$ rpki-client -vvf rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft File: NfWNhhxBvf6ka4xykLGqxnDnzBs.mft (raw, json) Hash identifier: vWMNT4J0jXnHYoPm/jqZvQRgNadcU+3tN0jikB7WNMA= Subject key identifier: 2B:44:11:F7:B7:30:0C:1A:57:3F:DB:F3:B4:B5:89:2F:21:A4:E1:64 Authority key identifier: 35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B Certificate issuer: /CN=A91B35BB/serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Certificate serial: 0BDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft Manifest number: 0BCB Signing time: Sat 04 Apr 2026 18:45:14 +0000 Manifest this update: Sat 04 Apr 2026 18:45:13 +0000 Manifest next update: Sat 11 Apr 2026 18:45:13 +0000 Files and hashes: 1: NfWNhhxBvf6ka4xykLGqxnDnzBs.crl (hash: RhroIUQN8KViJbIxAYFUh2WXVXQVcsORq2XKxkYAT/s=) 2: 8F9F2F823C0111EAB6CB9936C4F9AE02.roa (hash: 3Z/JPqjZbXTvwbBYHDVc+0ddb1oxhY9tStpnOx9ITdQ=) 3: 902F47663C0111EAB6CB9936C4F9AE02.roa (hash: VuSr3kOQUjg9+28LT7ROPq/HuUEw9XEa1A4ZWRbVfXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3036 (0xbdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B35BB, serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Validity Not Before: Apr 4 18:45:13 2026 GMT Not After : Apr 11 18:45:13 2026 GMT Subject: CN=69d15c3a-4bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0b:b3:40:30:33:29:88:65:7e:2f:d3:75:e9: 87:57:6b:a5:5d:c1:0e:f5:ca:16:a1:4d:f1:3b:82: b1:22:21:77:5a:5a:67:65:6b:b1:8f:98:1c:f9:6b: 6e:45:38:47:e9:ec:3f:ab:02:50:60:da:c1:a8:50: ae:f2:5c:b2:57:4d:27:f1:2d:f0:13:a1:6e:92:4e: 43:33:62:f7:9c:c3:60:19:46:2b:dd:fb:1b:ba:58: 5b:19:7b:15:24:dd:9b:81:48:9e:6e:96:23:7f:c8: b9:2a:67:2e:13:7d:73:38:49:99:eb:97:7f:56:7b: b0:e4:e1:ca:d3:4e:bf:cc:77:94:76:07:07:a4:21: 0a:e7:3c:2e:9d:cc:82:a4:ea:5b:7a:dd:59:29:81: 79:22:c5:bb:c4:f5:17:6e:e2:6e:07:be:ca:83:1e: fa:9c:65:38:ab:18:bd:bf:f7:e9:ee:77:39:1d:51: be:2e:ab:cb:00:b4:ed:81:f4:4a:60:d1:4c:53:48: 5b:21:6e:bb:44:c7:5d:db:2c:ea:f7:0f:42:fc:1e: 0c:6e:49:bf:2e:cd:ad:75:5d:2a:2a:61:6c:19:c9: e2:e8:ea:24:2d:03:7f:2a:19:28:29:fb:87:20:8b: b4:be:67:49:54:9e:0a:26:7a:57:ee:37:19:e0:01: 15:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:44:11:F7:B7:30:0C:1A:57:3F:DB:F3:B4:B5:89:2F:21:A4:E1:64 X509v3 Authority Key Identifier: keyid:35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:94:bc:8a:ad:a3:45:d7:16:e2:c5:a6:14:90:ce:43:6e:1f: 6b:b1:0d:90:58:d1:07:24:41:6a:c7:af:55:d8:19:a4:1e:e9: 1c:05:21:d6:16:45:69:38:f4:91:b0:c3:a1:f5:d7:63:b0:7a: a5:d6:ea:08:b0:f3:8b:91:dc:f0:d9:e4:a1:e7:8f:0c:1e:76: 07:fa:d3:71:22:39:96:78:6a:4f:d8:24:66:ab:64:19:20:70: b7:50:45:aa:ce:b7:1f:ed:f3:5f:1e:db:21:dc:fd:3a:68:0a: 12:b6:76:0d:eb:d7:84:89:c6:dc:70:4c:05:ce:f8:00:06:1d: 93:43:43:1e:d7:6e:14:9e:36:4a:92:21:0a:e8:5e:14:ab:86: 9d:0e:25:43:6b:1c:2d:9f:dc:9f:cb:93:b9:28:6f:5d:c0:08: 07:d8:95:f3:1b:2a:0e:b4:80:70:bf:ce:66:50:2c:48:cc:78: cb:b5:23:07:a3:2f:7d:e7:90:7f:0a:83:5c:de:23:65:80:1b: 06:62:49:db:be:5e:d8:d3:ea:97:16:9e:ff:35:c5:8c:aa:0d: ca:45:76:ad:77:1e:94:94:51:06:07:07:95:dd:ab:f1:75:cb: 4c:b7:40:c8:dc:13:43:03:3a:5c:63:62:aa:9f:42:57:b6:d2: 80:14:56:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1QkIxMTAvBgNVBAUTKDM1RjU4RDg2MUM0MUJERkVBNDZCOEM3MjkwQjFBQUM2 NzBFN0NDMUIwHhcNMjYwNDA0MTg0NTEzWhcNMjYwNDExMTg0NTEzWjAYMRYwFAYD VQQDEw02OWQxNWMzYS00YmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqAuzQDAzKYhlfi/TdemHV2ulXcEO9coWoU3xO4KxIiF3WlpnZWuxj5gc+Wtu RThH6ew/qwJQYNrBqFCu8lyyV00n8S3wE6Fukk5DM2L3nMNgGUYr3fsbulhbGXsV JN2bgUiebpYjf8i5KmcuE31zOEmZ65d/Vnuw5OHK006/zHeUdgcHpCEK5zwuncyC pOpbet1ZKYF5IsW7xPUXbuJuB77Kgx76nGU4qxi9v/fp7nc5HVG+LqvLALTtgfRK YNFMU0hbIW67RMdd2yzq9w9C/B4Mbkm/Ls2tdV0qKmFsGcni6OokLQN/KhkoKfuH IIu0vmdJVJ4KJnpX7jcZ4AEVTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCtEEfe3 MAwaVz/b87S1iS8hpOFkMB8GA1UdIwQYMBaAFDX1jYYcQb3+pGuMcpCxqsZw58wb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzVCQi81Nzg5QjFBNDND MDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZmNmthNHh5a0xHcXhuRG56 QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mV05oaHhCdmY2a2E0eHlrTEdxeG5EbnpCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzVCQi81Nzg5QjFBNDNDMDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZm NmthNHh5a0xHcXhuRG56QnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg5S8iq2jRdcW4sWmFJDOQ24fa7ENkFjRByRBasevVdgZpB7pHAUh1hZFaTj0 kbDDofXXY7B6pdbqCLDzi5Hc8NnkoeePDB52B/rTcSI5lnhqT9gkZqtkGSBwt1BF qs63H+3zXx7bIdz9OmgKErZ2DevXhInG3HBMBc74AAYdk0NDHtduFJ42SpIhCuhe FKuGnQ4lQ2scLZ/cn8uTuShvXcAIB9iV8xsqDrSAcL/OZlAsSMx4y7UjB6MvfeeQ fwqDXN4jZYAbBmJJ275e2NPqlxae/zXFjKoNykV2rXcelJRRBgcHld2r8XXLTLdA yNwTQwM6XGNiqp9CV7bSgBRWTg== -----END CERTIFICATE-----Generated at Sun Apr 5 20:01:03 2026 by rpki-client