$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft File: nZwAihKi96YP7_liJmsFAqHKC6I.mft (raw, json) Hash identifier: TZwe5i+KPUhgoMVHKVxBP7N3LwbYyAy69e2OiNWmc0A= Subject key identifier: D6:AA:0F:8B:4D:F8:14:7F:9A:4A:EF:1E:60:47:39:4C:9D:0D:7B:B6 Authority key identifier: 9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 Certificate issuer: /CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Certificate serial: 05C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft Manifest number: 05B9 Signing time: Sat 04 Apr 2026 22:53:53 +0000 Manifest this update: Sat 04 Apr 2026 22:53:52 +0000 Manifest next update: Sat 11 Apr 2026 22:53:52 +0000 Files and hashes: 1: nZwAihKi96YP7_liJmsFAqHKC6I.crl (hash: ZJKBQqEa3nbP9bCqxKA1+pKBFBJ1mIXh0ERXXrFp9xM=) 2: 46A2104603CF11ECA480B07CC4F9AE02.roa (hash: YWL2tnOxZhR6Kv+bhZGzV6FUKHaCEBSKA7cxdxelpv4=) 3: 460AA4AE03CF11ECA480B07CC4F9AE02.roa (hash: 8wbWE+NHbm5WX/IacxW1nTlGzZjirDSvgH7MSKpS2Nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1479 (0x5c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB85A, serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Validity Not Before: Apr 4 22:53:52 2026 GMT Not After : Apr 11 22:53:52 2026 GMT Subject: CN=69d19681-59b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2f:b2:7a:f7:b8:ee:69:f2:58:24:a1:4d:fe: 3a:33:df:25:75:b0:a9:86:11:f8:d8:f1:53:6d:1d: df:ae:86:e3:84:9d:e5:50:4e:fc:82:bd:3d:05:77: 16:d7:36:92:49:53:55:53:1d:e6:ef:7c:72:07:12: c6:e7:3d:18:e5:e7:37:c4:ef:ac:97:ce:f0:d0:76: 01:83:78:64:0e:58:b0:08:bd:96:1b:52:d8:f4:21: 13:b0:d7:9f:c1:cc:50:c0:f1:8f:93:51:7c:21:40: 7f:a9:c2:f2:2f:e0:d1:5e:39:7b:9f:e9:ea:6c:59: 35:5e:d6:15:27:14:7a:6c:7c:e2:d4:91:c8:4d:c0: 35:37:d4:0f:ed:a0:bf:f9:b9:63:b1:fe:55:e0:95: 5b:66:42:fa:88:a1:a3:61:f9:df:24:05:b3:92:c9: b7:ad:c7:cf:f5:0e:da:13:1f:81:d4:81:9c:28:3a: 10:c7:6c:ff:d2:81:d4:5e:72:56:02:10:0c:d0:b9: ee:b8:37:84:fd:42:69:ae:21:d7:21:87:c0:dc:c6: 14:17:54:64:2c:15:be:c4:ac:76:10:1f:dc:04:10: 03:f6:74:96:0b:11:79:e2:e6:9f:12:ac:5d:a0:12: 5e:9e:84:46:8b:81:86:69:07:78:bd:a9:70:6b:fc: 6c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:AA:0F:8B:4D:F8:14:7F:9A:4A:EF:1E:60:47:39:4C:9D:0D:7B:B6 X509v3 Authority Key Identifier: keyid:9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:2c:7f:05:f7:e6:da:37:77:48:52:0d:fa:40:8d:3f:d8:40: 18:6f:13:ac:9d:00:15:df:52:fc:59:56:5b:52:94:d0:1e:1d: 54:d5:d1:b3:f7:f9:a0:03:33:bc:66:7a:49:00:51:76:bc:8c: bc:dc:7b:2d:2a:7b:76:e7:e3:e0:8e:2a:e9:11:98:c8:4f:78: 70:76:ad:5b:e6:1d:2f:09:11:f3:3e:34:e5:b8:d3:5e:cd:69: e6:a3:52:cd:25:1e:da:88:1c:29:ac:0e:fb:fc:02:5a:4d:a3: f0:54:09:d9:d8:51:13:cf:32:02:3e:57:39:57:1c:e2:59:77: 6d:3f:98:d0:55:2a:56:90:50:3e:e4:bc:63:11:b2:2f:10:86: 24:43:7d:08:7a:35:6b:35:e9:80:76:5d:9a:55:23:5d:ac:d4: bb:b4:49:12:c5:6a:2c:fa:39:3b:4b:8f:86:34:93:1e:cd:94: c5:d8:a9:41:9a:dd:4f:33:d7:07:58:59:f3:ca:fb:a6:53:ec: dc:79:a3:ba:66:60:9c:e2:5a:5b:39:1f:b3:fe:d3:63:5a:20: f3:50:2d:6c:69:4b:f6:8a:c2:ce:f8:9c:63:65:b5:04:d8:48: 99:78:3d:0f:9f:ff:55:b9:c8:fb:8f:33:6d:14:d7:cd:3a:d8: 78:1f:68:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI4NUExMTAvBgNVBAUTKDlEOUMwMDhBMTJBMkY3QTYwRkVGRjk2MjI2NkIwNTAy QTFDQTBCQTIwHhcNMjYwNDA0MjI1MzUyWhcNMjYwNDExMjI1MzUyWjAYMRYwFAYD VQQDEw02OWQxOTY4MS01OWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoi+yeve47mnyWCShTf46M98ldbCphhH42PFTbR3frobjhJ3lUE78gr09BXcW 1zaSSVNVUx3m73xyBxLG5z0Y5ec3xO+sl87w0HYBg3hkDliwCL2WG1LY9CETsNef wcxQwPGPk1F8IUB/qcLyL+DRXjl7n+nqbFk1XtYVJxR6bHzi1JHITcA1N9QP7aC/ +bljsf5V4JVbZkL6iKGjYfnfJAWzksm3rcfP9Q7aEx+B1IGcKDoQx2z/0oHUXnJW AhAM0LnuuDeE/UJpriHXIYfA3MYUF1RkLBW+xKx2EB/cBBAD9nSWCxF54uafEqxd oBJenoRGi4GGaQd4valwa/xsewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNaqD4tN +BR/mkrvHmBHOUydDXu2MB8GA1UdIwQYMBaAFJ2cAIoSovemD+/5YiZrBQKhygui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjg1QS8xODVDMzlCNjAz Q0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2WVA3X2xpSm1zRkFxSEtD NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25ad0FpaEtpOTZZUDdfbGlKbXNGQXFIS0M2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjg1QS8xODVDMzlCNjAzQ0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2 WVA3X2xpSm1zRkFxSEtDNkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPix/Bffm2jd3SFIN+kCNP9hAGG8TrJ0AFd9S/FlWW1KU0B4dVNXRs/f5oAMz vGZ6SQBRdryMvNx7LSp7dufj4I4q6RGYyE94cHatW+YdLwkR8z405bjTXs1p5qNS zSUe2ogcKawO+/wCWk2j8FQJ2dhRE88yAj5XOVcc4ll3bT+Y0FUqVpBQPuS8YxGy LxCGJEN9CHo1azXpgHZdmlUjXazUu7RJEsVqLPo5O0uPhjSTHs2UxdipQZrdTzPX B1hZ88r7plPs3HmjumZgnOJaWzkfs/7TY1og81AtbGlL9orCzvicY2W1BNhImXg9 D5//VbnI+48zbRTXzTrYeB9odQ== -----END CERTIFICATE-----Generated at Mon Apr 6 13:56:53 2026 by rpki-client