$ rpki-client -vvf rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft File: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft (raw, json) Hash identifier: fKeZkwhi+G0oGefkbHBJIijxOdpYI/mOXPiA1LU0At0= Subject key identifier: 1B:34:77:55:43:1D:98:6C:E0:C2:F1:62:65:91:3D:53:E5:B7:50:B3 Authority key identifier: 36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD Certificate issuer: /CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Certificate serial: 02F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft Manifest number: 02E7 Signing time: Wed 25 Mar 2026 00:59:07 +0000 Manifest this update: Wed 25 Mar 2026 00:59:07 +0000 Manifest next update: Wed 01 Apr 2026 00:59:07 +0000 Files and hashes: 1: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl (hash: KjDQGke8DhjfXWuZ/vVcOYTLPaKA95UeIyMrk/hRDfM=) 2: 134B439A91B611ED8BA25C80C4F9AE02.roa (hash: attv9ecZrF5kZRZeQ+lyJkiW+JXwe94b0M/AiRCsF3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:59:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 759 (0x2f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F333, serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Validity Not Before: Mar 25 00:59:07 2026 GMT Not After : Apr 1 00:59:07 2026 GMT Subject: CN=69c3335b-0d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:42:f6:fc:77:e5:f1:55:46:40:9a:23:06:15: 95:ef:12:50:c9:8c:af:47:33:bd:4a:26:1e:8a:3f: 9e:1d:ea:49:48:a3:ed:ba:77:c3:0d:85:46:ec:74: 3b:99:d2:57:f2:53:63:23:80:a4:e0:24:82:91:de: da:9f:e5:00:9e:44:93:0f:5e:8e:8f:af:d9:1d:82: 68:53:f7:ce:a9:18:b7:71:f4:d6:f2:2c:ec:11:7c: 2d:47:0f:37:1d:15:cf:d2:d0:d2:ea:8e:4c:4a:e8: 9f:e9:91:8e:60:2f:56:b2:2b:52:2e:9d:e0:1e:1b: 27:f3:eb:9e:e1:7a:69:c2:83:b7:ba:96:58:68:5a: 12:32:ec:87:02:98:de:e7:d7:70:32:af:40:0a:4a: e1:d3:f7:45:07:73:19:d0:11:04:17:b4:e0:19:ee: 43:e2:9d:cc:89:13:4b:3b:99:6a:f2:59:24:21:9e: 1e:3a:76:55:39:60:f4:31:12:de:40:aa:8a:0c:85: f5:c8:6b:1c:e1:1e:30:31:7c:13:cb:de:17:e7:6f: 79:ae:b6:b5:5f:37:e8:6b:7e:20:a5:04:7a:d1:51: 09:b2:54:17:1a:94:c6:7a:5a:30:49:18:26:56:ff: 5c:a5:7d:50:61:49:40:67:df:db:58:29:95:e3:8d: 65:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:34:77:55:43:1D:98:6C:E0:C2:F1:62:65:91:3D:53:E5:B7:50:B3 X509v3 Authority Key Identifier: keyid:36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:46:a0:fd:07:a7:cd:e9:54:58:52:31:79:ea:3a:54:36:b5: b2:b1:5f:41:89:d3:16:10:a3:d7:fa:93:95:f0:43:5c:a8:7f: 97:41:fa:2b:25:94:dd:aa:b4:20:19:c2:b4:dd:f0:ce:09:32: df:c9:e8:0c:02:c5:71:b8:4a:be:38:f7:73:7a:e7:5a:9b:6c: 6f:1b:bb:6a:25:bc:17:61:aa:f5:30:1b:8b:43:1b:59:3e:ab: a7:36:fd:11:cb:d8:79:db:5c:0f:fc:2d:51:f0:a6:cc:85:e4: b6:1b:c0:ba:f7:f7:51:be:3e:12:1a:dd:5f:6e:32:74:97:ad: 72:8a:da:96:bf:24:b5:d9:b2:85:59:19:f4:8c:a2:31:85:e9: 71:ba:e1:35:fe:98:f9:f2:a8:47:f7:c2:a4:d0:6a:05:2d:6d: 08:f5:0b:6d:f5:eb:54:f4:d4:d3:17:a4:17:4d:18:fa:7f:11: 59:de:63:d1:cf:d8:bb:21:44:cb:de:3d:f8:17:14:31:16:3e: a6:02:cf:b5:97:9f:2d:a7:e1:84:02:52:3e:58:39:ce:67:37: bf:04:57:32:e1:47:4a:a2:2b:73:ee:c7:45:37:0c:2f:51:be: 60:43:6e:3d:df:d2:70:12:19:ac:45:75:82:89:66:1c:6f:58: 7e:8d:de:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YzMzMxMTAvBgNVBAUTKDM2NDA4QzExQzU0NzJCODIyNDhBRkZFQkVFREJCMjBF M0UwN0E2Q0QwHhcNMjYwMzI1MDA1OTA3WhcNMjYwNDAxMDA1OTA3WjAYMRYwFAYD VQQDEw02OWMzMzM1Yi0wZDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0L2/Hfl8VVGQJojBhWV7xJQyYyvRzO9SiYeij+eHepJSKPtunfDDYVG7HQ7 mdJX8lNjI4Ck4CSCkd7an+UAnkSTD16Oj6/ZHYJoU/fOqRi3cfTW8izsEXwtRw83 HRXP0tDS6o5MSuif6ZGOYC9WsitSLp3gHhsn8+ue4XppwoO3upZYaFoSMuyHApje 59dwMq9ACkrh0/dFB3MZ0BEEF7TgGe5D4p3MiRNLO5lq8lkkIZ4eOnZVOWD0MRLe QKqKDIX1yGsc4R4wMXwTy94X5295rra1Xzfoa34gpQR60VEJslQXGpTGelowSRgm Vv9cpX1QYUlAZ9/bWCmV441lbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBs0d1VD HZhs4MLxYmWRPVPlt1CzMB8GA1UdIwQYMBaAFDZAjBHFRyuCJIr/6+7bsg4+B6bN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjMzMy9ERUNCNjVBNDIz OTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0SWtpdl9yN3R1eURqNEhw czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rQ01FY1ZISzRJa2l2X3I3dHV5RGo0SHBzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjMzMy9ERUNCNjVBNDIzOTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0 SWtpdl9yN3R1eURqNEhwczAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl0ag/QenzelUWFIxeeo6VDa1srFfQYnTFhCj1/qTlfBDXKh/l0H6KyWU3aq0 IBnCtN3wzgky38noDALFcbhKvjj3c3rnWptsbxu7aiW8F2Gq9TAbi0MbWT6rpzb9 EcvYedtcD/wtUfCmzIXkthvAuvf3Ub4+EhrdX24ydJetcoralr8ktdmyhVkZ9Iyi MYXpcbrhNf6Y+fKoR/fCpNBqBS1tCPULbfXrVPTU0xekF00Y+n8RWd5j0c/YuyFE y949+BcUMRY+pgLPtZefLafhhAJSPlg5zmc3vwRXMuFHSqIrc+7HRTcML1G+YENu Pd/ScBIZrEV1golmHG9Yfo3edg== -----END CERTIFICATE-----Generated at Thu Mar 26 15:31:19 2026 by rpki-client