$ rpki-client -vvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft File: nxsx-ncAt0WPwYibhiVBzp1IJMo.mft (raw, json) Hash identifier: li29vYDtDEnUmVSwhpbLebE3ttHv934r44C/i1z16OI= Subject key identifier: 56:5C:25:67:99:97:79:88:0A:33:D9:D4:20:EF:F3:07:DC:C2:C1:41 Authority key identifier: 9F:1B:31:FA:77:00:B7:45:8F:C1:88:9B:86:25:41:CE:9D:48:24:CA Certificate issuer: /CN=A912963D/serialNumber=9F1B31FA7700B7458FC1889B862541CE9D4824CA Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft Manifest number: 1011 Signing time: Sat 04 Apr 2026 17:23:18 +0000 Manifest this update: Sat 04 Apr 2026 17:23:18 +0000 Manifest next update: Sat 11 Apr 2026 17:23:18 +0000 Files and hashes: 1: nxsx-ncAt0WPwYibhiVBzp1IJMo.crl (hash: r0ZbnbfN5VqHmR9WeZkHZ06GKmMq50BiIZs48ZWdMHM=) 2: B2F3EE3C12C911F1AFB167917BEE528E.roa (hash: VhqZnu8kzqQxVrcP2wLUdoKfWprmpAgRyy5IRUHDzoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.crl rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912963D, serialNumber=9F1B31FA7700B7458FC1889B862541CE9D4824CA Validity Not Before: Apr 4 17:23:18 2026 GMT Not After : Apr 11 17:23:18 2026 GMT Subject: CN=69d14906-b372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3e:1d:24:ca:19:2e:e9:dc:33:28:6b:95:69: 45:b3:ff:70:49:1f:ae:20:b6:f2:bd:d6:7b:d4:32: 54:ac:2f:6d:37:a1:c9:fe:71:52:2c:ce:9b:1e:a1: c5:99:82:c5:02:df:d6:c7:62:6f:9b:76:a2:18:73: a2:6d:17:01:87:e2:c4:e8:02:21:09:d1:d5:22:ad: b8:8b:47:76:70:3c:50:b4:c9:c4:ab:9f:73:4e:5a: 7c:ad:9b:7d:08:b9:a7:cd:ed:eb:9d:68:39:b3:7c: 80:d2:a0:36:ef:bf:06:f0:fa:f0:f6:87:83:c8:d6: ee:1d:c5:96:da:bd:c9:1e:fa:52:25:25:b2:cc:3d: ad:2c:8c:c8:eb:a3:bc:c7:77:c2:3f:09:40:a1:c5: e0:a9:9c:c2:95:cf:94:84:f8:b7:e0:86:92:46:4c: c6:c2:41:1e:9f:b0:90:b9:cc:d4:e9:e6:b9:78:17: 78:89:e3:9a:93:bc:e7:83:6f:39:cd:4d:47:ce:2d: 5b:e7:21:de:8d:ae:5c:ca:c8:ce:2c:4a:ec:16:a6: 18:04:ea:d1:47:b5:1f:3c:1b:ec:bc:f0:4c:71:1e: 66:a2:a7:34:8a:3f:eb:c2:0c:ae:9e:4a:93:ce:3b: 5e:cd:fb:5d:4b:be:d3:7e:76:d8:56:ef:8f:d6:bb: e1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5C:25:67:99:97:79:88:0A:33:D9:D4:20:EF:F3:07:DC:C2:C1:41 X509v3 Authority Key Identifier: keyid:9F:1B:31:FA:77:00:B7:45:8F:C1:88:9B:86:25:41:CE:9D:48:24:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:99:59:90:dd:29:80:ab:72:b7:55:79:1d:e4:b8:3c:6a:ac: ae:98:eb:8a:72:1c:54:27:42:1e:8c:23:1b:a7:a8:0f:6d:47: 1a:5d:85:66:6e:69:e0:e7:fc:22:86:bc:df:1e:df:3b:b6:22: c8:96:5b:de:62:ea:9a:92:0a:58:88:a0:1c:50:f9:3a:22:7b: ec:16:bc:f6:60:c2:b6:a6:0c:7a:d8:b9:bb:44:ae:ce:c0:05: 74:b3:d3:ff:13:fb:1c:3f:d4:ec:bf:90:51:1c:fe:82:49:cb: 1f:a5:a9:28:9f:71:42:9e:16:13:c6:26:4c:09:12:e8:9d:c8: 5e:c5:32:34:54:9e:c5:51:7c:32:92:5a:56:51:98:fd:ad:00: 86:38:76:11:a2:72:8b:ea:3f:7b:f7:9b:68:dd:c1:88:b4:cc: 09:1e:52:40:11:59:29:4e:7b:14:b5:d3:1c:14:b5:89:7f:f9: 60:bf:a7:c3:72:96:ce:41:19:5c:8c:08:da:72:a5:9c:79:f9: b4:f7:3a:f0:a7:a4:a6:a8:cb:2c:d9:e1:01:a9:9e:34:6d:b6: 67:ac:8a:c9:bf:cf:c6:1d:a1:48:e0:26:9e:17:ad:25:c9:a3: 2e:31:26:e1:ac:89:3d:ec:54:e1:d9:44:e0:34:e5:aa:47:c1: c4:bc:1b:f5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTYzRDExMC8GA1UEBRMoOUYxQjMxRkE3NzAwQjc0NThGQzE4ODlCODYyNTQxQ0U5 RDQ4MjRDQTAeFw0yNjA0MDQxNzIzMThaFw0yNjA0MTExNzIzMThaMBgxFjAUBgNV BAMTDTY5ZDE0OTA2LWIzNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvPh0kyhku6dwzKGuVaUWz/3BJH64gtvK91nvUMlSsL203ocn+cVIszpseocWZ gsUC39bHYm+bdqIYc6JtFwGH4sToAiEJ0dUirbiLR3ZwPFC0ycSrn3NOWnytm30I uafN7eudaDmzfIDSoDbvvwbw+vD2h4PI1u4dxZbavcke+lIlJbLMPa0sjMjro7zH d8I/CUChxeCpnMKVz5SE+LfghpJGTMbCQR6fsJC5zNTp5rl4F3iJ45qTvOeDbznN TUfOLVvnId6NrlzKyM4sSuwWphgE6tFHtR88G+y88ExxHmaipzSKP+vCDK6eSpPO O17N+11LvtN+dthW74/Wu+GzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVlwlZ5mX eYgKM9nUIO/zB9zCwUEwHwYDVR0jBBgwFoAUnxsx+ncAt0WPwYibhiVBzp1IJMow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NjNEL0Y5Qzk3NjZDNzI2 NTExRTk4QjcxQkIzNEM0RjlBRTAyL254c3gtbmNBdDBXUHdZaWJoaVZCenAxSUpN by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnhzeC1uY0F0MFdQd1lpYmhpVkJ6cDFJSk1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 NjNEL0Y5Qzk3NjZDNzI2NTExRTk4QjcxQkIzNEM0RjlBRTAyL254c3gtbmNBdDBX UHdZaWJoaVZCenAxSUpNby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCmmVmQ3SmAq3K3VXkd5Lg8aqyumOuKchxUJ0IejCMbp6gPbUcaXYVmbmng5/wi hrzfHt87tiLIllveYuqakgpYiKAcUPk6InvsFrz2YMK2pgx62Lm7RK7OwAV0s9P/ E/scP9Tsv5BRHP6CScsfpakon3FCnhYTxiZMCRLonchexTI0VJ7FUXwyklpWUZj9 rQCGOHYRonKL6j9795to3cGItMwJHlJAEVkpTnsUtdMcFLWJf/lgv6fDcpbOQRlc jAjacqWcefm09zrwp6SmqMss2eEBqZ40bbZnrIrJv8/GHaFI4CaeF60lyaMuMSbh rIk97FTh2UTgNOWqR8HEvBv1 -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:22 2026 by rpki-client