$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft File: NQcxtmBE00o9LadYm9gzHRRf5Jg.mft (raw, json) Hash identifier: J0GQ4EQ1TbDWYZkMS8g7SQEc8mjzcUgdjLUNcRu3PTE= Subject key identifier: BA:D1:35:AB:19:D2:7F:F6:0A:EF:68:23:C0:27:ED:8D:E2:63:E7:1F Authority key identifier: 35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98 Certificate issuer: /CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft Manifest number: 0162 Signing time: Wed 25 Mar 2026 04:09:33 +0000 Manifest this update: Wed 25 Mar 2026 04:09:33 +0000 Manifest next update: Wed 01 Apr 2026 04:09:33 +0000 Files and hashes: 1: NQcxtmBE00o9LadYm9gzHRRf5Jg.crl (hash: i0MdSgvwCKKsBCodvN9cKSxE6GkgD6voZjZ8ftTupQE=) 2: BB90D9FECF4B11F08EB76486C4F9AE02.roa (hash: rXEcC70BHU9BGaTrOUEVMio2SeHlBdWNjj8ucac2NAM=) 3: 6FC4A52C0E9611EF8B4CB827C4F9AE02.roa (hash: wmNPnDvvzaXNcEvPjVuLtrgnnHPLzw2rLFktnj5ROwE=) 4: 7036FFF00E9611EF8B4CB827C4F9AE02.roa (hash: UjpEnJbWEEameT5NyA6GTtZ6l6bxgo6wSQmSr5ohGUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:09:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118A69, serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498 Validity Not Before: Mar 25 04:09:33 2026 GMT Not After : Apr 1 04:09:33 2026 GMT Subject: CN=69c35ffd-f9e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fb:21:d1:87:53:c3:ba:03:bc:5d:e6:14:e9: 30:f6:50:69:f0:d8:97:19:1b:b1:5f:f9:38:29:f8: 45:83:be:e3:1f:ec:b9:b1:24:6a:b1:22:a6:a6:2f: 0a:4a:7a:dc:f7:bd:5d:13:c2:e8:ab:a4:ef:45:26: 2b:23:38:7e:3f:61:9b:f8:ea:94:57:92:1a:81:3b: 2e:bf:4f:9c:f1:25:5b:59:0b:8d:6e:b8:68:c3:0a: 0c:5e:d0:84:a0:54:a6:15:c0:8e:7f:d6:c8:a1:01: ff:cf:e5:f3:32:9f:74:b3:9c:d4:f4:84:bc:11:08: 9d:16:8c:6d:9c:ea:15:7a:b1:ef:57:68:95:ad:ad: ae:9b:c9:a6:3e:ce:ce:ad:a3:6e:31:64:15:27:60: 95:82:4e:8c:a0:fc:c9:3a:83:31:67:24:54:32:8e: 3d:09:f2:a9:21:5e:2d:87:38:41:aa:e5:61:d9:5c: e1:92:91:56:aa:80:9c:11:84:f0:16:7e:e7:a2:25: 91:4c:a1:4b:d6:cd:21:45:44:4b:ad:75:3b:f5:5f: 40:8d:ad:5e:90:42:75:09:52:40:22:31:7e:5e:a4: 17:41:30:f2:87:e2:e1:f0:91:f3:1c:65:7a:16:ba: ef:ed:3f:5e:8c:5e:6b:bc:c1:bc:59:0f:7f:9a:55: 0d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D1:35:AB:19:D2:7F:F6:0A:EF:68:23:C0:27:ED:8D:E2:63:E7:1F X509v3 Authority Key Identifier: keyid:35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:74:ca:af:c0:ac:10:db:e7:05:47:b0:0a:70:45:b0:d7:40: 0a:65:e1:f7:7d:34:f8:6f:16:4a:9e:5c:b3:c9:8f:ab:bf:f4: 90:90:a0:5a:bb:40:5a:44:fb:17:be:a1:6e:38:b7:1f:c2:59: 13:65:9a:ed:62:2e:87:38:9f:b7:fa:0c:35:7a:7a:aa:66:88: 91:11:86:51:6f:75:e5:9f:6c:e5:c1:87:d4:9b:12:48:f5:be: 5f:c7:57:db:55:08:76:f0:a6:a1:f1:22:c3:04:93:d2:81:a1: 3b:6e:bd:58:5e:39:47:fd:dc:92:11:d4:99:20:28:a1:ba:23: 67:33:ee:7c:80:a5:6c:84:2f:fa:32:73:71:83:c5:69:b9:84: 0a:63:f4:27:c0:85:cc:e8:cf:29:78:92:fa:ef:7f:43:ee:85: 88:9b:99:6c:5a:18:bb:c3:fb:c3:94:27:d9:02:7c:76:ac:f5: 6e:ac:6b:9f:04:8d:53:17:31:42:8f:a7:01:f4:6a:b9:2c:71: 0c:b6:d3:e0:c1:11:23:d1:cc:1d:5c:5c:6e:ae:02:72:b8:78: 17:58:1a:f9:0b:ad:e3:95:28:28:5b:7f:a0:98:47:ae:67:55: 03:36:21:78:b4:89:6f:f3:e0:9c:bc:65:e4:f7:c7:bb:7e:95: c8:79:bf:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThBNjkxMTAvBgNVBAUTKDM1MDczMUI2NjA0NEQzNEEzRDJEQTc1ODlCRDgzMzFE MTQ1RkU0OTgwHhcNMjYwMzI1MDQwOTMzWhcNMjYwNDAxMDQwOTMzWjAYMRYwFAYD VQQDEw02OWMzNWZmZC1mOWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvsh0YdTw7oDvF3mFOkw9lBp8NiXGRuxX/k4KfhFg77jH+y5sSRqsSKmpi8K Snrc971dE8Loq6TvRSYrIzh+P2Gb+OqUV5IagTsuv0+c8SVbWQuNbrhowwoMXtCE oFSmFcCOf9bIoQH/z+XzMp90s5zU9IS8EQidFoxtnOoVerHvV2iVra2um8mmPs7O raNuMWQVJ2CVgk6MoPzJOoMxZyRUMo49CfKpIV4thzhBquVh2VzhkpFWqoCcEYTw Fn7noiWRTKFL1s0hRURLrXU79V9Aja1ekEJ1CVJAIjF+XqQXQTDyh+Lh8JHzHGV6 Frrv7T9ejF5rvMG8WQ9/mlUNeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLrRNasZ 0n/2Cu9oI8An7Y3iY+cfMB8GA1UdIwQYMBaAFDUHMbZgRNNKPS2nWJvYMx0UX+SY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEE2OS9DNjIwMTFENjBD RTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAwbzlMYWRZbTlnekhSUmY1 SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05RY3h0bUJFMDBvOUxhZFltOWd6SFJSZjVKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEE2OS9DNjIwMTFENjBDRTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAw bzlMYWRZbTlnekhSUmY1SmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp3TKr8CsENvnBUewCnBFsNdACmXh9300+G8WSp5cs8mPq7/0kJCgWrtAWkT7 F76hbji3H8JZE2Wa7WIuhzift/oMNXp6qmaIkRGGUW915Z9s5cGH1JsSSPW+X8dX 21UIdvCmofEiwwST0oGhO269WF45R/3ckhHUmSAoobojZzPufIClbIQv+jJzcYPF abmECmP0J8CFzOjPKXiS+u9/Q+6FiJuZbFoYu8P7w5Qn2QJ8dqz1bqxrnwSNUxcx Qo+nAfRquSxxDLbT4MERI9HMHVxcbq4Ccrh4F1ga+Qut45UoKFt/oJhHrmdVAzYh eLSJb/PgnLxl5PfHu36VyHm/kw== -----END CERTIFICATE-----Generated at Thu Mar 26 12:43:53 2026 by rpki-client