$ rpki-client -vvf rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft File: NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft (raw, json) Hash identifier: BVJriG1IdDADTjErbKzwqwg/xOYWtX6EA0vpzN4via8= Subject key identifier: 37:85:94:56:4A:30:19:31:04:47:01:99:78:6A:A2:8B:E5:FB:10:5B Authority key identifier: 34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 Certificate issuer: /CN=A911408F/serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Certificate serial: 0D1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft Manifest number: 0CF5 Signing time: Tue 24 Mar 2026 18:11:29 +0000 Manifest this update: Tue 24 Mar 2026 18:11:28 +0000 Manifest next update: Tue 31 Mar 2026 18:11:28 +0000 Files and hashes: 1: NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl (hash: GlWzdBansqkZxBn5srQCsfTJPOjHejfBWdc/ifYXuk8=) 2: 8186EA3008A211EA83441161C4F9AE02.roa (hash: 6v7Fso9OTCe2JXGJRIvWJbjMtISjEaVVYIy2xiWn/Hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3354 (0xd1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911408F, serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Validity Not Before: Mar 24 18:11:28 2026 GMT Not After : Mar 31 18:11:28 2026 GMT Subject: CN=69c2d3d1-6eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6d:e2:ea:8b:bf:d3:55:96:63:2f:e7:14:a1: ea:a8:c5:bd:7b:79:8f:5e:c4:e0:a4:3a:24:4e:a3: 3f:05:fa:ba:f7:30:ab:da:8b:78:d0:84:e5:d3:c0: 2e:18:36:12:80:d5:00:e5:91:3f:13:21:12:8d:f5: 16:8c:78:2d:44:fc:64:de:d9:f9:26:87:0e:55:2f: 5e:a3:58:d6:35:51:6b:2a:9c:d1:46:df:40:c6:ec: e7:2f:e8:c4:e3:de:92:6a:92:2c:d1:7b:ff:c6:04: e5:69:49:76:b2:03:0b:c5:11:f4:c3:7f:0a:db:ee: 68:8c:7a:b3:cb:79:40:2d:dc:39:66:03:2d:1f:ec: 6c:08:90:05:08:1b:64:02:1e:1d:5f:b8:bf:16:8c: a6:33:a1:3e:05:15:c9:11:b1:bc:12:6c:7a:ae:72: 77:4b:ba:99:cf:aa:ef:d3:51:19:bd:44:b6:62:28: b7:7d:21:a9:46:c3:76:9a:ae:ba:83:f8:4a:7c:40: 68:c1:6f:7c:a6:a5:dc:a5:38:d0:54:46:4e:1f:d9: 01:cb:eb:31:4b:d9:95:73:c3:16:4e:c7:5a:2a:32: b2:f5:5f:43:c2:f2:1e:dd:d0:00:6b:ba:cc:5d:d4: 67:fd:b2:ae:25:a7:51:c8:70:9c:90:9d:4a:77:e3: 0a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:85:94:56:4A:30:19:31:04:47:01:99:78:6A:A2:8B:E5:FB:10:5B X509v3 Authority Key Identifier: keyid:34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:84:15:46:e0:45:f2:fc:75:1b:08:18:b6:a2:5b:d4:65:f6: b8:c0:76:9b:bf:c7:d3:b4:2e:c8:b0:c9:f7:84:68:09:a1:03: 08:3d:7b:7b:87:c2:20:e9:5f:45:4c:6f:10:02:1d:00:17:b0: e2:ce:0a:ac:36:1b:81:35:19:3a:d5:19:78:ab:d5:88:f5:ab: 25:7b:da:99:07:0b:52:6a:76:c8:51:65:7e:bb:81:02:9a:36: 4c:24:75:66:8f:4d:46:03:82:6c:12:27:9e:68:d1:15:f0:62: bf:6c:c4:73:43:4e:b9:d3:72:d3:b8:91:c7:72:ca:4c:cc:19: 26:5c:e8:4b:53:e9:73:31:c5:0f:3c:60:6b:0b:b5:de:c7:db: 67:17:aa:2e:e7:72:f1:a3:eb:0a:c8:9b:be:9b:f7:a3:ca:f0: bc:01:cd:c3:3f:ee:44:5f:4e:f8:df:59:8a:01:f1:86:5a:05: 2b:f7:1a:36:c2:ef:41:14:aa:8b:d3:cb:7e:15:16:34:61:f1: a1:98:6c:42:81:69:47:0a:bd:fb:0f:18:ff:04:50:3e:f4:53: 19:9a:aa:ba:f6:92:e3:a9:5d:4c:4a:3a:ef:30:8c:78:17:5d: a1:7b:b7:2a:59:b8:51:5b:8b:9f:60:0f:49:62:c2:74:07:e2: 98:a5:a0:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQwOEYxMTAvBgNVBAUTKDM0MDg5MEZBMjAyN0M1NDY5REEwQzVGRDgzNzQ4RjY2 QTg4OTJFQjcwHhcNMjYwMzI0MTgxMTI4WhcNMjYwMzMxMTgxMTI4WjAYMRYwFAYD VQQDEw02OWMyZDNkMS02ZWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiW3i6ou/01WWYy/nFKHqqMW9e3mPXsTgpDokTqM/Bfq69zCr2ot40ITl08Au GDYSgNUA5ZE/EyESjfUWjHgtRPxk3tn5JocOVS9eo1jWNVFrKpzRRt9AxuznL+jE 496SapIs0Xv/xgTlaUl2sgMLxRH0w38K2+5ojHqzy3lALdw5ZgMtH+xsCJAFCBtk Ah4dX7i/FoymM6E+BRXJEbG8Emx6rnJ3S7qZz6rv01EZvUS2Yii3fSGpRsN2mq66 g/hKfEBowW98pqXcpTjQVEZOH9kBy+sxS9mVc8MWTsdaKjKy9V9DwvIe3dAAa7rM XdRn/bKuJadRyHCckJ1Kd+MKnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDeFlFZK MBkxBEcBmXhqoovl+xBbMB8GA1UdIwQYMBaAFDQIkPogJ8VGnaDF/YN0j2aoiS63 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDA4Ri9BQTYwNEQ0QTA4 QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhVYWRvTVg5ZzNTUFpxaUpM cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BaVEtaUFueFVhZG9NWDlnM1NQWnFpSkxyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDA4Ri9BQTYwNEQ0QTA4QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhV YWRvTVg5ZzNTUFpxaUpMcmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtIQVRuBF8vx1GwgYtqJb1GX2uMB2m7/H07QuyLDJ94RoCaEDCD17e4fCIOlf RUxvEAIdABew4s4KrDYbgTUZOtUZeKvViPWrJXvamQcLUmp2yFFlfruBApo2TCR1 Zo9NRgOCbBInnmjRFfBiv2zEc0NOudNy07iRx3LKTMwZJlzoS1PpczHFDzxgawu1 3sfbZxeqLudy8aPrCsibvpv3o8rwvAHNwz/uRF9O+N9ZigHxhloFK/caNsLvQRSq i9PLfhUWNGHxoZhsQoFpRwq9+w8Y/wRQPvRTGZqquvaS46ldTEo67zCMeBddoXu3 Klm4UVuLn2APSWLCdAfimKWgKw== -----END CERTIFICATE-----Generated at Thu Mar 26 07:35:13 2026 by rpki-client