$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft File: nQi_OKDTi4yrfP2I9djE7WZ3jME.mft (raw, json) Hash identifier: ieMEq0aDmIBc/IYq0cCWbrrf47q3ffQVC7hKOr5bZgA= Subject key identifier: 49:1D:3F:0E:8C:13:54:C0:C0:3B:6D:81:1C:E5:0F:ED:92:27:C9:07 Authority key identifier: 9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 Certificate issuer: /CN=A913F0DF/serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft Manifest number: 01B6 Signing time: Sun 05 Apr 2026 03:29:12 +0000 Manifest this update: Sun 05 Apr 2026 03:29:11 +0000 Manifest next update: Sun 12 Apr 2026 03:29:11 +0000 Files and hashes: 1: nQi_OKDTi4yrfP2I9djE7WZ3jME.crl (hash: 0EofMK66iJjnYOu33TzB4JVAiS0uGPvmYHefHglqGmY=) 2: 7C7AF8E6E67011EEB76DCB76C4F9AE02.roa (hash: KcnRjC7T6Kcnl9YrWn5mYyKPUtty/r1wIebOb0MFfxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:29:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0DF, serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Validity Not Before: Apr 5 03:29:11 2026 GMT Not After : Apr 12 03:29:11 2026 GMT Subject: CN=69d1d708-5758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9f:3d:d8:44:0b:3f:7c:4e:cf:dc:33:d6:1e: 17:6f:98:42:85:74:b7:40:1e:c2:d3:c4:59:ba:e8: d0:e7:a6:a4:31:e2:bc:e7:96:15:14:00:16:00:87: 28:91:c4:61:02:65:c1:b9:cf:00:83:9e:28:76:66: 12:d6:4a:a3:a6:fe:16:cc:5f:4b:0f:79:23:f7:fe: ac:7b:a2:c9:9c:27:c9:d5:f8:7f:7e:bc:76:01:27: 1e:cb:20:49:5f:f0:72:0a:1c:8d:f6:ae:c5:0d:43: 36:c2:aa:08:6c:ad:ac:46:22:1f:bc:0f:1e:18:31: a2:af:4b:e8:7d:2b:d0:42:58:b7:be:7b:63:95:f6: 76:32:5a:1c:94:6f:e4:8a:4d:87:4d:ce:75:5e:4e: 26:85:09:db:56:d4:d0:16:50:63:7c:e4:17:bc:42: ac:36:7c:a8:40:92:cf:7f:f3:54:b7:ad:e4:94:ef: e8:ae:9b:3c:ce:f6:a2:c7:18:6a:1a:c9:42:89:e4: e9:3c:72:a4:f7:46:16:c6:68:ac:f7:6b:f3:1f:ef: a9:38:59:af:ae:bf:fa:f7:14:15:d9:22:35:01:dd: 79:48:45:a2:61:86:d4:1e:db:5c:d3:db:49:c7:f0: a2:61:b8:38:04:fb:bf:a3:c5:3e:96:09:e5:33:b8: ac:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1D:3F:0E:8C:13:54:C0:C0:3B:6D:81:1C:E5:0F:ED:92:27:C9:07 X509v3 Authority Key Identifier: keyid:9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:49:5f:66:8b:5a:be:e3:6f:eb:4f:cb:17:77:37:98:fc:2f: 83:f9:39:48:de:d7:78:67:a0:9a:09:04:d7:47:0c:13:23:59: 8b:4a:0f:a4:bc:ea:77:97:f2:c7:32:5e:0e:c2:8c:3e:95:4b: dd:ba:3e:29:18:8e:bf:f5:ed:62:71:1c:19:24:ce:d1:48:0a: 86:db:c9:00:2a:9f:ce:92:ea:21:2f:45:8c:0f:78:05:a9:9f: 90:62:b6:76:95:cd:0c:fb:4f:02:63:89:41:f3:11:4a:07:81: b0:4c:f7:db:d1:58:da:1f:0d:09:22:76:64:49:c6:09:b5:ac: 04:50:99:1f:9c:d7:38:0f:7c:b6:c4:f4:57:c3:33:73:17:9a: 41:5b:50:9f:5a:8d:7b:cb:cc:8b:74:f1:f7:17:19:62:14:8d: 2c:f0:00:90:2b:92:03:51:e5:9e:f1:db:b4:42:92:1d:c3:43: da:45:2b:00:00:af:0c:87:2b:0f:db:d8:7b:7f:a8:9b:82:55: a8:e7:11:55:45:52:25:35:85:46:ad:f9:6a:a1:45:32:02:bb: d9:10:9c:1d:60:e6:a8:90:70:e8:8a:44:62:68:6d:fa:2f:32: 13:55:49:b6:83:d3:06:5e:8e:97:36:29:d4:2c:77:cb:51:df: de:bc:11:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwREYxMTAvBgNVBAUTKDlEMDhCRjM4QTBEMzhCOENBQjdDRkQ4OEY1RDhDNEVE NjY3NzhDQzEwHhcNMjYwNDA1MDMyOTExWhcNMjYwNDEyMDMyOTExWjAYMRYwFAYD VQQDEw02OWQxZDcwOC01NzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZ892EQLP3xOz9wz1h4Xb5hChXS3QB7C08RZuujQ56akMeK855YVFAAWAIco kcRhAmXBuc8Ag54odmYS1kqjpv4WzF9LD3kj9/6se6LJnCfJ1fh/frx2ASceyyBJ X/ByChyN9q7FDUM2wqoIbK2sRiIfvA8eGDGir0vofSvQQli3vntjlfZ2MloclG/k ik2HTc51Xk4mhQnbVtTQFlBjfOQXvEKsNnyoQJLPf/NUt63klO/orps8zvaixxhq GslCieTpPHKk90YWxmis92vzH++pOFmvrr/69xQV2SI1Ad15SEWiYYbUHttc09tJ x/CiYbg4BPu/o8U+lgnlM7isKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEkdPw6M E1TAwDttgRzlD+2SJ8kHMB8GA1UdIwQYMBaAFJ0Ivzig04uMq3z9iPXYxO1md4zB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBERi9FNTA4MzY0ODk5 MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0eXJmUDJJOWRqRTdXWjNq TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RaV9PS0RUaTR5cmZQMkk5ZGpFN1daM2pNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBERi9FNTA4MzY0ODk5MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0 eXJmUDJJOWRqRTdXWjNqTUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG0lfZotavuNv60/LF3c3mPwvg/k5SN7XeGegmgkE10cMEyNZi0oPpLzqd5fy xzJeDsKMPpVL3bo+KRiOv/XtYnEcGSTO0UgKhtvJACqfzpLqIS9FjA94BamfkGK2 dpXNDPtPAmOJQfMRSgeBsEz329FY2h8NCSJ2ZEnGCbWsBFCZH5zXOA98tsT0V8Mz cxeaQVtQn1qNe8vMi3Tx9xcZYhSNLPAAkCuSA1HlnvHbtEKSHcND2kUrAACvDIcr D9vYe3+om4JVqOcRVUVSJTWFRq35aqFFMgK72RCcHWDmqJBw6IpEYmht+i8yE1VJ toPTBl6OlzYp1Cx3y1Hf3rwR+A== -----END CERTIFICATE-----Generated at Mon Apr 6 08:26:07 2026 by rpki-client