$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft File: nNdxObeuQMY2CS0SiGlE3j8a_-I.mft (raw, json) Hash identifier: CT2lAbIUuum+3TI7q+TlJlJe/uPEMsDswPRq2gx7EZk= Subject key identifier: C1:25:0B:A2:2C:72:71:39:BD:E4:80:B3:70:10:A3:79:96:30:3F:6B Authority key identifier: 9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2 Certificate issuer: /CN=A91F3BDE/serialNumber=9CD77139B7AE40C636092D12886944DE3F1AFFE2 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft Manifest number: 39 Signing time: Sat 18 Apr 2026 18:13:28 +0000 Manifest this update: Sat 18 Apr 2026 18:13:27 +0000 Manifest next update: Sat 25 Apr 2026 18:13:27 +0000 Files and hashes: 1: nNdxObeuQMY2CS0SiGlE3j8a_-I.crl (hash: ogFOBoCZuCCMYFKh+sQNGaa6wqDi1tUoNQhxWCQuc3c=) 2: 0FFE750C1EAF11F195BB007D1D3D8C67.roa (hash: BrK0FrMPMwFevxo3blKFfc/tytf2FzSWadOgigE4AiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.crl rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3BDE, serialNumber=9CD77139B7AE40C636092D12886944DE3F1AFFE2 Validity Not Before: Apr 18 18:13:27 2026 GMT Not After : Apr 25 18:13:27 2026 GMT Subject: CN=69e3c9c8-ab45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4e:11:64:6c:43:d9:7c:b0:44:0a:58:26:66: ba:28:29:24:18:54:66:79:d7:71:2f:86:db:89:c7: 7e:54:0e:68:c5:74:fb:1e:ce:fa:a6:45:21:08:84: 89:e2:43:ab:28:fc:80:46:ab:3e:81:75:a8:d1:f4: 7c:fe:97:0a:2e:10:3a:03:88:29:00:74:8f:04:df: bd:ee:96:9f:6a:5a:af:3e:5b:7a:7a:39:fc:ee:97: 4e:24:70:15:de:5e:f9:07:f9:8d:59:53:c4:cc:48: 8c:10:63:4f:cc:e3:01:2c:c7:fe:b7:47:f3:4a:f6: 9a:1a:dc:06:3b:48:be:78:d4:c8:6d:3a:8d:b5:32: 75:ea:fa:00:6d:55:9c:2f:0d:23:92:45:04:1f:b2: e7:7d:49:a1:99:85:ed:cc:fc:3e:58:5a:d9:75:66: 27:a6:db:29:f3:d6:65:d6:41:d4:a6:fa:8f:d1:07: 43:85:2e:8a:f5:b4:cb:05:05:d9:d7:76:a5:49:31: 1f:56:2b:51:4b:81:95:ca:64:35:c1:4c:73:eb:b4: dc:10:6c:6a:e2:3f:85:f8:e9:b2:3c:88:a2:3a:d7: 2c:06:a6:20:04:9e:65:74:ea:d5:fc:df:21:02:35: 82:ac:77:7e:3b:e6:5b:0a:83:45:1a:9e:26:16:d4: 2a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:25:0B:A2:2C:72:71:39:BD:E4:80:B3:70:10:A3:79:96:30:3F:6B X509v3 Authority Key Identifier: keyid:9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:1a:c9:3f:a0:df:12:4d:09:34:a0:00:b7:74:f6:5c:c7:f1: c4:6a:7e:be:b9:eb:26:2f:42:bd:99:21:77:61:5c:70:f0:ec: 48:3e:96:bb:78:50:f6:3c:c6:6a:77:23:01:92:1e:e2:9e:40: d4:94:c7:4c:86:3b:df:80:f8:82:a0:b7:e0:c4:f2:35:cd:cc: 38:16:fc:46:d4:bd:c4:53:33:96:6a:c2:99:a8:f1:0b:9a:55: ec:9a:23:d4:15:8f:bd:9d:8c:f4:b9:a5:42:ca:3c:70:78:d5: 46:5f:92:6a:b9:9a:d1:ea:8c:27:78:47:d0:e4:ed:89:2f:d8: 6b:7b:87:63:69:b3:64:70:fd:a5:f2:29:8c:52:db:81:a0:29: 4f:29:29:b7:26:1d:ff:55:f1:d9:13:89:1c:9e:a5:f1:46:06: 2b:c1:06:94:aa:c4:e0:82:43:a8:6c:be:9b:e1:3f:e9:fa:73: 8c:0a:0d:c1:9a:3a:dc:b2:a4:8d:7a:44:d3:da:94:a5:59:3b: c2:8c:b7:9f:10:9c:a5:3f:d1:33:69:24:1a:3f:6d:00:91:8b: 3b:d1:b5:f3:b7:3c:e5:2a:a6:c2:1c:78:c8:62:ef:75:05:fc: aa:2b:a3:38:fa:eb:03:1b:dc:3b:ce:e8:11:c1:7c:63:30:63: a0:09:1a:0f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG M0JERTExMC8GA1UEBRMoOUNENzcxMzlCN0FFNDBDNjM2MDkyRDEyODg2OTQ0REUz RjFBRkZFMjAeFw0yNjA0MTgxODEzMjdaFw0yNjA0MjUxODEzMjdaMBgxFjAUBgNV BAMTDTY5ZTNjOWM4LWFiNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1ThFkbEPZfLBEClgmZrooKSQYVGZ513EvhtuJx35UDmjFdPsezvqmRSEIhIni Q6so/IBGqz6BdajR9Hz+lwouEDoDiCkAdI8E373ulp9qWq8+W3p6Ofzul04kcBXe XvkH+Y1ZU8TMSIwQY0/M4wEsx/63R/NK9poa3AY7SL541MhtOo21MnXq+gBtVZwv DSOSRQQfsud9SaGZhe3M/D5YWtl1Ziem2ynz1mXWQdSm+o/RB0OFLor1tMsFBdnX dqVJMR9WK1FLgZXKZDXBTHPrtNwQbGriP4X46bI8iKI61ywGpiAEnmV06tX83yEC NYKsd3475lsKg0UaniYW1CoLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwSULoixy cTm95ICzcBCjeZYwP2swHwYDVR0jBBgwFoAUnNdxObeuQMY2CS0SiGlE3j8a/+Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzQkRFLzZGRjIzQjkwRjAx NzExRjA4NTU0MUYyNDQ3NkY1NkJDL25OZHhPYmV1UU1ZMkNTMFNpR2xFM2o4YV8t SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbk5keE9iZXVRTVkyQ1MwU2lHbEUzajhhXy1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz QkRFLzZGRjIzQjkwRjAxNzExRjA4NTU0MUYyNDQ3NkY1NkJDL25OZHhPYmV1UU1Z MkNTMFNpR2xFM2o4YV8tSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCAGsk/oN8STQk0oAC3dPZcx/HEan6+uesmL0K9mSF3YVxw8OxIPpa7eFD2PMZq dyMBkh7inkDUlMdMhjvfgPiCoLfgxPI1zcw4FvxG1L3EUzOWasKZqPELmlXsmiPU FY+9nYz0uaVCyjxweNVGX5JquZrR6owneEfQ5O2JL9hre4djabNkcP2l8imMUtuB oClPKSm3Jh3/VfHZE4kcnqXxRgYrwQaUqsTggkOobL6b4T/p+nOMCg3BmjrcsqSN ekTT2pSlWTvCjLefEJylP9EzaSQaP20AkYs70bXztzzlKqbCHHjIYu91BfyqK6M4 +usDG9w7zugRwXxjMGOgCRoP -----END CERTIFICATE-----Generated at Sat Apr 18 21:06:58 2026 by rpki-client