$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft File: nOkX3Drgxboud8t3WjrZnGhcQGs.mft (raw, json) Hash identifier: f0eXPuxE6YdBdxjumBoeIe9+30OQC64uPN9amzdrPg8= Subject key identifier: 36:A2:83:4E:8B:E1:95:38:5A:54:A1:25:07:26:A3:FE:41:A7:C0:F7 Authority key identifier: 9C:E9:17:DC:3A:E0:C5:BA:2E:77:CB:77:5A:3A:D9:9C:68:5C:40:6B Certificate issuer: /CN=A9161F3E/serialNumber=9CE917DC3AE0C5BA2E77CB775A3AD99C685C406B Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft Manifest number: BE Signing time: Sun 05 Apr 2026 06:22:44 +0000 Manifest this update: Sun 05 Apr 2026 06:22:43 +0000 Manifest next update: Sun 12 Apr 2026 06:22:43 +0000 Files and hashes: 1: nOkX3Drgxboud8t3WjrZnGhcQGs.crl (hash: +C8zONgHQJnP7T4w1WmkDb9cvXHVkuzmgjC6pTB5o50=) 2: 4A3C802012A711F099020A73C4F9AE02.roa (hash: iEuV0+5znqF8f5T5Ps6WIUoKRiKa2jw2dHDVVLuYtWU=) 3: 49DEAEDC12A711F099020A73C4F9AE02.roa (hash: 73STUG9MRsTj+UMDTuA4X0z5fGUTYqhKS5W5S7xFgxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.crl rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161F3E, serialNumber=9CE917DC3AE0C5BA2E77CB775A3AD99C685C406B Validity Not Before: Apr 5 06:22:43 2026 GMT Not After : Apr 12 06:22:43 2026 GMT Subject: CN=69d1ffb3-3ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:83:0f:56:9a:f0:0b:2b:9f:e4:43:05:d6:26: ce:e1:ab:2b:29:fd:2f:9e:13:a9:bc:f9:a5:78:e6: aa:af:7b:2e:e6:fe:9a:11:b9:3d:5d:2b:43:e2:1c: 94:97:31:36:47:c2:eb:0d:d8:43:12:d4:09:99:17: 6e:a9:7e:6c:61:4c:95:4a:ee:59:cd:66:69:04:72: 94:a8:d3:04:2d:4c:a9:f6:84:66:57:9e:9c:44:01: 72:5f:db:27:60:7c:2f:d8:3c:42:7a:05:7e:bb:18: 49:c7:c7:59:60:04:80:f7:9f:c5:fc:08:2f:a7:99: a5:46:d3:8f:cd:78:7a:77:91:b4:be:d7:53:e7:f1: b5:e2:cf:9b:11:f2:8e:30:87:ac:f7:13:5c:05:95: 0c:98:b3:e3:1b:c5:0d:d8:eb:40:06:cd:89:58:b1: ed:f0:6d:72:47:e2:a3:71:32:5a:1e:c2:08:ff:94: 3d:49:1b:7f:2e:0e:e4:95:19:9b:01:57:64:28:e4: 05:b3:ae:9a:69:4a:49:48:12:5c:bf:9e:ac:c7:cb: 27:c7:ee:7d:b6:5c:d2:52:ff:ee:4f:44:7b:8e:c3: 59:6e:5d:d4:95:b2:41:f2:eb:1e:33:5c:a8:21:6a: 61:dd:8d:3c:0a:d0:0d:ec:cf:e6:ac:3a:ef:61:51: ed:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A2:83:4E:8B:E1:95:38:5A:54:A1:25:07:26:A3:FE:41:A7:C0:F7 X509v3 Authority Key Identifier: keyid:9C:E9:17:DC:3A:E0:C5:BA:2E:77:CB:77:5A:3A:D9:9C:68:5C:40:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:13:42:b6:f9:a3:a0:50:d2:b6:6a:78:fa:e4:19:75:69:ce: bf:40:55:eb:da:4c:4f:ac:32:d7:61:ea:5c:7f:b6:43:78:da: 60:3a:82:63:59:a1:5c:e9:10:b8:34:31:ba:ca:39:ec:dd:ca: af:a5:c4:02:3f:1c:23:cb:eb:dc:13:c5:5e:7f:ac:44:ae:0a: e6:63:e2:37:be:9b:cf:ec:84:32:eb:02:79:a2:e3:41:55:2a: 2f:0f:40:1d:83:5c:22:db:1e:db:40:09:4c:86:79:61:f9:86: be:5c:e2:9a:da:00:a8:22:97:0e:f1:ed:1b:08:e5:29:33:50: cc:7e:d4:7b:c2:37:f4:a8:c3:01:19:3d:38:a0:7d:9a:22:39: bc:4f:c7:d1:9e:c5:0f:a4:25:6e:e8:32:fe:38:83:a9:42:f7: a0:e1:6d:66:b9:e3:fb:11:12:21:d7:31:2c:1e:d3:81:95:18: 42:b2:69:3e:41:be:45:3a:93:75:d4:cf:f4:cf:4e:30:d1:99: 95:7b:28:ef:e0:49:e0:c9:ec:a5:4d:24:51:92:28:6c:14:15: af:b7:f6:cd:07:9d:f7:d5:9e:58:34:ec:e5:6b:ca:a1:6d:30: 93:0a:46:ab:c5:f0:90:8e:55:b1:f9:34:19:2e:97:89:b8:20: 09:6c:bf:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGM0UxMTAvBgNVBAUTKDlDRTkxN0RDM0FFMEM1QkEyRTc3Q0I3NzVBM0FEOTlD Njg1QzQwNkIwHhcNMjYwNDA1MDYyMjQzWhcNMjYwNDEyMDYyMjQzWjAYMRYwFAYD VQQDEw02OWQxZmZiMy0zY2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4MPVprwCyuf5EMF1ibO4asrKf0vnhOpvPmleOaqr3su5v6aEbk9XStD4hyU lzE2R8LrDdhDEtQJmRduqX5sYUyVSu5ZzWZpBHKUqNMELUyp9oRmV56cRAFyX9sn YHwv2DxCegV+uxhJx8dZYASA95/F/Agvp5mlRtOPzXh6d5G0vtdT5/G14s+bEfKO MIes9xNcBZUMmLPjG8UN2OtABs2JWLHt8G1yR+KjcTJaHsII/5Q9SRt/Lg7klRmb AVdkKOQFs66aaUpJSBJcv56sx8snx+59tlzSUv/uT0R7jsNZbl3UlbJB8useM1yo IWph3Y08CtAN7M/mrDrvYVHtoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDaig06L 4ZU4WlShJQcmo/5Bp8D3MB8GA1UdIwQYMBaAFJzpF9w64MW6LnfLd1o62ZxoXEBr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUYzRS8zMzlFREU2ODEw RTQxMUYwQjc1QjgxNjZDNEY5QUUwMi9uT2tYM0RyZ3hib3VkOHQzV2pyWm5HaGNR R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25Pa1gzRHJneGJvdWQ4dDNXanJabkdoY1FHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUYzRS8zMzlFREU2ODEwRTQxMUYwQjc1QjgxNjZDNEY5QUUwMi9uT2tYM0RyZ3hi b3VkOHQzV2pyWm5HaGNRR3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjBNCtvmjoFDStmp4+uQZdWnOv0BV69pMT6wy12HqXH+2Q3jaYDqCY1mhXOkQ uDQxuso57N3Kr6XEAj8cI8vr3BPFXn+sRK4K5mPiN76bz+yEMusCeaLjQVUqLw9A HYNcItse20AJTIZ5YfmGvlzimtoAqCKXDvHtGwjlKTNQzH7Ue8I39KjDARk9OKB9 miI5vE/H0Z7FD6Qlbugy/jiDqUL3oOFtZrnj+xESIdcxLB7TgZUYQrJpPkG+RTqT ddTP9M9OMNGZlXso7+BJ4MnspU0kUZIobBQVr7f2zQed99WeWDTs5WvKoW0wkwpG q8XwkI5Vsfk0GS6XibggCWy/Vw== -----END CERTIFICATE-----Generated at Sun Apr 5 20:00:07 2026 by rpki-client