$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft File: nxlDAU2jmDwfXHj3bM8tpWpKNro.mft (raw, json) Hash identifier: JGOf3LTbGA3isa4AelMr8c5umDsrwHTGjUcShGgi6xs= Subject key identifier: EB:02:FD:25:84:84:CB:94:A7:0D:B0:68:AB:47:B0:48:04:30:51:F9 Authority key identifier: 9F:19:43:01:4D:A3:98:3C:1F:5C:78:F7:6C:CF:2D:A5:6A:4A:36:BA Certificate issuer: /CN=A912E3B6/serialNumber=9F1943014DA3983C1F5C78F76CCF2DA56A4A36BA Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft Manifest number: 16 Signing time: Tue 21 Apr 2026 08:46:56 +0000 Manifest this update: Tue 21 Apr 2026 08:46:56 +0000 Manifest next update: Tue 28 Apr 2026 08:46:56 +0000 Files and hashes: 1: nxlDAU2jmDwfXHj3bM8tpWpKNro.crl (hash: jLsr5qvTfX3TFukD1axAV9h13dKuaBxKA7/E91SyW3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.crl rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E3B6, serialNumber=9F1943014DA3983C1F5C78F76CCF2DA56A4A36BA Validity Not Before: Apr 21 08:46:56 2026 GMT Not After : Apr 28 08:46:56 2026 GMT Subject: CN=69e73980-be06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9c:7e:b1:36:b8:7e:de:0a:93:3e:b3:b7:ed: 8c:52:68:90:1a:7f:65:66:e5:81:dc:75:47:a7:0f: f7:a2:7e:8a:7c:f6:94:cf:e7:65:bd:90:0e:fa:ad: c5:87:3d:93:6c:14:48:12:57:93:3c:70:3f:b6:4c: 70:74:c5:82:1e:52:18:21:a9:80:a2:fa:67:79:25: 13:d5:13:62:7f:49:6b:22:6f:f4:b1:81:cf:22:aa: 55:59:4e:09:51:04:94:16:8c:59:bb:ed:20:07:aa: 49:9a:3d:50:27:60:aa:a2:9f:41:18:ff:0d:61:35: 3e:5f:d5:02:22:2d:2a:df:7c:e2:a2:86:7b:ad:90: 06:2c:20:e0:fa:b8:6b:10:18:d5:ea:cc:29:ab:6d: 8e:15:22:cb:0c:df:f2:fa:88:60:0f:38:9e:5f:ae: dd:da:bd:53:33:cb:c1:c2:bc:3c:ac:be:d9:c2:1c: 78:fb:31:1d:0b:ca:a6:71:9b:61:c3:7a:b7:e2:dd: 1d:66:44:34:76:87:c3:3f:75:28:c4:78:0b:99:e5: 0f:bd:cf:33:77:19:63:6d:d4:0c:ba:b9:ec:7b:4c: 62:2e:8a:3f:1f:bd:e7:6d:0d:8a:89:d1:7c:09:13: 44:76:e0:fe:92:c4:5e:48:04:df:e8:94:66:88:f5: f1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:02:FD:25:84:84:CB:94:A7:0D:B0:68:AB:47:B0:48:04:30:51:F9 X509v3 Authority Key Identifier: keyid:9F:19:43:01:4D:A3:98:3C:1F:5C:78:F7:6C:CF:2D:A5:6A:4A:36:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:97:ac:bc:d1:c1:d8:4b:9d:b6:0b:53:39:a9:d4:08:ee:5f: ea:8a:e9:f0:94:01:a8:2e:24:9e:c7:f4:c9:3b:a2:d7:d8:8c: 92:8e:20:2f:08:07:b5:8d:fc:74:36:15:b6:bd:6c:a5:d7:d4: dd:94:23:3c:23:28:b5:da:4f:fa:92:b3:28:de:3a:c1:6a:7c: e9:e6:37:05:a2:cb:5e:e0:4c:46:c5:01:bb:56:14:6b:3f:09: c0:58:2b:e2:9b:5f:a4:92:c1:3c:9b:3c:ab:43:e2:d5:48:a3: ee:e1:f5:b0:cd:91:be:51:31:f0:aa:e5:d5:76:47:85:f1:d4: b3:75:bc:47:c0:a6:61:5b:7f:e2:0d:aa:95:c0:da:fe:81:19: 92:ad:68:b1:45:55:9e:32:ec:c8:66:d5:42:66:ad:15:8f:5a: f8:71:d1:3b:31:75:5c:72:cf:bc:4d:99:cb:0a:d6:58:c4:10: c5:73:3e:49:5e:4b:09:5c:19:0c:06:f9:2b:42:98:fb:e1:7c: cb:0b:e6:e2:08:16:41:74:7e:d7:8f:34:6c:69:2a:68:66:bb: db:5c:1e:a1:e4:21:62:19:b8:29:0f:45:40:0d:8b:60:a0:01: 92:dd:80:6e:2b:3b:07:c6:44:1b:35:1a:74:2d:88:76:50:18: c8:21:7e:7f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RTNCNjExMC8GA1UEBRMoOUYxOTQzMDE0REEzOTgzQzFGNUM3OEY3NkNDRjJEQTU2 QTRBMzZCQTAeFw0yNjA0MjEwODQ2NTZaFw0yNjA0MjgwODQ2NTZaMBgxFjAUBgNV BAMTDTY5ZTczOTgwLWJlMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCRnH6xNrh+3gqTPrO37YxSaJAaf2Vm5YHcdUenD/eifop89pTP52W9kA76rcWH PZNsFEgSV5M8cD+2THB0xYIeUhghqYCi+md5JRPVE2J/SWsib/Sxgc8iqlVZTglR BJQWjFm77SAHqkmaPVAnYKqin0EY/w1hNT5f1QIiLSrffOKihnutkAYsIOD6uGsQ GNXqzCmrbY4VIssM3/L6iGAPOJ5frt3avVMzy8HCvDysvtnCHHj7MR0LyqZxm2HD erfi3R1mRDR2h8M/dSjEeAuZ5Q+9zzN3GWNt1Ay6uex7TGIuij8fvedtDYqJ0XwJ E0R24P6SxF5IBN/olGaI9fEnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6wL9JYSE y5SnDbBoq0ewSAQwUfkwHwYDVR0jBBgwFoAUnxlDAU2jmDwfXHj3bM8tpWpKNrow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFM0I2L0MxNDc2OTk2MUVD MjExRjFBRjU2RDdCODI0M0Q4QzY3L254bERBVTJqbUR3ZlhIajNiTTh0cFdwS05y by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvbnhsREFVMmptRHdmWEhqM2JNOHRwV3BLTnJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF M0I2L0MxNDc2OTk2MUVDMjExRjFBRjU2RDdCODI0M0Q4QzY3L254bERBVTJqbUR3 ZlhIajNiTTh0cFdwS05yby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCFl6y80cHYS522C1M5qdQI7l/qiunwlAGoLiSex/TJO6LX2IySjiAvCAe1jfx0 NhW2vWyl19TdlCM8Iyi12k/6krMo3jrBanzp5jcFoste4ExGxQG7VhRrPwnAWCvi m1+kksE8mzyrQ+LVSKPu4fWwzZG+UTHwquXVdkeF8dSzdbxHwKZhW3/iDaqVwNr+ gRmSrWixRVWeMuzIZtVCZq0Vj1r4cdE7MXVccs+8TZnLCtZYxBDFcz5JXksJXBkM BvkrQpj74XzLC+biCBZBdH7XjzRsaSpoZrvbXB6h5CFiGbgpD0VADYtgoAGS3YBu KzsHxkQbNRp0LYh2UBjIIX5/ -----END CERTIFICATE-----Generated at Tue Apr 21 21:33:06 2026 by rpki-client