$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json) Hash identifier: p1DBYLvbqWvms02Ll4Xog57UeRY1Gosdd6oap9pIlA4= Subject key identifier: DE:CF:5C:76:86:57:BB:40:FE:71:D4:05:FB:21:8A:A1:37:9F:15:B0 Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft Manifest number: 01DF Signing time: Sun 05 Apr 2026 03:03:39 +0000 Manifest this update: Sun 05 Apr 2026 03:03:38 +0000 Manifest next update: Sun 12 Apr 2026 03:03:38 +0000 Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: I5y+pId109wxf2IG9nHoHf1zd6vxJ0+kLxvA5SljQh4=) 2: 36020660DD2411EF9F4FB925C4F9AE02.roa (hash: i1Pu+9UVIaU6wY+KGS3N0zfxP0rOfpHG8M6EeBicwr4=) 3: 0B421064DD2411EFA5DECA6CC4F9AE02.roa (hash: +S1F0zYbzMvWkIw6OtTYzr4kRvSGMZIIi7dYMQVKPYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD, serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: Apr 5 03:03:38 2026 GMT Not After : Apr 12 03:03:38 2026 GMT Subject: CN=69d1d10b-e2db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:be:b1:c3:b3:db:0f:43:ef:9f:27:64:e6:66: 35:93:83:1e:d0:5c:fb:a9:4e:7c:f8:8b:20:45:3d: d7:07:76:11:aa:ca:ca:49:24:af:cf:c4:13:45:b4: f1:2d:3d:68:ff:91:1f:23:4d:f4:01:db:64:5b:51: 51:3c:8d:0c:7d:70:60:81:98:89:55:a1:24:8b:87: 31:bd:76:93:c8:ab:1b:58:6d:17:2d:38:46:c4:3e: 6c:13:78:02:fa:df:f0:03:11:74:b8:30:ef:33:c0: 91:ab:95:8b:12:22:c6:45:20:f5:1f:87:d9:9d:a6: 79:97:7b:f4:2d:c8:90:67:f1:48:e4:cf:d1:01:99: 70:f3:e2:b3:f9:45:45:ba:dc:10:fa:91:0c:2f:cc: 6b:52:a4:a6:4b:5d:6c:f8:38:f8:e8:95:a0:87:69: 76:1a:b4:5f:5e:ff:c3:ef:0c:81:d1:58:32:15:2b: bc:9a:3c:8e:8d:c7:0a:d4:b1:59:c5:58:5e:7f:97: 31:2c:c7:88:0e:86:df:82:7f:e2:9f:c8:ea:a8:31: 41:75:87:d3:b6:d3:94:ff:50:61:87:e7:8e:8c:3f: 8a:b3:9a:47:43:89:08:5b:89:d6:45:cc:63:8e:23: 3b:a5:ef:96:3c:1e:0e:54:3a:48:8e:49:81:c2:55: 6e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CF:5C:76:86:57:BB:40:FE:71:D4:05:FB:21:8A:A1:37:9F:15:B0 X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:0e:65:fc:29:f7:60:de:d9:d9:f0:31:ea:b9:68:03:e8:cf: 42:d2:55:9c:69:72:37:4a:18:38:48:21:ac:5e:e0:67:57:88: 26:35:ae:ca:cc:1b:be:19:24:b7:cd:22:7c:ae:34:25:a8:13: de:fc:74:50:ea:9a:ad:ff:4a:9e:7b:58:51:c0:1d:ba:57:41: f7:7b:ca:ce:08:06:bb:7b:a5:4a:c2:6b:2e:9a:78:1a:08:a3: ea:97:d5:9a:c1:e7:42:d1:bd:3c:f0:6a:36:43:26:a2:85:01: 66:a8:95:a6:e7:e2:0d:3b:ae:d7:57:44:10:f5:22:19:80:fa: 4c:a3:7e:20:dd:d0:fc:7e:27:4b:80:d7:5f:f2:13:c1:c7:a7: b1:86:97:d6:1c:e8:32:8b:7b:d4:1e:69:5e:9e:d3:60:59:0c: 69:ea:ea:0b:73:33:eb:7c:34:b3:d4:9b:7e:54:00:fc:a6:03: de:a2:8f:6f:75:82:91:13:be:a4:fe:3b:34:35:61:8a:59:2d: ec:0d:32:a5:2c:6b:91:75:e0:31:06:e6:7b:d3:4a:83:57:de: 24:db:e4:aa:ef:7a:22:87:62:e8:d9:98:3e:91:d8:89:0b:c3: 20:a0:24:b4:d0:37:cb:e9:fc:6b:32:ee:ee:f7:0b:09:5d:e1: 5c:de:69:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjYwNDA1MDMwMzM4WhcNMjYwNDEyMDMwMzM4WjAYMRYwFAYD VQQDEw02OWQxZDEwYi1lMmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApr6xw7PbD0Pvnydk5mY1k4Me0Fz7qU58+IsgRT3XB3YRqsrKSSSvz8QTRbTx LT1o/5EfI030AdtkW1FRPI0MfXBggZiJVaEki4cxvXaTyKsbWG0XLThGxD5sE3gC +t/wAxF0uDDvM8CRq5WLEiLGRSD1H4fZnaZ5l3v0LciQZ/FI5M/RAZlw8+Kz+UVF utwQ+pEML8xrUqSmS11s+Dj46JWgh2l2GrRfXv/D7wyB0VgyFSu8mjyOjccK1LFZ xVhef5cxLMeIDobfgn/in8jqqDFBdYfTttOU/1Bhh+eOjD+Ks5pHQ4kIW4nWRcxj jiM7pe+WPB4OVDpIjkmBwlVuQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN7PXHaG V7tA/nHUBfshiqE3nxWwMB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzhGRC9BNUE2RjM3QTYxRjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFj NEZWYVlBc2hlU0RybmhyRTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAg5l/Cn3YN7Z2fAx6rloA+jPQtJVnGlyN0oYOEghrF7gZ1eIJjWuyswbvhkk t80ifK40JagT3vx0UOqarf9KnntYUcAduldB93vKzggGu3ulSsJrLpp4Ggij6pfV msHnQtG9PPBqNkMmooUBZqiVpufiDTuu11dEEPUiGYD6TKN+IN3Q/H4nS4DXX/IT wcensYaX1hzoMot71B5pXp7TYFkMaerqC3Mz63w0s9SbflQA/KYD3qKPb3WCkRO+ pP47NDVhilkt7A0ypSxrkXXgMQbme9NKg1feJNvkqu96Iodi6NmYPpHYiQvDIKAk tNA3y+n8azLu7vcLCV3hXN5pLA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:29 2026 by rpki-client