$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft File: nQi_OKDTi4yrfP2I9djE7WZ3jME.mft (raw, json) Hash identifier: BCpp8YAtYfIjqYOGXeWN9uAm5vq3fTbgvaIcUXn8+Xk= Subject key identifier: F7:07:99:EE:A3:54:13:80:37:40:88:FC:7E:DD:35:D4:F2:2B:6A:EE Authority key identifier: 9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 Certificate issuer: /CN=A913F0DF/serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft Manifest number: 01CD Signing time: Thu 21 May 2026 03:47:12 +0000 Manifest this update: Thu 21 May 2026 03:47:11 +0000 Manifest next update: Thu 28 May 2026 03:47:11 +0000 Files and hashes: 1: nQi_OKDTi4yrfP2I9djE7WZ3jME.crl (hash: MglVi1IBdWHBadE/1RkGoLTAI3JZe7zMgmYK4jD70U4=) 2: 7C7AF8E6E67011EEB76DCB76C4F9AE02.roa (hash: KcnRjC7T6Kcnl9YrWn5mYyKPUtty/r1wIebOb0MFfxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0DF, serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Validity Not Before: May 21 03:47:11 2026 GMT Not After : May 28 03:47:11 2026 GMT Subject: CN=6a0e803f-8f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:54:5b:f2:5f:bd:f4:d0:01:80:24:7b:7d:25: 51:5b:26:16:88:20:a5:32:c4:77:ee:5f:aa:63:2b: 46:e3:39:81:8d:fc:70:3a:01:f5:8f:b7:61:d3:1c: b9:2f:7a:0e:c5:59:27:51:41:51:55:be:51:92:10: d7:d4:5d:2a:76:47:eb:91:90:8b:f4:4b:db:1d:e3: b1:74:95:d1:47:ee:aa:3e:9e:3f:fb:cc:e3:de:e4: 72:52:04:32:dc:4c:95:23:bc:95:f0:dc:47:a3:65: bb:e7:8c:26:ea:c5:56:ee:dd:84:52:c7:9f:b9:ef: 44:99:cd:60:da:cc:3e:de:c9:e9:3f:78:e7:7f:31: a9:bf:e0:23:23:ca:d9:ed:3d:ab:eb:fe:46:fe:cf: 6d:c3:39:00:8b:0f:de:15:a9:8c:64:f4:c1:f9:16: ae:3e:d0:01:24:5e:26:47:6b:05:cd:95:ac:12:b7: 12:5f:2c:58:be:be:ad:5c:7e:8e:2f:61:b8:54:ad: f8:71:61:98:13:6a:0b:9f:d1:ea:2f:d6:3f:99:41: 20:8d:30:11:21:b6:28:68:12:34:2c:01:7d:8a:0c: 7e:34:94:d6:b9:36:82:29:c4:9c:41:f1:00:a7:d5: 80:4b:4e:da:61:75:da:96:a5:22:98:30:31:a0:b1: 03:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:07:99:EE:A3:54:13:80:37:40:88:FC:7E:DD:35:D4:F2:2B:6A:EE X509v3 Authority Key Identifier: keyid:9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:26:6f:01:05:6f:40:09:10:94:81:e5:eb:27:24:ab:64:52: 4f:a4:c7:27:cd:e9:9e:77:92:b9:db:ff:f7:8d:48:cf:44:89: 5e:16:38:01:c3:69:d4:d5:d5:25:ae:fb:a2:77:f3:b2:4c:2a: 9b:00:e5:f7:b6:f0:02:dd:1f:69:82:d9:9c:bb:54:52:52:ec: ca:ca:a3:1f:39:01:53:23:c9:9c:3b:3f:cd:09:a5:a3:f3:15: 12:9f:95:cb:59:59:9d:c1:37:a3:52:dd:4b:5d:95:96:d9:77: 18:53:59:10:a4:4c:3a:30:bc:e9:e2:07:2d:fd:ef:af:a8:a5: 71:7d:f9:df:93:64:ca:b3:92:58:ba:6f:31:60:ad:ef:43:17: 68:40:4a:84:ab:3a:f3:9d:70:1d:58:d4:a4:a4:bf:05:e9:54: 19:97:ab:77:c2:aa:4d:c7:5d:62:17:0f:fc:a3:cf:0a:d3:7c: f6:3a:c2:f0:0a:55:ea:69:ce:a7:65:31:d8:da:9f:7c:a1:ab: 16:46:3f:86:6d:30:4c:c5:ad:2f:b3:b6:05:d5:2c:e3:60:13: e8:09:af:e2:af:3d:f0:ce:a1:e5:46:ce:4a:0f:66:02:ab:a5: 32:e0:09:0b:b8:5a:b9:fc:d4:ed:75:e2:75:e9:57:9f:d0:f2: ae:35:1d:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwREYxMTAvBgNVBAUTKDlEMDhCRjM4QTBEMzhCOENBQjdDRkQ4OEY1RDhDNEVE NjY3NzhDQzEwHhcNMjYwNTIxMDM0NzExWhcNMjYwNTI4MDM0NzExWjAYMRYwFAYD VQQDEw02YTBlODAzZi04ZjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1Rb8l+99NABgCR7fSVRWyYWiCClMsR37l+qYytG4zmBjfxwOgH1j7dh0xy5 L3oOxVknUUFRVb5RkhDX1F0qdkfrkZCL9EvbHeOxdJXRR+6qPp4/+8zj3uRyUgQy 3EyVI7yV8NxHo2W754wm6sVW7t2EUsefue9Emc1g2sw+3snpP3jnfzGpv+AjI8rZ 7T2r6/5G/s9twzkAiw/eFamMZPTB+RauPtABJF4mR2sFzZWsErcSXyxYvr6tXH6O L2G4VK34cWGYE2oLn9HqL9Y/mUEgjTARIbYoaBI0LAF9igx+NJTWuTaCKcScQfEA p9WAS07aYXXalqUimDAxoLEDOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPcHme6j VBOAN0CI/H7dNdTyK2ruMB8GA1UdIwQYMBaAFJ0Ivzig04uMq3z9iPXYxO1md4zB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBERi9FNTA4MzY0ODk5 MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0eXJmUDJJOWRqRTdXWjNq TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RaV9PS0RUaTR5cmZQMkk5ZGpFN1daM2pNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBERi9FNTA4MzY0ODk5MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0 eXJmUDJJOWRqRTdXWjNqTUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATSZvAQVvQAkQlIHl6yckq2RST6THJ83pnneSudv/941Iz0SJXhY4AcNp1NXV Ja77onfzskwqmwDl97bwAt0faYLZnLtUUlLsysqjHzkBUyPJnDs/zQmlo/MVEp+V y1lZncE3o1LdS12Vltl3GFNZEKRMOjC86eIHLf3vr6ilcX3535NkyrOSWLpvMWCt 70MXaEBKhKs6851wHVjUpKS/BelUGZerd8KqTcddYhcP/KPPCtN89jrC8ApV6mnO p2Ux2NqffKGrFkY/hm0wTMWtL7O2BdUs42AT6Amv4q898M6h5UbOSg9mAqulMuAJ C7haufzU7XXidelXn9DyrjUdng== -----END CERTIFICATE-----Generated at Thu May 21 09:36:12 2026 by rpki-client