$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft File: NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft (raw, json) Hash identifier: DpRtyE6YylZidT51L+aOdo8D79j4bjN/D3Wbb/L+0IU= Subject key identifier: 87:E8:AE:C0:96:C6:27:74:9C:AB:C7:46:1C:F1:EC:EE:24:89:E7:D1 Authority key identifier: 35:76:4D:94:20:7D:44:D8:9A:70:55:7C:66:D2:A2:EF:3D:1C:54:80 Certificate issuer: /CN=A915BC71/serialNumber=35764D94207D44D89A70557C66D2A2EF3D1C5480 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft Manifest number: 04 Signing time: Mon 27 Apr 2026 09:07:13 +0000 Manifest this update: Mon 27 Apr 2026 09:07:12 +0000 Manifest next update: Mon 04 May 2026 09:07:12 +0000 Files and hashes: 1: NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl (hash: 4+a9wIFOBS/DewldO+/PRZ9v2Rlbn/Z1JvZ/dwGIAV4=) 2: 045117A63F0611F1B36B08F4C9833773.roa (hash: yc41YsNACmYj/Sr/DAPgp/0vliNwQTb4cuVsDR9CDfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 09:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC71, serialNumber=35764D94207D44D89A70557C66D2A2EF3D1C5480 Validity Not Before: Apr 27 09:07:12 2026 GMT Not After : May 4 09:07:12 2026 GMT Subject: CN=69ef2740-bd91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:94:cb:94:c4:46:0f:4d:40:0e:79:fd:a0:e6: 2a:85:19:b0:51:b3:26:75:aa:a8:70:38:a9:f4:8d: 69:e0:ca:6b:2f:0a:2c:77:14:ec:5a:8d:d5:c4:59: 4e:b0:24:4a:83:3b:73:7f:06:74:f2:e6:b5:5f:33: ce:67:de:ae:5a:9c:1e:f0:0b:ed:0e:27:86:0c:b1: 7e:d7:58:4e:2a:18:96:95:d2:ed:fa:cb:34:07:d7: 5c:4b:b3:ae:c5:7f:26:2c:44:af:69:15:bb:87:0f: f6:a5:c2:e3:cf:fa:5c:14:1c:4e:35:4e:c0:48:eb: 36:62:a8:5a:ec:7c:97:a6:32:94:60:e4:9f:8d:f9: ff:9d:2a:6f:cb:fb:84:e8:c9:a8:08:2d:3a:11:70: 59:0a:20:d8:1f:92:6f:c4:20:c0:ce:9d:5c:06:8d: c9:1e:a2:48:dc:d6:05:bd:0c:e1:da:ce:e6:94:bd: a3:02:6a:03:45:8c:62:6a:d7:9b:b5:45:33:0a:76: be:d5:82:47:7f:d3:5e:ee:10:1e:55:8c:bd:4c:d1: f9:7b:f1:2d:6c:4f:cc:69:8c:85:50:d5:d5:d5:7a: ec:0c:da:70:eb:9e:88:58:9a:33:b3:95:f0:0f:1c: ac:f7:15:09:8f:c3:43:00:ed:32:44:65:12:b2:68: 24:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E8:AE:C0:96:C6:27:74:9C:AB:C7:46:1C:F1:EC:EE:24:89:E7:D1 X509v3 Authority Key Identifier: keyid:35:76:4D:94:20:7D:44:D8:9A:70:55:7C:66:D2:A2:EF:3D:1C:54:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:48:1e:42:f9:bc:9e:38:76:21:06:16:38:7b:84:7e:f3:c2: b4:74:26:fa:05:a9:1c:73:28:0c:64:24:28:2b:f3:da:9a:46: 2e:1f:33:7d:5e:b4:ef:84:81:c2:f8:43:30:d4:00:a4:77:a1: ea:bb:0e:4e:31:50:a8:04:4f:7b:52:bd:95:06:3e:04:89:fc: 1a:fa:12:b3:08:0c:ac:88:90:6c:a1:bc:ce:63:a3:4f:45:3f: 56:aa:a3:36:2c:16:62:b0:a9:82:b2:2d:87:75:9b:77:00:68: 2c:49:ce:a4:4d:e3:8d:ca:d2:73:34:7c:4a:2a:86:7b:fe:1d: 46:a0:e0:26:fa:dd:e8:32:83:15:58:28:19:8d:70:c9:91:ac: 96:7d:0a:54:42:1e:15:db:15:88:54:d6:c5:b4:f5:d1:b9:9e: d2:53:69:8d:12:63:b8:cc:24:e5:f7:85:0d:de:88:5f:98:92: 6c:28:df:ed:8a:8b:eb:a4:35:9e:79:04:f6:e9:ed:99:90:05: 29:7f:a2:5f:ea:15:7e:f3:98:0b:a5:53:cd:f4:b4:91:88:d8: 99:0a:80:c6:c9:e7:ec:82:9a:57:35:7c:d5:8a:f7:66:e0:51: 62:71:bb:e3:f3:44:df:54:80:17:37:16:7d:30:26:c7:2b:0d: 2a:7f:f8:e2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QkM3MTExMC8GA1UEBRMoMzU3NjREOTQyMDdENDREODlBNzA1NTdDNjZEMkEyRUYz RDFDNTQ4MDAeFw0yNjA0MjcwOTA3MTJaFw0yNjA1MDQwOTA3MTJaMBgxFjAUBgNV BAMTDTY5ZWYyNzQwLWJkOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+lMuUxEYPTUAOef2g5iqFGbBRsyZ1qqhwOKn0jWngymsvCix3FOxajdXEWU6w JEqDO3N/BnTy5rVfM85n3q5anB7wC+0OJ4YMsX7XWE4qGJaV0u36yzQH11xLs67F fyYsRK9pFbuHD/alwuPP+lwUHE41TsBI6zZiqFrsfJemMpRg5J+N+f+dKm/L+4To yagILToRcFkKINgfkm/EIMDOnVwGjckeokjc1gW9DOHazuaUvaMCagNFjGJq15u1 RTMKdr7Vgkd/017uEB5VjL1M0fl78S1sT8xpjIVQ1dXVeuwM2nDrnohYmjOzlfAP HKz3FQmPw0MA7TJEZRKyaCT5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUh+iuwJbG J3Scq8dGHPHs7iSJ59EwHwYDVR0jBBgwFoAUNXZNlCB9RNiacFV8ZtKi7z0cVIAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCQzcxLzg4QTNCNEJBM0Yw NTExRjFCRTNGQzBDMkM5ODMzNzczL05YWk5sQ0I5Uk5pYWNGVjhadEtpN3owY1ZJ QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTlhaTmxDQjlSTmlhY0ZWOFp0S2k3ejBjVklBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC QzcxLzg4QTNCNEJBM0YwNTExRjFCRTNGQzBDMkM5ODMzNzczL05YWk5sQ0I5Uk5p YWNGVjhadEtpN3owY1ZJQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAOSB5C+byeOHYhBhY4e4R+88K0dCb6BakccygMZCQoK/PamkYuHzN9XrTvhIHC +EMw1ACkd6Hquw5OMVCoBE97Ur2VBj4Eifwa+hKzCAysiJBsobzOY6NPRT9WqqM2 LBZisKmCsi2HdZt3AGgsSc6kTeONytJzNHxKKoZ7/h1GoOAm+t3oMoMVWCgZjXDJ kayWfQpUQh4V2xWIVNbFtPXRuZ7SU2mNEmO4zCTl94UN3ohfmJJsKN/tiovrpDWe eQT26e2ZkAUpf6Jf6hV+85gLpVPN9LSRiNiZCoDGyefsgppXNXzVivdm4FFicbvj 80TfVIAXNxZ9MCbHKw0qf/ji -----END CERTIFICATE-----Generated at Tue Apr 28 17:46:34 2026 by rpki-client