$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft File: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft (raw, json) Hash identifier: 5uWkpLC36Zw4hg7ker/x8O5FjjwqUKkSAKgStgTDNEY= Subject key identifier: 29:C1:E2:36:B1:5A:FB:40:5B:48:10:92:E0:03:E5:4B:9F:42:BF:0C Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 Certificate issuer: /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft Manifest number: 0187 Signing time: Mon 27 Apr 2026 04:36:35 +0000 Manifest this update: Mon 27 Apr 2026 04:36:34 +0000 Manifest next update: Mon 04 May 2026 04:36:34 +0000 Files and hashes: 1: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl (hash: TiOlyLrexN0Qig7taMq19P3pwzA1TOOFzvZaO+ty6SM=) 2: 77E54B78C45111EF9D399128C4F9AE02.roa (hash: oaVwq+HIN/wyAwR1kQHa3lIBPfZxf93jHy5Nhtjvz8o=) 3: FF233C70E62111EFACA87766C4F9AE02.roa (hash: PYR4UuGGlmCuzo5xccvj2ykJA4EkKftCUqk3OqLHMtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 04:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAE0, serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Validity Not Before: Apr 27 04:36:34 2026 GMT Not After : May 4 04:36:34 2026 GMT Subject: CN=69eee7d2-bd59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ec:d1:aa:2a:37:fb:2c:03:09:58:57:34:6b: 14:58:0a:12:32:5e:05:66:35:73:68:8c:bf:52:6e: 2e:70:ff:e5:c6:d0:d2:98:12:36:07:77:54:44:e9: a4:4d:1e:5d:e1:f8:aa:59:5a:67:96:4b:2d:6a:42: 8c:f9:e1:bb:0e:ab:c5:e0:ea:8e:89:ab:ed:8e:e4: fa:29:6c:d3:fe:6d:fb:50:05:4b:06:a4:5f:07:8f: 86:9f:3b:59:74:07:71:c1:a8:ab:a9:75:02:c2:b8: 3f:59:7a:5c:ee:7b:59:4b:00:e3:bb:40:aa:ba:18: 2d:f0:af:e8:86:2b:a3:04:25:b1:3e:6b:41:a8:35: 81:84:5f:9e:34:4b:17:11:e1:1d:0a:b4:09:07:48: cd:cd:e3:ac:97:5e:22:40:4b:b8:17:fb:6d:ea:4e: 77:10:5d:b6:8b:9a:94:43:e2:f3:00:a7:15:9f:a3: 08:d2:c8:be:7d:77:ff:75:2b:85:80:ea:94:a7:37: 65:2b:52:e6:41:6e:cc:55:b0:37:4d:9b:ce:71:39: 69:c8:20:b9:9e:c1:42:0c:a4:bc:da:71:22:a0:96: 39:51:e0:e7:64:b5:cb:e3:cf:12:3d:5c:40:5d:df: f0:07:f6:90:49:a8:39:cf:c2:b5:c9:0b:fd:a4:9b: c7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C1:E2:36:B1:5A:FB:40:5B:48:10:92:E0:03:E5:4B:9F:42:BF:0C X509v3 Authority Key Identifier: keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:5f:8c:e2:ed:f6:c8:b3:3d:54:ec:b2:0a:1c:77:ed:eb:9c: 08:2c:d7:59:98:d5:70:f9:86:b6:3e:c0:5e:03:06:6e:22:2e: 92:82:55:3e:22:3d:bf:c0:a9:36:42:b5:ce:51:70:5e:e9:e0: ec:fa:12:94:db:39:64:53:41:74:4f:58:10:e9:b5:11:25:25: 90:31:42:e0:0c:43:1c:aa:ab:d2:20:d2:1a:97:79:36:0c:fc: aa:d9:3c:a7:c6:fe:a5:a0:23:61:76:3f:81:de:8a:28:45:5a: 00:ad:f8:20:64:9a:cb:bc:63:18:0a:f2:94:b7:69:54:be:4a: 69:8d:5e:1c:5e:6c:15:83:1e:93:b8:b7:64:7f:f9:09:76:22: 0b:5c:c3:80:1c:73:2f:1a:49:3f:04:21:92:d4:06:e1:0f:8c: 00:97:23:ef:d0:32:b6:e5:3e:23:90:78:b4:e2:d6:9e:bd:17: e8:38:27:d0:7b:ba:9b:bc:13:db:dd:ad:9f:8a:61:9e:b6:c5: 22:c1:76:34:96:0f:83:ea:07:e3:41:d8:51:e0:06:65:d1:5e: 3a:e3:ad:62:40:af:bb:a3:57:dd:ed:d6:a1:39:66:14:f6:5c: c6:ad:1c:30:ca:55:f9:d2:c2:4b:56:77:55:9e:77:90:0a:88: 47:7d:01:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBRTAxMTAvBgNVBAUTKDlERjRGRURGRjkyQTlFN0Y2RTAyQkZDMDU0QUQzMzk4 NTNEOUREMzIwHhcNMjYwNDI3MDQzNjM0WhcNMjYwNTA0MDQzNjM0WjAYMRYwFAYD VQQDEw02OWVlZTdkMi1iZDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnuzRqio3+ywDCVhXNGsUWAoSMl4FZjVzaIy/Um4ucP/lxtDSmBI2B3dUROmk TR5d4fiqWVpnlkstakKM+eG7DqvF4OqOiavtjuT6KWzT/m37UAVLBqRfB4+GnztZ dAdxwairqXUCwrg/WXpc7ntZSwDju0Cquhgt8K/ohiujBCWxPmtBqDWBhF+eNEsX EeEdCrQJB0jNzeOsl14iQEu4F/tt6k53EF22i5qUQ+LzAKcVn6MI0si+fXf/dSuF gOqUpzdlK1LmQW7MVbA3TZvOcTlpyCC5nsFCDKS82nEioJY5UeDnZLXL488SPVxA Xd/wB/aQSag5z8K1yQv9pJvHUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCnB4jax WvtAW0gQkuAD5UufQr8MMB8GA1UdIwQYMBaAFJ30/t/5Kp5/bgK/wFStM5hT2d0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFFMC9BRUY2Mzc2MDE5 NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5uOXVBcl9BVkswem1GUFoz VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25mVC0zX2txbm45dUFyX0FWSzB6bUZQWjNUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFFMC9BRUY2Mzc2MDE5NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5u OXVBcl9BVkswem1GUFozVEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArF+M4u32yLM9VOyyChx37eucCCzXWZjVcPmGtj7AXgMGbiIukoJVPiI9v8Cp NkK1zlFwXung7PoSlNs5ZFNBdE9YEOm1ESUlkDFC4AxDHKqr0iDSGpd5Ngz8qtk8 p8b+paAjYXY/gd6KKEVaAK34IGSay7xjGArylLdpVL5KaY1eHF5sFYMek7i3ZH/5 CXYiC1zDgBxzLxpJPwQhktQG4Q+MAJcj79AytuU+I5B4tOLWnr0X6Dgn0Hu6m7wT 292tn4phnrbFIsF2NJYPg+oH40HYUeAGZdFeOuOtYkCvu6NX3e3WoTlmFPZcxq0c MMpV+dLCS1Z3VZ53kAqIR30B+A== -----END CERTIFICATE-----Generated at Mon Apr 27 17:20:30 2026 by rpki-client