$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: 8R4k0Are429076O8Ap/0KyRPmNi4B16g4FCxEO0Lk60= Subject key identifier: 51:15:E3:3C:EF:32:09:6E:03:02:92:F4:63:55:88:8C:B2:2A:61:3B Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 0202 Signing time: Mon 15 Jun 2026 03:11:04 +0000 Manifest this update: Mon 15 Jun 2026 03:11:03 +0000 Manifest next update: Mon 22 Jun 2026 03:11:03 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: HFobsDQICqZ/cn4nlAP+8DC5Weu6T3cr3gSNXU3OHuE=) 2: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: 2Pvyl2Pg+rvxhHMBAknVnfhicVn7ercKKujcqDRSopc=) 3: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: zqESw+IWbG5U3Oh2cbA+9ioqV8DZZkTNSVndFvkCcIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Jun 2026 01:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: Jun 15 03:11:03 2026 GMT Not After : Jun 22 03:11:03 2026 GMT Subject: CN=6a2f6d48-e53d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:46:0c:c8:00:bd:ef:17:59:75:a5:ca:89:c4: ef:bf:d9:ed:e9:45:08:16:21:ec:92:8d:75:5e:35: 4a:d1:e1:bb:5a:c9:6d:26:ed:69:c5:19:63:46:3f: 3a:d6:45:79:46:62:1d:46:95:16:cd:ef:5c:f2:d8: 62:9a:a0:ff:45:04:8e:3f:4d:a0:04:67:06:37:9c: 1f:76:d6:d5:a6:0b:50:0d:45:72:b2:df:25:9b:1d: e5:4b:de:47:77:23:0c:3b:ba:f4:5d:7d:f3:59:30: 98:79:8b:94:41:e8:84:3a:3f:8c:b4:17:0e:2c:8e: 7b:dc:96:0c:3d:86:de:bd:5f:0a:48:43:ba:29:cf: e0:ad:88:ea:ba:3b:4d:26:f6:7e:78:9c:cc:54:e6: b0:5e:70:40:37:99:2f:a4:48:a7:91:c5:1f:08:76: 5a:e4:d4:5c:8d:b3:82:54:fc:05:cd:be:6b:b6:07: 23:4a:21:6c:7c:57:fa:a1:e1:8a:7c:66:39:b0:b9: 86:c4:ae:ec:ff:0b:99:41:ae:3b:03:aa:f7:26:ad: 11:4f:b9:38:05:f7:e2:16:ac:41:af:48:19:00:7d: 8e:60:9b:87:e5:33:11:43:14:5f:72:55:ec:22:92: 2d:fb:69:e2:f9:63:fe:30:24:48:28:0b:96:ba:bc: 82:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:15:E3:3C:EF:32:09:6E:03:02:92:F4:63:55:88:8C:B2:2A:61:3B X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b3:95:09:87:d0:f3:88:5b:9d:41:8d:37:22:f4:24:88:b1: 39:70:18:59:c8:e4:ad:0e:0c:98:ae:c2:7e:08:ec:76:be:fc: c3:f1:df:b2:cf:dd:18:13:2a:e8:48:4b:93:8d:68:22:4d:5e: 16:23:1e:ed:31:c5:30:5d:4e:6f:ae:44:1d:05:21:30:46:c7: 48:5a:40:41:8a:9f:59:bb:c0:a5:bb:d4:ea:77:f2:bf:e4:5b: da:09:54:e0:ed:61:d9:ca:f8:94:02:cf:af:0d:6a:5d:b3:06: df:64:d0:da:06:48:3b:9d:c5:50:39:8b:e7:7a:3a:91:df:4c: 49:63:86:4c:0f:eb:89:44:fe:ae:7c:ff:51:38:5e:7f:a5:f7: 46:3f:37:83:5d:5a:25:86:34:ed:ec:a6:ea:ee:e2:2f:fe:02: 35:50:4a:8e:2a:59:f5:3f:a4:f8:51:ab:e6:59:ba:03:ec:9b: 58:b3:cf:f7:ec:a7:e4:3d:d6:c9:e3:48:2f:95:b2:c1:66:dd: 3d:06:bd:d0:4f:19:54:4c:49:01:c0:78:36:83:97:02:a3:28: 73:d6:bd:38:b8:cf:25:07:df:80:d3:d2:a2:05:92:a5:74:29: ab:66:bf:46:91:c3:ab:87:6b:c4:7c:00:2b:91:af:1a:b8:d7: e7:8e:f0:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjYwNjE1MDMxMTAzWhcNMjYwNjIyMDMxMTAzWjAYMRYwFAYD VQQDEw02YTJmNmQ0OC1lNTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5EYMyAC97xdZdaXKicTvv9nt6UUIFiHsko11XjVK0eG7WsltJu1pxRljRj86 1kV5RmIdRpUWze9c8thimqD/RQSOP02gBGcGN5wfdtbVpgtQDUVyst8lmx3lS95H dyMMO7r0XX3zWTCYeYuUQeiEOj+MtBcOLI573JYMPYbevV8KSEO6Kc/grYjqujtN JvZ+eJzMVOawXnBAN5kvpEinkcUfCHZa5NRcjbOCVPwFzb5rtgcjSiFsfFf6oeGK fGY5sLmGxK7s/wuZQa47A6r3Jq0RT7k4BffiFqxBr0gZAH2OYJuH5TMRQxRfclXs IpIt+2ni+WP+MCRIKAuWuryCvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFEV4zzv MgluAwKS9GNViIyyKmE7MB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPbOVCYfQ84hbnUGNNyL0JIixOXAYWcjkrQ4MmK7Cfgjsdr78w/Hfss/dGBMq 6EhLk41oIk1eFiMe7THFMF1Ob65EHQUhMEbHSFpAQYqfWbvApbvU6nfyv+Rb2glU 4O1h2cr4lALPrw1qXbMG32TQ2gZIO53FUDmL53o6kd9MSWOGTA/riUT+rnz/UThe f6X3Rj83g11aJYY07eym6u7iL/4CNVBKjipZ9T+k+FGr5lm6A+ybWLPP9+yn5D3W yeNIL5WywWbdPQa90E8ZVExJAcB4NoOXAqMoc9a9OLjPJQffgNPSogWSpXQpq2a/ RpHDq4drxHwAK5GvGrjX547wNQ== -----END CERTIFICATE-----Generated at Tue Jun 16 13:36:47 2026 by rpki-client