$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft File: NfIQw_y-8NYqPeiPXz-iThGTdEw.mft (raw, json) Hash identifier: mIcJMkCNtZc4nJsAw62LVHNY05WPev9cpj0OGXrhGNc= Subject key identifier: 4B:06:C8:21:52:F2:D2:5B:29:47:79:EC:06:D4:61:FF:3A:FA:EC:8A Authority key identifier: 35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C Certificate issuer: /CN=A91A1860/serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C Certificate serial: 0253 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft Manifest number: 024E Signing time: Sun 05 Apr 2026 01:53:48 +0000 Manifest this update: Sun 05 Apr 2026 01:53:48 +0000 Manifest next update: Sun 12 Apr 2026 01:53:48 +0000 Files and hashes: 1: NfIQw_y-8NYqPeiPXz-iThGTdEw.crl (hash: D/awgW9J75cY+I4sWXJxmn4OCf6xqeoEoSrv5v86iTA=) 2: 832503DCAD0311ED8DFD5339C4F9AE02.roa (hash: DEHa9wU+Ix9r57aVN3GaYMWyOOaqTPBIMaPsZXZX4DU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 595 (0x253) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1860, serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C Validity Not Before: Apr 5 01:53:48 2026 GMT Not After : Apr 12 01:53:48 2026 GMT Subject: CN=69d1c0ac-e33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8d:d6:ea:5a:89:59:c4:76:b7:70:ad:c3:33: 53:2f:7a:2a:c3:5d:d0:c8:55:40:88:2d:ec:d3:f2: 7a:0c:0f:e9:33:76:d5:db:7c:11:e1:b1:4f:c9:b0: 31:68:8c:40:2b:56:aa:53:93:8e:ca:ff:6a:d6:9a: 2f:36:f4:d2:bd:43:97:f1:2b:41:23:9d:86:51:c8: 86:37:00:8c:d1:ba:a3:e1:fe:a0:c4:11:f3:57:16: 43:ee:b0:33:9d:c8:a8:0a:75:c6:47:12:8f:b5:7b: 95:b2:1e:c4:85:3f:43:54:1b:51:ee:0f:76:32:8b: 43:df:0a:44:9f:fb:d4:09:52:b1:92:bf:42:7b:88: a9:67:ce:6b:5e:3f:3e:2e:34:10:18:c3:32:24:e7: 2a:85:b7:e0:0d:c6:1d:68:aa:ba:42:54:4d:04:a6: 74:e2:69:2a:a5:f4:02:71:8f:21:db:12:76:10:1b: 56:63:ca:9a:3a:3a:2d:a5:6a:69:46:75:74:b7:d1: ae:6c:30:cc:8d:ff:ea:64:ab:a5:c2:21:2f:b0:26: 0d:f4:e6:c3:88:aa:17:e6:70:a1:93:e6:74:db:4d: ac:e2:75:11:ce:b5:c4:11:25:ed:3f:2d:07:b2:9a: 9b:79:37:a7:92:48:b5:fe:45:be:ad:1c:f1:2e:73: d3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:06:C8:21:52:F2:D2:5B:29:47:79:EC:06:D4:61:FF:3A:FA:EC:8A X509v3 Authority Key Identifier: keyid:35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:d6:39:4e:6a:c3:c3:10:b6:97:0c:0b:9b:5c:7e:c1:a5:c7: c1:d6:95:1a:e6:c3:82:49:e1:c1:74:53:3a:57:d7:f0:c2:ea: 5c:06:04:a6:07:c3:8c:aa:5b:db:58:25:fb:8e:10:c5:bd:06: 6a:75:ab:2b:2d:ce:12:dc:b7:ee:b3:d9:4e:23:c2:9e:35:8d: 8b:74:74:73:11:46:19:37:11:83:3a:93:9a:bd:4a:1c:04:a8: 24:86:21:5b:8c:eb:b6:31:04:42:34:d2:13:d3:38:fd:fc:f9: e3:71:dc:a2:af:12:db:da:35:22:ea:00:54:66:1b:0a:e4:e8: 09:b8:c1:b7:1a:dd:7f:64:3b:34:a4:34:90:3d:0b:56:f0:82: d6:b3:fc:8f:ec:94:6e:54:8f:ae:6c:45:76:d1:56:9a:69:57: b4:d1:f8:6d:a4:79:c8:41:d4:f3:cf:12:12:69:fa:3a:5f:5a: f2:e1:14:36:e5:60:df:ca:47:2f:8d:1c:02:f9:d3:af:4a:95: 6c:31:b5:f6:76:61:08:c9:8e:6e:66:e5:7e:2a:2e:e3:30:5e: e7:a3:95:2c:83:80:46:4b:8a:5b:99:fb:9c:fe:f2:d7:eb:e3: 59:56:f6:df:10:ff:d3:c5:95:d1:c8:ba:19:72:47:75:01:fa: 51:9e:bc:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE4NjAxMTAvBgNVBAUTKDM1RjIxMEMzRkNCRUYwRDYyQTNERTg4RjVGM0ZBMjRF MTE5Mzc0NEMwHhcNMjYwNDA1MDE1MzQ4WhcNMjYwNDEyMDE1MzQ4WjAYMRYwFAYD VQQDEw02OWQxYzBhYy1lMzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqI3W6lqJWcR2t3CtwzNTL3oqw13QyFVAiC3s0/J6DA/pM3bV23wR4bFPybAx aIxAK1aqU5OOyv9q1povNvTSvUOX8StBI52GUciGNwCM0bqj4f6gxBHzVxZD7rAz ncioCnXGRxKPtXuVsh7EhT9DVBtR7g92MotD3wpEn/vUCVKxkr9Ce4ipZ85rXj8+ LjQQGMMyJOcqhbfgDcYdaKq6QlRNBKZ04mkqpfQCcY8h2xJ2EBtWY8qaOjotpWpp RnV0t9GubDDMjf/qZKulwiEvsCYN9ObDiKoX5nChk+Z0202s4nURzrXEESXtPy0H spqbeTenkki1/kW+rRzxLnPTzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEsGyCFS 8tJbKUd57AbUYf86+uyKMB8GA1UdIwQYMBaAFDXyEMP8vvDWKj3oj18/ok4Rk3RM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTg2MC80MjIyRTY2NEFD RkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThOWXFQZWlQWHotaVRoR1Rk RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mSVF3X3ktOE5ZcVBlaVBYei1pVGhHVGRFdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTg2MC80MjIyRTY2NEFDRkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThO WXFQZWlQWHotaVRoR1RkRXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvtY5TmrDwxC2lwwLm1x+waXHwdaVGubDgknhwXRTOlfX8MLqXAYEpgfDjKpb 21gl+44Qxb0GanWrKy3OEty37rPZTiPCnjWNi3R0cxFGGTcRgzqTmr1KHASoJIYh W4zrtjEEQjTSE9M4/fz543Hcoq8S29o1IuoAVGYbCuToCbjBtxrdf2Q7NKQ0kD0L VvCC1rP8j+yUblSPrmxFdtFWmmlXtNH4baR5yEHU888SEmn6Ol9a8uEUNuVg38pH L40cAvnTr0qVbDG19nZhCMmObmblfiou4zBe56OVLIOARkuKW5n7nP7y1+vjWVb2 3xD/08WV0ci6GXJHdQH6UZ68Sg== -----END CERTIFICATE-----Generated at Sun Apr 5 21:11:33 2026 by rpki-client