$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft File: nsFL4ukyPgKo_DpiFJocquNnLbM.mft (raw, json) Hash identifier: AgC5WA3g8xZcB5ZzwXK05XqFzcTStyLh7TpVSpPBe1U= Subject key identifier: 54:98:83:15:46:37:41:8D:22:84:79:DF:91:E9:07:82:D1:F2:7E:EE Authority key identifier: 9E:C1:4B:E2:E9:32:3E:02:A8:FC:3A:62:14:9A:1C:AA:E3:67:2D:B3 Certificate issuer: /CN=A9175AEA/serialNumber=9EC14BE2E9323E02A8FC3A62149A1CAAE3672DB3 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft Manifest number: 0A Signing time: Sun 05 Apr 2026 08:29:56 +0000 Manifest this update: Sun 05 Apr 2026 08:29:56 +0000 Manifest next update: Sun 12 Apr 2026 08:29:56 +0000 Files and hashes: 1: nsFL4ukyPgKo_DpiFJocquNnLbM.crl (hash: 9XQaR/VRmNL8FQhy9O4m0qFiyD4THeLu/XohW1W3Xvs=) 2: 439B1DD4265C11F1BAFB3333A5833773.roa (hash: yu5d60NAc4cXPUzUBIczj0n+5EToYt0HRr1PhV7q4lQ=) 3: B62F5378265811F1B0D864DEA4833773.roa (hash: d4qXqs0vf21uAmTHlb0izdYCuuZAXvGPzrYKUZpwbxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.crl rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175AEA, serialNumber=9EC14BE2E9323E02A8FC3A62149A1CAAE3672DB3 Validity Not Before: Apr 5 08:29:56 2026 GMT Not After : Apr 12 08:29:56 2026 GMT Subject: CN=69d21d84-a5e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ac:59:26:92:ee:a9:01:93:2c:d8:e0:49:4e: 45:f4:41:b7:63:39:39:2c:74:98:8b:e8:a4:fb:70: 9e:dd:dd:72:4c:97:65:a7:f4:be:50:d0:9e:a6:c9: 7b:c8:de:14:b9:b1:c2:e5:26:41:fa:1b:a9:68:22: 84:cd:36:27:81:ae:4a:60:7a:48:cb:74:ea:93:37: f8:86:2b:2d:31:27:ff:da:f9:63:5c:6c:4c:d9:af: 11:30:0b:d7:bd:8f:0c:6f:d7:2b:57:b6:b4:f2:16: 81:46:3d:d4:2e:94:94:74:cc:c7:be:f0:fe:72:33: 77:4b:bd:27:ec:67:86:4e:d9:07:2e:9c:0f:76:e1: 0f:12:18:e4:f2:b4:49:63:79:99:7a:93:54:ec:26: ae:0a:f0:60:41:f1:7f:03:69:a7:ba:fd:8b:d6:86: 9c:c5:d2:eb:f8:a4:06:2b:1c:ac:88:d7:6e:fa:3d: 44:55:e8:6c:e2:79:42:a7:ac:25:e5:4e:46:ee:14: f4:21:db:de:f6:4e:42:fd:4f:0f:15:aa:68:26:2f: 30:fb:fb:c9:cf:24:74:92:bb:00:92:b2:96:c3:6c: 43:37:3c:5e:fa:60:71:de:e8:ce:c1:82:ad:2e:22: e4:a3:ce:1b:2c:74:30:bf:b9:79:77:37:0a:22:64: c7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:98:83:15:46:37:41:8D:22:84:79:DF:91:E9:07:82:D1:F2:7E:EE X509v3 Authority Key Identifier: keyid:9E:C1:4B:E2:E9:32:3E:02:A8:FC:3A:62:14:9A:1C:AA:E3:67:2D:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsFL4ukyPgKo_DpiFJocquNnLbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AEA/0A88DCC4265811F19C8869D0A4833773/nsFL4ukyPgKo_DpiFJocquNnLbM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:e6:95:80:47:67:e6:4e:e5:58:7e:85:57:bd:4b:d1:05:d3: cf:cc:12:c3:4b:d8:ce:fa:77:59:7b:13:6e:ca:3d:20:ec:0d: 51:93:3d:8e:53:ff:b3:11:54:a9:4a:84:a6:c0:2c:99:f2:ae: f7:73:5c:02:69:3b:ed:ad:b7:60:ac:00:a6:ed:dd:67:7b:52: cf:83:4a:be:22:ea:9e:9a:4e:c7:27:21:b2:65:2e:6e:9d:cf: 15:1b:8b:a6:d1:3c:27:05:cf:d8:d5:69:62:52:2e:65:12:3d: be:a6:7c:40:cd:49:c6:33:05:a8:f1:5d:73:d7:fc:4d:9d:8d: e4:ca:33:5d:cb:02:cc:16:47:70:8e:e0:78:c0:b9:83:a7:3d: 27:ae:0e:9d:6c:bf:25:dd:84:1d:77:aa:cf:26:e4:d5:bd:dd: 40:08:b3:04:d6:16:09:c7:eb:25:5e:be:56:93:d9:6a:51:e3: 80:a6:90:09:fc:b1:fd:bf:73:39:5f:df:59:e8:97:48:4d:5f: d7:54:85:9f:e4:44:c5:50:40:82:5a:91:7d:27:f8:35:5d:fa: 5b:29:cf:45:c2:17:e0:c3:43:40:da:02:3d:e0:97:3c:a6:cb: bf:8d:28:23:cd:5f:79:38:90:ab:05:a9:d6:ee:79:9b:55:20: 5b:6a:72:c4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NUFFQTExMC8GA1UEBRMoOUVDMTRCRTJFOTMyM0UwMkE4RkMzQTYyMTQ5QTFDQUFF MzY3MkRCMzAeFw0yNjA0MDUwODI5NTZaFw0yNjA0MTIwODI5NTZaMBgxFjAUBgNV BAMTDTY5ZDIxZDg0LWE1ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTrFkmku6pAZMs2OBJTkX0QbdjOTksdJiL6KT7cJ7d3XJMl2Wn9L5Q0J6myXvI 3hS5scLlJkH6G6loIoTNNieBrkpgekjLdOqTN/iGKy0xJ//a+WNcbEzZrxEwC9e9 jwxv1ytXtrTyFoFGPdQulJR0zMe+8P5yM3dLvSfsZ4ZO2QcunA924Q8SGOTytElj eZl6k1TsJq4K8GBB8X8Daae6/YvWhpzF0uv4pAYrHKyI1276PURV6GzieUKnrCXl TkbuFPQh2972TkL9Tw8VqmgmLzD7+8nPJHSSuwCSspbDbEM3PF76YHHe6M7Bgq0u IuSjzhssdDC/uXl3NwoiZMcTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVJiDFUY3 QY0ihHnfkekHgtHyfu4wHwYDVR0jBBgwFoAUnsFL4ukyPgKo/DpiFJocquNnLbMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1QUVBLzBBODhEQ0M0MjY1 ODExRjE5Qzg4NjlEMEE0ODMzNzczL25zRkw0dWt5UGdLb19EcGlGSm9jcXVObkxi TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnNGTDR1a3lQZ0tvX0RwaUZKb2NxdU5uTGJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 QUVBLzBBODhEQ0M0MjY1ODExRjE5Qzg4NjlEMEE0ODMzNzczL25zRkw0dWt5UGdL b19EcGlGSm9jcXVObkxiTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCr5pWAR2fmTuVYfoVXvUvRBdPPzBLDS9jO+ndZexNuyj0g7A1Rkz2OU/+zEVSp SoSmwCyZ8q73c1wCaTvtrbdgrACm7d1ne1LPg0q+Iuqemk7HJyGyZS5unc8VG4um 0TwnBc/Y1WliUi5lEj2+pnxAzUnGMwWo8V1z1/xNnY3kyjNdywLMFkdwjuB4wLmD pz0nrg6dbL8l3YQdd6rPJuTVvd1ACLME1hYJx+slXr5Wk9lqUeOAppAJ/LH9v3M5 X99Z6JdITV/XVIWf5ETFUECCWpF9J/g1XfpbKc9Fwhfgw0NA2gI94Jc8psu/jSgj zV95OJCrBanW7nmbVSBbanLE -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:37 2026 by rpki-client