$ rpki-client -vvf rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft File: NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft (raw, json) Hash identifier: +3GH6ZUScwHmNLHhMPqPEDggDQ7G7hvEQECiWuTffCQ= Subject key identifier: 19:21:D7:E3:B1:84:06:B1:04:00:88:2A:4F:1A:85:43:D0:FE:15:CF Authority key identifier: 36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E Certificate issuer: /CN=A912677F/serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E Certificate serial: 0B05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft Manifest number: 0AFB Signing time: Tue 24 Mar 2026 19:09:15 +0000 Manifest this update: Tue 24 Mar 2026 19:09:15 +0000 Manifest next update: Tue 31 Mar 2026 19:09:15 +0000 Files and hashes: 1: NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl (hash: 1BGaMYLUOHaPZM/QIVO0LnmAMUDy8otdmERQHG2P4Cc=) 2: B82FA738111C11EBB805F52AC4F9AE02.roa (hash: Dk339imNFOip5Ywpt/0EfK35LYjSFKAUXhrmv8n0CpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2821 (0xb05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912677F, serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E Validity Not Before: Mar 24 19:09:15 2026 GMT Not After : Mar 31 19:09:15 2026 GMT Subject: CN=69c2e15b-e516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:92:5c:f0:5d:d4:0d:54:46:79:26:59:5d:f9: 03:aa:b4:8b:3b:75:a1:58:a0:43:94:fc:62:7b:a3: 53:fa:7b:36:9b:2d:37:c1:78:f1:f7:bd:66:7a:76: e9:ef:e7:5b:e5:8b:c6:ca:3f:5d:25:20:b8:94:26: d7:c6:3e:b5:6c:0f:eb:ca:54:ae:12:4d:5d:27:8f: f1:f4:d2:b7:02:4d:fb:63:e6:37:eb:a1:53:04:b4: 1e:fb:d9:31:21:f9:95:69:85:16:47:73:86:76:8e: d1:2b:eb:30:22:5d:67:a5:a5:7f:35:fc:d7:81:5b: 78:15:78:b0:16:ad:1c:25:1b:39:99:b0:0e:b2:5e: 5b:de:13:6a:37:b9:26:98:0f:d3:9c:64:7a:68:0a: ab:2f:9b:25:25:f4:8e:0a:a7:ca:09:b1:12:9c:71: 92:a4:80:e2:d5:4d:3d:a9:27:21:87:30:33:89:b5: 5e:a6:a0:7e:3a:d3:7a:ef:bd:c4:4b:52:d4:20:6d: 9b:e5:da:10:81:3f:09:bd:b0:b4:4e:66:04:40:35: b9:e8:25:8b:6a:17:44:7b:19:b6:69:6c:04:20:05: cd:14:b9:92:c1:39:16:50:ec:0e:79:9d:0e:ee:ea: 75:1e:8f:c2:34:b3:a9:25:e9:74:ed:c5:90:18:e0: 08:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:21:D7:E3:B1:84:06:B1:04:00:88:2A:4F:1A:85:43:D0:FE:15:CF X509v3 Authority Key Identifier: keyid:36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:d3:4c:52:35:96:92:de:99:a3:4a:42:31:cf:75:49:38:70: ea:e2:99:4e:95:66:ae:5c:42:d5:97:99:25:e2:92:ca:c6:5f: 01:16:f2:bb:f0:91:ae:94:7a:a3:b3:bd:57:10:8e:04:80:45: 4c:31:cb:5f:84:e7:e0:98:b5:31:b6:1b:20:03:02:2d:8a:99: 8e:ef:b1:84:c5:0e:97:66:ce:be:c1:2d:f8:81:54:ac:d8:92: c2:dd:54:64:fe:b2:b4:e2:24:3d:e1:a9:34:1b:bc:4a:b1:a9: 88:a6:53:f3:a4:a2:13:fe:27:d8:8f:aa:6b:3d:34:a5:17:0b: ad:8b:6f:55:27:f1:86:dd:e4:43:6d:f7:d8:88:8a:52:7a:8b: 9b:63:85:7d:16:66:20:23:67:c9:b3:a6:ee:20:e6:28:c3:18: 5a:35:64:66:49:1f:c5:cd:e4:07:36:30:85:2a:73:54:80:0d: 1f:0a:e4:24:d8:92:77:34:e7:d9:68:bf:6b:1e:79:5f:e6:72: e5:89:1a:bf:79:4c:4c:70:04:24:c4:bc:cf:13:45:2e:dc:df: 54:c1:d4:b2:ea:00:22:f6:16:fd:a6:bf:b0:a2:ac:3e:9c:cd: d8:29:82:83:4c:7a:f3:80:0a:e6:05:81:f1:db:41:1e:b9:17: 7c:c9:0c:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3N0YxMTAvBgNVBAUTKDM2NjQyOTJENEZEMkRGRjFDODg0MTc1MEZDODM3OUYx OTQ1QTEzN0UwHhcNMjYwMzI0MTkwOTE1WhcNMjYwMzMxMTkwOTE1WjAYMRYwFAYD VQQDEw02OWMyZTE1Yi1lNTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5Jc8F3UDVRGeSZZXfkDqrSLO3WhWKBDlPxie6NT+ns2my03wXjx971menbp 7+db5YvGyj9dJSC4lCbXxj61bA/rylSuEk1dJ4/x9NK3Ak37Y+Y366FTBLQe+9kx IfmVaYUWR3OGdo7RK+swIl1npaV/NfzXgVt4FXiwFq0cJRs5mbAOsl5b3hNqN7km mA/TnGR6aAqrL5slJfSOCqfKCbESnHGSpIDi1U09qSchhzAzibVepqB+OtN6773E S1LUIG2b5doQgT8JvbC0TmYEQDW56CWLahdEexm2aWwEIAXNFLmSwTkWUOwOeZ0O 7up1Ho/CNLOpJel07cWQGOAIpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBkh1+Ox hAaxBACIKk8ahUPQ/hXPMB8GA1UdIwQYMBaAFDZkKS1P0t/xyIQXUPyDefGUWhN+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjc3Ri9DNDNENzY5NjYz RUMxMUVBOTdCNzI1ODdDNEY5QUUwMi9ObVFwTFVfUzNfSEloQmRRX0lONThaUmFF MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05tUXBMVV9TM19ISWhCZFFfSU41OFpSYUUzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Njc3Ri9DNDNENzY5NjYzRUMxMUVBOTdCNzI1ODdDNEY5QUUwMi9ObVFwTFVfUzNf SEloQmRRX0lONThaUmFFMzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYNNMUjWWkt6Zo0pCMc91SThw6uKZTpVmrlxC1ZeZJeKSysZfARbyu/CRrpR6 o7O9VxCOBIBFTDHLX4Tn4Ji1MbYbIAMCLYqZju+xhMUOl2bOvsEt+IFUrNiSwt1U ZP6ytOIkPeGpNBu8SrGpiKZT86SiE/4n2I+qaz00pRcLrYtvVSfxht3kQ2332IiK UnqLm2OFfRZmICNnybOm7iDmKMMYWjVkZkkfxc3kBzYwhSpzVIANHwrkJNiSdzTn 2Wi/ax55X+Zy5Ykav3lMTHAEJMS8zxNFLtzfVMHUsuoAIvYW/aa/sKKsPpzN2CmC g0x684AK5gWB8dtBHrkXfMkM9A== -----END CERTIFICATE-----Generated at Thu Mar 26 04:21:16 2026 by rpki-client