$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft File: nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft (raw, json) Hash identifier: tS0nAC/EULXTMLL37njNWbY8MFnsxKjWDIiUkDlIKgI= Subject key identifier: 1E:4A:76:F7:EC:36:0C:E0:12:B2:E9:31:71:BD:AF:72:26:7E:6B:FE Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 Certificate issuer: /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft Manifest number: 01CA Signing time: Mon 01 Jun 2026 04:38:19 +0000 Manifest this update: Mon 01 Jun 2026 04:38:18 +0000 Manifest next update: Mon 08 Jun 2026 04:38:18 +0000 Files and hashes: 1: nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl (hash: QVHwbFchnrDA5r2U9JzNKbUHKdxrjF6na6kv2YWfZhY=) 2: 09E42D1E921B11EF829E0041C4F9AE02.roa (hash: j9PF6XHW/9cjHdZemEYcO4bIyJTkShVbfz28uJrkeSE=) 3: 51E59058921B11EFB656CB41C4F9AE02.roa (hash: gnfLlur8gPdUkwqDHn+eOeiErOoehQs7kmodfs4S4jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 04:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CAF, serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Validity Not Before: Jun 1 04:38:18 2026 GMT Not After : Jun 8 04:38:18 2026 GMT Subject: CN=6a1d0cba-ca57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:34:a1:ec:45:6f:8b:fc:76:78:91:77:3a:9b: 5f:1e:d5:5e:ce:d9:1e:47:96:c7:b1:25:87:79:e6: 8d:55:39:18:81:ad:40:73:98:b8:d3:a2:55:39:5d: 02:0f:7c:24:2c:a0:d8:3e:1a:4d:cf:25:ea:ee:bb: a4:34:01:a8:ab:46:61:9a:ba:e6:e7:11:0c:b9:0e: 03:c4:76:02:ff:6b:f4:b2:2c:b8:ed:46:54:17:d7: f2:eb:19:86:3f:e6:c6:3d:72:46:67:ee:8c:28:d5: 31:05:73:97:24:13:27:28:bd:b7:b9:28:83:4f:de: f1:03:88:40:e3:a6:81:f2:8e:75:da:4d:72:35:03: 0d:3d:9b:14:9a:3d:e0:c7:c0:be:e5:86:49:8f:95: 10:a0:19:bf:4f:b8:73:23:a5:c5:e7:72:59:84:85: 4d:4e:c3:8e:cb:9b:51:61:14:36:f5:5a:01:92:31: 4a:74:ab:a2:39:a9:45:6b:98:cd:9b:b1:04:54:15: e7:9b:19:ae:b5:c4:13:c9:af:f5:b3:f6:83:48:58: ca:56:21:9d:8e:ac:b4:1f:4c:c6:20:ec:5d:89:52: 2a:08:e2:77:23:08:64:d4:2b:70:0b:f8:d5:ec:44: 38:62:a0:b1:9d:07:be:30:77:bb:06:f9:4f:ee:27: d6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4A:76:F7:EC:36:0C:E0:12:B2:E9:31:71:BD:AF:72:26:7E:6B:FE X509v3 Authority Key Identifier: keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e9:89:a7:73:80:14:7f:92:88:1f:de:9b:bd:60:f5:0e:f9: ac:8a:68:bc:37:7b:f5:a5:f7:d8:77:8f:be:b8:68:fc:16:f2: fc:ba:30:08:d5:1b:2b:7f:30:77:f2:99:a7:0c:bd:06:32:55: 1b:bf:a3:b8:1b:96:ba:36:1a:8e:dc:e0:93:f5:e4:ba:0b:e2: 6d:92:d0:91:23:78:dc:cc:89:60:53:7b:19:e4:20:ff:14:dd: a2:61:27:da:82:b1:ae:a3:8b:0e:1d:25:33:88:27:f8:e1:26: ca:ec:ca:b2:ba:54:52:0c:a3:61:f9:b8:0f:64:9c:b1:78:d2: 45:6d:35:76:18:43:01:e6:2b:a1:5a:ef:b2:22:5f:b2:41:b5: b9:03:e7:03:0f:06:aa:a8:15:6a:8a:fb:f3:4c:48:5d:34:56: 35:5d:50:cf:c4:fd:89:d6:30:92:19:f0:46:ab:d9:3b:5a:04: 5a:93:b6:50:f3:38:f6:d9:7d:b3:84:d6:6d:69:65:3a:0f:e0: 75:0a:c0:0e:31:85:4b:9d:39:d7:fe:e0:49:fd:0c:78:e1:4c: 8b:92:99:46:45:58:59:5b:43:3f:84:82:d4:8c:aa:c1:fe:d1: 60:e5:f9:4d:a5:b6:2b:b4:01:11:51:9a:ab:bc:fc:88:78:ca: ed:f1:91:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQUYxMTAvBgNVBAUTKDlGMDJEQTNBQjVGQjQ1MzE3NTA3QzQ4MDIxQ0UwQThC OTM3MjU1QzkwHhcNMjYwNjAxMDQzODE4WhcNMjYwNjA4MDQzODE4WjAYMRYwFAYD VQQDEw02YTFkMGNiYS1jYTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTSh7EVvi/x2eJF3OptfHtVeztkeR5bHsSWHeeaNVTkYga1Ac5i406JVOV0C D3wkLKDYPhpNzyXq7rukNAGoq0Zhmrrm5xEMuQ4DxHYC/2v0siy47UZUF9fy6xmG P+bGPXJGZ+6MKNUxBXOXJBMnKL23uSiDT97xA4hA46aB8o512k1yNQMNPZsUmj3g x8C+5YZJj5UQoBm/T7hzI6XF53JZhIVNTsOOy5tRYRQ29VoBkjFKdKuiOalFa5jN m7EEVBXnmxmutcQTya/1s/aDSFjKViGdjqy0H0zGIOxdiVIqCOJ3Iwhk1CtwC/jV 7EQ4YqCxnQe+MHe7BvlP7ifWVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB5Kdvfs NgzgErLpMXG9r3Imfmv+MB8GA1UdIwQYMBaAFJ8C2jq1+0UxdQfEgCHOCouTclXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNBRi9GM0UwRkFFNEI2 RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JURjFCOFNBSWM0S2k1TnlW Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL253TGFPclg3UlRGMUI4U0FJYzRLaTVOeVZjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNBRi9GM0UwRkFFNEI2RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JU RjFCOFNBSWM0S2k1TnlWY2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbumJp3OAFH+SiB/em71g9Q75rIpovDd79aX32HePvrho/Bby/LowCNUbK38w d/KZpwy9BjJVG7+juBuWujYajtzgk/XkugvibZLQkSN43MyJYFN7GeQg/xTdomEn 2oKxrqOLDh0lM4gn+OEmyuzKsrpUUgyjYfm4D2ScsXjSRW01dhhDAeYroVrvsiJf skG1uQPnAw8GqqgVaor780xIXTRWNV1Qz8T9idYwkhnwRqvZO1oEWpO2UPM49tl9 s4TWbWllOg/gdQrADjGFS5051/7gSf0MeOFMi5KZRkVYWVtDP4SC1Iyqwf7RYOX5 TaW2K7QBEVGaq7z8iHjK7fGRhA== -----END CERTIFICATE-----Generated at Tue Jun 2 21:51:55 2026 by rpki-client