$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft File: NkbrHzcLfmPR823rNsJHbJbmuug.mft (raw, json) Hash identifier: xIvaQ+0VnnUO3nmv2Y3cYkh/iQajQXV7eV+ZClzOy8M= Subject key identifier: 48:99:27:A2:73:20:74:BC:35:B0:0E:CF:FB:05:11:51:1B:68:05:8B Authority key identifier: 36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 Certificate issuer: /CN=A9113BE5/serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Certificate serial: 0377 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft Manifest number: 0367 Signing time: Sun 05 Apr 2026 00:39:42 +0000 Manifest this update: Sun 05 Apr 2026 00:39:41 +0000 Manifest next update: Sun 12 Apr 2026 00:39:41 +0000 Files and hashes: 1: NkbrHzcLfmPR823rNsJHbJbmuug.crl (hash: gzwf1z1yenY+UyldO8Kc+HDyQUNl5xzGKlO/btgl1Vo=) 2: F3B00CD2666C11EEB1B4711CC4F9AE02.roa (hash: a5mqDS8csnFhirJVB+mELKo1bbKHlBbrnlgJKARZXz8=) 3: 627A6758DF2A11EEBC440C5EC4F9AE02.roa (hash: xCxlkxmn+IYoOztMvnfz1vMt3zyfROldaTyC72io/60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 887 (0x377) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BE5, serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Validity Not Before: Apr 5 00:39:41 2026 GMT Not After : Apr 12 00:39:41 2026 GMT Subject: CN=69d1af4e-d8e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c1:d7:da:36:03:29:c6:b8:ed:e6:e4:8f:84: d1:3c:89:46:a5:c5:c9:b6:06:db:e5:fa:30:52:f3: fe:c4:f5:46:8e:c7:05:75:41:49:fc:61:2c:82:50: 28:49:63:b1:41:9f:0f:9d:8a:20:f7:a7:18:ab:5e: 39:41:e2:02:d4:45:4e:f3:6d:ea:bc:9a:5f:f0:11: 4a:19:b7:be:cf:98:c0:42:bd:f3:08:e5:c2:16:88: 55:85:3d:19:88:81:cb:57:31:2d:53:e6:eb:e4:6e: 30:de:b3:a8:ac:9c:7a:43:7a:ba:4e:24:d7:64:64: bf:35:c4:07:74:4c:00:95:0a:09:12:2d:07:9b:88: d4:6c:99:8a:7e:d2:ef:92:ff:e7:56:70:19:e8:26: 65:32:5b:67:be:c5:e3:fc:bd:0d:03:16:6f:32:eb: 0a:0d:ce:fb:56:2c:02:93:92:6f:50:99:ea:ac:e4: d8:60:be:a2:cb:c6:32:e3:54:16:5d:51:69:a3:a6: 17:b0:9e:2e:05:5b:82:eb:ba:dd:b7:ea:03:e7:a6: 45:a8:b0:3f:4d:63:01:b9:12:f2:1b:2b:79:06:32: 17:94:23:c2:5c:3e:a3:42:4a:27:98:b5:d9:c0:98: a6:15:66:74:1f:5d:ac:7c:73:97:ec:04:78:61:7c: bc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:99:27:A2:73:20:74:BC:35:B0:0E:CF:FB:05:11:51:1B:68:05:8B X509v3 Authority Key Identifier: keyid:36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:5c:50:44:be:6b:f5:4d:2b:7c:27:4a:8b:98:14:53:b1:51: 15:ec:ce:26:5a:03:35:19:83:13:31:d2:65:83:38:7f:1a:fe: 02:e6:8d:28:4b:22:d3:a5:59:dd:97:0e:34:43:be:79:8d:2e: 14:ca:5a:03:2b:8a:58:5b:4a:86:d3:5c:96:0a:c1:3d:b4:e6: 77:06:9f:a0:65:22:ad:79:15:8a:24:7b:07:50:e6:89:4a:33: 58:f7:ff:6e:a0:13:06:57:ed:53:45:1e:a5:bb:7f:09:31:c6: 6c:78:fe:0b:94:c7:9a:a2:43:c0:1e:f8:01:06:54:03:9b:95: 37:16:f0:a2:be:87:7b:7c:43:d6:0c:eb:61:8e:50:f6:e6:63: b7:95:e6:e4:55:be:11:4d:2f:bb:36:5b:48:dc:77:75:e1:24: 0a:16:ad:cb:8e:51:f9:18:64:30:6f:98:af:8a:34:c3:6c:68: ea:bd:54:9c:25:cd:c4:b8:92:9c:7f:2c:44:bf:44:3a:47:73: 4a:ce:41:aa:3e:64:20:3f:4b:40:e4:d0:45:cd:a5:7b:f4:7c: 15:5a:ee:61:a9:37:f9:c2:76:07:c8:ae:27:26:3b:1c:42:bc: 9d:47:79:3e:8b:11:6d:35:d3:93:25:66:47:cf:08:94:a3:5c: 2c:68:ee:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCRTUxMTAvBgNVBAUTKDM2NDZFQjFGMzcwQjdFNjNEMUYzNkRFQjM2QzI0NzZD OTZFNkJBRTgwHhcNMjYwNDA1MDAzOTQxWhcNMjYwNDEyMDAzOTQxWjAYMRYwFAYD VQQDEw02OWQxYWY0ZS1kOGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1sHX2jYDKca47ebkj4TRPIlGpcXJtgbb5fowUvP+xPVGjscFdUFJ/GEsglAo SWOxQZ8PnYog96cYq145QeIC1EVO823qvJpf8BFKGbe+z5jAQr3zCOXCFohVhT0Z iIHLVzEtU+br5G4w3rOorJx6Q3q6TiTXZGS/NcQHdEwAlQoJEi0Hm4jUbJmKftLv kv/nVnAZ6CZlMltnvsXj/L0NAxZvMusKDc77ViwCk5JvUJnqrOTYYL6iy8Yy41QW XVFpo6YXsJ4uBVuC67rdt+oD56ZFqLA/TWMBuRLyGyt5BjIXlCPCXD6jQkonmLXZ wJimFWZ0H12sfHOX7AR4YXy8XwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEiZJ6Jz IHS8NbAOz/sFEVEbaAWLMB8GA1UdIwQYMBaAFDZG6x83C35j0fNt6zbCR2yW5rro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0JFNS82MTFDNTEyQ0Yw RjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZtUFI4MjNyTnNKSGJKYm11 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rYnJIemNMZm1QUjgyM3JOc0pIYkpibXV1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0JFNS82MTFDNTEyQ0YwRjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZt UFI4MjNyTnNKSGJKYm11dWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlVxQRL5r9U0rfCdKi5gUU7FRFezOJloDNRmDEzHSZYM4fxr+AuaNKEsi06VZ 3ZcONEO+eY0uFMpaAyuKWFtKhtNclgrBPbTmdwafoGUirXkViiR7B1DmiUozWPf/ bqATBlftU0Uepbt/CTHGbHj+C5THmqJDwB74AQZUA5uVNxbwor6He3xD1gzrYY5Q 9uZjt5Xm5FW+EU0vuzZbSNx3deEkChaty45R+RhkMG+Yr4o0w2xo6r1UnCXNxLiS nH8sRL9EOkdzSs5Bqj5kID9LQOTQRc2le/R8FVruYak3+cJ2B8iuJyY7HEK8nUd5 PosRbTXTkyVmR88IlKNcLGju8w== -----END CERTIFICATE-----Generated at Mon Apr 6 08:48:32 2026 by rpki-client