$ rpki-client -vvf rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft File: pi_NZFSmighl9rlcwOh3RJ7z76k.mft (raw, json) Hash identifier: GzGiDO7AF0SCzbWrRvWEluCNDmFQ0oNTHL3ud1QMlWs= Subject key identifier: 2F:2D:9B:87:CA:95:05:33:C8:1B:C0:99:22:37:18:F6:D2:E5:21:55 Authority key identifier: A6:2F:CD:64:54:A6:8A:08:65:F6:B9:5C:C0:E8:77:44:9E:F3:EF:A9 Certificate issuer: /CN=A911BA76/serialNumber=A62FCD6454A68A0865F6B95CC0E877449EF3EFA9 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft Manifest number: 70 Signing time: Thu 21 May 2026 07:57:32 +0000 Manifest this update: Thu 21 May 2026 07:57:31 +0000 Manifest next update: Thu 28 May 2026 07:57:31 +0000 Files and hashes: 1: pi_NZFSmighl9rlcwOh3RJ7z76k.crl (hash: /X5R1U+n4RPifde0+GWR/cMUZMCuhgr1RXNadi3mpyg=) 2: 82CDD7C4B0C011F09232CD7BC4F9AE02.roa (hash: KXtLMxhNV80b7UVLzNEenAj/lw44i+8q+VpDj2RXMEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.crl rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 07:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BA76, serialNumber=A62FCD6454A68A0865F6B95CC0E877449EF3EFA9 Validity Not Before: May 21 07:57:31 2026 GMT Not After : May 28 07:57:31 2026 GMT Subject: CN=6a0ebaec-8d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:11:25:98:ef:42:e0:bc:ed:7e:61:86:fc: 37:51:52:60:1c:0c:ac:c5:63:1f:83:6d:a7:38:76: 8d:91:5f:1b:7c:b3:99:ff:1f:46:89:77:83:16:4d: dc:ad:b1:27:17:e8:77:32:59:1e:1b:07:a5:84:11: b8:12:e3:8d:06:94:df:99:0f:23:2c:c5:3a:63:7f: 5f:14:5f:0f:f0:f3:5a:1c:1d:c6:2b:4f:e3:d6:de: 3e:d0:56:79:59:cf:e1:6c:14:ce:fb:25:14:5b:be: 45:b8:f5:cc:b7:ca:0c:5c:8f:c2:4d:9c:9f:d8:bb: 98:36:8c:45:40:44:c4:7d:cd:29:62:50:66:23:79: f7:ff:47:58:0a:7c:37:60:38:19:fa:8c:a5:ef:56: a7:17:fe:86:37:7f:00:9a:95:ed:03:ac:3f:9c:0d: 26:e2:f6:e3:0e:98:9d:8b:b2:b9:c7:20:ab:b5:8b: 47:e2:84:57:12:91:a7:d2:29:f4:49:d6:3d:65:39: 43:b4:e0:92:af:f4:82:27:63:80:0e:84:ac:45:71: b8:f9:f2:12:85:c1:8e:97:30:09:c1:a0:22:0f:90: 87:e3:18:ac:b7:af:ef:d7:e9:df:0f:a0:61:03:fc: d2:cb:02:e3:06:61:23:78:d2:4b:1b:f9:53:3f:d9: 9b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:2D:9B:87:CA:95:05:33:C8:1B:C0:99:22:37:18:F6:D2:E5:21:55 X509v3 Authority Key Identifier: keyid:A6:2F:CD:64:54:A6:8A:08:65:F6:B9:5C:C0:E8:77:44:9E:F3:EF:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:96:ee:40:d4:b3:26:ff:29:f5:f9:9b:04:b3:51:30:86:14: 3a:c8:a7:4f:a1:a9:d7:4f:b4:58:98:e8:05:c7:6c:21:2e:3e: 2a:c1:4e:8f:60:ec:b6:53:23:4d:83:60:ca:63:c0:c7:99:97: da:7a:ad:98:f4:e4:ca:41:5d:94:9c:38:eb:6e:3a:94:a5:c4: a9:93:dc:e0:e7:aa:96:53:34:1f:2e:e8:ae:10:17:49:ae:02: 6c:8d:23:7d:2f:f3:15:bd:4d:66:5d:77:06:20:7f:0e:20:4a: 2b:ab:dd:d9:33:a6:de:94:8b:cc:09:90:1f:2d:47:b4:b5:ee: 85:8b:4b:20:11:52:20:0a:9d:02:be:d2:e1:5a:4b:37:e2:5e: 33:b6:04:24:80:f5:f1:c2:2f:a9:67:e1:b9:f1:16:1b:74:0a: 23:5e:c2:9a:e7:ff:10:42:e7:59:fa:a9:db:88:2e:ec:1d:31: 1a:1f:97:3d:d9:a9:ee:07:55:4c:49:29:c2:93:4d:9b:d5:c0: 1b:6d:12:41:5c:2e:cc:0b:70:13:81:7a:a8:57:ed:db:93:91: 1c:fd:be:bb:a9:53:f2:5a:a9:02:83:f4:1a:26:23:66:cf:a5: 30:05:c4:89:5d:6a:39:05:42:c0:50:a8:95:38:5b:d6:cc:12: 0a:af:49:c2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkE3NjExMC8GA1UEBRMoQTYyRkNENjQ1NEE2OEEwODY1RjZCOTVDQzBFODc3NDQ5 RUYzRUZBOTAeFw0yNjA1MjEwNzU3MzFaFw0yNjA1MjgwNzU3MzFaMBgxFjAUBgNV BAMTDTZhMGViYWVjLThkMWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2AxElmO9C4LztfmGG/DdRUmAcDKzFYx+Dbac4do2RXxt8s5n/H0aJd4MWTdyt sScX6HcyWR4bB6WEEbgS440GlN+ZDyMsxTpjf18UXw/w81ocHcYrT+PW3j7QVnlZ z+FsFM77JRRbvkW49cy3ygxcj8JNnJ/Yu5g2jEVARMR9zSliUGYjeff/R1gKfDdg OBn6jKXvVqcX/oY3fwCale0DrD+cDSbi9uMOmJ2LsrnHIKu1i0fihFcSkafSKfRJ 1j1lOUO04JKv9IInY4AOhKxFcbj58hKFwY6XMAnBoCIPkIfjGKy3r+/X6d8PoGED /NLLAuMGYSN40ksb+VM/2ZvzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULy2bh8qV BTPIG8CZIjcY9tLlIVUwHwYDVR0jBBgwFoAUpi/NZFSmighl9rlcwOh3RJ7z76kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCQTc2LzA4N0NDN0EwQjBD MDExRjBCNjlFQTI1NkM0RjlBRTAyL3BpX05aRlNtaWdobDlybGN3T2gzUko3ejc2 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGlfTlpGU21pZ2hsOXJsY3dPaDNSSjd6NzZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC QTc2LzA4N0NDN0EwQjBDMDExRjBCNjlFQTI1NkM0RjlBRTAyL3BpX05aRlNtaWdo bDlybGN3T2gzUko3ejc2ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDIlu5A1LMm/yn1+ZsEs1EwhhQ6yKdPoanXT7RYmOgFx2whLj4qwU6PYOy2UyNN g2DKY8DHmZfaeq2Y9OTKQV2UnDjrbjqUpcSpk9zg56qWUzQfLuiuEBdJrgJsjSN9 L/MVvU1mXXcGIH8OIEorq93ZM6belIvMCZAfLUe0te6Fi0sgEVIgCp0CvtLhWks3 4l4ztgQkgPXxwi+pZ+G58RYbdAojXsKa5/8QQudZ+qnbiC7sHTEaH5c92anuB1VM SSnCk02b1cAbbRJBXC7MC3ATgXqoV+3bk5Ec/b67qVPyWqkCg/QaJiNmz6UwBcSJ XWo5BULAUKiVOFvWzBIKr0nC -----END CERTIFICATE-----Generated at Thu May 21 10:29:32 2026 by rpki-client