$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft File: nflMM9P2R649kTYeHxcsIGhvWYk.mft (raw, json) Hash identifier: t5ihTr62igMntUYG1C3Tlhq7olGcUEgIe6T6RxZWXY8= Subject key identifier: B8:C5:03:42:21:22:CD:90:AF:C8:18:67:FC:A6:61:12:BB:E0:1B:CD Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 Certificate issuer: /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Certificate serial: 0EA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft Manifest number: 0E73 Signing time: Sat 04 Apr 2026 17:38:24 +0000 Manifest this update: Sat 04 Apr 2026 17:38:23 +0000 Manifest next update: Sat 11 Apr 2026 17:38:23 +0000 Files and hashes: 1: nflMM9P2R649kTYeHxcsIGhvWYk.crl (hash: W3VhBzMFbMZW44FRYRsCiEc2P4zujVbYgSV9dROzh2U=) 2: 9F8B79C2C78E11EBB4983F5BC4F9AE02.roa (hash: d9F++wY6Y6kgkdiYtZ2QORaHxCioMHguW70TTV+zajY=) 3: 9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (hash: xnBTgZgKcT/ckvkR025VfmbRMRDm1gAIO/fOxIRSEIM=) 4: 46B27CC6B82A11E9843DEE0AC4F9AE02.roa (hash: 4N6uyRk5nJ01NdKd6SKeVxfMhzqmYtvkZXZd8f8mRwQ=) 5: 47E67066B82A11E9843DEE0AC4F9AE02.roa (hash: zukV/SXcPzYBgJKVgWzwFqdqBSRV39PGc6HpPmopdXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3746 (0xea2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B4, serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Validity Not Before: Apr 4 17:38:23 2026 GMT Not After : Apr 11 17:38:23 2026 GMT Subject: CN=69d14c90-6a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ff:05:01:b4:47:9b:eb:d7:91:85:60:bf:d3: 58:72:f1:92:22:cc:e0:d8:ac:44:0f:9f:86:cc:7f: 22:6c:5f:b7:38:dc:67:f4:dd:76:d5:35:b1:2a:c5: 52:0d:42:42:06:70:6b:11:91:f7:32:5a:b3:6e:cb: 61:23:90:df:71:7a:29:ef:df:83:01:70:54:7e:49: 30:74:a8:10:8a:6a:12:36:d0:1e:f2:72:f2:e0:cb: fe:d7:00:d5:2c:eb:67:d8:c6:ed:c3:55:d7:97:be: 71:d6:11:5a:71:ad:ef:17:bc:58:d8:2f:c6:d8:f9: f7:99:12:49:20:50:49:63:ae:ec:dc:92:87:be:36: 7b:58:29:47:8c:2c:be:6b:55:6e:35:a1:74:b8:4a: 88:7d:ca:f0:fa:e2:20:31:d8:55:54:4f:43:cd:e5: 3c:8f:a6:b8:8d:a3:7a:41:56:8d:3c:9d:95:e0:29: ab:39:47:88:3c:c7:b7:ae:c7:7a:97:25:56:a5:1d: ad:60:05:a2:1a:d1:87:10:8c:54:03:db:7a:71:1f: 10:b7:2c:ed:c1:12:0f:c3:14:d9:99:6d:72:2f:65: 20:7e:8c:01:1c:0c:00:ff:3d:3b:ea:cc:26:24:62: 2c:ec:fc:f2:a5:0c:ca:54:49:c6:d2:6b:64:fc:ef: 6b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C5:03:42:21:22:CD:90:AF:C8:18:67:FC:A6:61:12:BB:E0:1B:CD X509v3 Authority Key Identifier: keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:9c:04:4c:fe:cb:7b:ea:07:eb:94:c9:ca:17:63:4b:97:89: a6:2a:76:5e:7a:60:52:38:3b:96:ae:d9:a5:a4:cf:ed:f3:c9: c4:4d:0f:8c:9e:1a:e3:4e:b2:b1:f0:d4:c5:af:1b:8c:e6:bc: 31:55:f7:be:33:03:7d:68:db:7e:b2:cb:0e:c7:ff:6a:c8:4b: c9:d9:6a:82:c8:4b:51:2b:87:5b:58:cd:03:7c:1a:25:d4:ff: c4:2e:c3:f5:89:1d:81:b3:b2:b5:37:b5:24:60:a8:88:a3:7b: 53:0a:56:ce:76:0a:9f:03:ac:77:28:9f:82:f3:25:5d:13:51: 81:e2:99:ef:23:22:e2:73:cf:eb:b7:27:59:9a:25:7a:77:e2: 97:af:4b:e0:c7:66:45:1c:a8:c9:27:92:db:54:d8:d4:43:73: 9e:50:e1:15:a5:e8:3f:75:8e:b1:d5:2b:73:dd:f0:37:d5:96: 81:7b:ba:48:36:89:04:64:07:35:56:be:17:e5:f9:e6:5a:82: 13:79:82:dc:c6:3f:e4:2b:71:2d:a9:7d:5a:f9:12:a1:b3:6f: 8a:58:9c:bc:08:67:bb:03:8c:1b:52:5c:a8:85:d4:84:be:af: 91:e7:20:f5:6b:54:4f:b7:cf:c9:8c:25:81:28:cc:64:1d:e4: f6:c6:88:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjQxMTAvBgNVBAUTKDlERjk0QzMzRDNGNjQ3QUUzRDkxMzYxRTFGMTcyQzIw Njg2RjU5ODkwHhcNMjYwNDA0MTczODIzWhcNMjYwNDExMTczODIzWjAYMRYwFAYD VQQDEw02OWQxNGM5MC02YTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtv8FAbRHm+vXkYVgv9NYcvGSIszg2KxED5+GzH8ibF+3ONxn9N121TWxKsVS DUJCBnBrEZH3MlqzbsthI5DfcXop79+DAXBUfkkwdKgQimoSNtAe8nLy4Mv+1wDV LOtn2Mbtw1XXl75x1hFaca3vF7xY2C/G2Pn3mRJJIFBJY67s3JKHvjZ7WClHjCy+ a1VuNaF0uEqIfcrw+uIgMdhVVE9DzeU8j6a4jaN6QVaNPJ2V4CmrOUeIPMe3rsd6 lyVWpR2tYAWiGtGHEIxUA9t6cR8QtyztwRIPwxTZmW1yL2UgfowBHAwA/z076swm JGIs7PzypQzKVEnG0mtk/O9rNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLjFA0Ih Is2Qr8gYZ/ymYRK74BvNMB8GA1UdIwQYMBaAFJ35TDPT9keuPZE2Hh8XLCBob1mJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCNC83MDlGN0EyNkI4 MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2NDlrVFllSHhjc0lHaHZX WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25mbE1NOVAyUjY0OWtUWWVIeGNzSUdodldZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVCNC83MDlGN0EyNkI4MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2 NDlrVFllSHhjc0lHaHZXWWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc5wETP7Le+oH65TJyhdjS5eJpip2XnpgUjg7lq7ZpaTP7fPJxE0PjJ4a406y sfDUxa8bjOa8MVX3vjMDfWjbfrLLDsf/ashLydlqgshLUSuHW1jNA3waJdT/xC7D 9YkdgbOytTe1JGCoiKN7UwpWznYKnwOsdyifgvMlXRNRgeKZ7yMi4nPP67cnWZol enfil69L4MdmRRyoySeS21TY1ENznlDhFaXoP3WOsdUrc93wN9WWgXu6SDaJBGQH NVa+F+X55lqCE3mC3MY/5CtxLal9WvkSobNvilicvAhnuwOMG1JcqIXUhL6vkecg 9WtUT7fPyYwlgSjMZB3k9saIdw== -----END CERTIFICATE-----Generated at Sun Apr 5 20:58:00 2026 by rpki-client