$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft File: ngVdNc8yklM1zJQMyIKLY91gcws.mft (raw, json) Hash identifier: YxMnMoyICrMKg7+RYrrExFD4UXGMB2H2EBkuICV2Wps= Subject key identifier: D9:BF:4D:D4:65:B8:0E:F3:D7:2F:ED:73:8B:69:94:60:71:35:7A:95 Authority key identifier: 9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B Certificate issuer: /CN=A915BC2A/serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B Certificate serial: 0238 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft Manifest number: 022C Signing time: Sun 05 Apr 2026 02:13:35 +0000 Manifest this update: Sun 05 Apr 2026 02:13:35 +0000 Manifest next update: Sun 12 Apr 2026 02:13:35 +0000 Files and hashes: 1: ngVdNc8yklM1zJQMyIKLY91gcws.crl (hash: fbqxG1ouPTZjMqOd8weOdtwqhDvpSyMfvjvz1SBE75o=) 2: 3A173FE4DE1C11ED8935D41DC4F9AE02.roa (hash: 7FMFrX0Xi2B0+fD25UfLuQbjzYJ8bpG2QcEFzbPEZL4=) 3: 398211B2DE1C11ED8935D41DC4F9AE02.roa (hash: fdMdK5Sd7Plh2Ippunexfav/xQdX66KfuslWneo0vak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 568 (0x238) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC2A, serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B Validity Not Before: Apr 5 02:13:35 2026 GMT Not After : Apr 12 02:13:35 2026 GMT Subject: CN=69d1c54f-2d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f5:4b:a7:49:b0:1c:aa:a9:f7:36:03:5e:a2: 3e:9c:b9:16:db:44:76:f9:99:77:5a:52:46:00:4d: a1:9e:00:d5:3f:f4:12:1b:f8:da:12:65:76:a3:17: 15:66:6b:51:c9:72:24:b5:13:d7:d2:2e:48:67:04: 78:0e:6b:ae:c0:f9:ba:64:1a:a8:20:99:be:8b:3e: a6:a3:8d:33:f2:74:32:fc:ad:26:86:ed:00:d1:8e: 13:86:6d:53:43:9b:b2:96:2c:15:a5:81:05:fc:8d: 0a:5c:61:ef:bb:b3:ad:c0:40:46:b1:16:f9:23:33: 4a:30:53:6c:dd:73:ad:93:b6:fe:c9:e1:3b:e0:af: 70:e6:c6:fd:30:7e:1b:b1:bc:9c:e0:ba:2f:0e:53: 85:af:75:1d:2a:29:db:b7:2a:f1:14:1b:de:1b:70: 95:a0:4e:0e:87:99:96:33:85:fa:df:69:e5:20:9c: 6f:d4:e3:31:69:23:3c:21:a2:2d:d3:43:e9:ce:95: 34:08:a7:d7:9c:5e:03:8d:2c:3e:fb:23:1e:10:2e: ad:24:e4:2d:fc:5c:43:11:9e:d4:ef:bd:8c:aa:fc: e6:5d:8a:2f:1c:11:32:ca:70:2a:5b:ea:62:9a:ca: ce:4c:7d:11:a7:93:32:6b:73:18:66:4a:7e:3f:20: 49:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BF:4D:D4:65:B8:0E:F3:D7:2F:ED:73:8B:69:94:60:71:35:7A:95 X509v3 Authority Key Identifier: keyid:9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:71:b9:43:3d:01:c0:67:8a:77:5d:3f:81:23:b6:85:99:65: ba:f6:a8:26:44:e6:f6:71:eb:29:ac:00:60:84:7a:9b:a7:9c: 31:f2:e1:41:3d:6b:f1:8b:cf:24:05:e3:0c:34:85:33:92:24: 93:bb:7b:b3:1c:e7:69:3e:57:35:a8:9f:9d:2c:74:bb:34:8d: 8a:b9:2d:d6:f0:1a:c8:13:11:cb:32:a2:ff:f6:af:86:74:be: b5:5f:8f:a0:36:91:40:bf:c4:b9:4b:25:cf:c5:d8:ed:af:b1: 26:ac:d2:a1:fd:f9:d7:60:70:cd:de:e2:f7:43:d2:ea:43:fa: 60:6d:df:b5:5b:0d:3f:46:5d:18:95:63:75:bc:07:c6:28:fc: 5d:da:63:2a:20:01:61:00:90:e9:c8:3c:c6:7e:60:b7:c4:73: 8c:47:ee:53:58:c2:fe:d7:2c:79:b4:30:2c:05:19:aa:d7:1a: f4:31:50:14:dc:8b:c0:93:7b:12:b8:ca:b3:48:40:ba:80:ef: 87:ef:88:ed:cc:3f:48:d7:f5:30:8d:98:0c:aa:fe:f0:3f:59: 15:5f:76:35:6f:b5:02:c0:22:bd:f0:3d:9d:c7:43:c2:96:e4: 74:88:ba:b5:4f:05:51:55:0a:1f:0d:01:5b:b6:60:f3:b8:82: ab:c2:37:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDMkExMTAvBgNVBAUTKDlFMDU1RDM1Q0YzMjkyNTMzNUNDOTQwQ0M4ODI4QjYz REQ2MDczMEIwHhcNMjYwNDA1MDIxMzM1WhcNMjYwNDEyMDIxMzM1WjAYMRYwFAYD VQQDEw02OWQxYzU0Zi0yZDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvVLp0mwHKqp9zYDXqI+nLkW20R2+Zl3WlJGAE2hngDVP/QSG/jaEmV2oxcV ZmtRyXIktRPX0i5IZwR4DmuuwPm6ZBqoIJm+iz6mo40z8nQy/K0mhu0A0Y4Thm1T Q5uyliwVpYEF/I0KXGHvu7OtwEBGsRb5IzNKMFNs3XOtk7b+yeE74K9w5sb9MH4b sbyc4LovDlOFr3UdKinbtyrxFBveG3CVoE4Oh5mWM4X632nlIJxv1OMxaSM8IaIt 00PpzpU0CKfXnF4DjSw++yMeEC6tJOQt/FxDEZ7U772MqvzmXYovHBEyynAqW+pi msrOTH0Rp5Mya3MYZkp+PyBJ4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNm/TdRl uA7z1y/tc4tplGBxNXqVMB8GA1UdIwQYMBaAFJ4FXTXPMpJTNcyUDMiCi2PdYHML MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkMyQS9FRDlGOERCQURF MTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWtsTTF6SlFNeUlLTFk5MWdj d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25nVmROYzh5a2xNMXpKUU15SUtMWTkxZ2N3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkMyQS9FRDlGOERCQURFMTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWts TTF6SlFNeUlLTFk5MWdjd3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZnG5Qz0BwGeKd10/gSO2hZlluvaoJkTm9nHrKawAYIR6m6ecMfLhQT1r8YvP JAXjDDSFM5Ikk7t7sxznaT5XNaifnSx0uzSNirkt1vAayBMRyzKi//avhnS+tV+P oDaRQL/EuUslz8XY7a+xJqzSof3512Bwzd7i90PS6kP6YG3ftVsNP0ZdGJVjdbwH xij8XdpjKiABYQCQ6cg8xn5gt8RzjEfuU1jC/tcsebQwLAUZqtca9DFQFNyLwJN7 ErjKs0hAuoDvh++I7cw/SNf1MI2YDKr+8D9ZFV92NW+1AsAivfA9ncdDwpbkdIi6 tU8FUVUKHw0BW7Zg87iCq8I3AA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:50:00 2026 by rpki-client