$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft File: nflMM9P2R649kTYeHxcsIGhvWYk.mft (raw, json) Hash identifier: ZZe8JPyRy9Q5+5vjyrkPkti5NASUHtTKVs7flMu2IK4= Subject key identifier: 37:C8:65:C4:E0:3B:AC:89:C0:9B:CC:F9:E6:DA:8E:77:62:EE:01:BA Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 Certificate issuer: /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Certificate serial: 0E9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft Manifest number: 0E6D Signing time: Tue 24 Mar 2026 17:38:26 +0000 Manifest this update: Tue 24 Mar 2026 17:38:25 +0000 Manifest next update: Tue 31 Mar 2026 17:38:25 +0000 Files and hashes: 1: nflMM9P2R649kTYeHxcsIGhvWYk.crl (hash: 21eEdh4K80Mgd4fS1ngczljN9DUqH7/1D9hKO70c4ZU=) 2: 46B27CC6B82A11E9843DEE0AC4F9AE02.roa (hash: 4N6uyRk5nJ01NdKd6SKeVxfMhzqmYtvkZXZd8f8mRwQ=) 3: 9F8B79C2C78E11EBB4983F5BC4F9AE02.roa (hash: d9F++wY6Y6kgkdiYtZ2QORaHxCioMHguW70TTV+zajY=) 4: 9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (hash: xnBTgZgKcT/ckvkR025VfmbRMRDm1gAIO/fOxIRSEIM=) 5: 47E67066B82A11E9843DEE0AC4F9AE02.roa (hash: zukV/SXcPzYBgJKVgWzwFqdqBSRV39PGc6HpPmopdXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3740 (0xe9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B4, serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Validity Not Before: Mar 24 17:38:25 2026 GMT Not After : Mar 31 17:38:25 2026 GMT Subject: CN=69c2cc11-b4ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e1:e1:46:53:3c:9a:51:b0:f2:7c:1f:4d:3c: 66:cb:cd:f6:cd:a7:0b:ad:76:bb:9f:72:0a:8b:e0: 51:67:84:d6:3e:00:4b:ff:63:43:f1:45:f0:cb:23: b1:05:7a:e0:86:a6:c7:8e:89:01:b2:60:b3:6a:a7: c9:c2:67:70:45:3a:20:4a:5f:6a:33:69:2c:60:c1: 7e:19:92:d9:bb:e3:7d:ab:2a:df:d1:b7:7b:3a:50: c9:54:8f:3c:84:48:15:24:a3:f3:48:c1:48:c2:d5: c9:02:41:73:3a:a7:08:69:79:d4:d3:fb:db:48:04: 03:cd:88:b4:b8:a1:8d:45:6b:9f:28:3b:c3:f0:1b: 62:22:4d:bc:68:ef:b7:d2:ea:72:62:30:d8:4c:67: 96:d6:7b:72:19:e1:7e:71:4d:d9:74:39:ac:53:dd: 59:0e:59:b7:6e:77:ee:4a:59:04:fa:17:c7:83:fd: 4c:02:42:d9:91:c9:d2:f3:eb:28:7e:34:a6:6f:50: 57:57:eb:13:e8:95:91:15:70:f0:7e:26:c9:68:9e: b4:49:4d:2a:19:09:13:5a:40:de:b4:f0:1d:f5:7e: 01:b8:fc:b2:0a:cf:b7:ff:48:51:4a:4f:e8:27:c3: 44:63:89:73:7f:00:53:01:83:a6:8f:c9:f5:00:d2: f9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C8:65:C4:E0:3B:AC:89:C0:9B:CC:F9:E6:DA:8E:77:62:EE:01:BA X509v3 Authority Key Identifier: keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:0e:03:60:ab:8e:52:14:86:86:be:02:c9:33:0a:b4:1f:91: 2c:95:d4:fc:da:8e:7e:36:21:6a:43:b4:2c:bc:e1:8f:35:22: 51:06:66:ab:95:e6:42:8f:e6:49:b0:99:a9:ae:91:7b:45:8b: a1:70:8c:8c:55:3c:76:38:48:6f:ef:9e:3c:44:dd:d2:1d:1e: 2b:25:79:a7:5c:b3:2a:3e:06:88:d6:b2:46:9b:7d:ef:3a:61: fd:05:34:c0:25:50:79:e0:fc:cc:c3:f4:cd:c5:42:59:d2:e5: 1a:12:a0:9c:88:13:47:ae:ca:b9:9c:bf:76:6b:c4:df:81:c2: 7e:0c:44:52:bc:b4:70:95:cd:bf:79:22:39:d1:10:a5:9b:07: da:5c:92:3e:01:b9:6a:25:92:d6:ee:3d:9f:12:20:92:22:ee: 2a:aa:fa:14:06:ae:de:b2:ab:b6:79:50:70:69:eb:64:be:9e: d7:a9:3a:08:f3:54:28:d4:09:73:a4:08:4f:87:a2:a3:c9:17: 61:3b:bf:aa:2c:9f:20:68:2d:d6:dc:3a:a6:80:ca:5a:d4:ee: 05:40:e4:cd:4d:f9:55:f4:52:5f:03:20:65:a1:d4:bf:f7:09: 0d:2b:d0:c3:29:b6:18:fa:3e:db:06:92:c8:33:0b:7a:62:4a: af:1d:d1:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjQxMTAvBgNVBAUTKDlERjk0QzMzRDNGNjQ3QUUzRDkxMzYxRTFGMTcyQzIw Njg2RjU5ODkwHhcNMjYwMzI0MTczODI1WhcNMjYwMzMxMTczODI1WjAYMRYwFAYD VQQDEw02OWMyY2MxMS1iNGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOHhRlM8mlGw8nwfTTxmy832zacLrXa7n3IKi+BRZ4TWPgBL/2ND8UXwyyOx BXrghqbHjokBsmCzaqfJwmdwRTogSl9qM2ksYMF+GZLZu+N9qyrf0bd7OlDJVI88 hEgVJKPzSMFIwtXJAkFzOqcIaXnU0/vbSAQDzYi0uKGNRWufKDvD8BtiIk28aO+3 0upyYjDYTGeW1ntyGeF+cU3ZdDmsU91ZDlm3bnfuSlkE+hfHg/1MAkLZkcnS8+so fjSmb1BXV+sT6JWRFXDwfibJaJ60SU0qGQkTWkDetPAd9X4BuPyyCs+3/0hRSk/o J8NEY4lzfwBTAYOmj8n1ANL5BwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDfIZcTg O6yJwJvM+ebajndi7gG6MB8GA1UdIwQYMBaAFJ35TDPT9keuPZE2Hh8XLCBob1mJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCNC83MDlGN0EyNkI4 MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2NDlrVFllSHhjc0lHaHZX WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25mbE1NOVAyUjY0OWtUWWVIeGNzSUdodldZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVCNC83MDlGN0EyNkI4MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2 NDlrVFllSHhjc0lHaHZXWWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADg4DYKuOUhSGhr4CyTMKtB+RLJXU/NqOfjYhakO0LLzhjzUiUQZmq5XmQo/m SbCZqa6Re0WLoXCMjFU8djhIb++ePETd0h0eKyV5p1yzKj4GiNayRpt97zph/QU0 wCVQeeD8zMP0zcVCWdLlGhKgnIgTR67KuZy/dmvE34HCfgxEUry0cJXNv3kiOdEQ pZsH2lySPgG5aiWS1u49nxIgkiLuKqr6FAau3rKrtnlQcGnrZL6e16k6CPNUKNQJ c6QIT4eio8kXYTu/qiyfIGgt1tw6poDKWtTuBUDkzU35VfRSXwMgZaHUv/cJDSvQ wym2GPo+2waSyDMLemJKrx3RUg== -----END CERTIFICATE-----Generated at Thu Mar 26 12:56:42 2026 by rpki-client