$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft File: NJajCV1HiwJuR1VeusUdjgorO5Y.mft (raw, json) Hash identifier: QE3JetoH1IAWotTR1fece1rmFrDB/712reaK+VlSZ30= Subject key identifier: CB:85:FA:7E:20:02:59:AC:9E:6A:89:43:A6:EF:21:14:23:72:74:12 Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 Certificate issuer: /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Certificate serial: 0623 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft Manifest number: 061C Signing time: Thu 26 Mar 2026 22:38:57 +0000 Manifest this update: Thu 26 Mar 2026 22:38:57 +0000 Manifest next update: Thu 02 Apr 2026 22:38:57 +0000 Files and hashes: 1: NJajCV1HiwJuR1VeusUdjgorO5Y.crl (hash: /ZAR/upFfmnn/1oOKBXgIPVhxoLsDgcAyYaFTCAwzfc=) 2: F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (hash: PwomU+D7WSzTyKJbENDcuXSXxZUfrB5PjKw8Vn35Qbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 22:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1571 (0x623) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112C1, serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Validity Not Before: Mar 26 22:38:57 2026 GMT Not After : Apr 2 22:38:57 2026 GMT Subject: CN=69c5b581-0f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0f:7d:6c:8b:f1:57:5d:bb:c7:12:fd:21:9c: a5:9f:40:fa:ae:be:07:c6:1b:30:b0:73:e0:10:89: df:75:04:87:bc:70:51:22:25:b4:7c:d9:67:14:95: 60:98:95:dd:74:d8:c0:01:df:56:06:d0:8d:75:51: b9:fc:ef:e6:0c:b1:e8:9f:cf:72:99:76:18:a6:0b: 6e:d7:a3:c8:c6:56:3e:70:b0:aa:b6:75:1f:7b:2d: 38:bd:a1:ab:90:60:88:ca:11:53:8e:4b:e8:aa:c1: 08:f1:b0:3d:f9:99:ce:bc:46:d1:2b:c3:9a:02:7a: eb:dd:ad:8e:46:5a:09:98:d0:3f:05:27:ee:8d:ce: 29:b0:19:ff:8b:18:cd:7d:34:5c:7c:92:b6:32:f7: b1:ee:70:55:b7:f3:7d:5d:dd:9f:cc:e9:97:8d:07: 7e:b9:44:f5:54:ce:3b:b2:d3:55:7c:8f:dd:cd:3d: ad:8f:54:23:0d:88:aa:5c:57:8d:c7:36:eb:16:8d: df:57:84:97:cf:83:85:e0:33:85:c1:f7:9c:85:40: 7d:b7:e6:4c:4f:e4:3f:b7:bf:d4:9c:a2:12:53:9b: a7:84:7a:a8:e4:9e:bc:d1:36:30:13:6f:c1:13:bd: f1:49:c7:e3:af:df:b5:d0:72:df:3e:0f:fe:c0:82: 2d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:85:FA:7E:20:02:59:AC:9E:6A:89:43:A6:EF:21:14:23:72:74:12 X509v3 Authority Key Identifier: keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b3:08:8f:37:4a:16:42:d6:46:cf:76:41:4f:b3:e6:f6:c3: bd:ad:71:27:45:92:8b:13:64:96:1c:ef:ef:c0:2f:c6:de:fe: cb:12:d4:d7:57:30:d0:be:c5:28:d5:f8:a8:ae:a5:ee:4d:09: a0:c5:97:cb:98:34:46:7b:4b:a1:28:c5:d4:03:e9:55:eb:a6: 91:3b:7e:ec:3d:d2:c0:10:2d:ad:8a:d0:13:67:76:75:6e:c3: c8:21:6e:4c:e5:1a:f3:fe:22:4c:81:19:8f:83:f3:93:56:ea: 13:a3:e0:c9:b9:14:9b:e3:20:52:0b:c6:93:b6:2b:c8:4a:ec: 80:fc:92:2f:b9:f2:96:37:bc:fe:50:d6:11:7b:f1:52:4f:b3: 22:47:dc:c7:40:f5:56:a0:e8:5f:0a:97:96:0d:b1:82:97:b6: 77:3b:c3:16:3c:af:6e:f2:18:d2:cf:15:27:7a:4a:96:45:48: d4:dd:50:b2:e0:1f:1f:e6:95:fa:c9:23:3f:0e:fa:37:eb:8a: e4:3f:84:3d:5c:79:c1:c8:cc:36:9a:82:63:3c:cf:02:07:64: 7a:2e:a1:7f:d7:98:cd:18:29:cb:8f:e9:b4:7b:cd:e6:80:a6: c8:e8:50:81:b1:67:15:62:62:7b:92:e8:c0:45:42:ba:31:e2: ef:ef:79:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQzExMTAvBgNVBAUTKDM0OTZBMzA5NUQ0NzhCMDI2RTQ3NTU1RUJBQzUxRDhF MEEyQjNCOTYwHhcNMjYwMzI2MjIzODU3WhcNMjYwNDAyMjIzODU3WjAYMRYwFAYD VQQDEw02OWM1YjU4MS0wZjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3g99bIvxV127xxL9IZyln0D6rr4HxhswsHPgEInfdQSHvHBRIiW0fNlnFJVg mJXddNjAAd9WBtCNdVG5/O/mDLHon89ymXYYpgtu16PIxlY+cLCqtnUfey04vaGr kGCIyhFTjkvoqsEI8bA9+ZnOvEbRK8OaAnrr3a2ORloJmNA/BSfujc4psBn/ixjN fTRcfJK2Mvex7nBVt/N9Xd2fzOmXjQd+uUT1VM47stNVfI/dzT2tj1QjDYiqXFeN xzbrFo3fV4SXz4OF4DOFwfechUB9t+ZMT+Q/t7/UnKISU5unhHqo5J680TYwE2/B E73xScfjr9+10HLfPg/+wIIt2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMuF+n4g AlmsnmqJQ6bvIRQjcnQSMB8GA1UdIwQYMBaAFDSWowldR4sCbkdVXrrFHY4KKzuW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJDMS84NkFCNjYyNERB MkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3SnVSMVZldXNVZGpnb3JP NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KYWpDVjFIaXdKdVIxVmV1c1Vkamdvck81WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJDMS84NkFCNjYyNERBMkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3 SnVSMVZldXNVZGpnb3JPNVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe7MIjzdKFkLWRs92QU+z5vbDva1xJ0WSixNklhzv78Avxt7+yxLU11cw0L7F KNX4qK6l7k0JoMWXy5g0RntLoSjF1APpVeumkTt+7D3SwBAtrYrQE2d2dW7DyCFu TOUa8/4iTIEZj4Pzk1bqE6PgybkUm+MgUgvGk7YryErsgPySL7nylje8/lDWEXvx Uk+zIkfcx0D1VqDoXwqXlg2xgpe2dzvDFjyvbvIY0s8VJ3pKlkVI1N1QsuAfH+aV +skjPw76N+uK5D+EPVx5wcjMNpqCYzzPAgdkei6hf9eYzRgpy4/ptHvN5oCmyOhQ gbFnFWJie5LowEVCujHi7+95oQ== -----END CERTIFICATE-----Generated at Sat Mar 28 12:07:31 2026 by rpki-client