$ rpki-client -vvf rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft File: NNe9YUOWrkRRcOBY4K7c661JQF8.mft (raw, json) Hash identifier: rM0ZZyCYD7GlJ9I0wSLtJimUjkApwGLH/tCkotXopwY= Subject key identifier: F7:84:13:D3:99:90:53:BD:19:3F:9F:86:4B:78:95:21:1F:D8:0D:1E Authority key identifier: 34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F Certificate issuer: /CN=A9133F6B/serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft Manifest number: 0124 Signing time: Sun 05 Apr 2026 05:05:13 +0000 Manifest this update: Sun 05 Apr 2026 05:05:12 +0000 Manifest next update: Sun 12 Apr 2026 05:05:12 +0000 Files and hashes: 1: NNe9YUOWrkRRcOBY4K7c661JQF8.crl (hash: HBicPXrbLC8gvfNblUr9eTuDIO3yYqMCpu/tvvtRmMY=) 2: CDB922F074AF11EFA0B26646C4F9AE02.roa (hash: QEHeDKXl3W219yRsuSOY/SsIE0BE8LgnZaquYZmmgt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133F6B, serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F Validity Not Before: Apr 5 05:05:12 2026 GMT Not After : Apr 12 05:05:12 2026 GMT Subject: CN=69d1ed88-d361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:d6:5e:bb:a6:14:d6:a6:ad:91:3a:d3:22: 9a:49:09:39:af:ae:26:35:b0:73:ee:84:e6:09:a6: 81:4a:e1:e9:22:3f:3b:b7:a8:cb:a6:be:0a:e6:23: 39:83:fb:67:c6:4f:9e:3b:81:d7:9c:55:e3:f4:db: fe:28:0c:42:cd:7e:ab:0d:9f:d5:9b:18:7d:ac:f6: 0b:ff:10:ea:40:41:ba:5d:98:a7:57:eb:73:97:08: 45:83:aa:27:15:47:b3:3a:b9:07:7e:9b:4e:66:f3: 4a:e6:d5:13:51:a1:4c:2b:05:9f:8c:9c:2b:f0:50: 47:77:03:78:72:e6:88:8e:33:3a:1c:7f:48:73:70: 9c:48:50:53:00:6e:87:2a:4e:76:a6:c7:bf:ac:71: 84:5d:0d:f2:12:1d:03:d0:83:c5:8a:7f:1d:d4:45: 5c:2e:b0:5e:2f:ca:dd:05:fe:c8:5c:62:cc:f6:e1: 25:e6:dc:15:9e:5f:7d:75:7f:fc:7a:02:f9:a4:1e: dd:ed:c6:7a:c4:c5:c4:da:cf:bb:d8:98:29:7f:27: 2c:e1:c3:23:e8:c2:75:b6:3a:03:f6:92:23:8f:4f: 51:82:96:3b:df:a4:04:4e:7b:fe:4c:3f:a9:9e:43: d5:08:08:1b:34:dd:c2:79:73:fc:d5:77:ad:1e:b8: 33:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:84:13:D3:99:90:53:BD:19:3F:9F:86:4B:78:95:21:1F:D8:0D:1E X509v3 Authority Key Identifier: keyid:34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:22:a7:ea:b8:da:11:6e:b4:c7:8d:71:83:6e:7f:39:80:de: 25:80:12:d1:f7:c2:05:2a:0b:cb:4c:f1:b4:66:e7:c8:43:da: f3:db:ad:a1:af:65:86:38:a5:0b:df:de:9e:9a:25:b0:37:b5: b4:27:21:87:a6:88:02:af:a8:74:88:dc:9f:fa:08:82:e2:73: 85:f2:cf:ed:de:ab:72:81:cd:9f:1e:07:9c:f4:cb:a8:18:e3: 71:b8:76:0a:b5:71:57:2a:5a:80:93:50:37:8f:39:77:63:99: 01:3d:23:f8:12:38:80:a0:3f:a8:b3:6f:81:e0:a3:40:23:47: ae:6a:f6:0e:d3:76:d1:91:7b:50:5d:33:8e:0b:3d:4c:1e:90: 25:e9:62:f2:05:3c:30:ba:fc:3f:90:f7:98:02:ac:2d:01:e4: 05:14:dd:04:91:db:8c:c7:c5:59:ce:d5:96:0d:61:c5:7d:50: 20:ae:67:0f:2b:d4:99:9e:15:e5:81:8e:43:d3:f6:49:64:6c: 6e:a6:ee:91:f0:7f:82:8c:77:44:9b:29:28:0f:61:42:02:95: 00:c2:45:60:37:cb:c5:93:9d:15:4e:0b:79:1a:81:e0:b8:aa: ae:7b:9c:25:96:b1:4f:65:16:ed:cd:68:ed:12:ff:a1:d9:6b: 4a:7a:c0:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNGNkIxMTAvBgNVBAUTKDM0RDdCRDYxNDM5NkFFNDQ1MTcwRTA1OEUwQUVEQ0VC QUQ0OTQwNUYwHhcNMjYwNDA1MDUwNTEyWhcNMjYwNDEyMDUwNTEyWjAYMRYwFAYD VQQDEw02OWQxZWQ4OC1kMzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvljWXrumFNamrZE60yKaSQk5r64mNbBz7oTmCaaBSuHpIj87t6jLpr4K5iM5 g/tnxk+eO4HXnFXj9Nv+KAxCzX6rDZ/Vmxh9rPYL/xDqQEG6XZinV+tzlwhFg6on FUezOrkHfptOZvNK5tUTUaFMKwWfjJwr8FBHdwN4cuaIjjM6HH9Ic3CcSFBTAG6H Kk52pse/rHGEXQ3yEh0D0IPFin8d1EVcLrBeL8rdBf7IXGLM9uEl5twVnl99dX/8 egL5pB7d7cZ6xMXE2s+72Jgpfycs4cMj6MJ1tjoD9pIjj09RgpY736QETnv+TD+p nkPVCAgbNN3CeXP81XetHrgzUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPeEE9OZ kFO9GT+fhkt4lSEf2A0eMB8GA1UdIwQYMBaAFDTXvWFDlq5EUXDgWOCu3OutSUBf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0Y2Qi85ODUyOTMzRTc0 QTYxMUVGQUI0QjA1M0NDNEY5QUUwMi9OTmU5WVVPV3JrUlJjT0JZNEs3YzY2MUpR RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05OZTlZVU9XcmtSUmNPQlk0SzdjNjYxSlFGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0Y2Qi85ODUyOTMzRTc0QTYxMUVGQUI0QjA1M0NDNEY5QUUwMi9OTmU5WVVPV3Jr UlJjT0JZNEs3YzY2MUpRRjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPSKn6rjaEW60x41xg25/OYDeJYAS0ffCBSoLy0zxtGbnyEPa89utoa9lhjil C9/enpolsDe1tCchh6aIAq+odIjcn/oIguJzhfLP7d6rcoHNnx4HnPTLqBjjcbh2 CrVxVypagJNQN485d2OZAT0j+BI4gKA/qLNvgeCjQCNHrmr2DtN20ZF7UF0zjgs9 TB6QJeli8gU8MLr8P5D3mAKsLQHkBRTdBJHbjMfFWc7Vlg1hxX1QIK5nDyvUmZ4V 5YGOQ9P2SWRsbqbukfB/gox3RJspKA9hQgKVAMJFYDfLxZOdFU4LeRqB4Liqrnuc JZaxT2UW7c1o7RL/odlrSnrAuw== -----END CERTIFICATE-----Generated at Mon Apr 6 11:19:44 2026 by rpki-client