$ rpki-client -vvf rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft File: NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft (raw, json) Hash identifier: /JYfUDG912JUvxHT0I4U7hIT4pKLYcrle9cqUS0eIag= Subject key identifier: AA:0B:98:8A:44:59:78:24:A5:B9:80:CC:06:A9:A3:01:79:17:CA:AD Authority key identifier: 35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B Certificate issuer: /CN=A916378F/serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B Certificate serial: 086D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft Manifest number: 0845 Signing time: Mon 04 May 2026 21:02:17 +0000 Manifest this update: Mon 04 May 2026 21:02:16 +0000 Manifest next update: Mon 11 May 2026 21:02:16 +0000 Files and hashes: 1: NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl (hash: HeOgMKisAPWp2kDpKgfBOYJGvM5U9YYdgnwtqDatlrs=) 2: 4D47DE5A127E11EB91021F3AC4F9AE02.roa (hash: /CMhnqrhdVYNSUaizVq/uPj8VXgZqAfmKsDyp7bdTWE=) 3: 8977329C6BFA11F0A5B94819C4F9AE02.roa (hash: c6LJhskoptnL62vsB9jLZiT/hEUllVG1aUqGIGkiID8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 22:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2157 (0x86d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916378F, serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B Validity Not Before: May 4 21:02:16 2026 GMT Not After : May 11 21:02:16 2026 GMT Subject: CN=69f90959-1d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c2:83:6f:b8:e6:d0:38:73:72:45:4f:43:85: cc:31:00:64:a4:f0:47:37:53:86:b0:fb:7e:f4:3a: 0e:eb:ac:51:de:09:b6:4b:87:de:e5:c1:80:3f:77: 1e:ec:ea:73:bb:72:7a:aa:62:b3:d9:5b:55:97:b8: d5:62:e8:67:a5:f1:c3:55:90:99:c2:fa:7e:45:6d: 56:96:1d:1f:94:a4:e1:50:a3:6b:04:fa:e9:5a:0b: c3:4e:b2:c0:66:91:42:96:70:ba:fb:ef:55:76:9e: 5e:99:ad:d6:ed:93:01:59:b5:46:7e:8c:cd:c7:b1: f4:90:ee:ac:f4:84:42:77:63:70:4a:49:0e:c3:25: 21:8b:b6:85:98:b0:77:1d:0c:e7:28:6a:f7:56:3d: 8f:bc:77:38:c9:70:69:79:ca:f8:01:49:7c:58:99: 02:ab:e4:02:ab:f6:6c:c8:fc:4a:ff:bf:30:f6:22: 6c:56:58:40:62:81:85:d5:f0:a5:75:62:79:c2:c2: 4b:73:68:eb:19:13:30:ca:5d:e1:87:ae:ce:d6:81: 77:09:86:0a:e9:96:13:02:65:2d:7e:86:be:0a:5e: 21:7c:08:56:3b:f2:04:6e:4f:23:a6:f2:a9:41:82: c5:02:ef:06:9d:7a:b6:0f:7f:a9:c1:db:5b:f8:e0: cf:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0B:98:8A:44:59:78:24:A5:B9:80:CC:06:A9:A3:01:79:17:CA:AD X509v3 Authority Key Identifier: keyid:35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:5e:7a:b7:a3:b1:32:0a:34:d0:6b:ef:08:9c:b7:d2:03:57: 61:ac:85:07:bf:b3:7f:1c:df:9c:de:62:c5:85:59:c4:8c:d0: aa:eb:8a:b5:82:7d:06:7b:15:c8:94:35:6f:fc:9c:36:aa:a3: 85:26:cb:31:f2:2a:1d:ed:b0:bd:a3:b5:c8:5a:2b:0b:72:74: 13:f6:c7:b9:79:a0:0e:df:32:d2:ba:b4:d7:e8:06:a7:b7:18: 45:97:e0:b4:05:c7:eb:a6:8b:c9:2f:77:43:86:43:46:aa:c9: b8:6e:b1:c4:d2:ec:c1:63:23:0d:5f:7c:0a:1a:a4:d3:fc:10: e4:e9:8d:fe:c3:6b:05:d9:6a:cc:86:21:bb:c9:e3:07:36:5d: 4b:af:7f:4e:a6:87:0e:64:8c:08:9d:03:cc:04:ea:fd:e7:6f: 83:05:64:bb:a4:2a:da:66:65:51:bf:c6:69:77:6e:47:2c:07: 06:fc:9e:ba:fd:d6:58:07:06:bc:25:7e:28:cd:2f:7d:54:be: fb:8d:68:3b:87:82:13:9e:58:df:b2:20:75:40:f6:0c:69:10: fe:6b:c3:f3:11:54:91:a8:0f:1c:53:3e:90:e2:f4:ea:4f:34: 81:9a:27:37:fb:3f:6f:a6:c4:f2:bc:c4:14:31:7b:91:9f:6c: 9c:87:f1:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3OEYxMTAvBgNVBAUTKDM1ODhGMUJCNUNCNjk5QjAzNDgxMUQxNzkyNzlCRjVC OUJCQzFFNUIwHhcNMjYwNTA0MjEwMjE2WhcNMjYwNTExMjEwMjE2WjAYMRYwFAYD VQQDEw02OWY5MDk1OS0xZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6sKDb7jm0DhzckVPQ4XMMQBkpPBHN1OGsPt+9DoO66xR3gm2S4fe5cGAP3ce 7Opzu3J6qmKz2VtVl7jVYuhnpfHDVZCZwvp+RW1Wlh0flKThUKNrBPrpWgvDTrLA ZpFClnC6++9Vdp5ema3W7ZMBWbVGfozNx7H0kO6s9IRCd2NwSkkOwyUhi7aFmLB3 HQznKGr3Vj2PvHc4yXBpecr4AUl8WJkCq+QCq/ZsyPxK/78w9iJsVlhAYoGF1fCl dWJ5wsJLc2jrGRMwyl3hh67O1oF3CYYK6ZYTAmUtfoa+Cl4hfAhWO/IEbk8jpvKp QYLFAu8GnXq2D3+pwdtb+ODPvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKoLmIpE WXgkpbmAzAapowF5F8qtMB8GA1UdIwQYMBaAFDWI8btctpmwNIEdF5J5v1ubvB5b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzc4Ri9BNUE5QzRBODEy NzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1iQTBnUjBYa25tX1c1dThI bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Zanh1MXkybWJBMGdSMFhrbm1fVzV1OEhscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mzc4Ri9BNUE5QzRBODEyNzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1i QTBnUjBYa25tX1c1dThIbHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaF56t6OxMgo00GvvCJy30gNXYayFB7+zfxzfnN5ixYVZxIzQquuKtYJ9BnsV yJQ1b/ycNqqjhSbLMfIqHe2wvaO1yForC3J0E/bHuXmgDt8y0rq01+gGp7cYRZfg tAXH66aLyS93Q4ZDRqrJuG6xxNLswWMjDV98Chqk0/wQ5OmN/sNrBdlqzIYhu8nj BzZdS69/TqaHDmSMCJ0DzATq/edvgwVku6Qq2mZlUb/GaXduRywHBvyeuv3WWAcG vCV+KM0vfVS++41oO4eCE55Y37IgdUD2DGkQ/mvD8xFUkagPHFM+kOL06k80gZon N/s/b6bE8rzEFDF7kZ9snIfxLw== -----END CERTIFICATE-----Generated at Tue May 5 05:55:25 2026 by rpki-client