$ rpki-client -vvf rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft File: nr2hI9nugwlDBaEYDCoIBX_lQGo.mft (raw, json) Hash identifier: 4XAaiPcLxyxv01OYzIJVGhLB/rlXOBq8ruKdHG+NvGY= Subject key identifier: F9:E9:60:B2:4E:76:E1:26:87:8F:95:BD:1A:86:80:9B:46:BA:CB:3A Authority key identifier: 9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A Certificate issuer: /CN=A91425C3/serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft Manifest number: 86 Signing time: Wed 25 Mar 2026 06:55:13 +0000 Manifest this update: Wed 25 Mar 2026 06:55:12 +0000 Manifest next update: Wed 01 Apr 2026 06:55:12 +0000 Files and hashes: 1: nr2hI9nugwlDBaEYDCoIBX_lQGo.crl (hash: sW77nB5VU/tHWG6IN89YGJTyiS9JFwE2qgkEh15TXDk=) 2: 224FBC52EFCF11F0A018F59D746F56BC.roa (hash: l6zP7eAxKoViI6F3M9uDYfZY33CWARrIielkD1703l4=) 3: 8C538C5AEFCF11F0889DE39E746F56BC.roa (hash: eiSYQZ4JbJxsufS9RcJajhzup1MJX6NMX/+qc2RSIq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91425C3, serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Validity Not Before: Mar 25 06:55:12 2026 GMT Not After : Apr 1 06:55:12 2026 GMT Subject: CN=69c386d1-718d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f3:6b:42:d4:79:c0:d2:62:ae:4a:a5:0a:83: 53:1a:a4:b2:e9:d3:f1:ae:ee:e4:1e:ba:50:67:13: 4e:41:9a:34:6d:3e:87:d6:2a:d4:70:1c:b2:82:0d: 24:74:84:74:bd:28:92:a6:c7:3b:3a:86:0b:1f:7d: 4c:59:42:59:7e:1a:20:42:8b:b4:41:85:cf:37:dc: 9a:03:b3:10:57:74:2a:1c:0f:96:0b:31:34:f8:76: b1:66:58:19:0b:60:12:ba:85:bc:9a:38:c2:83:ad: bc:f7:9e:30:16:13:01:43:c8:cc:8d:79:de:92:1a: be:98:9e:16:23:20:20:dc:86:a2:ca:e0:81:5a:3a: 16:53:83:b4:26:4f:81:90:96:8b:46:3a:81:36:e6: 1c:03:2e:37:d1:38:89:c0:9e:2c:20:8a:c5:97:da: 45:2c:84:5e:2d:83:4c:0d:11:c0:92:d3:62:39:3e: 37:0a:d7:10:d9:a8:87:d1:e6:25:8b:93:98:14:e4: a8:14:af:ce:c8:be:49:69:c3:71:d3:33:48:93:5b: 6a:a9:76:03:5d:b1:97:9b:50:6b:5f:29:16:4e:23: c7:d6:19:8a:bf:ff:5b:fc:46:c7:15:28:37:20:59: 3e:de:ad:a3:48:52:09:6b:8b:11:ef:e9:c3:eb:6f: 37:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E9:60:B2:4E:76:E1:26:87:8F:95:BD:1A:86:80:9B:46:BA:CB:3A X509v3 Authority Key Identifier: keyid:9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:34:9b:af:bd:69:65:27:11:3c:8f:df:1b:84:11:46:84:52: 36:67:fd:be:50:bf:eb:f4:f3:9f:71:a6:1c:cb:bf:44:07:d0: 0d:48:dc:e1:0b:d9:56:63:15:6e:80:24:e7:66:72:6b:9f:e2: 8e:12:f7:04:3c:8f:4c:1d:ad:df:f3:aa:ce:f9:5a:18:a0:e4: 7a:2d:d5:fd:ce:84:84:d3:30:17:40:25:27:a9:cb:f5:d8:89: 01:27:7f:39:95:7b:2b:6d:5d:76:fc:75:3b:a3:e6:a3:dd:cd: 21:24:3c:1b:45:b1:42:ae:03:67:e2:03:66:d6:43:f2:ab:0d: 22:5a:4f:f8:f2:53:87:1f:d5:94:f7:c9:59:61:58:d7:5d:bf: 4e:81:5f:86:85:8c:ef:93:c1:66:58:ea:76:3f:e6:36:c5:d2: c0:e1:1d:4c:b0:4b:33:03:9a:e7:88:e3:a0:a0:50:6a:83:94: 90:02:55:4e:01:89:e9:97:93:18:67:12:10:1b:a8:96:44:92: b8:ba:9a:19:9a:6d:ae:cb:35:37:38:ae:f7:2c:32:c8:f3:c0: 56:2f:4d:eb:3f:1b:fe:46:4b:96:30:bd:c5:6e:56:aa:4e:66: 99:ca:51:18:62:b3:4f:e4:e7:6c:02:46:14:57:a5:ea:47:37: 40:da:68:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI1QzMxMTAvBgNVBAUTKDlFQkRBMTIzRDlFRTgzMDk0MzA1QTExODBDMkEwODA1 N0ZFNTQwNkEwHhcNMjYwMzI1MDY1NTEyWhcNMjYwNDAxMDY1NTEyWjAYMRYwFAYD VQQDEw02OWMzODZkMS03MThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPNrQtR5wNJirkqlCoNTGqSy6dPxru7kHrpQZxNOQZo0bT6H1irUcByygg0k dIR0vSiSpsc7OoYLH31MWUJZfhogQou0QYXPN9yaA7MQV3QqHA+WCzE0+HaxZlgZ C2ASuoW8mjjCg628954wFhMBQ8jMjXnekhq+mJ4WIyAg3IaiyuCBWjoWU4O0Jk+B kJaLRjqBNuYcAy430TiJwJ4sIIrFl9pFLIReLYNMDRHAktNiOT43CtcQ2aiH0eYl i5OYFOSoFK/OyL5JacNx0zNIk1tqqXYDXbGXm1BrXykWTiPH1hmKv/9b/EbHFSg3 IFk+3q2jSFIJa4sR7+nD62834QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPnpYLJO duEmh4+VvRqGgJtGuss6MB8GA1UdIwQYMBaAFJ69oSPZ7oMJQwWhGAwqCAV/5UBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjVDMy8yMzI2QzYzRTY2 MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi9ucjJoSTludWd3bERCYUVZRENvSUJYX2xR R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25yMmhJOW51Z3dsREJhRVlEQ29JQlhfbFFHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjVDMy8yMzI2QzYzRTY2MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi9ucjJoSTludWd3 bERCYUVZRENvSUJYX2xRR28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAezSbr71pZScRPI/fG4QRRoRSNmf9vlC/6/Tzn3GmHMu/RAfQDUjc4QvZVmMV boAk52Zya5/ijhL3BDyPTB2t3/OqzvlaGKDkei3V/c6EhNMwF0AlJ6nL9diJASd/ OZV7K21ddvx1O6Pmo93NISQ8G0WxQq4DZ+IDZtZD8qsNIlpP+PJThx/VlPfJWWFY 112/ToFfhoWM75PBZljqdj/mNsXSwOEdTLBLMwOa54jjoKBQaoOUkAJVTgGJ6ZeT GGcSEBuolkSSuLqaGZptrss1Nziu9ywyyPPAVi9N6z8b/kZLljC9xW5Wqk5mmcpR GGKzT+TnbAJGFFel6kc3QNpozA== -----END CERTIFICATE-----Generated at Thu Mar 26 14:09:42 2026 by rpki-client