$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft File: nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft (raw, json) Hash identifier: n8Pdug/FW25wpsTOV+Rj7FszZTxzLjPoG26gTXIAiTw= Subject key identifier: 36:20:AD:CB:F4:0E:DB:A3:C2:6F:91:BF:06:DF:55:17:A7:7E:7A:B9 Authority key identifier: 9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD Certificate issuer: /CN=A9185D34/serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD Certificate serial: 08B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft Manifest number: 08A4 Signing time: Sat 04 Apr 2026 20:20:53 +0000 Manifest this update: Sat 04 Apr 2026 20:20:52 +0000 Manifest next update: Sat 11 Apr 2026 20:20:52 +0000 Files and hashes: 1: nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl (hash: YD1M1y27sUOTrIAj0aHrbfxcLrpE3m6heAmQC4juHFE=) 2: C1171FCAB1B111ECBA7F614FC4F9AE02.roa (hash: yy56Dhxj1ovpz3FD+DcyQb1Zocg7YLvQqlFzvMeS8+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:20:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2227 (0x8b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D34, serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD Validity Not Before: Apr 4 20:20:52 2026 GMT Not After : Apr 11 20:20:52 2026 GMT Subject: CN=69d172a4-bd14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:89:42:98:71:81:e3:4b:91:92:14:a4:24:60: bf:76:2a:9a:c4:42:42:0d:af:42:56:17:f2:5a:d3: 28:6b:78:78:7a:7b:99:ee:2d:2c:c5:ee:28:57:68: 03:79:c3:39:d2:2d:21:28:9a:37:72:05:34:5a:22: fa:ae:e0:54:b8:d5:fa:dd:4e:4c:90:dd:8c:d1:e0: 81:d1:77:13:0f:22:1b:30:94:6d:25:d9:54:8d:33: 18:cd:be:56:41:65:93:07:15:d2:99:1c:f9:20:a6: 06:11:86:4c:af:01:d1:41:93:f7:ce:33:2f:ad:d2: 37:ad:d3:ef:a4:2e:05:76:67:b3:f6:52:83:42:f0: 2d:db:66:66:3a:09:9e:fe:f5:49:b5:3a:aa:f9:ef: fb:a3:2f:8d:51:05:08:39:49:31:68:34:71:56:ee: 58:1a:fc:14:65:ae:fd:3e:e8:84:53:7c:8b:68:3f: 57:8c:8d:f4:d0:6b:32:f3:7a:1c:28:58:41:c0:3e: 7d:04:73:6c:f9:df:03:15:ce:bd:99:fc:01:6a:12: f7:97:a4:65:4b:18:c3:af:60:a4:70:6d:c1:36:44: d4:9c:53:0f:17:04:73:61:25:6b:2d:84:5a:f8:b2: 79:8a:32:e0:cc:d4:25:15:86:29:b7:a2:6e:7d:87: b0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:20:AD:CB:F4:0E:DB:A3:C2:6F:91:BF:06:DF:55:17:A7:7E:7A:B9 X509v3 Authority Key Identifier: keyid:9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:54:b6:7c:19:94:a7:d0:53:d0:5a:21:22:d2:67:ce:ba:df: 80:ac:8e:9f:cb:e7:f4:e4:eb:8a:27:ca:fd:51:07:60:84:15: a0:5c:ad:81:6e:5a:6e:16:3f:88:dc:4d:46:fb:e0:2f:6d:21: 55:85:1c:d8:56:9b:4d:93:09:31:07:ba:82:e2:b8:89:19:ea: d6:50:3f:3c:65:b6:65:29:32:80:30:e6:fe:87:05:60:0b:e6: 48:f9:bb:d0:d1:3a:c5:5e:a7:1c:18:ab:9c:9a:0f:f4:e9:05: 47:92:80:f8:76:e4:eb:78:62:67:96:50:d8:43:bf:e9:e0:f4: 8e:0d:2b:07:b2:34:45:1d:f9:dd:1f:eb:a6:82:43:27:58:e1: 87:32:97:d2:dc:48:7b:28:88:a4:cf:c4:9a:ec:b5:c7:05:0f: 9f:d9:56:29:7d:81:17:fe:e6:55:e8:ae:ec:8d:ee:7f:22:96: e4:bf:ff:ce:5b:19:b8:27:29:c4:85:a9:88:dc:c2:16:4e:99: 55:4a:43:fc:ee:c2:79:12:f9:49:73:3e:05:54:56:46:81:ec: 07:d5:c9:94:8c:e6:d5:4b:e8:79:37:f8:cc:7e:32:50:bc:ff: c3:b3:9c:de:22:35:92:57:f9:e2:13:47:9f:f9:e5:e6:01:36: c8:5e:1a:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVEMzQxMTAvBgNVBAUTKDlFQzEyMTZEMjU2NDE2NDAzQ0I1QzUzRTczNDU1MzBG ODMyNzJDREQwHhcNMjYwNDA0MjAyMDUyWhcNMjYwNDExMjAyMDUyWjAYMRYwFAYD VQQDEw02OWQxNzJhNC1iZDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1olCmHGB40uRkhSkJGC/diqaxEJCDa9CVhfyWtMoa3h4enuZ7i0sxe4oV2gD ecM50i0hKJo3cgU0WiL6ruBUuNX63U5MkN2M0eCB0XcTDyIbMJRtJdlUjTMYzb5W QWWTBxXSmRz5IKYGEYZMrwHRQZP3zjMvrdI3rdPvpC4Fdmez9lKDQvAt22ZmOgme /vVJtTqq+e/7oy+NUQUIOUkxaDRxVu5YGvwUZa79PuiEU3yLaD9XjI300Gsy83oc KFhBwD59BHNs+d8DFc69mfwBahL3l6RlSxjDr2CkcG3BNkTUnFMPFwRzYSVrLYRa +LJ5ijLgzNQlFYYpt6JufYewXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDYgrcv0 Dtujwm+RvwbfVRenfnq5MB8GA1UdIwQYMBaAFJ7BIW0lZBZAPLXFPnNFUw+DJyzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQzNC9EQkE4Nzg1OEU2 QTAxMUVBQTg1NDRCNDNDNEY5QUUwMi9uc0VoYlNWa0ZrQTh0Y1UtYzBWVEQ0TW5M TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25zRWhiU1ZrRmtBOHRjVS1jMFZURDRNbkxOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQzNC9EQkE4Nzg1OEU2QTAxMUVBQTg1NDRCNDNDNEY5QUUwMi9uc0VoYlNWa0Zr QTh0Y1UtYzBWVEQ0TW5MTjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm1S2fBmUp9BT0FohItJnzrrfgKyOn8vn9OTriifK/VEHYIQVoFytgW5abhY/ iNxNRvvgL20hVYUc2FabTZMJMQe6guK4iRnq1lA/PGW2ZSkygDDm/ocFYAvmSPm7 0NE6xV6nHBirnJoP9OkFR5KA+Hbk63hiZ5ZQ2EO/6eD0jg0rB7I0RR353R/rpoJD J1jhhzKX0txIeyiIpM/Emuy1xwUPn9lWKX2BF/7mVeiu7I3ufyKW5L//zlsZuCcp xIWpiNzCFk6ZVUpD/O7CeRL5SXM+BVRWRoHsB9XJlIzm1UvoeTf4zH4yULz/w7Oc 3iI1klf54hNHn/nl5gE2yF4aTA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:32:06 2026 by rpki-client