$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft File: NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft (raw, json) Hash identifier: 4FMNM9GSyUkRfZTsA1mWZexwoa0cnBtCilu+0QAgwl0= Subject key identifier: 6F:DA:E2:66:A1:79:84:DB:8A:7C:05:A0:3C:D8:26:68:AF:54:AE:C8 Authority key identifier: 34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD Certificate issuer: /CN=A91E8F36/serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD Certificate serial: 0292 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft Manifest number: 0289 Signing time: Thu 21 May 2026 01:54:38 +0000 Manifest this update: Thu 21 May 2026 01:54:37 +0000 Manifest next update: Thu 28 May 2026 01:54:37 +0000 Files and hashes: 1: NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl (hash: hR0FLS++nC4fwnKYY1MbFBgJJ9bblzYeZgvKa/uERKg=) 2: AC270A727D0711ED8181DA7FC4F9AE02.roa (hash: pWPy+X5EuBSNslThAxl9vzV4QotLdBFyZSA0fVW7aaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8F36, serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD Validity Not Before: May 21 01:54:37 2026 GMT Not After : May 28 01:54:37 2026 GMT Subject: CN=6a0e65de-6cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:99:69:0a:5c:77:4f:87:40:4f:0d:c1:d4:e0: df:93:f5:9d:cf:9a:57:44:a4:dd:fe:f0:a6:d0:5c: e2:04:12:97:7c:25:3f:e5:20:27:2d:05:d2:bc:08: c4:bf:f2:01:6e:70:81:3e:89:90:52:db:84:0a:83: 64:af:02:30:0b:64:09:23:8e:24:db:99:40:b2:e8: ee:87:5e:da:dd:24:52:23:1d:f7:7c:36:10:f2:b8: 01:19:8d:b3:4d:cf:f1:f5:c1:b7:8c:23:99:5a:92: 7f:b1:67:bb:2c:28:e9:33:91:01:ba:ad:19:c5:1d: 14:af:d6:3f:e6:0b:cd:d2:61:5b:3f:9f:97:d2:e6: da:48:a3:ca:c8:00:1f:16:8e:a9:da:4d:08:51:05: 6c:b5:6f:15:13:3e:97:29:cd:2c:03:57:7a:60:5f: f3:cf:10:94:ba:f0:55:d3:24:33:7b:2d:ea:e9:17: e9:8e:cc:b5:1f:e6:de:62:2c:15:2f:89:70:f3:e1: 75:8f:c8:d9:58:bd:07:53:7c:09:23:75:72:6d:f5: c6:b9:24:86:0b:62:cf:06:ac:b4:7a:70:f9:90:8d: ac:e7:85:95:c8:7e:81:1c:43:35:4c:5f:bd:08:82: 0e:b3:5b:06:93:25:23:a9:cb:f8:90:7a:c1:a1:9e: d4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:DA:E2:66:A1:79:84:DB:8A:7C:05:A0:3C:D8:26:68:AF:54:AE:C8 X509v3 Authority Key Identifier: keyid:34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:72:6f:80:d7:d4:13:8f:e1:c7:1e:33:a1:21:5b:e6:35:3c: 34:ef:f5:a0:96:31:55:b2:91:27:62:55:4a:5e:84:c6:e5:a0: 58:2d:0a:43:c4:ea:59:a1:3a:f7:43:df:f8:3e:87:3b:c5:96: 54:dd:64:9c:5b:77:42:3c:b7:f4:ea:b4:23:a0:38:e6:b0:64: 0d:a1:59:91:68:6d:b9:34:b0:22:01:92:18:63:32:38:d3:8f: e0:45:a3:47:fc:7f:f2:b5:4a:12:3c:c1:b3:9e:b8:70:83:9d: 7d:ec:c1:0f:27:c5:50:73:8c:cc:3e:2c:8e:b5:9c:5e:d2:db: 44:49:0f:9b:dd:52:15:dd:52:34:6a:be:e6:7f:d9:0a:80:3b: 07:29:30:37:b4:af:32:6b:29:1e:9e:94:5b:3f:ee:d4:2a:ef: dc:24:4a:e8:fb:05:e7:48:d7:8b:bd:64:af:da:16:28:6f:19: 4f:17:e2:0c:71:d8:4a:17:02:b8:53:97:cb:0d:aa:41:c9:1b: 44:b9:95:a9:29:52:d3:6d:5b:45:96:3b:be:04:e2:8d:5b:60: 33:19:2d:e4:6f:56:a9:14:bd:50:23:6a:00:18:aa:36:6d:41: 0a:38:0a:86:a9:4e:7c:8d:7b:58:71:e8:4d:a3:ac:90:ea:18: cb:a9:2f:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThGMzYxMTAvBgNVBAUTKDM0RDdENkQ0NDFDMzJEN0M4NzE0MkU5RkU1QzdFQkM0 RjQ3OUIwQ0QwHhcNMjYwNTIxMDE1NDM3WhcNMjYwNTI4MDE1NDM3WjAYMRYwFAYD VQQDEw02YTBlNjVkZS02Y2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjplpClx3T4dATw3B1ODfk/Wdz5pXRKTd/vCm0FziBBKXfCU/5SAnLQXSvAjE v/IBbnCBPomQUtuECoNkrwIwC2QJI44k25lAsujuh17a3SRSIx33fDYQ8rgBGY2z Tc/x9cG3jCOZWpJ/sWe7LCjpM5EBuq0ZxR0Ur9Y/5gvN0mFbP5+X0ubaSKPKyAAf Fo6p2k0IUQVstW8VEz6XKc0sA1d6YF/zzxCUuvBV0yQzey3q6Rfpjsy1H+beYiwV L4lw8+F1j8jZWL0HU3wJI3VybfXGuSSGC2LPBqy0enD5kI2s54WVyH6BHEM1TF+9 CIIOs1sGkyUjqcv4kHrBoZ7UHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG/a4mah eYTbinwFoDzYJmivVK7IMB8GA1UdIwQYMBaAFDTX1tRBwy18hxQun+XH68T0ebDN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEYzNi8yNDlGNDE0NjdE MDIxMUVEOUM1RDdENjJDNEY5QUUwMi9OTmZXMUVIRExYeUhGQzZmNWNmcnhQUjVz TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05OZlcxRUhETFh5SEZDNmY1Y2ZyeFBSNXNNMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEYzNi8yNDlGNDE0NjdEMDIxMUVEOUM1RDdENjJDNEY5QUUwMi9OTmZXMUVIRExY eUhGQzZmNWNmcnhQUjVzTTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO3JvgNfUE4/hxx4zoSFb5jU8NO/1oJYxVbKRJ2JVSl6ExuWgWC0KQ8TqWaE6 90Pf+D6HO8WWVN1knFt3Qjy39Oq0I6A45rBkDaFZkWhtuTSwIgGSGGMyONOP4EWj R/x/8rVKEjzBs564cIOdfezBDyfFUHOMzD4sjrWcXtLbREkPm91SFd1SNGq+5n/Z CoA7BykwN7SvMmspHp6UWz/u1Crv3CRK6PsF50jXi71kr9oWKG8ZTxfiDHHYShcC uFOXyw2qQckbRLmVqSlS021bRZY7vgTijVtgMxkt5G9WqRS9UCNqABiqNm1BCjgK hqlOfI17WHHoTaOskOoYy6kveA== -----END CERTIFICATE-----Generated at Thu May 21 09:30:22 2026 by rpki-client