$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft File: NSwvQv_2bLhqacZ-5hurbhEVTss.mft (raw, json) Hash identifier: DXVOJ3R2VnhYa+5DHSpb0h7okHoFzdJCChf3Mi/1Lk8= Subject key identifier: 4C:30:43:19:BA:C5:64:A0:E1:A2:AB:4D:C2:C3:77:8F:BA:44:AA:E7 Authority key identifier: 35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB Certificate issuer: /CN=A91CCD0C/serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft Manifest number: 0151 Signing time: Sun 05 Apr 2026 04:32:47 +0000 Manifest this update: Sun 05 Apr 2026 04:32:47 +0000 Manifest next update: Sun 12 Apr 2026 04:32:47 +0000 Files and hashes: 1: NSwvQv_2bLhqacZ-5hurbhEVTss.crl (hash: bL5R6TcpGJUzbbh24lsMGYFagG+Egn4WdIXuYb8+n1I=) 2: E5BB4DB260E411EF83727F5CC4F9AE02.roa (hash: rwM85aK7lK+yIuUXlvt+45rHjWLjHKjyCpBV5oJ3MMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:32:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCD0C, serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB Validity Not Before: Apr 5 04:32:47 2026 GMT Not After : Apr 12 04:32:47 2026 GMT Subject: CN=69d1e5ef-3812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:58:ca:40:ec:d8:04:b1:b4:d2:41:29:18: 90:d4:60:84:c0:11:71:e6:68:d2:0e:5b:2a:ef:b8: 22:c4:6e:a3:81:9e:28:36:d8:a5:7a:38:c9:4e:75: 56:e0:e0:28:26:02:a4:86:47:d9:08:77:e3:16:7c: 61:5d:09:4a:f8:fd:26:4e:4a:50:df:2a:3c:86:9c: 6a:e5:b0:e8:06:89:f0:31:1e:13:b4:52:d5:25:dc: bc:b1:09:3c:8a:b6:58:ac:22:e2:e4:9e:7b:27:29: da:a4:12:cd:f9:a3:fc:61:cd:4c:24:aa:3b:9b:f6: 37:9a:7e:8e:37:87:25:ec:88:a3:54:d5:4d:7e:0f: 86:07:68:57:04:a9:49:47:70:b1:3d:d3:8f:c5:67: ed:23:35:7a:93:60:af:bd:2a:80:4c:3c:bd:4d:40: e4:9c:38:d0:3d:de:aa:18:82:64:43:29:04:8f:1f: 77:a5:03:d7:6b:b8:1c:51:60:2a:c5:d0:32:c5:ba: 77:41:c0:5f:cf:4c:a0:db:28:f1:76:75:8f:95:02: 07:b0:a2:ab:32:25:fa:d2:f4:96:a5:c0:02:6b:a2: 0d:ce:25:64:93:1f:f9:33:65:3d:4c:33:ea:a1:8f: b8:00:f1:d1:98:8c:21:28:74:6a:e2:56:e0:02:7b: 64:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:30:43:19:BA:C5:64:A0:E1:A2:AB:4D:C2:C3:77:8F:BA:44:AA:E7 X509v3 Authority Key Identifier: keyid:35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:75:5c:5f:d8:a5:ec:ea:5c:23:75:0f:5e:eb:62:1f:c8:56: b0:b9:8b:96:f9:a3:db:e8:b5:1e:95:61:58:f8:a9:3a:ab:6b: ca:f2:6a:3c:95:a0:7b:cc:f4:bd:4d:bf:a2:64:1e:0f:12:3c: 9f:ef:51:f8:b6:37:88:40:cd:0a:4f:ad:65:40:0d:76:39:1f: 6c:5c:16:17:51:9b:95:8b:37:01:b9:d3:b6:aa:d2:1d:ff:90: 54:a1:23:08:8e:8c:8c:07:27:fb:d5:70:2c:60:f3:7a:3e:89: 4c:a2:5e:83:a6:6a:ec:2f:54:7e:e1:2f:e7:c4:80:8c:11:0d: 48:a9:07:fa:c5:62:5f:0c:30:82:ee:e6:ea:b2:7a:62:1f:9a: 5f:ee:e2:74:ff:95:cf:da:ab:df:61:49:9a:38:b6:55:c1:94: c1:c5:e3:e4:b0:7d:b3:dd:27:50:15:13:0f:7f:57:55:af:01: a8:48:b0:c0:00:46:02:84:0e:28:79:4d:a0:2d:6f:e8:77:97: 62:f2:ca:d8:d6:58:03:0c:a2:d7:f8:a1:4e:d9:2c:ca:5a:3e: 25:55:48:52:d7:e5:4f:bd:d0:48:e0:9d:5b:80:78:2c:57:b4: d3:c6:64:cf:52:4c:00:aa:61:39:65:77:86:5a:35:dc:c0:25: 89:6c:6f:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NEMEMxMTAvBgNVBAUTKDM1MkMyRjQyRkZGNjZDQjg2QTY5QzY3RUU2MUJBQjZF MTExNTRFQ0IwHhcNMjYwNDA1MDQzMjQ3WhcNMjYwNDEyMDQzMjQ3WjAYMRYwFAYD VQQDEw02OWQxZTVlZi0zODEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4VYykDs2ASxtNJBKRiQ1GCEwBFx5mjSDlsq77gixG6jgZ4oNtilejjJTnVW 4OAoJgKkhkfZCHfjFnxhXQlK+P0mTkpQ3yo8hpxq5bDoBonwMR4TtFLVJdy8sQk8 irZYrCLi5J57JynapBLN+aP8Yc1MJKo7m/Y3mn6ON4cl7IijVNVNfg+GB2hXBKlJ R3CxPdOPxWftIzV6k2CvvSqATDy9TUDknDjQPd6qGIJkQykEjx93pQPXa7gcUWAq xdAyxbp3QcBfz0yg2yjxdnWPlQIHsKKrMiX60vSWpcACa6INziVkkx/5M2U9TDPq oY+4APHRmIwhKHRq4lbgAntk4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEwwQxm6 xWSg4aKrTcLDd4+6RKrnMB8GA1UdIwQYMBaAFDUsL0L/9my4amnGfuYbq24RFU7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0QwQy84MTlBMDIzNDMy Q0IxMUVGOUVBMEM5NkFDNEY5QUUwMi9OU3d2UXZfMmJMaHFhY1otNWh1cmJoRVZU c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Td3ZRdl8yYkxocWFjWi01aHVyYmhFVlRzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0QwQy84MTlBMDIzNDMyQ0IxMUVGOUVBMEM5NkFDNEY5QUUwMi9OU3d2UXZfMmJM aHFhY1otNWh1cmJoRVZUc3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS3VcX9il7OpcI3UPXutiH8hWsLmLlvmj2+i1HpVhWPipOqtryvJqPJWge8z0 vU2/omQeDxI8n+9R+LY3iEDNCk+tZUANdjkfbFwWF1GblYs3AbnTtqrSHf+QVKEj CI6MjAcn+9VwLGDzej6JTKJeg6Zq7C9UfuEv58SAjBENSKkH+sViXwwwgu7m6rJ6 Yh+aX+7idP+Vz9qr32FJmji2VcGUwcXj5LB9s90nUBUTD39XVa8BqEiwwABGAoQO KHlNoC1v6HeXYvLK2NZYAwyi1/ihTtksylo+JVVIUtflT73QSOCdW4B4LFe008Zk z1JMAKphOWV3hlo13MAliWxv7Q== -----END CERTIFICATE-----Generated at Mon Apr 6 14:00:05 2026 by rpki-client