$ rpki-client -vvf rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft File: NKEjLqcYRp6tt628TNngDfaoUgY.mft (raw, json) Hash identifier: VrbWkEEoUmSAEMtZ6/9TVZARXXOkPn3hajs15AdpT5k= Subject key identifier: 15:1F:F5:27:68:A7:3F:DB:01:71:15:36:82:65:B4:F7:80:4A:8A:DE Authority key identifier: 34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 Certificate issuer: /CN=A9186684/serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Certificate serial: 0654 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft Manifest number: 0643 Signing time: Wed 20 May 2026 22:44:52 +0000 Manifest this update: Wed 20 May 2026 22:44:52 +0000 Manifest next update: Wed 27 May 2026 22:44:52 +0000 Files and hashes: 1: NKEjLqcYRp6tt628TNngDfaoUgY.crl (hash: wR2mLDSTZ+QZMvYYr7FCetvKs50Nv1Zn2h7ayFNS+Yo=) 2: D737BB744B4111ECACAF3B6FC4F9AE02.roa (hash: IBTVSNTlY0HL9PfzWjSjfhlMPscSCqtnXeT7BZJCHtY=) 3: 80D77ED8D8A811EB85D5E456C4F9AE02.roa (hash: eMjJNI89VuvQe2VIixwHrvRIUHpYBAcPbg9uXI8SsCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 22:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1620 (0x654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186684, serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Validity Not Before: May 20 22:44:52 2026 GMT Not After : May 27 22:44:52 2026 GMT Subject: CN=6a0e3964-8578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b5:3a:24:79:43:ac:2a:d6:fc:54:09:b6:24: ff:a5:6d:d6:cc:27:c0:05:25:a6:5f:82:ca:c3:51: 58:c5:c0:55:34:91:62:98:26:da:d8:13:2a:f7:fa: 85:2c:8d:e5:4f:98:29:30:ef:a1:3e:dd:6d:90:88: 34:02:10:27:80:ff:8d:0d:66:ec:e6:45:b3:02:df: 8e:4f:10:de:0c:b9:58:78:36:bd:cf:3b:4d:aa:e2: a6:7d:cf:61:2c:7f:63:3a:34:fb:90:d6:c1:d0:a2: 1c:68:d3:65:f5:b3:e2:33:98:4d:fd:5b:06:82:7e: d8:b9:35:1f:72:71:03:91:76:47:9b:42:58:bf:8b: 4a:4d:0d:44:51:4c:81:57:67:b6:5b:70:0e:64:03: 11:f2:95:e9:12:5c:e3:c7:da:f2:16:d0:8e:8d:6d: 01:d4:85:f8:74:48:86:23:43:2a:27:20:6f:5b:a7: f1:9d:9b:b2:04:ee:24:ab:db:5d:9d:ca:7b:fe:5d: ac:e8:ca:f5:61:41:ea:56:dd:90:61:17:6d:f3:59: 80:9b:80:59:30:32:ae:f8:4a:18:6f:3e:a2:20:9b: d5:11:4a:23:1a:8e:39:20:5b:4d:c5:21:77:e5:d3: 73:71:fa:20:43:46:20:ca:39:65:01:2d:a4:a8:5e: 50:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1F:F5:27:68:A7:3F:DB:01:71:15:36:82:65:B4:F7:80:4A:8A:DE X509v3 Authority Key Identifier: keyid:34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:f8:68:0d:59:32:5c:77:33:87:c8:4a:0b:e4:c9:ea:fd:3e: d7:fc:98:d9:3b:45:f1:1e:2e:bb:1b:f9:00:ee:ec:ce:15:26: bf:fc:ea:99:12:27:f8:01:4e:ed:8f:b8:00:da:ab:95:7f:d3: 12:78:66:b3:f4:fd:bd:8a:9c:f7:39:f9:b2:b3:25:65:44:39: 98:32:b7:b0:a6:15:29:ac:69:f6:8e:f0:e4:81:9c:15:51:63: 72:54:a9:2f:3c:85:8e:1c:9f:9b:14:93:5b:08:81:9f:30:a7: ab:50:10:09:0a:f1:58:44:13:dc:fb:f5:ca:89:f9:01:51:84: 67:29:93:cb:d2:a5:a5:1d:8f:65:40:cd:33:c3:35:0b:c0:47: 0d:40:e0:7f:db:24:de:9c:93:93:bf:ef:52:d9:d1:c7:94:c8: b0:cb:ff:f6:bd:d5:e7:b3:99:11:e8:05:c7:7f:af:37:8f:b0: 80:64:7c:3c:29:96:e8:dd:29:84:ba:4d:4a:4e:51:79:19:16: c2:b2:51:68:79:0e:0d:05:68:cf:5c:32:8d:9a:ca:60:50:ad: c0:6e:2f:b6:e8:f5:96:7d:5b:de:a2:6a:e9:34:26:33:c8:fd: 50:63:98:d5:3b:35:fc:31:07:11:79:cc:10:78:06:29:e8:06: 02:8b:71:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2ODQxMTAvBgNVBAUTKDM0QTEyMzJFQTcxODQ2OUVBREI3QURCQzRDRDlFMDBE RjZBODUyMDYwHhcNMjYwNTIwMjI0NDUyWhcNMjYwNTI3MjI0NDUyWjAYMRYwFAYD VQQDEw02YTBlMzk2NC04NTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLU6JHlDrCrW/FQJtiT/pW3WzCfABSWmX4LKw1FYxcBVNJFimCba2BMq9/qF LI3lT5gpMO+hPt1tkIg0AhAngP+NDWbs5kWzAt+OTxDeDLlYeDa9zztNquKmfc9h LH9jOjT7kNbB0KIcaNNl9bPiM5hN/VsGgn7YuTUfcnEDkXZHm0JYv4tKTQ1EUUyB V2e2W3AOZAMR8pXpElzjx9ryFtCOjW0B1IX4dEiGI0MqJyBvW6fxnZuyBO4kq9td ncp7/l2s6Mr1YUHqVt2QYRdt81mAm4BZMDKu+EoYbz6iIJvVEUojGo45IFtNxSF3 5dNzcfogQ0YgyjllAS2kqF5QXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBUf9Sdo pz/bAXEVNoJltPeASoreMB8GA1UdIwQYMBaAFDShIy6nGEaerbetvEzZ4A32qFIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjY4NC8zNkI4NkFEQ0Q4 OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJwNnR0NjI4VE5uZ0RmYW9V Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LRWpMcWNZUnA2dHQ2MjhUTm5nRGZhb1VnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjY4NC8zNkI4NkFEQ0Q4OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJw NnR0NjI4VE5uZ0RmYW9VZ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv/hoDVkyXHczh8hKC+TJ6v0+1/yY2TtF8R4uuxv5AO7szhUmv/zqmRIn+AFO 7Y+4ANqrlX/TEnhms/T9vYqc9zn5srMlZUQ5mDK3sKYVKaxp9o7w5IGcFVFjclSp LzyFjhyfmxSTWwiBnzCnq1AQCQrxWEQT3Pv1yon5AVGEZymTy9KlpR2PZUDNM8M1 C8BHDUDgf9sk3pyTk7/vUtnRx5TIsMv/9r3V57OZEegFx3+vN4+wgGR8PCmW6N0p hLpNSk5ReRkWwrJRaHkODQVoz1wyjZrKYFCtwG4vtuj1ln1b3qJq6TQmM8j9UGOY 1Ts1/DEHEXnMEHgGKegGAotxSQ== -----END CERTIFICATE-----Generated at Thu May 21 10:27:45 2026 by rpki-client