$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft File: nIFHHxiq7s35RafJF_2KiYXXw6w.mft (raw, json) Hash identifier: WcrJGM32MhTe5bcsxbv3lnm7FmNSvoa2sVRHpGh/L2I= Subject key identifier: 80:A5:91:D8:07:79:A5:54:4E:75:2F:C9:5C:83:8C:A2:02:FF:CC:E1 Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Certificate serial: 2B36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft Manifest number: 2AF2 Signing time: Sat 04 Apr 2026 15:30:29 +0000 Manifest this update: Sat 04 Apr 2026 15:30:28 +0000 Manifest next update: Sat 11 Apr 2026 15:30:28 +0000 Files and hashes: 1: nIFHHxiq7s35RafJF_2KiYXXw6w.crl (hash: JHFyPZIyiM9nTXauo4FdY/DoIv3HJuiH0ftPikdtPlQ=) 2: FB405D86900E11EAA43BB21FC4F9AE02.roa (hash: Mml/GDHtSEelqn0CLVtWVAulYa1xZrTOLXsNy4rC6ik=) 3: 3118E43E966B11EAAA23047CC4F9AE02.roa (hash: tDcO3gAeV3vTmIvIAIx8rJ91i0PU7YIxp3dKxE3Ka/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11062 (0x2b36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Validity Not Before: Apr 4 15:30:28 2026 GMT Not After : Apr 11 15:30:28 2026 GMT Subject: CN=69d12e95-2298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f3:6a:09:7f:b2:8e:63:c6:6e:ee:90:46:d8: e4:9d:ec:93:e5:d9:23:ed:0b:f0:e6:1f:2c:a0:44: b7:97:6e:f6:69:79:55:75:10:07:ee:9d:b6:96:72: f6:10:c2:19:48:09:6b:b1:56:49:b3:bc:5f:2c:b2: f7:23:00:f9:bc:c6:1f:11:f8:58:59:34:01:d4:82: fc:b7:50:79:69:8d:93:7b:ed:1a:f3:bc:0c:c7:6b: d3:3b:ef:67:89:33:3b:ec:6d:cd:23:40:d9:81:04: c6:87:90:2b:de:e9:6c:51:d8:dc:40:a8:5c:dc:fa: 76:79:d3:e5:ed:ea:52:0f:41:d2:60:31:c5:cb:8f: 92:f2:20:a0:ac:c0:07:f9:58:e7:98:9d:15:a4:de: 97:a9:20:e1:f0:f8:31:eb:d8:fe:8d:be:ed:db:1b: 60:95:8c:b6:c1:70:0c:3e:1d:9c:43:9a:70:89:d3: 8d:17:b0:e4:61:e9:dd:9b:ab:6e:9b:3f:1c:94:e2: 9a:54:5f:23:08:a4:c3:78:4a:71:a3:b4:57:dd:28: fb:0b:ea:92:b9:1e:39:e2:09:65:9a:57:67:31:6f: 38:31:92:4b:d6:4a:07:90:d0:1f:d7:1a:dc:dd:c3: b9:72:39:0d:14:c0:02:00:52:64:ab:57:48:b2:0c: f0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A5:91:D8:07:79:A5:54:4E:75:2F:C9:5C:83:8C:A2:02:FF:CC:E1 X509v3 Authority Key Identifier: keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:be:7a:41:25:e1:b5:f2:2a:56:33:63:6e:43:65:d0:25:76: af:9d:7e:a1:da:be:d5:51:ee:0c:1b:78:fd:df:26:55:5b:1b: 8a:f2:a4:46:4f:73:da:7a:9c:62:23:cd:3e:65:e2:e2:74:57: b5:4c:07:07:78:ab:ef:ad:c3:b7:27:4b:a1:c9:49:2d:5e:cc: bb:92:39:4f:7b:7c:69:b4:05:63:19:84:73:1a:92:8e:86:d8: e3:be:69:93:7d:6e:5a:f6:70:f3:18:a7:81:08:7a:69:72:ff: 87:4b:7c:16:7a:c7:37:b9:e9:f3:48:6e:52:57:50:99:37:f3: 34:93:06:b0:0f:b1:5f:f3:78:62:ac:f7:20:a6:84:3b:a0:47: 30:be:53:01:2f:5e:1d:93:5c:30:3d:64:f9:6b:4e:2f:1d:df: 5a:16:00:b1:69:a5:89:bd:67:1e:eb:ec:07:1a:0c:c6:b6:c6: 06:be:57:bc:72:12:53:f7:78:83:d3:b1:7a:a2:44:bc:40:44: 8e:b2:b3:ad:e1:43:f7:37:ee:df:e0:30:af:c7:ea:17:15:73: 5e:09:c8:70:46:9a:d1:59:fc:4a:a9:02:40:11:46:70:1b:27: 7a:e6:f4:6e:72:df:62:b5:44:0f:65:89:e1:b7:b3:bb:ba:26: ce:fd:f7:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDlDODE0NzFGMThBQUVFQ0RGOTQ1QTdDOTE3RkQ4QTg5 ODVEN0MzQUMwHhcNMjYwNDA0MTUzMDI4WhcNMjYwNDExMTUzMDI4WjAYMRYwFAYD VQQDEw02OWQxMmU5NS0yMjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/NqCX+yjmPGbu6QRtjkneyT5dkj7Qvw5h8soES3l272aXlVdRAH7p22lnL2 EMIZSAlrsVZJs7xfLLL3IwD5vMYfEfhYWTQB1IL8t1B5aY2Te+0a87wMx2vTO+9n iTM77G3NI0DZgQTGh5Ar3ulsUdjcQKhc3Pp2edPl7epSD0HSYDHFy4+S8iCgrMAH +VjnmJ0VpN6XqSDh8Pgx69j+jb7t2xtglYy2wXAMPh2cQ5pwidONF7DkYendm6tu mz8clOKaVF8jCKTDeEpxo7RX3Sj7C+qSuR454gllmldnMW84MZJL1koHkNAf1xrc 3cO5cjkNFMACAFJkq1dIsgzwHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIClkdgH eaVUTnUvyVyDjKIC/8zhMB8GA1UdIwQYMBaAFJyBRx8Yqu7N+UWnyRf9iomF18Os MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS8xRDJCRDAzRTJE REIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdzMzVSYWZKRl8yS2lZWFh3 NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JRkhIeGlxN3MzNVJhZkpGXzJLaVlYWHc2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS8xRDJCRDAzRTJEREIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdz MzVSYWZKRl8yS2lZWFh3NncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADr56QSXhtfIqVjNjbkNl0CV2r51+odq+1VHuDBt4/d8mVVsbivKkRk9z2nqc YiPNPmXi4nRXtUwHB3ir763DtydLoclJLV7Mu5I5T3t8abQFYxmEcxqSjobY475p k31uWvZw8xingQh6aXL/h0t8FnrHN7np80huUldQmTfzNJMGsA+xX/N4Yqz3IKaE O6BHML5TAS9eHZNcMD1k+WtOLx3fWhYAsWmlib1nHuvsBxoMxrbGBr5XvHISU/d4 g9OxeqJEvEBEjrKzreFD9zfu3+Awr8fqFxVzXgnIcEaa0Vn8SqkCQBFGcBsneub0 bnLfYrVED2WJ4bezu7omzv33VA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:51:04 2026 by rpki-client