$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft File: nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json) Hash identifier: Cz+c+TPRA3NF/n1WGCnbH0umyEciS35Njpk3O+ZMWNs= Subject key identifier: 22:5F:C8:6C:EC:13:D9:EE:FE:B9:C4:C8:59:B7:CE:A5:01:62:EC:EC Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft Manifest number: 01E8 Signing time: Fri 01 May 2026 04:02:07 +0000 Manifest this update: Fri 01 May 2026 04:02:07 +0000 Manifest next update: Fri 08 May 2026 04:02:07 +0000 Files and hashes: 1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: JSJf+hbN0KwXo/HoEzvgJ600ron7O09KKe/hBc0fUNc=) 2: 551036FCF1CA11EFA1495230C4F9AE02.roa (hash: ph9mjxQXcLl4fEECl4pEGWMTp7mLbB/lR7kFkW96rzY=) 3: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: RuIzPpPmU5SYBxbzVmTPm1exsa1irL+SD8QrPzFj6WU=) 4: 908E69B20D4311F0B83AB36BC4F9AE02.roa (hash: 0rCihLa1R/JwK4jlGINRooaKzW7UBmX+YQfpTQsJlgY=) 5: 3C880EBABEEF11EF9178186BC4F9AE02.roa (hash: gDBNV8FCQoQRlF4+Z0of3x2gK+wLXaHl7XFSFbaKadM=) 6: 31C9441E68ED11F0BA447B41C4F9AE02.roa (hash: Tw/mmccci9TsCg4wjjeIfCh0v/cTONBZG05kzKfAujc=) 7: CA364B681A1711F0A1D93523C4F9AE02.roa (hash: VMXxFIYcOcmwdzE0TfKotJbGv4ASOkRQEsgw2BaIwTw=) 8: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: cMO5zU9AD/RoFLcnPT+DXNczqdbBJpb9yT+lZHAEick=) 9: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: BmXwbaUB2PnwCtWWwqTCrL/Z4ZUCXb6in34aW4SAhII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 May 2026 04:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Validity Not Before: May 1 04:02:07 2026 GMT Not After : May 8 04:02:07 2026 GMT Subject: CN=69f425bf-5ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7e:a9:3b:28:e4:8b:a4:1e:67:cb:08:10:d3: 4e:1a:80:75:21:63:24:6a:a2:3b:1b:ed:95:f4:1f: 26:8f:bd:78:fd:38:43:43:07:02:ae:75:49:e5:6f: 15:e4:5a:12:c0:2b:d2:45:91:d4:93:72:47:fb:86: 2e:f4:54:aa:72:1a:4e:68:95:70:3e:36:e1:d5:8e: 6c:6e:c2:90:78:d6:b8:60:4f:28:16:ff:07:b9:4d: d8:9d:5b:d9:68:a9:18:38:80:5c:d6:cf:df:d7:d2: c1:d9:84:74:b4:09:e2:b7:3a:e7:2a:7d:4e:e6:e8: 6a:92:2b:18:36:35:d8:ff:64:c5:9c:db:81:92:c9: e3:36:be:ed:9c:6a:2b:0e:ff:65:52:42:bf:df:ad: c3:2e:14:72:b3:00:06:46:17:cf:63:52:81:1b:e2: c3:3f:4e:6f:a0:8a:48:fe:95:72:3f:82:8d:21:99: 64:7b:5e:49:1b:b2:ec:08:ce:b6:ee:8b:ef:5a:64: b1:1c:3f:af:ec:6c:ae:7d:7f:4c:9d:c6:a3:76:40: 16:87:90:8a:65:cc:ba:da:a5:dc:2e:3b:28:10:e6: 4f:01:85:e9:e1:49:52:51:22:29:07:e4:0e:1b:d2: 9b:7a:b1:7f:3f:4c:78:c7:7d:72:5e:0d:70:90:cc: ae:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5F:C8:6C:EC:13:D9:EE:FE:B9:C4:C8:59:B7:CE:A5:01:62:EC:EC X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:0e:e5:e2:e3:6e:5f:80:1f:9a:69:bb:c4:45:9c:9b:f0:89: ec:ad:b4:2d:3b:82:01:82:2e:9f:fa:75:ec:04:6d:7f:22:ac: 6b:6b:48:e2:1d:71:f2:d3:5f:e5:a8:bc:2b:33:84:79:77:ab: 86:2c:c3:e7:11:58:45:83:b5:b4:52:72:72:44:c1:8b:d4:19: 1a:61:44:73:8d:dd:2f:59:30:68:2d:c0:2c:4f:28:33:8d:dd: 52:5f:86:34:1d:23:aa:07:f3:be:f2:3a:61:bf:28:43:ca:f4: a8:f3:11:44:c6:de:92:e1:b9:82:56:26:fe:1c:1c:89:64:bb: 7e:35:37:96:ad:91:80:5e:36:4b:10:78:93:24:cf:61:48:51: 08:8a:0c:72:d7:1f:79:3d:7c:df:5b:1b:96:16:6f:6d:16:2e: ba:33:8e:bd:64:f6:c8:cd:54:e5:14:10:56:1e:2a:bb:6b:2b: 8a:d5:5a:91:7d:45:f4:d4:3c:66:18:9f:ea:4b:67:bf:de:9b: 2d:0b:55:69:47:74:e6:52:81:2a:07:7e:da:22:83:3d:b8:8d: 8b:a8:2b:03:a3:1a:50:f6:89:6a:a8:15:84:2a:12:d7:1b:fd: 29:41:64:4c:1b:42:81:ff:85:9d:78:6b:f7:45:a8:96:bf:27: 3a:9b:c7:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjYwNTAxMDQwMjA3WhcNMjYwNTA4MDQwMjA3WjAYMRYwFAYD VQQDEw02OWY0MjViZi01ZWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwH6pOyjki6QeZ8sIENNOGoB1IWMkaqI7G+2V9B8mj714/ThDQwcCrnVJ5W8V 5FoSwCvSRZHUk3JH+4Yu9FSqchpOaJVwPjbh1Y5sbsKQeNa4YE8oFv8HuU3YnVvZ aKkYOIBc1s/f19LB2YR0tAnitzrnKn1O5uhqkisYNjXY/2TFnNuBksnjNr7tnGor Dv9lUkK/363DLhRyswAGRhfPY1KBG+LDP05voIpI/pVyP4KNIZlke15JG7LsCM62 7ovvWmSxHD+v7GyufX9MncajdkAWh5CKZcy62qXcLjsoEOZPAYXp4UlSUSIpB+QO G9KberF/P0x4x31yXg1wkMyu9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCJfyGzs E9nu/rnEyFm3zqUBYuzsMB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUQyQy8wMDM3M0M2QzlCQkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0 OVJMekJmS3MyMFBONmVUUkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVg7l4uNuX4Afmmm7xEWcm/CJ7K20LTuCAYIun/p17ARtfyKsa2tI4h1x8tNf 5ai8KzOEeXerhizD5xFYRYO1tFJyckTBi9QZGmFEc43dL1kwaC3ALE8oM43dUl+G NB0jqgfzvvI6Yb8oQ8r0qPMRRMbekuG5glYm/hwciWS7fjU3lq2RgF42SxB4kyTP YUhRCIoMctcfeT1831sblhZvbRYuujOOvWT2yM1U5RQQVh4qu2sritVakX1F9NQ8 Zhif6ktnv96bLQtVaUd05lKBKgd+2iKDPbiNi6grA6MaUPaJaqgVhCoS1xv9KUFk TBtCgf+FnXhr90Wolr8nOpvHgQ== -----END CERTIFICATE-----Generated at Sat May 2 01:26:55 2026 by rpki-client