$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft File: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft (raw, json) Hash identifier: ZLEFU07b2pbqb5sPI6oLiX6qjc2qf+kkOuU4vEbM8ZU= Subject key identifier: A7:43:D6:7F:72:AF:BA:59:A6:AB:8C:C5:72:00:55:FA:26:6D:51:2A Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Certificate serial: 09D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft Manifest number: 0934 Signing time: Sat 04 Apr 2026 20:26:51 +0000 Manifest this update: Sat 04 Apr 2026 20:26:50 +0000 Manifest next update: Sat 11 Apr 2026 20:26:50 +0000 Files and hashes: 1: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl (hash: PZlWvSKaOvSVFnqrcTSa8FAyx5rxrZ9BN97Otk8oMaU=) 2: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (hash: bBolaE4J+ODeMaCpkUYIkQ/PrlqstuijFxA7VnkQpuo=) 3: A98F7960A41F11F0A133244EC4F9AE02.roa (hash: Fkicx7CSwAUsnDPdfHvB6HsA9q0BYXagiCWHfaLV4Bg=) 4: B84CC7D2A41A11F08EC1655BC4F9AE02.roa (hash: LpD49WPYOZPaHio5ZklNa5sGnt+yU3gxsH0FPSNIjpQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2520 (0x9d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Validity Not Before: Apr 4 20:26:50 2026 GMT Not After : Apr 11 20:26:50 2026 GMT Subject: CN=69d1740a-46ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d6:cb:21:ba:b8:c3:8f:5d:49:be:e9:55:32: 55:3f:6c:27:94:aa:ca:2c:a2:52:27:82:f1:9f:63: d5:89:4d:3b:bd:7f:60:2d:73:76:db:1d:09:2c:15: 54:61:50:69:24:c9:c4:e7:df:ef:3f:d8:ae:a8:d2: 30:8a:3a:81:0e:64:fd:41:f5:16:12:da:31:5a:4d: d7:86:ff:29:96:5b:4f:7b:5a:58:46:10:d5:62:02: 51:d4:68:cd:ee:05:2f:ef:cc:e5:a0:03:cd:09:1d: ce:cc:e1:81:3c:aa:b7:2e:15:de:f7:05:a3:85:44: e6:bc:f3:56:55:bc:39:25:1a:84:37:36:66:92:a6: 46:9b:3e:b1:b7:e6:e5:b0:ea:6b:00:29:0a:3d:49: f8:67:0a:c9:c8:eb:41:a6:9f:59:be:fb:0c:64:ab: f0:e1:01:6d:e5:69:75:dd:6d:e5:f0:3b:bc:23:2c: 22:8e:06:ff:20:e6:e9:de:2d:2d:51:00:a2:e9:d7: a7:3a:98:af:d5:c2:61:ea:51:b3:34:ab:df:40:7c: 88:bf:69:1c:11:55:b5:b5:2c:f4:72:53:2d:89:a3: a3:2f:7c:9f:a4:61:d7:2e:bf:b2:9f:54:20:c2:67: fc:b5:0c:e1:a5:6f:e6:65:59:70:35:9f:e2:81:7e: 42:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:43:D6:7F:72:AF:BA:59:A6:AB:8C:C5:72:00:55:FA:26:6D:51:2A X509v3 Authority Key Identifier: keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:9f:a2:9a:35:c5:0f:b2:ed:d3:d0:53:0a:33:e0:b9:1e:da: 01:8d:1a:5f:61:65:9a:b3:54:0a:cd:39:de:be:95:a8:8f:91: 76:65:3e:98:80:8c:44:af:ca:ce:ec:f7:89:46:13:8b:cc:67: 6a:80:e7:30:9c:9a:e9:15:69:b1:ae:1a:2b:40:50:03:c3:40: 62:4e:62:38:9a:3b:50:1c:74:d3:c7:3c:30:5f:b6:5d:37:f9: fa:9b:78:94:24:44:bc:8a:f2:d8:2a:91:65:05:1e:3f:13:e7: 8c:44:e2:13:f8:05:18:6b:11:d4:44:ec:96:f8:8c:c4:15:2a: fe:3f:92:51:5e:03:da:36:a9:68:c5:24:9a:95:4a:9e:2d:3c: 5a:2b:37:a7:8c:85:ad:b3:37:c1:23:8c:07:8f:a3:c2:b7:3a: 04:2f:c4:f5:97:ae:76:00:5f:85:41:0f:64:2e:39:93:fa:d4: b5:25:ab:5a:68:52:90:3d:1f:b7:9b:73:ab:ce:22:83:19:92: 59:7b:dd:fd:c9:72:46:6e:de:27:e8:5f:4e:f1:7f:35:88:f7: 15:cd:48:a6:5a:2d:35:53:69:fd:a9:e5:58:a8:bc:8a:24:62: 8a:af:2d:88:73:11:90:5a:2a:5a:ad:4d:f4:42:a2:97:07:46: f2:71:f1:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0 OTQ5OTcxNjIwHhcNMjYwNDA0MjAyNjUwWhcNMjYwNDExMjAyNjUwWjAYMRYwFAYD VQQDEw02OWQxNzQwYS00NmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA79bLIbq4w49dSb7pVTJVP2wnlKrKLKJSJ4Lxn2PViU07vX9gLXN22x0JLBVU YVBpJMnE59/vP9iuqNIwijqBDmT9QfUWEtoxWk3Xhv8plltPe1pYRhDVYgJR1GjN 7gUv78zloAPNCR3OzOGBPKq3LhXe9wWjhUTmvPNWVbw5JRqENzZmkqZGmz6xt+bl sOprACkKPUn4ZwrJyOtBpp9ZvvsMZKvw4QFt5Wl13W3l8Du8Iywijgb/IObp3i0t UQCi6denOpiv1cJh6lGzNKvfQHyIv2kcEVW1tSz0clMtiaOjL3yfpGHXLr+yn1Qg wmf8tQzhpW/mZVlwNZ/igX5C3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKdD1n9y r7pZpquMxXIAVfombVEqMB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDA0RS9CQzAzMEM3NkYxREExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFE S0Q4TXEwUGkzR0ZKU1pjV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM5+imjXFD7Lt09BTCjPguR7aAY0aX2FlmrNUCs053r6VqI+RdmU+mICMRK/K zuz3iUYTi8xnaoDnMJya6RVpsa4aK0BQA8NAYk5iOJo7UBx008c8MF+2XTf5+pt4 lCREvIry2CqRZQUePxPnjETiE/gFGGsR1ETslviMxBUq/j+SUV4D2japaMUkmpVK ni08Wis3p4yFrbM3wSOMB4+jwrc6BC/E9ZeudgBfhUEPZC45k/rUtSWrWmhSkD0f t5tzq84igxmSWXvd/clyRm7eJ+hfTvF/NYj3Fc1IplotNVNp/anlWKi8iiRiiq8t iHMRkFoqWq1N9EKilwdG8nHxDA== -----END CERTIFICATE-----Generated at Mon Apr 6 10:23:56 2026 by rpki-client