8a:77:27:93:a3:03:ad:3d:74:1f:31:3c:bf:eb:45:05: b6:35:6d:89:5a:6c:69:b0:54:40:81:c6:99:54:21:5c:1a:81: 06:b3:fc:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThBNjkxMTAvBgNVBAUTKDM1MDczMUI2NjA0NEQzNEEzRDJEQTc1ODlCRDgzMzFE MTQ1RkU0OTgwHhcNMjYwNDA3MDQxNzI3WhcNMjYwNDE0MDQxNzI3WjAYMRYwFAYD VQQDEw02OWQ0ODU1OC0yZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiHmSqOlr15Ufj02iQzVRLVhsMoOhvdTRhHcKaZG8cLvojey9+X7xNDt7fFOf WOOc7PLiKcTdOEg+ld0NvsZxv6wTWzyUqv+CJYq9U+9yxcYflXECqtOppfleAxCq eD8wxkDpZj1d7IGm0H/owsv1EXjyuTxWBFijV8JNhULkKJv+pevo/qLmRyuAKwNO buPengm9+cSe2fP/sRUWvM3egdBhZyWQy//rnMB0QtNMhOU8vKeVglG/MPkVIUNA RFZ3tF5PFwtEjNk29g5Pbt+VpyViUWebfambZXbLx9EqOsYVbctUqPU7RXBdzAx/ jKsPUhpyUqor2kGmTNqPcFf0AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHxo4EvN y20T3rzTxOPkmuWedkNeMB8GA1UdIwQYMBaAFDUHMbZgRNNKPS2nWJvYMx0UX+SY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEE2OS9DNjIwMTFENjBD RTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAwbzlMYWRZbTlnekhSUmY1 SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05RY3h0bUJFMDBvOUxhZFltOWd6SFJSZjVKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEE2OS9DNjIwMTFENjBDRTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAw bzlMYWRZbTlnekhSUmY1SmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhT+lrkD1B0RPq2IP5tu/8Dx/pHH91ick4R/e8mgIA2kNfEJcOuwylvET2We9 89tWNd31DeDw9C3b5686zQu4BbxoUt3XhQPshNp2bJEF2MxRLOgM3sPRAuSxFAIJ IBQX8jP/EXtS72CYw9vHp3HfbBQ3VvpayTlFs42jGgP0QvMQKWnyBfHEtm2VkDYG fYrsSvbN6hfgq5besDQFVJS79Vq98+Nt7pCfOnpLFYph5nVCTlUgIUN86NA5NG7a sLm5oZGYOEeDjM+tBJcrcO37Qm9YQMztKjO+lyCKdyeTowOtPXQfMTy/60UFtjVt iVpsabBUQIHGmVQhXBqBBrP86Q== -----END CERTIFICATE-----Generated at Tue Apr 7 20:59:25 2026 by rpki-client