$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft File: NctCHFV3F3WBziSzai9syTGEYFI.mft (raw, json) Hash identifier: BWfg0S8ynduNhOrlSup+a1ELMAop+wGvGZjX5fl5V3s= Subject key identifier: F4:E8:69:FB:A3:49:1A:06:DC:79:70:71:8E:7E:EF:3A:A9:FC:57:30 Authority key identifier: 35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52 Certificate issuer: /CN=A91CA3CD/serialNumber=35CB421C5577177581CE24B36A2F6CC931846052 Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft Manifest number: 01D4 Signing time: Thu 21 May 2026 03:41:32 +0000 Manifest this update: Thu 21 May 2026 03:41:32 +0000 Manifest next update: Thu 28 May 2026 03:41:32 +0000 Files and hashes: 1: NctCHFV3F3WBziSzai9syTGEYFI.crl (hash: p3H2iWZpavRcGQ9ZeJUUaHR9dsgr2Nw+Er/2d8wrLSU=) 2: F5121FB090CF11EE8036815AC4F9AE02.roa (hash: fAaur7LW2+pEge7BQCktlo8tOQuU2cmVWJ8Ioa474Lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA3CD, serialNumber=35CB421C5577177581CE24B36A2F6CC931846052 Validity Not Before: May 21 03:41:32 2026 GMT Not After : May 28 03:41:32 2026 GMT Subject: CN=6a0e7eec-c541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:93:5b:b6:6c:fe:5e:fc:70:ab:92:db:49:09: 00:4b:9f:86:51:a8:e6:9d:5a:e8:77:7e:bd:15:22: d2:5d:5a:7b:47:5f:15:2b:36:dd:62:3f:5d:77:e1: a1:32:5b:ee:bd:6a:90:b9:9f:b1:12:06:e9:33:e6: d1:e9:2a:49:6b:73:aa:77:7d:64:6e:d0:e8:94:8b: cc:23:99:77:ec:b7:86:7c:b3:e7:ef:8b:5f:05:92: eb:4e:9c:6c:c5:b6:4e:50:f1:57:3e:05:83:26:6b: 7a:b3:b1:ac:fd:d6:5a:3b:73:7a:4d:94:42:ba:34: 0c:fb:9e:20:19:df:25:d8:9e:11:bb:55:bf:f6:72: 74:54:8d:07:50:f9:3f:eb:2b:5b:41:7e:11:44:e5: 3e:72:e6:a8:2c:8c:b2:03:a2:1e:b1:b8:7f:ca:48: 79:b6:ae:e6:94:d1:84:c9:68:ec:81:4a:e8:cb:9b: 8b:ff:b6:09:be:2e:5d:16:d0:90:87:9c:0e:da:e1: 33:7e:12:02:6d:8b:d2:74:1f:c7:69:3e:c8:e6:f0: 08:3f:c5:1c:88:00:86:51:f1:d5:a3:bb:88:18:0f: f0:44:e2:15:57:fe:ec:d0:b8:16:01:0e:1a:c1:f6: 89:dd:99:95:84:86:ee:67:8c:e3:2d:ac:79:e5:51: ff:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E8:69:FB:A3:49:1A:06:DC:79:70:71:8E:7E:EF:3A:A9:FC:57:30 X509v3 Authority Key Identifier: keyid:35:CB:42:1C:55:77:17:75:81:CE:24:B3:6A:2F:6C:C9:31:84:60:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NctCHFV3F3WBziSzai9syTGEYFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA3CD/26453FA0905711EE86493613C4F9AE02/NctCHFV3F3WBziSzai9syTGEYFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:3d:30:13:73:3b:12:3d:c5:f9:f4:e3:fb:c8:85:c5:87:7e: 70:a8:54:fb:34:e8:d4:c9:d6:d0:3d:ad:77:f3:fc:89:e1:a5: 53:83:f7:87:4f:03:bd:02:3e:26:5c:ce:44:d3:87:e6:16:54: 81:78:63:07:a6:26:9e:9e:58:c9:ad:7b:94:e0:16:89:ae:e2: 77:ba:bd:81:3c:ac:f9:22:d1:98:05:21:8a:f0:15:65:4b:86: 22:e2:8b:3b:c1:a4:05:63:76:a6:79:c7:64:75:ca:f0:13:2d: 7e:d5:8b:6b:24:34:a7:d0:3c:1e:29:56:a0:24:59:dc:fc:da: e0:3f:45:d9:ae:58:e2:68:25:d2:5b:43:12:24:31:b4:b3:1a: ec:bc:88:1a:cb:35:19:47:ce:ab:90:04:c3:c6:1d:6d:6c:4a: 01:4d:fb:21:92:3a:d6:2d:48:02:89:8c:bc:37:25:f8:52:4c: 9c:e0:3a:f9:d0:43:66:e4:f9:b4:42:74:4f:99:5a:c8:05:46: 52:ff:5b:d3:be:f5:36:15:d5:5f:de:41:9c:87:73:44:12:22: 56:4b:3a:6a:bd:e8:c5:e8:22:1b:ed:07:02:db:c3:b5:ca:dd: 20:70:e9:c3:8e:e9:33:ba:c6:41:71:4f:ba:3e:dd:1d:7f:01: 03:52:5a:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EzQ0QxMTAvBgNVBAUTKDM1Q0I0MjFDNTU3NzE3NzU4MUNFMjRCMzZBMkY2Q0M5 MzE4NDYwNTIwHhcNMjYwNTIxMDM0MTMyWhcNMjYwNTI4MDM0MTMyWjAYMRYwFAYD VQQDEw02YTBlN2VlYy1jNTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZNbtmz+Xvxwq5LbSQkAS5+GUajmnVrod369FSLSXVp7R18VKzbdYj9dd+Gh MlvuvWqQuZ+xEgbpM+bR6SpJa3Oqd31kbtDolIvMI5l37LeGfLPn74tfBZLrTpxs xbZOUPFXPgWDJmt6s7Gs/dZaO3N6TZRCujQM+54gGd8l2J4Ru1W/9nJ0VI0HUPk/ 6ytbQX4RROU+cuaoLIyyA6Iesbh/ykh5tq7mlNGEyWjsgUroy5uL/7YJvi5dFtCQ h5wO2uEzfhICbYvSdB/HaT7I5vAIP8UciACGUfHVo7uIGA/wROIVV/7s0LgWAQ4a wfaJ3ZmVhIbuZ4zjLax55VH/fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPToafuj SRoG3HlwcY5+7zqp/FcwMB8GA1UdIwQYMBaAFDXLQhxVdxd1gc4ks2ovbMkxhGBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTNDRC8yNjQ1M0ZBMDkw NTcxMUVFODY0OTM2MTNDNEY5QUUwMi9OY3RDSEZWM0YzV0J6aVN6YWk5c3lUR0VZ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05jdENIRlYzRjNXQnppU3phaTlzeVRHRVlGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTNDRC8yNjQ1M0ZBMDkwNTcxMUVFODY0OTM2MTNDNEY5QUUwMi9OY3RDSEZWM0Yz V0J6aVN6YWk5c3lUR0VZRkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEART0wE3M7Ej3F+fTj+8iFxYd+cKhU+zTo1MnW0D2td/P8ieGlU4P3h08DvQI+ JlzORNOH5hZUgXhjB6Ymnp5Yya17lOAWia7id7q9gTys+SLRmAUhivAVZUuGIuKL O8GkBWN2pnnHZHXK8BMtftWLayQ0p9A8HilWoCRZ3Pza4D9F2a5Y4mgl0ltDEiQx tLMa7LyIGss1GUfOq5AEw8YdbWxKAU37IZI61i1IAomMvDcl+FJMnOA6+dBDZuT5 tEJ0T5layAVGUv9b0771NhXVX95BnIdzRBIiVks6ar3oxegiG+0HAtvDtcrdIHDp w47pM7rGQXFPuj7dHX8BA1JaiQ== -----END CERTIFICATE-----Generated at Thu May 21 11:15:03 2026 by rpki-client