$ rpki-client -vvf rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft File: NUOeC_NciIu4TRsk7N5wYM90TpE.mft (raw, json) Hash identifier: srzJ6qBCGab7LdHZFo9RMO8iKTBGJV/hXEhl0pwe8R0= Subject key identifier: 41:0A:EF:05:9B:91:5E:0D:64:D1:8F:2D:49:DA:DF:23:DB:5E:B0:EB Authority key identifier: 35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91 Certificate issuer: /CN=A917C422/serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91 Certificate serial: 2C17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft Manifest number: 2BFD Signing time: Sat 04 Apr 2026 14:26:03 +0000 Manifest this update: Sat 04 Apr 2026 14:26:03 +0000 Manifest next update: Sat 11 Apr 2026 14:26:03 +0000 Files and hashes: 1: NUOeC_NciIu4TRsk7N5wYM90TpE.crl (hash: SxYeyBz2wQ0//TgBi/+YElweKu3vH+AZpHOIwMkRT1w=) 2: F645F318500C11EBA2295426C4F9AE02.roa (hash: T/3Qd5JLkUZ8axH+b8NITt79vh28jc8CtqLL9xCu9/o=) 3: 6313DADA500011EBB74A2C2AC4F9AE02.roa (hash: h/xjw2uGVTtL8b2ydd+g45aswVdSOXMWt+z5VztwbYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11287 (0x2c17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C422, serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91 Validity Not Before: Apr 4 14:26:03 2026 GMT Not After : Apr 11 14:26:03 2026 GMT Subject: CN=69d11f7b-da06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:33:de:b5:e9:c2:b3:00:32:41:87:0a:6a:26: 62:9a:93:ba:a5:41:32:0e:c0:26:e1:bc:7c:ff:31: 28:36:64:1e:f9:5b:55:a0:2d:46:b9:b2:7e:f5:ab: 02:82:ad:65:b5:64:5a:b4:40:0f:ff:56:12:83:86: 7e:8c:1c:d3:ad:7a:3d:72:5c:23:f4:e7:1d:df:1e: ff:6a:d9:ac:f7:75:c7:09:63:45:cf:3e:55:31:b9: ef:f0:76:c7:ac:88:db:00:47:f0:63:2c:ab:68:9b: e2:e2:61:af:02:8c:49:12:25:0e:69:74:a2:e4:f0: f5:81:46:5c:94:45:c4:2e:f6:9f:d7:7d:c9:ff:7c: e4:7a:b0:5f:4d:a8:eb:bb:b9:c4:5e:06:64:69:0e: 9d:3b:28:41:67:bf:8c:e1:dc:9b:c1:9f:34:1c:4d: a8:03:79:8d:cf:d4:79:ad:13:a5:5a:ea:20:4f:64: 86:5e:8b:fe:a8:3f:10:01:63:6c:89:a3:94:bf:24: eb:3d:38:fb:16:ff:f8:c6:ad:d7:c0:af:05:8a:86: 71:ac:ac:16:dc:00:52:62:7d:f1:46:56:ef:73:d1: b4:0c:4b:dd:e4:1b:fc:a7:90:d4:53:86:b5:00:2b: 7c:29:6e:57:06:73:26:62:e4:1d:6c:0c:0f:48:d2: 2e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0A:EF:05:9B:91:5E:0D:64:D1:8F:2D:49:DA:DF:23:DB:5E:B0:EB X509v3 Authority Key Identifier: keyid:35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:a0:8a:86:9f:d4:dc:b2:1e:1a:a6:d6:51:bf:9d:a0:e7:42: 2c:10:87:77:1d:06:12:90:94:ea:c4:03:84:f6:f9:38:fd:94: 25:0f:95:ec:3c:ae:08:3f:bc:4b:77:ac:ce:c1:d7:41:60:68: 6e:33:b3:43:c7:9c:ae:0a:1c:15:a2:53:a7:58:a4:41:a1:2a: 5a:32:c9:55:f1:2f:b2:45:5d:89:b7:c1:d7:1c:98:2a:d6:3c: 30:1c:49:e0:64:b4:52:55:0f:6e:c3:ee:09:3f:5f:42:85:fa: b2:c1:92:90:ec:ff:5b:af:0e:60:81:7a:9b:fd:56:f6:ed:72: 23:30:c3:60:d9:92:59:13:23:9b:a7:f1:e1:40:c5:a2:28:83: bb:ac:3e:be:fa:aa:ae:d1:93:df:45:e3:05:76:a8:a2:a2:7d: 29:17:38:11:09:8c:66:39:85:22:ab:f6:43:88:25:47:d8:de: 05:7b:2d:a9:d9:03:c7:a6:28:cf:d0:a1:7d:88:de:08:e5:55: b9:c7:a7:9c:87:0e:93:c8:d6:67:73:10:44:b3:b4:06:96:a5: d6:23:d6:56:d1:6b:da:fe:78:a8:e4:4f:c4:59:fd:d1:d3:b9: 58:f0:6b:72:ac:00:d6:71:b7:8f:7e:06:bb:17:f0:b3:fc:80: 10:4e:6e:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0MjIxMTAvBgNVBAUTKDM1NDM5RTBCRjM1Qzg4OEJCODREMUIyNEVDREU3MDYw Q0Y3NDRFOTEwHhcNMjYwNDA0MTQyNjAzWhcNMjYwNDExMTQyNjAzWjAYMRYwFAYD VQQDEw02OWQxMWY3Yi1kYTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDPetenCswAyQYcKaiZimpO6pUEyDsAm4bx8/zEoNmQe+VtVoC1GubJ+9asC gq1ltWRatEAP/1YSg4Z+jBzTrXo9clwj9Ocd3x7/atms93XHCWNFzz5VMbnv8HbH rIjbAEfwYyyraJvi4mGvAoxJEiUOaXSi5PD1gUZclEXELvaf133J/3zkerBfTajr u7nEXgZkaQ6dOyhBZ7+M4dybwZ80HE2oA3mNz9R5rROlWuogT2SGXov+qD8QAWNs iaOUvyTrPTj7Fv/4xq3XwK8FioZxrKwW3ABSYn3xRlbvc9G0DEvd5Bv8p5DUU4a1 ACt8KW5XBnMmYuQdbAwPSNIuZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEEK7wWb kV4NZNGPLUna3yPbXrDrMB8GA1UdIwQYMBaAFDVDngvzXIiLuE0bJOzecGDPdE6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQyMi8zRTc0NTM2OEVE NTUxMUUzODA3MkM1N0U1OTExRUEzMi9OVU9lQ19OY2lJdTRUUnNrN041d1lNOTBU cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05VT2VDX05jaUl1NFRSc2s3TjV3WU05MFRwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzQyMi8zRTc0NTM2OEVENTUxMUUzODA3MkM1N0U1OTExRUEzMi9OVU9lQ19OY2lJ dTRUUnNrN041d1lNOTBUcEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsqCKhp/U3LIeGqbWUb+doOdCLBCHdx0GEpCU6sQDhPb5OP2UJQ+V7DyuCD+8 S3eszsHXQWBobjOzQ8ecrgocFaJTp1ikQaEqWjLJVfEvskVdibfB1xyYKtY8MBxJ 4GS0UlUPbsPuCT9fQoX6ssGSkOz/W68OYIF6m/1W9u1yIzDDYNmSWRMjm6fx4UDF oiiDu6w+vvqqrtGT30XjBXaooqJ9KRc4EQmMZjmFIqv2Q4glR9jeBXstqdkDx6Yo z9ChfYjeCOVVucennIcOk8jWZ3MQRLO0Bpal1iPWVtFr2v54qORPxFn90dO5WPBr cqwA1nG3j34Guxfws/yAEE5ugw== -----END CERTIFICATE-----Generated at Mon Apr 6 02:25:11 2026 by rpki-client