$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft File: NBfrvXgtZfKcRPwL3lgaTRst66Q.mft (raw, json) Hash identifier: QIBflZJKVhmlUKASKMqvBNWmg5/8oW8yNsbnAK7AESQ= Subject key identifier: C3:44:2A:29:10:C1:AD:66:0A:AB:76:88:50:73:92:29:C5:8F:F7:DD Authority key identifier: 34:17:EB:BD:78:2D:65:F2:9C:44:FC:0B:DE:58:1A:4D:1B:2D:EB:A4 Certificate issuer: /CN=A91836DB/serialNumber=3417EBBD782D65F29C44FC0BDE581A4D1B2DEBA4 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft Manifest number: DC Signing time: Sun 05 Apr 2026 05:59:46 +0000 Manifest this update: Sun 05 Apr 2026 05:59:45 +0000 Manifest next update: Sun 12 Apr 2026 05:59:45 +0000 Files and hashes: 1: NBfrvXgtZfKcRPwL3lgaTRst66Q.crl (hash: SLC48LT6kTk8QStFw3bXf4XtpAD1CXVD0MinnKqUmc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.crl rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836DB, serialNumber=3417EBBD782D65F29C44FC0BDE581A4D1B2DEBA4 Validity Not Before: Apr 5 05:59:45 2026 GMT Not After : Apr 12 05:59:45 2026 GMT Subject: CN=69d1fa52-9311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4c:91:c4:75:17:2a:7a:d9:8d:56:a7:59:95: 8a:76:8f:f2:8d:21:8b:ce:b5:c4:cc:59:33:f0:1e: d2:9f:fb:74:ac:2c:fc:47:b2:3a:7f:46:ee:24:1f: 2c:6d:5b:39:c4:bc:c4:9e:bd:74:5f:61:37:0e:97: f6:a4:8a:09:64:69:98:81:9f:7d:32:b4:c5:6b:f3: d8:c3:4b:13:8a:46:7e:a9:c2:ac:cd:c5:82:7d:88: f7:ac:42:86:31:9a:4d:8d:b4:43:fb:6d:23:1a:2a: 3d:22:5e:56:d0:ed:e2:c7:33:59:84:99:1b:ef:b1: ec:32:3f:c3:39:47:fc:d9:dd:49:41:4a:0d:70:61: 09:ff:41:5d:b6:c2:36:52:06:8e:63:eb:68:c0:03: aa:ab:1c:4d:71:9a:24:21:de:37:c7:7b:ec:40:b3: e2:db:d1:a7:7f:07:7d:0f:c2:ec:be:59:26:84:8f: fb:e0:09:4f:d1:a0:ce:d0:01:3d:44:51:e5:d9:39: 01:3e:ae:7d:98:1a:b9:cb:19:45:87:16:56:d1:5c: 0f:73:32:81:22:9c:8a:77:26:08:fb:c0:32:00:23: 4c:60:71:93:b5:aa:98:68:1a:03:56:63:85:2a:bb: e5:e5:67:40:01:c5:25:a7:cf:f7:d9:5e:5b:c3:e7: 37:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:44:2A:29:10:C1:AD:66:0A:AB:76:88:50:73:92:29:C5:8F:F7:DD X509v3 Authority Key Identifier: keyid:34:17:EB:BD:78:2D:65:F2:9C:44:FC:0B:DE:58:1A:4D:1B:2D:EB:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NBfrvXgtZfKcRPwL3lgaTRst66Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/59AFC20AE45E11EFA1562846C4F9AE02/NBfrvXgtZfKcRPwL3lgaTRst66Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:03:e4:31:18:cf:be:59:50:de:30:ed:50:b3:b5:6a:ca:d5: e6:41:64:e1:95:74:b4:79:e1:81:96:4e:bd:ea:c0:bb:ec:32: 92:bc:76:7c:80:8f:42:fd:3a:34:ce:28:25:72:23:11:24:20: 8f:bb:da:bd:09:64:b1:97:f8:fb:00:0c:82:2c:98:3d:f1:b4: a7:d5:e5:2d:02:3f:e4:5a:e5:00:e2:6a:7b:81:e7:c6:87:f7: cd:c8:f6:73:e0:3e:d9:53:67:e8:00:93:c5:6f:2d:6d:2d:d3: b3:d4:a6:38:64:4f:ac:67:a5:a1:c4:ef:86:82:75:f3:0b:da: 09:1c:da:3e:e4:b4:d0:a4:88:ea:c3:8a:f3:25:2e:f1:47:19: f1:f4:8a:1c:0b:a4:0e:11:95:d3:e6:7d:c5:03:d4:22:0a:42: 38:a7:29:0e:d3:e4:53:46:cb:6d:14:2d:e0:d6:94:95:d3:df: a8:2c:5a:89:7d:b1:2e:9f:bd:c4:be:5e:b4:a1:67:04:cd:46: d5:8d:85:1d:48:e6:66:36:15:cc:11:8c:e0:d5:4d:ad:52:39: 3a:f6:3d:b2:8a:a0:0d:63:65:46:1f:c7:2a:d2:3d:de:e2:d0: 85:e9:c4:93:59:f4:c2:43:ee:46:7f:68:da:b2:2d:d5:e5:35: b9:df:f4:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM2REIxMTAvBgNVBAUTKDM0MTdFQkJENzgyRDY1RjI5QzQ0RkMwQkRFNTgxQTRE MUIyREVCQTQwHhcNMjYwNDA1MDU1OTQ1WhcNMjYwNDEyMDU1OTQ1WjAYMRYwFAYD VQQDEw02OWQxZmE1Mi05MzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUyRxHUXKnrZjVanWZWKdo/yjSGLzrXEzFkz8B7Sn/t0rCz8R7I6f0buJB8s bVs5xLzEnr10X2E3Dpf2pIoJZGmYgZ99MrTFa/PYw0sTikZ+qcKszcWCfYj3rEKG MZpNjbRD+20jGio9Il5W0O3ixzNZhJkb77HsMj/DOUf82d1JQUoNcGEJ/0FdtsI2 UgaOY+towAOqqxxNcZokId43x3vsQLPi29Gnfwd9D8LsvlkmhI/74AlP0aDO0AE9 RFHl2TkBPq59mBq5yxlFhxZW0VwPczKBIpyKdyYI+8AyACNMYHGTtaqYaBoDVmOF Krvl5WdAAcUlp8/32V5bw+c3lQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMNEKikQ wa1mCqt2iFBzkinFj/fdMB8GA1UdIwQYMBaAFDQX6714LWXynET8C95YGk0bLeuk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzZEQi81OUFGQzIwQUU0 NUUxMUVGQTE1NjI4NDZDNEY5QUUwMi9OQmZydlhndFpmS2NSUHdMM2xnYVRSc3Q2 NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05CZnJ2WGd0WmZLY1JQd0wzbGdhVFJzdDY2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzZEQi81OUFGQzIwQUU0NUUxMUVGQTE1NjI4NDZDNEY5QUUwMi9OQmZydlhndFpm S2NSUHdMM2xnYVRSc3Q2NlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnQPkMRjPvllQ3jDtULO1asrV5kFk4ZV0tHnhgZZOverAu+wykrx2fICPQv06 NM4oJXIjESQgj7vavQlksZf4+wAMgiyYPfG0p9XlLQI/5FrlAOJqe4Hnxof3zcj2 c+A+2VNn6ACTxW8tbS3Ts9SmOGRPrGelocTvhoJ18wvaCRzaPuS00KSI6sOK8yUu 8UcZ8fSKHAukDhGV0+Z9xQPUIgpCOKcpDtPkU0bLbRQt4NaUldPfqCxaiX2xLp+9 xL5etKFnBM1G1Y2FHUjmZjYVzBGM4NVNrVI5OvY9soqgDWNlRh/HKtI93uLQhenE k1n0wkPuRn9o2rIt1eU1ud/0DA== -----END CERTIFICATE-----Generated at Mon Apr 6 11:20:30 2026 by rpki-client