$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft File: nxlDAU2jmDwfXHj3bM8tpWpKNro.mft (raw, json) Hash identifier: QoGJy4Ga1l5Cyf8yqHkA+hglV3+qKnd0F9T3JYcvcxg= Subject key identifier: B5:78:6C:E6:D8:60:E2:AB:7A:FF:16:9F:F5:E9:72:A3:D2:9E:BF:D2 Authority key identifier: 9F:19:43:01:4D:A3:98:3C:1F:5C:78:F7:6C:CF:2D:A5:6A:4A:36:BA Certificate issuer: /CN=A912E3B6/serialNumber=9F1943014DA3983C1F5C78F76CCF2DA56A4A36BA Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft Manifest number: 08 Signing time: Wed 25 Mar 2026 08:21:25 +0000 Manifest this update: Wed 25 Mar 2026 08:21:25 +0000 Manifest next update: Wed 01 Apr 2026 08:21:25 +0000 Files and hashes: 1: nxlDAU2jmDwfXHj3bM8tpWpKNro.crl (hash: ndZfL1StGwmWrR2dRJo8hAiH59RdD/3t/0zO8LUC1U0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.crl rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E3B6, serialNumber=9F1943014DA3983C1F5C78F76CCF2DA56A4A36BA Validity Not Before: Mar 25 08:21:25 2026 GMT Not After : Apr 1 08:21:25 2026 GMT Subject: CN=69c39b05-ac87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0b:e8:4d:c6:2f:43:79:aa:75:4d:b1:59:16: 75:df:93:19:2e:94:d6:09:1c:14:ba:60:dd:17:0d: 34:c3:22:22:2f:df:f8:20:68:7e:a3:12:12:41:11: 31:27:f6:5d:9e:53:f4:74:ae:11:18:f5:3b:56:bc: d2:ee:42:c8:10:99:46:5e:bb:d5:78:73:c3:2b:73: 71:70:5d:e7:93:ed:96:66:41:7a:39:83:cf:7f:8f: 16:ab:1f:c4:6f:98:bf:86:89:d1:14:9f:c1:ac:ba: 09:f2:4c:20:21:e4:6d:8e:dc:a2:62:5d:4d:c5:a3: 5f:9a:86:c5:f6:bc:d8:96:17:77:a9:93:71:de:b4: 85:47:f2:bd:b0:7b:fe:fe:7d:32:97:c3:5b:71:0f: a3:cd:5b:e0:c5:fa:10:bf:ff:28:85:cb:26:2a:b8: 94:aa:bb:1f:dc:0d:eb:f8:e5:50:a7:50:69:ec:eb: 0e:f8:5f:f8:da:d8:84:96:fe:d1:28:b6:ad:fd:51: 6e:6d:eb:b4:3e:5a:f6:a9:90:4c:6c:8e:26:cb:6b: c2:1e:2e:a4:8b:ba:1c:65:48:c0:15:1a:8a:eb:84: 3f:0a:64:27:36:8c:58:9f:a3:1d:df:98:4e:a1:64: 44:60:80:46:cf:44:11:ba:0f:92:f7:4e:7e:58:cb: d4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:78:6C:E6:D8:60:E2:AB:7A:FF:16:9F:F5:E9:72:A3:D2:9E:BF:D2 X509v3 Authority Key Identifier: keyid:9F:19:43:01:4D:A3:98:3C:1F:5C:78:F7:6C:CF:2D:A5:6A:4A:36:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nxlDAU2jmDwfXHj3bM8tpWpKNro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3B6/C14769961EC211F1AF56D7B8243D8C67/nxlDAU2jmDwfXHj3bM8tpWpKNro.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:88:b6:c8:e6:7c:be:06:57:4d:b1:50:80:da:d0:a0:e8:19: fa:ed:c0:6a:fe:bc:e8:f5:2b:82:1f:83:4b:b7:b3:e6:62:6f: 51:2e:90:5b:9a:d3:a7:74:93:fc:ce:12:70:65:a3:ea:4b:cf: 27:74:b9:a4:a1:9e:3f:ba:74:b1:0a:10:64:f6:9e:66:b0:0e: d2:4d:7c:c5:06:89:99:2c:a3:97:9b:a4:29:76:fd:4b:1a:5e: 13:1b:57:43:03:9a:d8:b8:69:77:77:2e:84:d6:e1:8b:9d:ae: e2:b1:12:10:1e:83:9e:00:2a:d7:43:a1:68:1a:83:78:5d:c3: b1:ae:78:29:fc:91:a5:cd:58:31:f5:b4:e6:53:93:2f:df:c1: bc:a6:fb:95:81:67:81:c1:ef:38:fb:6a:fa:e7:44:c5:d9:8e: de:ec:7b:c9:4c:02:77:7c:6a:b7:73:8e:91:71:ac:ac:f3:cc: 13:f9:2a:67:0a:ba:8b:e7:e4:fc:4b:26:c4:28:95:03:fe:37: 8c:a0:2c:e2:69:b5:ab:92:1b:ce:60:bc:28:ae:5c:cd:2d:64: 94:3c:5c:7c:69:14:33:ef:ee:4c:2b:39:27:54:74:95:ee:a0: 68:a5:25:a9:b4:62:06:a0:00:cc:e1:bb:e5:7a:21:c3:35:e5: 94:1d:30:08 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RTNCNjExMC8GA1UEBRMoOUYxOTQzMDE0REEzOTgzQzFGNUM3OEY3NkNDRjJEQTU2 QTRBMzZCQTAeFw0yNjAzMjUwODIxMjVaFw0yNjA0MDEwODIxMjVaMBgxFjAUBgNV BAMTDTY5YzM5YjA1LWFjODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnC+hNxi9Deap1TbFZFnXfkxkulNYJHBS6YN0XDTTDIiIv3/ggaH6jEhJBETEn 9l2eU/R0rhEY9TtWvNLuQsgQmUZeu9V4c8Mrc3FwXeeT7ZZmQXo5g89/jxarH8Rv mL+GidEUn8GsugnyTCAh5G2O3KJiXU3Fo1+ahsX2vNiWF3epk3HetIVH8r2we/7+ fTKXw1txD6PNW+DF+hC//yiFyyYquJSqux/cDev45VCnUGns6w74X/ja2ISW/tEo tq39UW5t67Q+WvapkExsjibLa8IeLqSLuhxlSMAVGorrhD8KZCc2jFifox3fmE6h ZERggEbPRBG6D5L3Tn5Yy9T5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtXhs5thg 4qt6/xaf9elyo9Kev9IwHwYDVR0jBBgwFoAUnxlDAU2jmDwfXHj3bM8tpWpKNrow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFM0I2L0MxNDc2OTk2MUVD MjExRjFBRjU2RDdCODI0M0Q4QzY3L254bERBVTJqbUR3ZlhIajNiTTh0cFdwS05y by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvbnhsREFVMmptRHdmWEhqM2JNOHRwV3BLTnJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF M0I2L0MxNDc2OTk2MUVDMjExRjFBRjU2RDdCODI0M0Q4QzY3L254bERBVTJqbUR3 ZlhIajNiTTh0cFdwS05yby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDMiLbI5ny+BldNsVCA2tCg6Bn67cBq/rzo9SuCH4NLt7PmYm9RLpBbmtOndJP8 zhJwZaPqS88ndLmkoZ4/unSxChBk9p5msA7STXzFBomZLKOXm6Qpdv1LGl4TG1dD A5rYuGl3dy6E1uGLna7isRIQHoOeACrXQ6FoGoN4XcOxrngp/JGlzVgx9bTmU5Mv 38G8pvuVgWeBwe84+2r650TF2Y7e7HvJTAJ3fGq3c46Rcays88wT+SpnCrqL5+T8 SybEKJUD/jeMoCziabWrkhvOYLworlzNLWSUPFx8aRQz7+5MKzknVHSV7qBopSWp tGIGoADM4bvleiHDNeWUHTAI -----END CERTIFICATE-----Generated at Thu Mar 26 01:58:43 2026 by rpki-client