$ rpki-client -vvf rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft File: NhN5wakOmU8oZFtzNWRe_DpeGs0.mft (raw, json) Hash identifier: kw3DcxtOey2b2cYYwQWQw2L1/ewUeix9llrRA9FxyuE= Subject key identifier: FC:F6:A9:4E:FF:0C:FA:A5:9D:AC:B9:F7:16:9C:1A:36:C0:D3:C7:2C Authority key identifier: 36:13:79:C1:A9:0E:99:4F:28:64:5B:73:35:64:5E:FC:3A:5E:1A:CD Certificate issuer: /CN=A914DCD4/serialNumber=361379C1A90E994F28645B7335645EFC3A5E1ACD Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft Manifest number: 3C Signing time: Sun 05 Apr 2026 07:54:50 +0000 Manifest this update: Sun 05 Apr 2026 07:54:50 +0000 Manifest next update: Sun 12 Apr 2026 07:54:50 +0000 Files and hashes: 1: NhN5wakOmU8oZFtzNWRe_DpeGs0.crl (hash: fVbZKVjzvYYYz4ezsTRd+WEN+A9zBcX6kG2fN9hbOcI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.crl rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DCD4, serialNumber=361379C1A90E994F28645B7335645EFC3A5E1ACD Validity Not Before: Apr 5 07:54:50 2026 GMT Not After : Apr 12 07:54:50 2026 GMT Subject: CN=69d2154a-e9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ea:6e:26:20:11:93:09:71:37:f0:43:11:f2: e6:7f:38:9d:29:5b:ea:54:67:b9:da:82:ca:a4:f1: b9:f7:10:48:21:03:10:36:4c:d3:c4:9a:85:55:57: a7:2c:e4:b1:d6:b3:21:3d:67:e9:af:32:cc:10:77: 7d:79:93:29:c8:9c:c7:8a:83:4b:f4:12:37:f3:ad: eb:80:e9:12:2a:91:c0:d6:31:69:53:dc:10:74:34: 46:63:61:3a:75:53:db:40:57:90:dc:f0:30:fb:e4: eb:c3:b0:7a:85:70:9c:ec:a0:46:4c:76:a3:87:e5: 8a:8e:d3:a5:5f:8c:a2:c3:88:d2:a3:92:0e:74:ff: f4:91:af:41:a2:4a:79:0a:20:34:26:e9:10:23:ff: 83:37:f4:a5:27:6a:4d:00:a2:89:25:9c:aa:32:ee: 25:65:84:38:14:60:33:18:61:ee:d6:59:42:47:ab: e2:35:84:67:0e:80:4b:f8:07:a8:ea:3b:46:51:38: 2b:79:0c:18:33:dd:3f:db:64:1f:ea:68:68:cb:0d: be:85:d6:ec:75:12:a5:68:4b:88:40:27:97:cb:12: 1f:22:af:08:c9:dc:fe:a5:eb:67:ae:7f:49:08:d8: e5:a3:72:e5:de:cb:61:51:e7:d6:a3:95:2f:e2:90: b2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F6:A9:4E:FF:0C:FA:A5:9D:AC:B9:F7:16:9C:1A:36:C0:D3:C7:2C X509v3 Authority Key Identifier: keyid:36:13:79:C1:A9:0E:99:4F:28:64:5B:73:35:64:5E:FC:3A:5E:1A:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:43:90:ad:5c:5a:c0:38:62:b6:0e:aa:cf:06:03:e1:38:64: 3e:a4:c2:32:60:82:e1:24:72:77:e2:37:bd:7a:8b:07:8d:b9: b8:c1:f1:09:5e:66:a6:c7:a7:c7:f6:d3:c1:7a:6e:96:ef:39: f1:28:93:bb:02:73:99:62:0f:20:35:1e:d7:8a:8e:ba:52:7f: 91:e3:fe:78:72:fa:ae:35:33:25:69:31:cf:26:62:f2:83:00: 8b:02:0b:40:a8:2c:f2:07:01:84:f4:85:61:60:57:1d:07:71: 8d:3d:d5:0f:40:80:9d:c6:cb:2e:ce:6a:9d:b8:89:8a:20:15: d6:0a:9b:87:f5:84:5e:72:54:4d:1d:1b:a6:0f:cb:77:84:21: ea:c2:a6:f2:19:9c:1e:90:d6:82:b8:10:25:4e:16:5b:b2:76: 74:ab:a9:49:48:0b:82:91:2c:cf:c7:3a:0c:51:8c:d9:cd:e8: ec:b9:c6:24:9c:47:06:47:b1:be:89:af:7e:cc:13:62:fb:a8: 0c:8d:97:19:59:a0:df:0b:ec:fe:67:0a:35:fc:3d:59:93:f0: 27:fa:c4:bd:9d:b7:f9:de:c2:e1:d8:51:d3:ea:9d:fb:51:b9: eb:37:ea:bb:02:58:e5:85:ac:fd:36:71:a8:9c:1c:1b:2a:99: 5e:fa:61:b3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RENENDExMC8GA1UEBRMoMzYxMzc5QzFBOTBFOTk0RjI4NjQ1QjczMzU2NDVFRkMz QTVFMUFDRDAeFw0yNjA0MDUwNzU0NTBaFw0yNjA0MTIwNzU0NTBaMBgxFjAUBgNV BAMTDTY5ZDIxNTRhLWU5ZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+6m4mIBGTCXE38EMR8uZ/OJ0pW+pUZ7nagsqk8bn3EEghAxA2TNPEmoVVV6cs 5LHWsyE9Z+mvMswQd315kynInMeKg0v0EjfzreuA6RIqkcDWMWlT3BB0NEZjYTp1 U9tAV5Dc8DD75OvDsHqFcJzsoEZMdqOH5YqO06VfjKLDiNKjkg50//SRr0GiSnkK IDQm6RAj/4M39KUnak0AooklnKoy7iVlhDgUYDMYYe7WWUJHq+I1hGcOgEv4B6jq O0ZROCt5DBgz3T/bZB/qaGjLDb6F1ux1EqVoS4hAJ5fLEh8irwjJ3P6l62euf0kI 2OWjcuXey2FR59ajlS/ikLKHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/PapTv8M +qWdrLn3FpwaNsDTxywwHwYDVR0jBBgwFoAUNhN5wakOmU8oZFtzNWRe/DpeGs0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREQ0Q0L0I5OEMzQTM4RTFB QTExRjBBRkNFODRCODRBNkY1NkJDL05oTjV3YWtPbVU4b1pGdHpOV1JlX0RwZUdz MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTmhONXdha09tVThvWkZ0ek5XUmVfRHBlR3MwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE Q0Q0L0I5OEMzQTM4RTFBQTExRjBBRkNFODRCODRBNkY1NkJDL05oTjV3YWtPbVU4 b1pGdHpOV1JlX0RwZUdzMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCXQ5CtXFrAOGK2DqrPBgPhOGQ+pMIyYILhJHJ34je9eosHjbm4wfEJXmamx6fH 9tPBem6W7znxKJO7AnOZYg8gNR7Xio66Un+R4/54cvquNTMlaTHPJmLygwCLAgtA qCzyBwGE9IVhYFcdB3GNPdUPQICdxssuzmqduImKIBXWCpuH9YReclRNHRumD8t3 hCHqwqbyGZwekNaCuBAlThZbsnZ0q6lJSAuCkSzPxzoMUYzZzejsucYknEcGR7G+ ia9+zBNi+6gMjZcZWaDfC+z+Zwo1/D1Zk/An+sS9nbf53sLh2FHT6p37UbnrN+q7 Aljlhaz9NnGonBwbKple+mGz -----END CERTIFICATE-----Generated at Mon Apr 6 08:32:04 2026 by rpki-client