$ rpki-client -vvf rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft File: NxkwlLzz42Ui-tvxlU7l_51gHg4.mft (raw, json) Hash identifier: QwGef/9M50bGaoBGgFlJemX7Eu5BJTCJoBQYM5TeyZ8= Subject key identifier: 32:D5:10:F9:8A:CD:95:86:EC:09:A4:BB:F0:01:8C:76:8A:1F:87:66 Authority key identifier: 37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E Certificate issuer: /CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E Certificate serial: 06DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft Manifest number: 06D4 Signing time: Tue 24 Mar 2026 21:56:18 +0000 Manifest this update: Tue 24 Mar 2026 21:56:18 +0000 Manifest next update: Tue 31 Mar 2026 21:56:18 +0000 Files and hashes: 1: NxkwlLzz42Ui-tvxlU7l_51gHg4.crl (hash: oB7EdvUuc3n0LRd5fXb3HEMsgqtrceJefoDeCaEuwsA=) 2: 3A00D342928511EB8B3AAC22C4F9AE02.roa (hash: LcYL4bDsuUT3zoZgud/O2L3NegCJeaxCuiBri9185ZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1755 (0x6db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134285, serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E Validity Not Before: Mar 24 21:56:18 2026 GMT Not After : Mar 31 21:56:18 2026 GMT Subject: CN=69c30882-67e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0f:4c:7c:b3:24:bc:ff:dc:3c:e2:4b:4f:e4: 28:57:28:22:36:c5:cc:ad:9f:51:2b:d2:97:36:0c: 7e:95:67:41:3a:13:ac:6b:77:76:cc:09:38:ab:98: ba:5e:30:1f:57:69:7a:45:aa:96:6a:18:fd:1e:3c: 12:57:43:a2:e5:36:83:33:15:c5:5a:7f:28:f9:8a: b3:f3:96:ab:32:52:32:46:18:ec:4e:fd:b5:16:41: a5:4a:05:ec:e1:e5:c7:4f:c9:9e:76:0f:e9:5f:c4: 99:33:1b:e4:88:50:49:82:1c:b0:4a:0a:eb:b1:61: 15:da:85:05:48:8f:42:eb:8a:0f:29:81:bf:74:6f: dc:79:73:f8:cd:ce:ad:57:a3:99:7b:63:b8:9b:9b: 0b:e5:e5:b1:80:d2:5a:e7:2a:91:a0:d7:48:10:fd: f9:48:db:07:35:d6:c8:9c:68:e5:7c:1e:3d:17:75: 7f:15:49:ae:96:fc:3e:ef:22:41:f5:d4:95:de:db: 83:8a:7b:ee:70:e2:ee:83:c4:7c:8f:c9:d6:8c:ec: 57:26:97:56:80:f6:f7:c9:3e:a8:cd:c2:d7:4f:bb: 5e:33:7a:45:97:4b:31:c5:28:7b:88:51:b4:00:92: 20:e1:09:2f:d7:02:8a:ac:2d:a8:b2:00:ff:a5:73: 8c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D5:10:F9:8A:CD:95:86:EC:09:A4:BB:F0:01:8C:76:8A:1F:87:66 X509v3 Authority Key Identifier: keyid:37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:5c:e9:b9:f1:f9:f5:f1:1d:c6:31:ca:49:b0:6f:8e:e4:d8: 4b:62:06:30:42:b1:39:9d:08:3a:69:30:fb:f7:fb:cb:71:e6: 58:3a:40:de:f8:0d:d3:39:ff:a1:0c:3d:e6:98:86:66:51:4b: 5f:72:ad:df:65:28:58:0e:85:41:5f:b9:7f:0e:b4:6d:df:0f: 07:b0:55:b3:82:65:8b:f3:e7:e7:d4:f4:50:cb:b3:6c:d4:b8: 00:0c:f0:99:bd:fa:4a:48:38:88:ad:58:b7:3b:d1:f2:8e:c5: 50:4b:3e:d6:70:d7:df:5a:15:35:f9:2a:d8:6a:39:09:f2:dd: ad:bd:f6:bf:f8:71:e4:a5:66:11:4b:74:10:49:c0:f9:8c:87: c5:7d:4c:c6:07:d2:9b:b7:c9:a6:ba:17:b7:3e:9b:7f:af:0d: 90:dc:67:0a:fa:c8:03:0d:ca:8e:3c:03:2c:39:f7:b7:0c:2f: a7:fe:ee:83:d2:53:d3:fa:de:62:4e:2d:0b:05:d4:08:7b:92: 90:04:24:79:51:04:aa:b9:20:fc:f1:a5:72:b2:31:1c:51:24: 98:a8:3b:99:67:84:80:65:70:cd:d2:f9:39:09:cc:df:2f:4e: 79:da:be:5c:0a:49:11:4d:17:f1:16:cc:60:04:4e:93:1a:f5: 0c:1f:36:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyODUxMTAvBgNVBAUTKDM3MTkzMDk0QkNGM0UzNjUyMkZBREJGMTk1NEVFNUZG OUQ2MDFFMEUwHhcNMjYwMzI0MjE1NjE4WhcNMjYwMzMxMjE1NjE4WjAYMRYwFAYD VQQDEw02OWMzMDg4Mi02N2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvg9MfLMkvP/cPOJLT+QoVygiNsXMrZ9RK9KXNgx+lWdBOhOsa3d2zAk4q5i6 XjAfV2l6RaqWahj9HjwSV0Oi5TaDMxXFWn8o+Yqz85arMlIyRhjsTv21FkGlSgXs 4eXHT8medg/pX8SZMxvkiFBJghywSgrrsWEV2oUFSI9C64oPKYG/dG/ceXP4zc6t V6OZe2O4m5sL5eWxgNJa5yqRoNdIEP35SNsHNdbInGjlfB49F3V/FUmulvw+7yJB 9dSV3tuDinvucOLug8R8j8nWjOxXJpdWgPb3yT6ozcLXT7teM3pFl0sxxSh7iFG0 AJIg4Qkv1wKKrC2osgD/pXOMiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDLVEPmK zZWG7Amku/ABjHaKH4dmMB8GA1UdIwQYMBaAFDcZMJS88+NlIvrb8ZVO5f+dYB4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDI4NS82RjE1QjU3Mjky ODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQyVWktdHZ4bFU3bF81MWdI ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL054a3dsTHp6NDJVaS10dnhsVTdsXzUxZ0hnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDI4NS82RjE1QjU3MjkyODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQy VWktdHZ4bFU3bF81MWdIZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQFzpufH59fEdxjHKSbBvjuTYS2IGMEKxOZ0IOmkw+/f7y3HmWDpA3vgN0zn/ oQw95piGZlFLX3Kt32UoWA6FQV+5fw60bd8PB7BVs4Jli/Pn59T0UMuzbNS4AAzw mb36Skg4iK1YtzvR8o7FUEs+1nDX31oVNfkq2Go5CfLdrb32v/hx5KVmEUt0EEnA +YyHxX1MxgfSm7fJproXtz6bf68NkNxnCvrIAw3KjjwDLDn3twwvp/7ug9JT0/re Yk4tCwXUCHuSkAQkeVEEqrkg/PGlcrIxHFEkmKg7mWeEgGVwzdL5OQnM3y9Oedq+ XApJEU0X8RbMYAROkxr1DB82tQ== -----END CERTIFICATE-----Generated at Thu Mar 26 22:16:08 2026 by rpki-client