$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft File: nflMM9P2R649kTYeHxcsIGhvWYk.mft (raw, json) Hash identifier: p0BaDa3HqhZewMbyop6Bmq/uKv2NKJxgul1gKgaNzNY= Subject key identifier: DB:7E:6B:66:54:EA:2D:65:8A:F5:B0:01:97:27:2C:B1:4B:23:AB:4E Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 Certificate issuer: /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Certificate serial: 0EB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft Manifest number: 0E8A Signing time: Wed 20 May 2026 17:45:27 +0000 Manifest this update: Wed 20 May 2026 17:45:26 +0000 Manifest next update: Wed 27 May 2026 17:45:26 +0000 Files and hashes: 1: nflMM9P2R649kTYeHxcsIGhvWYk.crl (hash: YrZ31xWVHdRTgyd/emUArRpboZkgAVHmTMsOgYuHr3Y=) 2: 9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (hash: xnBTgZgKcT/ckvkR025VfmbRMRDm1gAIO/fOxIRSEIM=) 3: 46B27CC6B82A11E9843DEE0AC4F9AE02.roa (hash: 4N6uyRk5nJ01NdKd6SKeVxfMhzqmYtvkZXZd8f8mRwQ=) 4: 47E67066B82A11E9843DEE0AC4F9AE02.roa (hash: zukV/SXcPzYBgJKVgWzwFqdqBSRV39PGc6HpPmopdXY=) 5: 9F8B79C2C78E11EBB4983F5BC4F9AE02.roa (hash: d9F++wY6Y6kgkdiYtZ2QORaHxCioMHguW70TTV+zajY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:45:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3769 (0xeb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B4, serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Validity Not Before: May 20 17:45:26 2026 GMT Not After : May 27 17:45:26 2026 GMT Subject: CN=6a0df336-1c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dc:7b:7e:2a:51:64:ae:b7:7b:4b:da:57:73: 4c:61:75:89:20:b5:9f:28:77:5b:cc:a7:96:92:ff: ab:c5:cb:aa:8b:dc:c0:b7:f8:80:62:08:7c:7d:9c: 9c:16:42:5f:3d:61:90:11:b5:fc:69:89:70:82:91: 57:cb:61:75:41:7d:30:1c:20:05:cb:5a:2b:c1:68: 7f:ad:32:b1:97:3f:ca:3b:4c:13:6f:75:9e:91:cd: c1:3a:31:4d:33:9d:15:73:31:48:71:c4:b4:36:96: 01:e6:5a:4c:e6:ed:9c:a0:a6:04:cb:ef:5c:5e:58: 39:6e:44:a5:e6:6a:94:da:3a:96:ad:ad:28:97:2b: 5f:8e:3f:8f:5a:3a:20:5a:29:b6:ce:e0:3f:dd:8d: 80:0c:1a:9f:2a:ac:1c:d1:9a:1d:a4:fa:f2:d6:61: e9:ee:98:cf:35:ab:56:1a:58:f2:17:ad:9a:9c:a4: b4:69:6d:7b:a7:d5:43:78:3d:95:bb:5e:52:aa:2f: fb:5b:59:ad:75:40:ba:19:62:94:4d:5b:4a:f3:4c: 64:7e:8e:5e:dd:37:d2:fe:4c:4d:56:db:30:aa:90: d4:4b:05:98:95:7b:98:e5:0f:cc:a9:33:1d:bc:3b: 54:0e:31:ea:26:36:e3:70:00:6c:d5:15:44:ea:07: 93:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7E:6B:66:54:EA:2D:65:8A:F5:B0:01:97:27:2C:B1:4B:23:AB:4E X509v3 Authority Key Identifier: keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:8c:dc:cb:1b:31:f5:c9:a7:30:e4:af:ef:65:3f:1d:98:e4: 10:6e:0d:45:59:77:d6:a2:4e:f7:96:23:96:36:71:55:de:8a: 4c:87:33:6f:ce:85:c6:12:de:9e:41:df:bf:27:9a:6b:67:4c: e2:4a:78:8c:3a:8d:d0:df:b0:8c:e3:46:53:50:18:bc:5d:be: 60:1a:e7:99:c4:34:e4:97:5a:ab:7c:fc:14:d5:70:3b:55:f7: f2:37:57:30:f5:0d:90:08:07:51:c8:1e:aa:92:1e:6d:1a:78: 58:26:a6:2b:2a:12:64:a5:0a:f3:47:2b:e3:23:e9:7c:80:d2: 19:06:df:56:29:bf:fb:7d:6b:84:8c:ca:3e:13:8c:91:fa:61: 98:42:b3:8c:0d:ab:ba:76:46:23:99:51:69:95:d4:ea:b3:1a: d8:aa:d4:83:6a:3c:6a:08:3e:97:39:9f:2c:37:23:fb:08:f1: 21:76:be:16:9c:65:b2:fa:2b:3b:e1:71:06:e7:64:4a:d3:ba: 2b:7d:89:f8:96:81:0c:ab:82:b5:13:12:f2:a0:75:05:58:4c: 32:58:a3:8c:8a:d1:c8:d0:d4:76:32:52:a8:92:5a:b9:b6:f9: ee:e5:27:2b:13:8e:05:da:f2:fe:2d:d1:5f:ac:6c:4b:ec:8d: 7a:8b:71:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjQxMTAvBgNVBAUTKDlERjk0QzMzRDNGNjQ3QUUzRDkxMzYxRTFGMTcyQzIw Njg2RjU5ODkwHhcNMjYwNTIwMTc0NTI2WhcNMjYwNTI3MTc0NTI2WjAYMRYwFAYD VQQDEw02YTBkZjMzNi0xYzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdx7fipRZK63e0vaV3NMYXWJILWfKHdbzKeWkv+rxcuqi9zAt/iAYgh8fZyc FkJfPWGQEbX8aYlwgpFXy2F1QX0wHCAFy1orwWh/rTKxlz/KO0wTb3Wekc3BOjFN M50VczFIccS0NpYB5lpM5u2coKYEy+9cXlg5bkSl5mqU2jqWra0olytfjj+PWjog Wim2zuA/3Y2ADBqfKqwc0ZodpPry1mHp7pjPNatWGljyF62anKS0aW17p9VDeD2V u15Sqi/7W1mtdUC6GWKUTVtK80xkfo5e3TfS/kxNVtswqpDUSwWYlXuY5Q/MqTMd vDtUDjHqJjbjcABs1RVE6geTPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNt+a2ZU 6i1livWwAZcnLLFLI6tOMB8GA1UdIwQYMBaAFJ35TDPT9keuPZE2Hh8XLCBob1mJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCNC83MDlGN0EyNkI4 MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2NDlrVFllSHhjc0lHaHZX WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25mbE1NOVAyUjY0OWtUWWVIeGNzSUdodldZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVCNC83MDlGN0EyNkI4MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2 NDlrVFllSHhjc0lHaHZXWWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVYzcyxsx9cmnMOSv72U/HZjkEG4NRVl31qJO95YjljZxVd6KTIczb86FxhLe nkHfvyeaa2dM4kp4jDqN0N+wjONGU1AYvF2+YBrnmcQ05Jdaq3z8FNVwO1X38jdX MPUNkAgHUcgeqpIebRp4WCamKyoSZKUK80cr4yPpfIDSGQbfVim/+31rhIzKPhOM kfphmEKzjA2runZGI5lRaZXU6rMa2KrUg2o8agg+lzmfLDcj+wjxIXa+Fpxlsvor O+FxBudkStO6K32J+JaBDKuCtRMS8qB1BVhMMlijjIrRyNDUdjJSqJJaubb57uUn KxOOBdry/i3RX6xsS+yNeotxVQ== -----END CERTIFICATE-----Generated at Thu May 21 09:31:10 2026 by rpki-client