$ rpki-client -vvf rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft File: NQgZehD-pGpxhGMxT-upOUS2JIs.mft (raw, json) Hash identifier: VMBqpdpNFXNWrbCs0YCN3DdWD7c9XjEEE0Cfo7u62ls= Subject key identifier: C5:01:B1:25:EC:D8:52:95:71:BB:3A:11:BB:EA:73:B8:B8:C6:B8:E9 Authority key identifier: 35:08:19:7A:10:FE:A4:6A:71:84:63:31:4F:EB:A9:39:44:B6:24:8B Certificate issuer: /CN=A912B666/serialNumber=3508197A10FEA46A718463314FEBA93944B6248B Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft Manifest number: 46 Signing time: Wed 25 Mar 2026 07:37:50 +0000 Manifest this update: Wed 25 Mar 2026 07:37:50 +0000 Manifest next update: Wed 01 Apr 2026 07:37:50 +0000 Files and hashes: 1: NQgZehD-pGpxhGMxT-upOUS2JIs.crl (hash: YNyGW40ym/XUaaP8rx3eIen7BrDvfCKr8rPUCyUTq3o=) 2: 86227722C92A11F0872AB883C4F9AE02.roa (hash: OntMkkZwdIbl5SrNRK1u5UfChSdJYJCs+EVkHCslByQ=) 3: F084D9AADF1B11F0BDFBE1B1616F56BC.roa (hash: CpQzWFpl+Gw/RBNLdgsUn2ZniQcwnVLZoguxqXTYKyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.crl rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B666, serialNumber=3508197A10FEA46A718463314FEBA93944B6248B Validity Not Before: Mar 25 07:37:50 2026 GMT Not After : Apr 1 07:37:50 2026 GMT Subject: CN=69c390ce-b418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b2:e0:69:7b:35:79:98:f8:d5:a1:e7:4e:38: c6:7b:59:dd:34:53:8e:16:e8:dc:55:92:26:d4:76: 8c:9f:67:15:91:8c:fb:fe:0b:26:7a:c8:8a:e8:f6: 58:31:80:9a:7d:38:3c:0e:78:88:fd:40:12:a5:31: 4c:1e:f0:23:f7:4f:93:be:9d:0c:d1:fc:36:77:72: 53:4c:ca:b6:20:54:19:6a:bd:7c:79:dc:ee:ef:0c: 8e:67:ac:8d:bf:94:fa:9e:2d:b6:37:b4:89:f5:f4: 4c:3c:e7:df:55:06:63:00:fd:41:69:70:bd:8c:73: b4:86:5d:d7:d4:ee:0e:82:11:aa:cc:c6:f8:10:1c: 3c:7f:d6:fe:1c:49:51:4c:c2:bc:82:f8:fb:79:4f: a5:4d:01:42:ce:67:74:5b:c2:5a:f8:3c:d6:55:d9: a2:31:d1:10:d6:cc:66:fd:78:86:f7:97:fa:80:04: 8c:ec:7f:a1:94:de:b0:94:50:19:db:a8:c0:63:ea: 86:af:3b:89:15:2f:7e:ee:61:b0:55:8f:f6:6a:b0: 04:12:07:48:7a:97:0a:4f:36:d2:3b:35:7b:a6:d1: 84:3b:65:39:19:59:73:02:1a:4d:b2:f0:86:5f:fe: 6b:a8:bb:37:02:8f:55:ad:20:92:80:4f:a8:9d:e1: fa:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:01:B1:25:EC:D8:52:95:71:BB:3A:11:BB:EA:73:B8:B8:C6:B8:E9 X509v3 Authority Key Identifier: keyid:35:08:19:7A:10:FE:A4:6A:71:84:63:31:4F:EB:A9:39:44:B6:24:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:c0:e4:87:7e:bc:46:e4:f5:24:30:ae:e3:0d:2f:13:b4:93: b8:87:c5:45:1b:05:0d:76:4a:7f:d9:cf:91:0b:ca:17:61:9a: b7:db:93:b8:8c:5c:80:fd:e5:67:5a:c6:f0:9c:03:78:9e:76: 55:ef:7e:f5:f6:9a:b2:a4:a2:3e:bd:20:bc:01:92:03:97:b9: 41:41:49:85:a0:6a:ea:ac:8c:22:d7:19:32:9d:7d:f4:3a:f8: 70:4b:c5:08:16:57:8d:86:43:e6:9d:5e:04:32:93:ae:bd:d9: 67:70:ff:ab:20:b4:cc:5c:ca:2f:99:cc:64:40:21:9c:b1:71: b8:25:24:eb:75:c1:ac:b8:88:27:32:26:50:82:34:2f:89:ad: 5c:69:1d:ef:0c:8e:58:a9:89:6e:fe:fe:2c:b0:6b:7e:55:f3: 52:2d:39:09:12:98:ba:84:83:21:67:fa:4f:20:63:11:85:61: 7e:22:c1:c3:11:c9:4d:26:a8:4f:8f:48:d3:c1:26:c5:a8:06: 57:45:10:95:ed:52:77:83:4f:c9:fe:ec:1e:a5:3b:cc:39:61: 9f:e3:1c:f2:22:e9:f2:41:dc:6d:eb:d8:b6:5e:3b:eb:e1:7c: 94:fe:23:c5:0f:d3:ef:e5:f6:e4:0b:e4:24:09:3b:5a:01:32: 98:b1:1b:f3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QjY2NjExMC8GA1UEBRMoMzUwODE5N0ExMEZFQTQ2QTcxODQ2MzMxNEZFQkE5Mzk0 NEI2MjQ4QjAeFw0yNjAzMjUwNzM3NTBaFw0yNjA0MDEwNzM3NTBaMBgxFjAUBgNV BAMTDTY5YzM5MGNlLWI0MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgsuBpezV5mPjVoedOOMZ7Wd00U44W6NxVkibUdoyfZxWRjPv+CyZ6yIro9lgx gJp9ODwOeIj9QBKlMUwe8CP3T5O+nQzR/DZ3clNMyrYgVBlqvXx53O7vDI5nrI2/ lPqeLbY3tIn19Ew8599VBmMA/UFpcL2Mc7SGXdfU7g6CEarMxvgQHDx/1v4cSVFM wryC+Pt5T6VNAULOZ3Rbwlr4PNZV2aIx0RDWzGb9eIb3l/qABIzsf6GU3rCUUBnb qMBj6oavO4kVL37uYbBVj/ZqsAQSB0h6lwpPNtI7NXum0YQ7ZTkZWXMCGk2y8IZf /muouzcCj1WtIJKAT6id4fq1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxQGxJezY UpVxuzoRu+pzuLjGuOkwHwYDVR0jBBgwFoAUNQgZehD+pGpxhGMxT+upOUS2JIsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCNjY2Lzk5MzYxQTdDQzky OTExRjBCMjM4RjI4MUM0RjlBRTAyL05RZ1plaEQtcEdweGhHTXhULXVwT1VTMkpJ cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlFnWmVoRC1wR3B4aEdNeFQtdXBPVVMySklzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC NjY2Lzk5MzYxQTdDQzkyOTExRjBCMjM4RjI4MUM0RjlBRTAyL05RZ1plaEQtcEdw eGhHTXhULXVwT1VTMkpJcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBHwOSHfrxG5PUkMK7jDS8TtJO4h8VFGwUNdkp/2c+RC8oXYZq325O4jFyA/eVn WsbwnAN4nnZV73719pqypKI+vSC8AZIDl7lBQUmFoGrqrIwi1xkynX30OvhwS8UI FleNhkPmnV4EMpOuvdlncP+rILTMXMovmcxkQCGcsXG4JSTrdcGsuIgnMiZQgjQv ia1caR3vDI5YqYlu/v4ssGt+VfNSLTkJEpi6hIMhZ/pPIGMRhWF+IsHDEclNJqhP j0jTwSbFqAZXRRCV7VJ3g0/J/uwepTvMOWGf4xzyIunyQdxt69i2Xjvr4XyU/iPF D9Pv5fbkC+QkCTtaATKYsRvz -----END CERTIFICATE-----Generated at Thu Mar 26 00:55:04 2026 by rpki-client