$ rpki-client -vvf rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft File: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft (raw, json) Hash identifier: 0fIV7y13r1AoQOa8zO9meQEYB17T8KbxRIe0taDmSK4= Subject key identifier: BA:E0:93:29:94:98:2E:67:A4:B9:95:7F:63:AD:C3:26:25:28:23:C7 Authority key identifier: 36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD Certificate issuer: /CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Certificate serial: 0314 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft Manifest number: 0304 Signing time: Thu 21 May 2026 01:20:40 +0000 Manifest this update: Thu 21 May 2026 01:20:40 +0000 Manifest next update: Thu 28 May 2026 01:20:40 +0000 Files and hashes: 1: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl (hash: OEUWxihloY0GjBvARVkQJB+LS0GRzB8Hm45OiozTB+s=) 2: 134B439A91B611ED8BA25C80C4F9AE02.roa (hash: attv9ecZrF5kZRZeQ+lyJkiW+JXwe94b0M/AiRCsF3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 788 (0x314) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F333, serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Validity Not Before: May 21 01:20:40 2026 GMT Not After : May 28 01:20:40 2026 GMT Subject: CN=6a0e5de8-d7f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c4:97:09:65:ca:1f:e3:a8:4e:5d:90:03:22: bc:21:a8:ba:aa:2a:da:70:bd:b0:54:87:da:66:3a: e8:b2:e0:3c:56:4a:9f:96:48:bb:00:e0:3b:ef:c6: 25:d4:58:4a:4f:f2:ce:b5:b6:02:da:c2:8a:ab:a1: 3e:8a:50:2b:83:43:fd:e7:d9:4d:aa:27:6f:b3:eb: b3:96:80:66:64:83:1a:59:ec:de:7e:a9:3c:b1:b2: 38:98:04:3a:c7:64:ad:ec:8f:70:0a:8f:10:cd:6d: ac:7c:a1:30:92:3b:76:fa:05:f4:0e:92:03:3f:5f: 8d:ee:c4:03:7c:c0:6d:31:b1:6c:96:1b:c6:18:d4: 72:0a:9f:b4:d9:d7:10:0f:65:b2:eb:d9:1e:b0:c7: f3:52:65:3f:d2:e3:81:31:bf:9f:50:49:08:89:e5: f7:31:d8:9d:ca:b7:d9:77:2c:c1:74:78:50:f6:5b: 1f:1f:f6:2c:c9:68:5e:0c:66:bb:53:a0:87:ad:03: 3f:25:a0:6d:45:69:58:57:a4:bc:1b:65:33:d1:0a: 1e:83:f0:5b:12:53:42:3e:66:7d:74:be:49:40:c0: 79:ee:4d:c9:6f:90:2a:13:3a:26:01:b2:5c:71:38: 15:e2:65:31:60:62:a1:91:02:09:5e:dc:45:0c:b9: b2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E0:93:29:94:98:2E:67:A4:B9:95:7F:63:AD:C3:26:25:28:23:C7 X509v3 Authority Key Identifier: keyid:36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:85:37:a6:5c:a7:85:2d:c3:74:0d:37:63:e2:7d:18:66:e9: 94:dc:d8:96:db:7c:05:9f:d9:33:52:fe:f4:69:ac:38:5e:ad: 1a:bf:03:e5:fc:80:99:a8:2c:57:87:85:f9:e5:cd:45:6c:ff: ff:4c:53:93:38:12:75:1b:59:8b:3c:51:85:68:b1:97:1b:5a: c6:e1:18:20:43:f5:0b:8a:d9:44:5f:33:cc:ab:f9:25:de:f3: 6e:e2:79:bc:f8:9f:ce:05:03:8f:8a:25:06:ac:dc:8c:c1:7b: cf:ea:95:ea:d4:52:23:6d:c6:69:38:3d:bb:f3:87:19:78:fe: 2b:89:ea:cf:b6:92:ea:ac:dd:49:9f:9e:06:22:9f:9d:23:03: 07:20:c3:c9:18:ed:ca:88:e3:6f:fe:50:ae:60:f1:09:ce:7e: 1a:2e:5b:75:31:0e:5c:08:00:1d:2d:2d:8d:b7:7a:e5:83:bc: 2b:4f:46:ad:81:75:59:3f:99:e9:6b:c6:be:11:87:aa:f4:d6: 54:04:1a:8e:19:b0:ec:ad:8f:19:8c:8d:f2:b8:0d:c0:67:dc: b2:21:c5:4e:fb:cd:eb:c7:a1:ac:02:5d:f0:75:a2:8e:23:58: a2:20:53:00:f8:8d:70:c3:34:70:c3:0f:82:cf:f7:48:ff:41: 0c:d4:50:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YzMzMxMTAvBgNVBAUTKDM2NDA4QzExQzU0NzJCODIyNDhBRkZFQkVFREJCMjBF M0UwN0E2Q0QwHhcNMjYwNTIxMDEyMDQwWhcNMjYwNTI4MDEyMDQwWjAYMRYwFAYD VQQDEw02YTBlNWRlOC1kN2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssSXCWXKH+OoTl2QAyK8Iai6qiracL2wVIfaZjrosuA8Vkqflki7AOA778Yl 1FhKT/LOtbYC2sKKq6E+ilArg0P959lNqidvs+uzloBmZIMaWezefqk8sbI4mAQ6 x2St7I9wCo8QzW2sfKEwkjt2+gX0DpIDP1+N7sQDfMBtMbFslhvGGNRyCp+02dcQ D2Wy69kesMfzUmU/0uOBMb+fUEkIieX3MdidyrfZdyzBdHhQ9lsfH/YsyWheDGa7 U6CHrQM/JaBtRWlYV6S8G2Uz0Qoeg/BbElNCPmZ9dL5JQMB57k3Jb5AqEzomAbJc cTgV4mUxYGKhkQIJXtxFDLmyfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLrgkymU mC5npLmVf2OtwyYlKCPHMB8GA1UdIwQYMBaAFDZAjBHFRyuCJIr/6+7bsg4+B6bN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjMzMy9ERUNCNjVBNDIz OTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0SWtpdl9yN3R1eURqNEhw czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rQ01FY1ZISzRJa2l2X3I3dHV5RGo0SHBzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjMzMy9ERUNCNjVBNDIzOTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0 SWtpdl9yN3R1eURqNEhwczAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJYU3plynhS3DdA03Y+J9GGbplNzYltt8BZ/ZM1L+9GmsOF6tGr8D5fyAmags V4eF+eXNRWz//0xTkzgSdRtZizxRhWixlxtaxuEYIEP1C4rZRF8zzKv5Jd7zbuJ5 vPifzgUDj4olBqzcjMF7z+qV6tRSI23GaTg9u/OHGXj+K4nqz7aS6qzdSZ+eBiKf nSMDByDDyRjtyojjb/5QrmDxCc5+Gi5bdTEOXAgAHS0tjbd65YO8K09GrYF1WT+Z 6WvGvhGHqvTWVAQajhmw7K2PGYyN8rgNwGfcsiHFTvvN68ehrAJd8HWijiNYoiBT APiNcMM0cMMPgs/3SP9BDNRQNA== -----END CERTIFICATE-----Generated at Thu May 21 09:38:50 2026 by rpki-client