$ rpki-client -vvf rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft File: nL-xN0vpMpetwbIdvTeY0VvSdN8.mft (raw, json) Hash identifier: jNPD8a+WemyyiCiD59Vt1pU5gRu+RiiDwhx7WTWQMjs= Subject key identifier: 09:38:77:B8:A0:2D:EB:6B:06:5E:C2:69:55:F9:FD:35:6D:A7:EE:73 Authority key identifier: 9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF Certificate issuer: /CN=A9152696/serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF Certificate serial: 0CE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft Manifest number: 0CDD Signing time: Sat 04 Apr 2026 18:09:13 +0000 Manifest this update: Sat 04 Apr 2026 18:09:13 +0000 Manifest next update: Sat 11 Apr 2026 18:09:13 +0000 Files and hashes: 1: nL-xN0vpMpetwbIdvTeY0VvSdN8.crl (hash: w909RtbgdpXkA2xERsDVROO8SmZYgeCvsRpDW7yl8BY=) 2: E905CD5808F111EA8E4F1D51C4F9AE02.roa (hash: isdogO69KQFGu46kiXPUMXjezpBNqbUl3557H/EGWLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3302 (0xce6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152696, serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF Validity Not Before: Apr 4 18:09:13 2026 GMT Not After : Apr 11 18:09:13 2026 GMT Subject: CN=69d153c9-9a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:76:45:cf:99:c6:ca:98:f9:98:3a:61:12:92: c8:e7:7e:08:bc:c3:d1:55:97:e1:17:34:0b:a7:8c: 8b:3d:a1:ae:f4:7c:29:b4:32:2d:5d:3a:5d:92:33: d8:10:fb:d6:60:dd:69:03:19:bc:ca:73:fe:e8:ca: 73:a4:83:ab:49:34:6a:bc:78:7a:51:9b:bb:85:69: dc:6e:70:f2:66:c5:8f:b1:43:34:3c:91:0c:e6:69: ff:d7:e6:96:a6:3d:d5:bb:7a:63:fd:7e:0c:f7:d5: 8b:1d:a8:82:4b:a0:7d:4b:b1:e3:0f:a3:0c:2a:a3: 1f:60:d4:0f:0c:0b:cb:95:34:f4:6b:f7:24:9f:cc: 22:7c:27:ae:79:20:1b:55:f0:cc:c7:06:69:07:8c: 94:f8:d4:9a:fd:26:5b:c2:84:91:00:dc:7d:d7:fa: e3:90:35:fd:94:61:90:7e:95:bf:65:c0:6d:1a:f5: 9e:1e:cb:67:c6:00:af:44:04:b9:c4:84:32:f6:9a: c1:43:74:8e:33:00:2d:28:d8:4a:56:cb:74:60:b6: e7:85:7e:28:bb:35:a0:5f:1c:12:ca:a4:48:03:b9: 3c:94:6e:c1:0a:bd:67:3b:9b:73:6f:0b:e2:c8:50: 18:bf:01:cc:15:34:ea:c0:0b:43:3f:91:d5:70:13: ec:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:38:77:B8:A0:2D:EB:6B:06:5E:C2:69:55:F9:FD:35:6D:A7:EE:73 X509v3 Authority Key Identifier: keyid:9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:32:5b:f8:6c:4d:06:f1:e1:34:3f:dc:80:70:bf:cc:94:3b: 11:37:ea:57:3e:01:b6:a1:0f:f3:c9:a4:2f:fc:63:82:d6:f1: 3b:db:f6:0f:ee:61:a5:c3:73:20:13:5d:73:7e:27:63:fd:62: 2c:fb:04:66:f3:e7:f4:eb:1d:3a:da:5b:1f:30:64:e3:b3:f7: cf:85:ee:f0:b7:3a:d2:10:86:68:08:0e:f6:07:fd:79:66:bb: bc:30:12:1f:99:b1:40:11:06:3e:48:e6:35:f9:c0:c5:f1:82: c0:6d:2c:67:6f:e7:82:a6:08:b1:3a:e6:e2:b0:2e:13:b5:24: 10:a2:f1:c8:b2:cf:4e:5a:d4:ae:a7:2a:87:19:36:d3:28:6b: 59:ea:11:63:67:19:ab:df:57:f6:56:63:17:25:72:7e:9a:f6: 73:37:cf:92:f5:df:30:52:8f:07:c9:40:70:ae:af:58:a3:24: 8b:e8:9d:1a:f9:41:5e:93:8c:7d:ff:d4:df:3b:bd:e0:33:17: 50:84:a3:85:9a:9c:50:85:55:83:d5:f1:59:29:5f:b4:31:d4: 28:fe:c8:f8:46:dc:57:e5:c7:ea:06:c0:33:65:33:fd:59:61: 53:f7:9c:12:5a:c4:28:2d:aa:ee:19:9d:ad:c9:35:0b:5a:7a: a6:ce:cb:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI2OTYxMTAvBgNVBAUTKDlDQkZCMTM3NEJFOTMyOTdBREMxQjIxREJEMzc5OEQx NUJEMjc0REYwHhcNMjYwNDA0MTgwOTEzWhcNMjYwNDExMTgwOTEzWjAYMRYwFAYD VQQDEw02OWQxNTNjOS05YTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3ZFz5nGypj5mDphEpLI534IvMPRVZfhFzQLp4yLPaGu9HwptDItXTpdkjPY EPvWYN1pAxm8ynP+6MpzpIOrSTRqvHh6UZu7hWncbnDyZsWPsUM0PJEM5mn/1+aW pj3Vu3pj/X4M99WLHaiCS6B9S7HjD6MMKqMfYNQPDAvLlTT0a/ckn8wifCeueSAb VfDMxwZpB4yU+NSa/SZbwoSRANx91/rjkDX9lGGQfpW/ZcBtGvWeHstnxgCvRAS5 xIQy9prBQ3SOMwAtKNhKVst0YLbnhX4ouzWgXxwSyqRIA7k8lG7BCr1nO5tzbwvi yFAYvwHMFTTqwAtDP5HVcBPsZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAk4d7ig LetrBl7CaVX5/TVtp+5zMB8GA1UdIwQYMBaAFJy/sTdL6TKXrcGyHb03mNFb0nTf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjY5Ni83MjVDQTFENDA2 Q0QxMUVBQUU1RTc5MzRDNEY5QUUwMi9uTC14TjB2cE1wZXR3YklkdlRlWTBWdlNk TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MLXhOMHZwTXBldHdiSWR2VGVZMFZ2U2ROOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjY5Ni83MjVDQTFENDA2Q0QxMUVBQUU1RTc5MzRDNEY5QUUwMi9uTC14TjB2cE1w ZXR3YklkdlRlWTBWdlNkTjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfTJb+GxNBvHhND/cgHC/zJQ7ETfqVz4BtqEP88mkL/xjgtbxO9v2D+5hpcNz IBNdc34nY/1iLPsEZvPn9OsdOtpbHzBk47P3z4Xu8Lc60hCGaAgO9gf9eWa7vDAS H5mxQBEGPkjmNfnAxfGCwG0sZ2/ngqYIsTrm4rAuE7UkEKLxyLLPTlrUrqcqhxk2 0yhrWeoRY2cZq99X9lZjFyVyfpr2czfPkvXfMFKPB8lAcK6vWKMki+idGvlBXpOM ff/U3zu94DMXUISjhZqcUIVVg9XxWSlftDHUKP7I+EbcV+XH6gbAM2Uz/VlhU/ec ElrEKC2q7hmdrck1C1p6ps7LRA== -----END CERTIFICATE-----Generated at Mon Apr 6 09:58:00 2026 by rpki-client