$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: 5Drt8+yvh961I1GD/CESyL2CtGeSmqtC/gR2zZjaiVA= Subject key identifier: 6A:8B:72:DF:71:FA:9E:9C:25:FC:92:B9:1E:7E:6A:5E:BC:5C:64:D4 Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 01F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 01EB Signing time: Wed 29 Apr 2026 03:53:42 +0000 Manifest this update: Wed 29 Apr 2026 03:53:42 +0000 Manifest next update: Wed 06 May 2026 03:53:42 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: t3/wFCc5MI0DpC2FuW8ENTde4sYgHWSDjQtHfqsrrdg=) 2: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: 2Pvyl2Pg+rvxhHMBAknVnfhicVn7ercKKujcqDRSopc=) 3: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: zqESw+IWbG5U3Oh2cbA+9ioqV8DZZkTNSVndFvkCcIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 03:53:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: Apr 29 03:53:42 2026 GMT Not After : May 6 03:53:42 2026 GMT Subject: CN=69f180c6-57a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1a:89:64:17:81:73:2b:65:5b:99:8b:3a:aa: 03:81:f2:d3:97:27:9d:a5:94:ae:c8:b0:23:b8:2c: f8:68:bb:7a:7f:3d:b4:dd:0a:b3:95:11:89:24:47: 53:2f:c4:af:ff:72:26:bf:f9:86:a4:01:94:0e:c3: 78:02:21:7c:19:d7:07:0c:42:53:80:3a:1e:5d:ca: b4:70:74:c4:aa:2e:d7:1b:e5:a7:a8:c1:7c:a1:c1: 4b:f0:43:3c:7d:a4:55:e1:b4:a9:af:d0:0b:15:de: 33:8c:a8:20:8a:e7:af:3d:aa:2c:cb:b8:a1:54:05: d5:64:f5:44:3e:84:de:89:36:81:bb:ee:50:a3:f3: 1c:58:fc:02:70:cf:25:2c:f5:bc:65:94:8e:e1:20: 8a:8c:61:df:85:4b:c8:9e:3e:80:1a:10:b0:21:b0: b5:13:92:eb:94:a5:9c:74:b8:f3:be:3c:e0:81:b5: 5c:22:2f:99:61:0a:92:6e:66:bf:0b:35:b4:94:c9: e0:6b:47:8d:ce:26:f8:77:39:4a:1d:8e:96:e5:2d: 8f:8a:04:a4:cf:8d:f0:76:e5:5c:19:30:9f:68:30: 76:de:20:8a:78:23:3f:ea:13:92:00:54:66:df:f8: ec:9a:3a:ac:84:35:52:e5:ed:28:00:95:f8:4a:ef: cb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8B:72:DF:71:FA:9E:9C:25:FC:92:B9:1E:7E:6A:5E:BC:5C:64:D4 X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:15:4a:2d:97:6b:ff:77:61:ac:fa:7e:aa:db:7b:60:a4:e7: bb:df:b9:15:d7:bf:49:70:ca:ec:92:30:84:c1:a1:81:21:6b: 29:e2:a3:df:0f:b5:34:2f:51:d0:84:8f:9a:90:66:16:3d:39: 19:4a:ab:36:e8:e9:6d:78:b2:89:a5:de:60:28:4b:de:67:b4: 01:ac:26:de:c7:50:c0:7b:5e:74:96:40:d6:83:2b:65:c2:96: 7a:8e:f0:84:34:90:f1:52:37:95:8a:4b:ff:d4:31:7e:e0:18: 42:f0:07:d9:75:dd:8c:3a:32:8c:17:cb:00:64:03:48:d3:f6: 88:fa:2f:9c:28:d6:bb:de:e1:eb:91:1e:eb:e0:19:bc:c1:3f: b5:a5:b4:d2:95:53:0e:fd:da:76:6e:73:8b:e8:9f:e6:df:a3: bf:af:85:9c:ec:c4:4d:09:d3:ad:c8:df:c7:db:68:48:5c:fd: f9:7f:ba:da:b3:93:b9:30:a1:e3:87:ea:43:7d:c3:74:60:61: da:13:97:4f:39:2e:0b:dd:2d:05:2c:af:ec:b4:f1:5f:5c:0d: f9:64:5b:78:c4:23:0a:a1:62:2b:dc:5b:5d:e9:e4:64:3b:78: 60:99:ad:1c:fc:f8:66:7d:96:a6:26:45:99:c9:8e:f1:eb:73: b9:a0:67:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjYwNDI5MDM1MzQyWhcNMjYwNTA2MDM1MzQyWjAYMRYwFAYD VQQDEw02OWYxODBjNi01N2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhqJZBeBcytlW5mLOqoDgfLTlyedpZSuyLAjuCz4aLt6fz203QqzlRGJJEdT L8Sv/3Imv/mGpAGUDsN4AiF8GdcHDEJTgDoeXcq0cHTEqi7XG+WnqMF8ocFL8EM8 faRV4bSpr9ALFd4zjKggiuevPaosy7ihVAXVZPVEPoTeiTaBu+5Qo/McWPwCcM8l LPW8ZZSO4SCKjGHfhUvInj6AGhCwIbC1E5LrlKWcdLjzvjzggbVcIi+ZYQqSbma/ CzW0lMnga0eNzib4dzlKHY6W5S2PigSkz43wduVcGTCfaDB23iCKeCM/6hOSAFRm 3/jsmjqshDVS5e0oAJX4Su/L9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGqLct9x +p6cJfySuR5+al68XGTUMB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANxVKLZdr/3dhrPp+qtt7YKTnu9+5Fde/SXDK7JIwhMGhgSFrKeKj3w+1NC9R 0ISPmpBmFj05GUqrNujpbXiyiaXeYChL3me0Aawm3sdQwHtedJZA1oMrZcKWeo7w hDSQ8VI3lYpL/9QxfuAYQvAH2XXdjDoyjBfLAGQDSNP2iPovnCjWu97h65Ee6+AZ vME/taW00pVTDv3adm5zi+if5t+jv6+FnOzETQnTrcjfx9toSFz9+X+62rOTuTCh 44fqQ33DdGBh2hOXTzkuC90tBSyv7LTxX1wN+WRbeMQjCqFiK9xbXenkZDt4YJmt HPz4Zn2WpiZFmcmO8etzuaBn6g== -----END CERTIFICATE-----Generated at Wed Apr 29 13:46:21 2026 by rpki-client