$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft File: NhbgHaMxfwnuypjnvHVMvJkNfWg.mft (raw, json) Hash identifier: kf75NPZ9cKivnFF9xjnIq3s0R96IPkfptNYctHfnwB0= Subject key identifier: 68:F0:E5:A9:83:2E:A9:7C:4A:F9:39:3D:E8:81:42:F1:F2:E9:28:99 Authority key identifier: 36:16:E0:1D:A3:31:7F:09:EE:CA:98:E7:BC:75:4C:BC:99:0D:7D:68 Certificate issuer: /CN=A9192C72/serialNumber=3616E01DA3317F09EECA98E7BC754CBC990D7D68 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft Manifest number: D9 Signing time: Sun 05 Apr 2026 06:04:33 +0000 Manifest this update: Sun 05 Apr 2026 06:04:32 +0000 Manifest next update: Sun 12 Apr 2026 06:04:32 +0000 Files and hashes: 1: NhbgHaMxfwnuypjnvHVMvJkNfWg.crl (hash: 78EHxoOB7dgIzKzEI+9Ae0aTZgqXMn+k1PcR/2Voo+I=) 2: C2E1583EECFA11EFA881E216C4F9AE02.roa (hash: ZtssBrk5mGxn05SMndIJVGX0dnbxSXKZ14Gt5jpgS38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.crl rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C72, serialNumber=3616E01DA3317F09EECA98E7BC754CBC990D7D68 Validity Not Before: Apr 5 06:04:32 2026 GMT Not After : Apr 12 06:04:32 2026 GMT Subject: CN=69d1fb71-35c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e3:f4:06:c7:67:17:69:49:5c:30:f4:b4:e6: 1a:18:b2:67:78:a1:5d:dd:ff:9d:b7:50:e4:ab:67: 37:54:ec:b4:25:e3:7e:b1:fc:cf:c3:19:5f:01:5c: 9a:e9:52:d4:73:8e:6f:de:f6:90:f7:42:1c:a6:1b: 89:cc:bd:fc:14:8f:a7:97:c8:c6:12:48:f9:01:39: c9:39:87:ce:7d:97:53:1e:23:15:b3:38:3a:7e:e2: 9b:c9:3b:54:83:bd:87:3c:ed:ff:44:85:91:05:f4: e7:7a:0f:a0:03:c3:32:1d:37:4a:9e:69:50:3d:19: 93:06:a9:82:56:42:6e:d0:13:0e:82:aa:39:f6:04: b6:48:b0:5f:75:6f:05:7e:6f:1d:04:0d:44:a0:b8: d6:b3:78:8c:75:4e:c8:e1:bd:0b:47:7a:ec:93:5d: 5d:b0:ca:27:12:f4:3b:8e:7e:27:76:3b:cb:30:7a: 14:d9:4a:46:18:3e:1c:ab:99:80:15:6b:96:6f:02: fb:c5:8b:69:6b:49:80:df:28:c4:ac:72:ef:ba:f7: 09:c3:04:cc:fb:2c:86:c4:33:a2:bb:88:74:f0:3e: d6:4b:30:c9:a1:76:e1:66:1e:a5:03:01:34:24:a0: ee:87:b0:c0:d0:a8:65:59:83:54:2b:52:5b:e5:f3: f6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F0:E5:A9:83:2E:A9:7C:4A:F9:39:3D:E8:81:42:F1:F2:E9:28:99 X509v3 Authority Key Identifier: keyid:36:16:E0:1D:A3:31:7F:09:EE:CA:98:E7:BC:75:4C:BC:99:0D:7D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:bc:f7:eb:13:cb:3f:56:7f:d7:7d:3c:99:0c:59:e6:ec:b6: da:d8:da:1b:91:9b:52:ec:27:71:0b:b2:70:bd:4b:bf:cb:67: 89:f3:54:52:c8:3e:b3:6e:98:82:53:be:4d:ab:ea:2a:dd:fd: ed:7e:c0:ed:95:e9:ef:98:cc:93:e5:c8:9c:9d:87:b4:50:e5: b6:ab:11:4d:05:9b:b2:43:1c:b6:ff:e3:bd:4c:4d:b7:18:18: f9:2c:52:2c:d2:93:5b:13:2b:ca:b5:24:8e:46:46:83:91:4a: f0:b5:e4:97:cc:5d:32:1e:4d:42:0e:ad:bd:0d:c0:75:44:26: a6:d1:5d:d4:a0:05:44:1d:78:73:c7:84:16:42:4d:e0:4d:4d: bc:eb:7f:3e:6f:da:02:d2:e2:e8:da:66:8b:14:97:91:b2:81: 9d:d5:08:dd:b5:33:b3:ff:32:49:15:ac:16:11:67:24:d7:f5: c2:ff:e2:7d:75:2a:d2:59:b8:c7:8e:4b:a8:f3:07:29:c6:80: c9:78:6c:95:cf:ef:b7:19:22:8e:64:67:33:4e:00:b7:da:2e: 17:91:2e:10:8e:a3:0d:8b:82:24:bf:5c:f0:85:35:ee:94:18: 6c:14:4e:9e:ec:cf:a1:e6:b5:c5:ca:29:1b:b8:ad:8d:da:64: 48:6e:3d:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDNzIxMTAvBgNVBAUTKDM2MTZFMDFEQTMzMTdGMDlFRUNBOThFN0JDNzU0Q0JD OTkwRDdENjgwHhcNMjYwNDA1MDYwNDMyWhcNMjYwNDEyMDYwNDMyWjAYMRYwFAYD VQQDEw02OWQxZmI3MS0zNWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueP0BsdnF2lJXDD0tOYaGLJneKFd3f+dt1Dkq2c3VOy0JeN+sfzPwxlfAVya 6VLUc45v3vaQ90IcphuJzL38FI+nl8jGEkj5ATnJOYfOfZdTHiMVszg6fuKbyTtU g72HPO3/RIWRBfTneg+gA8MyHTdKnmlQPRmTBqmCVkJu0BMOgqo59gS2SLBfdW8F fm8dBA1EoLjWs3iMdU7I4b0LR3rsk11dsMonEvQ7jn4ndjvLMHoU2UpGGD4cq5mA FWuWbwL7xYtpa0mA3yjErHLvuvcJwwTM+yyGxDOiu4h08D7WSzDJoXbhZh6lAwE0 JKDuh7DA0KhlWYNUK1Jb5fP2tQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGjw5amD Lql8Svk5PeiBQvHy6SiZMB8GA1UdIwQYMBaAFDYW4B2jMX8J7sqY57x1TLyZDX1o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkM3Mi85RDVCNTE1NkVD RjkxMUVGOTNBMkEyMTNDNEY5QUUwMi9OaGJnSGFNeGZ3bnV5cGpudkhWTXZKa05m V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05oYmdIYU14ZndudXlwam52SFZNdkprTmZXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkM3Mi85RDVCNTE1NkVDRjkxMUVGOTNBMkEyMTNDNEY5QUUwMi9OaGJnSGFNeGZ3 bnV5cGpudkhWTXZKa05mV2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW7z36xPLP1Z/1308mQxZ5uy22tjaG5GbUuwncQuycL1Lv8tnifNUUsg+s26Y glO+TavqKt397X7A7ZXp75jMk+XInJ2HtFDltqsRTQWbskMctv/jvUxNtxgY+SxS LNKTWxMryrUkjkZGg5FK8LXkl8xdMh5NQg6tvQ3AdUQmptFd1KAFRB14c8eEFkJN 4E1NvOt/Pm/aAtLi6NpmixSXkbKBndUI3bUzs/8ySRWsFhFnJNf1wv/ifXUq0lm4 x45LqPMHKcaAyXhslc/vtxkijmRnM04At9ouF5EuEI6jDYuCJL9c8IU17pQYbBRO nuzPoea1xcopG7itjdpkSG49ZQ== -----END CERTIFICATE-----Generated at Mon Apr 6 13:40:37 2026 by rpki-client