$ rpki-client -vvf rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft File: NdqtT3Wuk43GUzSEzejIF93Csig.mft (raw, json) Hash identifier: aGqLmNnXi9NGpPmJTz9siH8u6azoHPyUDV9lfyGGmgs= Subject key identifier: 4F:A9:CE:31:7A:D3:E6:80:C0:A6:4A:14:A7:92:87:CA:A4:0B:A3:AC Authority key identifier: 35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 Certificate issuer: /CN=A911E351/serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Certificate serial: 049A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft Manifest number: 0493 Signing time: Thu 26 Mar 2026 23:46:29 +0000 Manifest this update: Thu 26 Mar 2026 23:46:28 +0000 Manifest next update: Thu 02 Apr 2026 23:46:28 +0000 Files and hashes: 1: NdqtT3Wuk43GUzSEzejIF93Csig.crl (hash: mpEe2SaidfEvRGBFIMXQ/xCpr8sI/VCngDcjpil74Xw=) 2: E9ED080A785011ECBD2B6A10C4F9AE02.roa (hash: 0VJSSuNZNqd6Mi6Fcfyrw/oW75/x9p5H40HqIw6BOBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 23:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1178 (0x49a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E351, serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Validity Not Before: Mar 26 23:46:28 2026 GMT Not After : Apr 2 23:46:28 2026 GMT Subject: CN=69c5c555-513a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:04:88:14:52:91:17:e7:74:f3:5a:94:27:b7: ba:44:14:e3:7b:e6:e7:5f:7e:6e:f6:52:aa:4f:7f: 83:d8:89:6b:31:be:ab:3e:74:03:6c:0e:08:03:19: 04:d2:03:b0:aa:8d:40:37:94:27:8b:8d:35:dc:46: ef:09:ca:0d:c2:20:30:ef:68:32:c7:b4:62:7f:8b: 88:42:d5:93:9a:2c:13:c0:0c:90:68:27:17:74:0b: c0:54:f2:83:54:e2:27:fb:7c:15:2d:33:de:28:48: 87:e5:b1:c7:c0:bc:a5:b6:55:8c:8d:e7:c5:c6:6d: 36:26:89:e5:df:c1:dc:74:2a:0e:ad:81:31:55:ae: a7:dc:3f:11:5e:90:87:06:5f:f4:1c:ec:05:95:0c: ec:89:1d:b1:e5:9b:40:52:b1:1d:60:04:82:2c:86: 1f:13:b7:3d:28:f1:82:18:bb:68:a2:52:49:66:c7: 11:08:8a:68:af:d5:87:53:bd:fe:2a:84:d2:4a:f5: 61:5a:96:1e:86:48:77:d3:14:a4:35:01:a7:2b:49: ef:c0:f0:43:2e:86:ce:e5:24:ff:e7:1c:3b:d7:14: 7d:ea:73:7a:e9:1a:31:43:1c:70:be:45:83:e5:89: 46:f7:9d:d9:6d:1f:b8:80:64:2d:c4:40:28:ae:7b: 1a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A9:CE:31:7A:D3:E6:80:C0:A6:4A:14:A7:92:87:CA:A4:0B:A3:AC X509v3 Authority Key Identifier: keyid:35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:c8:ea:2a:a3:ca:ab:ba:9e:87:27:88:71:3c:3d:94:54:f8: 1f:cd:0c:a8:2c:46:45:4f:5d:92:e8:da:63:a8:b1:d6:17:95: 21:b3:dd:2d:0b:05:65:a8:ff:d2:70:31:27:ca:ff:b3:b4:47: b6:ab:e2:85:eb:31:5a:64:d4:ca:8e:1d:73:2b:11:70:8e:c3: 1d:f7:74:d8:7e:21:79:15:de:a7:b3:e9:f9:e1:20:0f:45:6d: d4:fb:ba:7d:b7:1d:0d:12:42:ff:c9:aa:5f:bf:b8:14:d0:7a: de:79:16:44:62:60:63:d5:7a:1e:9d:41:6f:63:bb:ce:6a:7e: 56:ab:67:65:3f:9a:6a:93:f1:ec:03:60:bb:78:2b:d0:d2:53: 50:c4:c4:95:45:64:a1:9a:da:1c:9a:7e:d3:25:a1:93:27:d7: ae:4f:cb:bb:9a:23:52:db:4c:37:64:8c:7b:ec:cb:1d:83:b0: 0d:4b:93:c3:af:a1:26:3a:48:9a:63:73:34:a0:79:0c:e2:79: fc:b8:d9:3a:c2:48:78:e5:1f:da:96:95:59:5e:ee:3b:c5:d3: ca:14:9c:be:5c:2e:ef:ce:30:14:ae:2c:ae:a6:e1:8a:d0:6f: 09:cf:e2:61:25:c3:00:ee:e4:15:df:9c:bd:ae:16:63:d3:43: 4d:e7:7b:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUzNTExMTAvBgNVBAUTKDM1REFBRDRGNzVBRTkzOERDNjUzMzQ4NENERThDODE3 RERDMkIyMjgwHhcNMjYwMzI2MjM0NjI4WhcNMjYwNDAyMjM0NjI4WjAYMRYwFAYD VQQDEw02OWM1YzU1NS01MTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wSIFFKRF+d081qUJ7e6RBTje+bnX35u9lKqT3+D2IlrMb6rPnQDbA4IAxkE 0gOwqo1AN5Qni4013EbvCcoNwiAw72gyx7Rif4uIQtWTmiwTwAyQaCcXdAvAVPKD VOIn+3wVLTPeKEiH5bHHwLyltlWMjefFxm02Jonl38HcdCoOrYExVa6n3D8RXpCH Bl/0HOwFlQzsiR2x5ZtAUrEdYASCLIYfE7c9KPGCGLtoolJJZscRCIpor9WHU73+ KoTSSvVhWpYehkh30xSkNQGnK0nvwPBDLobO5ST/5xw71xR96nN66RoxQxxwvkWD 5YlG953ZbR+4gGQtxEAornsaTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE+pzjF6 0+aAwKZKFKeSh8qkC6OsMB8GA1UdIwQYMBaAFDXarU91rpONxlM0hM3oyBfdwrIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTM1MS81QkNGODhBNjc4 NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0M0dVelNFemVqSUY5M0Nz aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05kcXRUM1d1azQzR1V6U0V6ZWpJRjkzQ3NpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTM1MS81QkNGODhBNjc4NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0 M0dVelNFemVqSUY5M0NzaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl8jqKqPKq7qehyeIcTw9lFT4H80MqCxGRU9dkujaY6ix1heVIbPdLQsFZaj/ 0nAxJ8r/s7RHtqvihesxWmTUyo4dcysRcI7DHfd02H4heRXep7Pp+eEgD0Vt1Pu6 fbcdDRJC/8mqX7+4FNB63nkWRGJgY9V6Hp1Bb2O7zmp+VqtnZT+aapPx7ANgu3gr 0NJTUMTElUVkoZraHJp+0yWhkyfXrk/Lu5ojUttMN2SMe+zLHYOwDUuTw6+hJjpI mmNzNKB5DOJ5/LjZOsJIeOUf2paVWV7uO8XTyhScvlwu784wFK4srqbhitBvCc/i YSXDAO7kFd+cva4WY9NDTed7CQ== -----END CERTIFICATE-----Generated at Sat Mar 28 13:42:42 2026 by rpki-client