$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft File: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft (raw, json) Hash identifier: GVCyABCv6blqfgZiLqCD+Kj7a9hw/IdKt9kUKbYHGaw= Subject key identifier: 05:05:C9:19:6D:08:CE:66:81:AF:F0:E5:37:3F:1B:D6:DD:0A:FF:ED Authority key identifier: 34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B Certificate issuer: /CN=A914C725/serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft Manifest number: 12 Signing time: Tue 24 Mar 2026 16:17:50 +0000 Manifest this update: Tue 24 Mar 2026 16:17:49 +0000 Manifest next update: Tue 31 Mar 2026 16:17:49 +0000 Files and hashes: 1: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl (hash: OOqluekmXiKMQeYtyXAj87iEtLLIOvawKz+ryjzjA/I=) 2: 2D89A3B4139A11F182E65A043E3D8C67.roa (hash: WzPoHRZ+sD0Tq4NDMGpvPyaJehMoEm7aBtLHe8LWFq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C725, serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B Validity Not Before: Mar 24 16:17:49 2026 GMT Not After : Mar 31 16:17:49 2026 GMT Subject: CN=69c2b92e-6bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:04:39:c9:49:74:3e:8f:ce:bf:48:6b:0e:46: 1a:f0:dc:66:a5:84:62:94:ce:1f:28:bb:7e:88:ff: 99:bf:a5:bd:55:1b:6a:0b:98:e9:6c:8e:f5:29:4c: 2a:e5:29:3f:b5:8a:42:23:db:f9:74:7d:d3:9c:fc: 35:30:73:05:75:2a:65:83:d5:55:fd:87:4f:86:0a: 1b:8d:6f:89:34:d3:73:92:dd:9f:94:b9:49:25:98: 25:7e:d6:6d:aa:63:cd:8c:c6:c2:bc:56:fc:a4:ec: f1:ab:5a:91:42:1f:bc:a9:16:fe:c5:2e:61:e6:a0: 2c:32:40:f5:80:18:3f:aa:c6:95:78:c0:1f:e2:18: 6e:31:9d:16:de:a2:e1:bd:77:80:38:20:7b:59:28: 9e:37:f2:be:2c:0e:ed:41:de:16:f7:6f:d7:50:f4: 0c:38:33:dc:68:47:6c:6e:5a:a7:3c:67:ac:f5:5a: a4:02:25:d2:25:22:5d:c8:4e:28:93:6f:0b:14:82: 90:ec:e1:e6:5f:f9:16:00:42:71:f8:f0:e1:44:93: a4:bd:a7:7f:54:40:b5:fa:f1:ec:9d:db:5d:53:2e: 34:1b:46:0f:35:10:4c:3e:b4:19:b8:d0:96:e2:1b: 63:57:14:4c:7f:70:7f:ed:7a:e8:72:62:8f:a6:91: 38:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:05:C9:19:6D:08:CE:66:81:AF:F0:E5:37:3F:1B:D6:DD:0A:FF:ED X509v3 Authority Key Identifier: keyid:34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:5b:5e:a8:06:fe:23:78:04:96:6a:c0:a9:2c:6e:89:06:01: 66:1d:8e:28:39:8a:70:cf:ec:f0:54:40:b2:f2:61:5c:6e:07: 98:86:f6:9c:3c:02:2d:18:f1:3e:1a:8b:fc:a7:97:be:49:6c: 58:5c:ae:da:2f:ac:72:26:b8:f7:05:43:d4:b4:b6:64:9e:7f: 13:32:63:74:70:c0:73:96:a8:81:1e:40:8e:ac:78:86:af:0f: 65:7f:71:87:69:d5:b3:09:14:b9:1a:07:6c:66:03:26:79:55: 40:26:d3:32:06:53:4f:cf:7a:68:07:3a:12:e3:e2:8f:fe:95: 78:8d:63:c9:cf:53:2b:e5:89:02:1e:d9:1d:80:a6:a7:2a:6c: 3e:60:24:73:06:60:96:c3:8e:5e:f7:c8:95:d0:d7:d4:96:09: 0c:d5:e9:63:21:91:25:8c:39:dc:c5:0d:89:6c:b9:e8:96:d3: b4:a3:6b:74:fe:3c:12:14:42:d7:77:c7:96:db:78:34:12:92: a5:cb:9b:d6:23:86:04:87:e3:4f:1a:50:0c:54:90:22:8a:27: c9:fa:bd:15:47:27:e5:7c:0e:e9:03:bc:b3:c6:f8:46:bf:31: c9:2a:b4:f1:e5:7d:65:83:2a:c7:da:c9:6d:76:19:20:c6:22: 3f:c4:5f:e7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QzcyNTExMC8GA1UEBRMoMzQ4MThCQ0YwRDg0RTE1OTlCRDk5ODE3OTk1RTVFQzM5 QjFCMDE0QjAeFw0yNjAzMjQxNjE3NDlaFw0yNjAzMzExNjE3NDlaMBgxFjAUBgNV BAMTDTY5YzJiOTJlLTZiYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHBDnJSXQ+j86/SGsORhrw3GalhGKUzh8ou36I/5m/pb1VG2oLmOlsjvUpTCrl KT+1ikIj2/l0fdOc/DUwcwV1KmWD1VX9h0+GChuNb4k003OS3Z+UuUklmCV+1m2q Y82MxsK8Vvyk7PGrWpFCH7ypFv7FLmHmoCwyQPWAGD+qxpV4wB/iGG4xnRbeouG9 d4A4IHtZKJ438r4sDu1B3hb3b9dQ9Aw4M9xoR2xuWqc8Z6z1WqQCJdIlIl3ITiiT bwsUgpDs4eZf+RYAQnH48OFEk6S9p39UQLX68eyd211TLjQbRg81EEw+tBm40Jbi G2NXFEx/cH/teuhyYo+mkTgDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBQXJGW0I zmaBr/DlNz8b1t0K/+0wHwYDVR0jBBgwFoAUNIGLzw2E4Vmb2ZgXmV5ew5sbAUsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDNzI1L0FDNkNEMTVDMTM5 OTExRjE5QzI0NzBCMUIzRUU1MjhFL05JR0x6dzJFNFZtYjJaZ1htVjVldzVzYkFV cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTklHTHp3MkU0Vm1iMlpnWG1WNWV3NXNiQVVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD NzI1L0FDNkNEMTVDMTM5OTExRjE5QzI0NzBCMUIzRUU1MjhFL05JR0x6dzJFNFZt YjJaZ1htVjVldzVzYkFVcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAaW16oBv4jeASWasCpLG6JBgFmHY4oOYpwz+zwVECy8mFcbgeYhvacPAItGPE+ Gov8p5e+SWxYXK7aL6xyJrj3BUPUtLZknn8TMmN0cMBzlqiBHkCOrHiGrw9lf3GH adWzCRS5GgdsZgMmeVVAJtMyBlNPz3poBzoS4+KP/pV4jWPJz1Mr5YkCHtkdgKan Kmw+YCRzBmCWw45e98iV0NfUlgkM1eljIZEljDncxQ2JbLnoltO0o2t0/jwSFELX d8eW23g0EpKly5vWI4YEh+NPGlAMVJAiiifJ+r0VRyflfA7pA7yzxvhGvzHJKrTx 5X1lgyrH2sltdhkgxiI/xF/n -----END CERTIFICATE-----Generated at Thu Mar 26 16:15:32 2026 by rpki-client