$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft File: nIFHHxiq7s35RafJF_2KiYXXw6w.mft (raw, json) Hash identifier: UmLdsNFXRW/HE5fRdLkz7YtuqzLLsqIoy6Om0Q0cigk= Subject key identifier: 35:D9:62:99:4D:4D:20:CA:C0:8E:7F:8B:89:22:F0:5F:35:10:3F:57 Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Certificate serial: 2B4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft Manifest number: 2B09 Signing time: Wed 20 May 2026 15:33:32 +0000 Manifest this update: Wed 20 May 2026 15:33:32 +0000 Manifest next update: Wed 27 May 2026 15:33:32 +0000 Files and hashes: 1: nIFHHxiq7s35RafJF_2KiYXXw6w.crl (hash: age0e2HXs6ieK7hnhVjsDAkxq2M7KzjQ9+Iu1Gm7DL4=) 2: FB405D86900E11EAA43BB21FC4F9AE02.roa (hash: Mml/GDHtSEelqn0CLVtWVAulYa1xZrTOLXsNy4rC6ik=) 3: 3118E43E966B11EAAA23047CC4F9AE02.roa (hash: tDcO3gAeV3vTmIvIAIx8rJ91i0PU7YIxp3dKxE3Ka/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 15:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11085 (0x2b4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Validity Not Before: May 20 15:33:32 2026 GMT Not After : May 27 15:33:32 2026 GMT Subject: CN=6a0dd44c-253a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0a:26:ba:ea:a4:7d:df:05:ae:a3:e8:44:a9: 2f:a0:97:9a:10:56:b4:5c:46:6b:05:c4:e4:e3:74: 5c:e8:2f:33:1e:1d:48:9f:74:9e:ff:3f:75:0c:55: 85:d0:2e:ea:2b:76:dd:c8:49:a0:db:a6:98:47:12: 49:c0:9f:3c:89:b5:48:ed:ed:e6:a4:30:11:65:65: 56:e5:b8:c3:a2:62:f7:f5:f6:17:3c:c2:82:9e:8e: 1b:35:62:99:b6:73:e5:90:37:2a:98:c7:99:39:44: 80:b4:3e:60:a3:90:79:03:9f:a8:dd:32:c8:43:2e: e1:ad:a5:43:fe:e2:d0:ad:11:5e:61:a6:24:67:26: 9f:35:4c:4b:c2:a8:0e:54:86:44:a7:73:df:8b:63: b0:73:95:63:ce:d0:f4:b7:01:a1:92:2a:39:bd:29: bf:cc:d7:5e:a2:3b:00:38:e7:e2:db:ed:e6:da:1f: 03:9c:e3:4c:24:ce:e9:a0:5c:02:8d:f8:57:c9:3f: fd:2b:db:48:ad:01:3a:88:08:9a:4c:a6:86:1c:13: 49:17:9c:0b:4f:88:03:ac:9b:54:cd:ab:d3:8e:19: a5:6d:ee:7c:a1:70:66:89:e4:c0:60:a1:45:aa:b5: 4e:2d:cf:a2:28:bc:b7:3b:fd:0b:9b:32:3d:4c:92: e7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D9:62:99:4D:4D:20:CA:C0:8E:7F:8B:89:22:F0:5F:35:10:3F:57 X509v3 Authority Key Identifier: keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:2e:2c:b4:b7:bd:d8:43:8c:69:d7:ec:ce:a3:c9:e0:db:9d: ef:a3:b0:b7:71:9f:7a:6c:58:ea:a0:7e:bf:36:4b:a1:c6:77: eb:cc:1e:27:e1:05:2d:1e:c9:c0:06:d5:96:81:ac:be:79:b0: 69:83:03:73:da:2c:67:60:d2:ac:ff:34:d4:76:30:40:ee:0c: 60:54:fd:24:27:b6:e8:ae:6f:d0:f2:73:08:00:6d:3c:03:c1: 72:b2:63:c8:4f:5a:4f:b1:c3:01:41:4c:ba:4b:29:c1:41:9d: ed:54:7b:c2:38:0f:3d:31:9e:8d:2d:9c:a7:3e:5f:b6:65:25: e9:49:0d:91:48:bd:25:85:79:9d:f7:fd:52:8a:d4:90:61:78: 81:25:97:1c:8f:93:02:aa:4a:9c:e7:6b:23:86:dd:f3:fa:74: a6:18:21:fc:5d:41:a1:83:c5:af:48:6c:66:f6:3e:d4:a5:98: e2:4b:78:84:7c:7d:df:e9:f8:6a:c2:b5:3c:56:af:b5:63:1e: be:74:ca:03:6b:be:9b:a9:e2:ca:5d:bb:9a:08:d4:c3:04:cb: 4d:68:99:d1:54:28:48:6e:78:6b:45:70:25:a6:4a:91:f8:f5: fa:78:81:07:e4:51:4c:a1:41:e2:c0:cc:17:9e:30:f0:08:78: dd:e5:0b:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICK00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDlDODE0NzFGMThBQUVFQ0RGOTQ1QTdDOTE3RkQ4QTg5 ODVEN0MzQUMwHhcNMjYwNTIwMTUzMzMyWhcNMjYwNTI3MTUzMzMyWjAYMRYwFAYD VQQDEw02YTBkZDQ0Yy0yNTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQomuuqkfd8FrqPoRKkvoJeaEFa0XEZrBcTk43Rc6C8zHh1In3Se/z91DFWF 0C7qK3bdyEmg26aYRxJJwJ88ibVI7e3mpDARZWVW5bjDomL39fYXPMKCno4bNWKZ tnPlkDcqmMeZOUSAtD5go5B5A5+o3TLIQy7hraVD/uLQrRFeYaYkZyafNUxLwqgO VIZEp3Pfi2Owc5VjztD0twGhkio5vSm/zNdeojsAOOfi2+3m2h8DnONMJM7poFwC jfhXyT/9K9tIrQE6iAiaTKaGHBNJF5wLT4gDrJtUzavTjhmlbe58oXBmieTAYKFF qrVOLc+iKLy3O/0LmzI9TJLnTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDXZYplN TSDKwI5/i4ki8F81ED9XMB8GA1UdIwQYMBaAFJyBRx8Yqu7N+UWnyRf9iomF18Os MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS8xRDJCRDAzRTJE REIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdzMzVSYWZKRl8yS2lZWFh3 NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JRkhIeGlxN3MzNVJhZkpGXzJLaVlYWHc2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS8xRDJCRDAzRTJEREIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdz MzVSYWZKRl8yS2lZWFh3NncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOi4stLe92EOMadfszqPJ4Nud76Owt3GfemxY6qB+vzZLocZ368weJ+EFLR7J wAbVloGsvnmwaYMDc9osZ2DSrP801HYwQO4MYFT9JCe26K5v0PJzCABtPAPBcrJj yE9aT7HDAUFMukspwUGd7VR7wjgPPTGejS2cpz5ftmUl6UkNkUi9JYV5nff9UorU kGF4gSWXHI+TAqpKnOdrI4bd8/p0phgh/F1BoYPFr0hsZvY+1KWY4kt4hHx93+n4 asK1PFavtWMevnTKA2u+m6niyl27mgjUwwTLTWiZ0VQoSG54a0VwJaZKkfj1+niB B+RRTKFB4sDMF54w8Ah43eULvA== -----END CERTIFICATE-----Generated at Thu May 21 11:15:03 2026 by rpki-client