$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft File: NItUz_eZZeIbLbq5nyEB4xpWDps.mft (raw, json) Hash identifier: 0VLCcVYb4VnXfmEie5FVS2UB+GoKYHKUnxGidvPDHJ4= Subject key identifier: 42:92:6A:79:4A:EE:B9:BB:A9:7D:4C:DA:2B:3D:08:49:AC:A6:42:0B Authority key identifier: 34:8B:54:CF:F7:99:65:E2:1B:2D:BA:B9:9F:21:01:E3:1A:56:0E:9B Certificate issuer: /CN=A9145E01/serialNumber=348B54CFF79965E21B2DBAB99F2101E31A560E9B Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft Manifest number: 3D Signing time: Wed 25 Mar 2026 07:41:37 +0000 Manifest this update: Wed 25 Mar 2026 07:41:36 +0000 Manifest next update: Wed 01 Apr 2026 07:41:36 +0000 Files and hashes: 1: NItUz_eZZeIbLbq5nyEB4xpWDps.crl (hash: mXyvtJvD141gwFUFpagMCCzeG3qLqMYpuGFn64GxHH4=) 2: 03B7FB8CCF5A11F09B61EF16C4F9AE02.roa (hash: zPwsBxrk2TWYKMwX9feT4glmgUpbLrsFWyQ2jB0oPio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.crl rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:41:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145E01, serialNumber=348B54CFF79965E21B2DBAB99F2101E31A560E9B Validity Not Before: Mar 25 07:41:36 2026 GMT Not After : Apr 1 07:41:36 2026 GMT Subject: CN=69c391b1-3222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:50:4a:79:0b:53:b9:53:7b:60:0d:79:be:cb: 3a:f7:b4:c9:cd:e8:c5:8a:81:2b:40:2a:42:8e:ff: 2a:53:c4:b6:9b:c6:7b:0b:58:52:28:81:17:3a:fb: 51:4b:c1:ac:76:7a:66:ba:31:5e:4e:33:ac:39:cc: ef:0a:dc:e8:55:31:dd:c2:d2:97:c0:2c:be:8f:c3: 61:37:04:db:51:83:4d:53:c5:34:53:64:a5:9a:1b: 89:63:81:5c:2e:40:fd:cb:2f:66:7f:8b:cc:a2:74: 06:56:6d:77:ec:85:f5:3d:df:7a:72:31:c1:9b:71: d9:9a:e8:b8:41:6d:c0:8e:c8:a1:2e:4c:7a:b8:be: 6f:e8:4d:a2:da:19:13:15:db:a9:f4:30:58:d9:39: 2b:37:aa:26:e4:b8:91:e6:77:ac:2d:46:a9:52:ea: 5e:63:fd:52:4f:1f:ad:0b:87:91:e9:ac:ac:51:51: 2b:01:6f:aa:4f:35:d2:41:01:77:31:46:01:8b:02: 9a:6a:78:a2:85:89:cc:ce:5f:6b:86:c1:6d:d2:38: 9c:c6:e1:f4:dd:27:bc:d1:0f:f4:0d:2f:25:86:7c: 7a:5b:60:6a:25:a1:65:7d:c5:8c:5b:7a:ec:01:9f: 20:87:bc:bf:0d:be:8c:a8:f5:54:bc:22:f7:12:95: 6c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:92:6A:79:4A:EE:B9:BB:A9:7D:4C:DA:2B:3D:08:49:AC:A6:42:0B X509v3 Authority Key Identifier: keyid:34:8B:54:CF:F7:99:65:E2:1B:2D:BA:B9:9F:21:01:E3:1A:56:0E:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:81:65:08:a7:b7:19:53:20:7d:4a:06:ac:85:c5:0e:4e:39: 6d:c3:09:d4:5a:e6:b1:f6:e0:84:f7:7a:69:6c:50:cf:ef:c7: ae:6a:12:d5:ee:7f:a3:b6:da:cd:6a:ab:71:ae:fc:4c:7d:bd: a2:76:d4:11:74:fc:12:1b:22:b1:f7:c2:24:17:ac:a8:ee:5e: 28:02:ee:e3:67:41:91:bd:08:8b:00:46:ba:39:8c:a3:0f:9a: da:e8:78:f0:28:02:ba:e4:e6:f2:7b:0b:55:8d:5b:a7:ea:6d: 39:26:14:ad:69:7a:21:99:90:ca:6c:42:45:4a:99:4b:ae:d3: 13:0e:2c:43:d7:7c:37:c9:89:8a:e2:6c:34:90:1c:9c:15:15: ad:e6:73:cb:85:22:44:6c:8c:2c:54:e3:b0:a2:e3:e6:cb:df: ce:34:83:75:5c:0f:35:cc:5f:db:56:75:b7:63:3d:d8:e8:52: 97:b5:ee:b3:49:21:3a:f4:92:80:7a:c6:4a:d0:4b:32:d1:5a: ea:8c:4d:b8:4f:d5:c5:49:91:2e:21:90:14:b9:6b:ad:55:0f: bc:ad:51:ae:91:71:95:1e:c9:6a:ff:53:4f:ad:d5:4f:cf:bb: e9:9f:12:90:e7:40:d3:a2:71:6b:d1:9d:33:06:5b:b9:9f:8b: 60:51:f5:c7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUUwMTExMC8GA1UEBRMoMzQ4QjU0Q0ZGNzk5NjVFMjFCMkRCQUI5OUYyMTAxRTMx QTU2MEU5QjAeFw0yNjAzMjUwNzQxMzZaFw0yNjA0MDEwNzQxMzZaMBgxFjAUBgNV BAMTDTY5YzM5MWIxLTMyMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6UEp5C1O5U3tgDXm+yzr3tMnN6MWKgStAKkKO/ypTxLabxnsLWFIogRc6+1FL wax2ema6MV5OM6w5zO8K3OhVMd3C0pfALL6Pw2E3BNtRg01TxTRTZKWaG4ljgVwu QP3LL2Z/i8yidAZWbXfshfU933pyMcGbcdma6LhBbcCOyKEuTHq4vm/oTaLaGRMV 26n0MFjZOSs3qibkuJHmd6wtRqlS6l5j/VJPH60Lh5HprKxRUSsBb6pPNdJBAXcx RgGLAppqeKKFiczOX2uGwW3SOJzG4fTdJ7zRD/QNLyWGfHpbYGoloWV9xYxbeuwB nyCHvL8Nvoyo9VS8IvcSlWw9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQpJqeUru ubupfUzaKz0ISaymQgswHwYDVR0jBBgwFoAUNItUz/eZZeIbLbq5nyEB4xpWDpsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1RTAxLzQ2OTI3RjE0Q0Y1 OTExRjA4NUJCREQxMUM0RjlBRTAyL05JdFV6X2VaWmVJYkxicTVueUVCNHhwV0Rw cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTkl0VXpfZVpaZUliTGJxNW55RUI0eHBXRHBzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 RTAxLzQ2OTI3RjE0Q0Y1OTExRjA4NUJCREQxMUM0RjlBRTAyL05JdFV6X2VaWmVJ YkxicTVueUVCNHhwV0Rwcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCdgWUIp7cZUyB9SgashcUOTjltwwnUWuax9uCE93ppbFDP78euahLV7n+jttrN aqtxrvxMfb2idtQRdPwSGyKx98IkF6yo7l4oAu7jZ0GRvQiLAEa6OYyjD5ra6Hjw KAK65ObyewtVjVun6m05JhStaXohmZDKbEJFSplLrtMTDixD13w3yYmK4mw0kByc FRWt5nPLhSJEbIwsVOOwouPmy9/ONIN1XA81zF/bVnW3Yz3Y6FKXte6zSSE69JKA esZK0Esy0VrqjE24T9XFSZEuIZAUuWutVQ+8rVGukXGVHslq/1NPrdVPz7vpnxKQ 50DTonFr0Z0zBlu5n4tgUfXH -----END CERTIFICATE-----Generated at Thu Mar 26 14:09:49 2026 by rpki-client