$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft File: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft (raw, json) Hash identifier: wXCKtI5xyHGGhNjuIqbHSgvS4N/AzWy0mX7ew7rm1tA= Subject key identifier: F8:DA:23:DC:42:C3:97:1E:E0:B4:63:26:09:03:3A:A8:17:9D:15:C5 Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 Certificate issuer: /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft Manifest number: 019D Signing time: Thu 11 Jun 2026 06:48:08 +0000 Manifest this update: Thu 11 Jun 2026 06:48:08 +0000 Manifest next update: Thu 18 Jun 2026 06:48:08 +0000 Files and hashes: 1: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl (hash: 8OihDrwhOw3Q6OrzvnTDTgVF7HwET/XnK1j3K/42KWY=) 2: FF233C70E62111EFACA87766C4F9AE02.roa (hash: PYR4UuGGlmCuzo5xccvj2ykJA4EkKftCUqk3OqLHMtk=) 3: 77E54B78C45111EF9D399128C4F9AE02.roa (hash: oaVwq+HIN/wyAwR1kQHa3lIBPfZxf93jHy5Nhtjvz8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 06:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAE0, serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Validity Not Before: Jun 11 06:48:08 2026 GMT Not After : Jun 18 06:48:08 2026 GMT Subject: CN=6a2a5a28-ec97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:72:24:ee:1b:2a:f8:c1:dd:e1:cd:02:0b:18: dc:21:c7:4c:a8:84:36:3d:bd:a6:9f:55:db:66:aa: 85:a7:a1:94:f6:30:12:fb:6f:65:5f:c4:55:24:1b: fa:1e:ad:e6:2a:93:bb:6e:19:79:2a:97:6f:e7:f1: d4:66:cf:1f:d0:29:61:70:c6:f2:9e:9d:7c:fc:32: 65:1a:28:67:c8:9e:00:8c:52:c7:4f:5b:73:90:8d: a4:c9:9d:86:26:f8:8b:88:c8:6e:f6:43:83:b6:b8: 7d:f2:df:92:90:de:c8:d8:01:17:e9:81:29:c8:24: a5:d5:d9:b9:f1:13:40:87:25:f4:d8:f5:cc:05:bb: 45:0e:9e:a8:61:6f:c5:b4:34:f8:b2:d1:82:dd:ad: f3:99:bb:42:ea:0f:2d:2c:ec:cb:88:a9:76:79:22: 23:fd:01:d3:77:a5:67:fd:a0:51:a5:9b:09:0f:f6: 91:2a:15:8f:62:96:81:91:e4:64:44:c7:5a:65:c5: 10:23:e3:d1:b9:08:5d:9f:0d:f6:15:ed:61:ac:32: 9a:4d:5d:14:61:02:81:e2:36:36:68:9f:1a:2b:f1: 61:8c:d0:ab:a1:a6:7b:29:e8:af:20:90:65:e6:1b: 2b:4d:08:d4:d1:5b:1c:e5:8f:91:25:ff:82:87:9e: 5c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DA:23:DC:42:C3:97:1E:E0:B4:63:26:09:03:3A:A8:17:9D:15:C5 X509v3 Authority Key Identifier: keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d6:63:e7:99:15:2a:0d:95:8e:c6:46:ee:61:b0:29:98:66: ca:9d:96:ce:6b:24:e5:18:62:02:0c:cc:0d:03:3a:b4:f6:db: f1:39:9c:1e:fe:6c:31:38:48:e5:8e:d4:b9:e7:97:79:2d:78: 3f:a6:18:84:a7:10:f5:40:a0:08:30:59:b8:da:66:f5:ce:45: f3:b9:50:a2:4b:5a:43:5e:a6:fa:09:6a:4e:01:dd:cf:f3:02: 43:68:3a:a3:d1:28:f1:42:7f:8f:52:30:9f:70:94:a5:81:3c: e5:16:76:02:35:a2:93:81:7d:ff:c4:70:7d:69:8a:4f:00:8e: d8:35:41:c9:f6:cc:70:c7:3a:6f:e9:f0:5b:0e:b1:aa:2a:70: 8a:59:e1:2d:1e:46:aa:ec:86:38:6a:da:97:1a:4e:77:e5:b5: 6b:13:32:91:f2:5f:ae:10:d1:22:74:0d:45:6b:e5:35:7b:04: 20:d5:23:b5:02:ee:99:25:eb:3b:20:e9:81:0b:81:40:9c:95: c1:02:43:f0:fb:2e:d0:cb:4e:31:eb:25:1e:0a:11:ed:3f:36: f1:97:47:75:36:6d:4c:ba:e3:86:ae:31:d9:fa:a3:21:59:94: ed:89:ca:21:76:ca:71:59:1f:45:3e:38:f8:01:b6:12:c5:c8: cf:5b:09:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBRTAxMTAvBgNVBAUTKDlERjRGRURGRjkyQTlFN0Y2RTAyQkZDMDU0QUQzMzk4 NTNEOUREMzIwHhcNMjYwNjExMDY0ODA4WhcNMjYwNjE4MDY0ODA4WjAYMRYwFAYD VQQDEw02YTJhNWEyOC1lYzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj3Ik7hsq+MHd4c0CCxjcIcdMqIQ2Pb2mn1XbZqqFp6GU9jAS+29lX8RVJBv6 Hq3mKpO7bhl5Kpdv5/HUZs8f0ClhcMbynp18/DJlGihnyJ4AjFLHT1tzkI2kyZ2G JviLiMhu9kODtrh98t+SkN7I2AEX6YEpyCSl1dm58RNAhyX02PXMBbtFDp6oYW/F tDT4stGC3a3zmbtC6g8tLOzLiKl2eSIj/QHTd6Vn/aBRpZsJD/aRKhWPYpaBkeRk RMdaZcUQI+PRuQhdnw32Fe1hrDKaTV0UYQKB4jY2aJ8aK/FhjNCroaZ7KeivIJBl 5hsrTQjU0Vsc5Y+RJf+Ch55cTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPjaI9xC w5ce4LRjJgkDOqgXnRXFMB8GA1UdIwQYMBaAFJ30/t/5Kp5/bgK/wFStM5hT2d0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFFMC9BRUY2Mzc2MDE5 NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5uOXVBcl9BVkswem1GUFoz VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25mVC0zX2txbm45dUFyX0FWSzB6bUZQWjNUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFFMC9BRUY2Mzc2MDE5NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5u OXVBcl9BVkswem1GUFozVEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXtZj55kVKg2VjsZG7mGwKZhmyp2Wzmsk5RhiAgzMDQM6tPbb8TmcHv5sMThI 5Y7UueeXeS14P6YYhKcQ9UCgCDBZuNpm9c5F87lQoktaQ16m+glqTgHdz/MCQ2g6 o9Eo8UJ/j1Iwn3CUpYE85RZ2AjWik4F9/8RwfWmKTwCO2DVByfbMcMc6b+nwWw6x qipwilnhLR5GquyGOGralxpOd+W1axMykfJfrhDRInQNRWvlNXsEINUjtQLumSXr OyDpgQuBQJyVwQJD8Psu0MtOMeslHgoR7T828ZdHdTZtTLrjhq4x2fqjIVmU7YnK IXbKcVkfRT44+AG2EsXIz1sJsQ== -----END CERTIFICATE-----Generated at Thu Jun 11 20:48:22 2026 by rpki-client