$ rpki-client -vvf rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft File: NhN5wakOmU8oZFtzNWRe_DpeGs0.mft (raw, json) Hash identifier: FMFrtGsJNznLCoZJRmsSwX7WLlf57BVv+xfaEAlLNQ0= Subject key identifier: 33:BA:CD:F5:09:58:97:F3:D6:FA:08:B7:BF:5B:45:A2:3C:B6:AD:AD Authority key identifier: 36:13:79:C1:A9:0E:99:4F:28:64:5B:73:35:64:5E:FC:3A:5E:1A:CD Certificate issuer: /CN=A914DCD4/serialNumber=361379C1A90E994F28645B7335645EFC3A5E1ACD Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft Manifest number: 36 Signing time: Wed 25 Mar 2026 07:50:24 +0000 Manifest this update: Wed 25 Mar 2026 07:50:24 +0000 Manifest next update: Wed 01 Apr 2026 07:50:24 +0000 Files and hashes: 1: NhN5wakOmU8oZFtzNWRe_DpeGs0.crl (hash: rdcMFTj+4To8fXEwtfRRjflKeNSykmLD9IWDp9p17MY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.crl rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:50:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DCD4, serialNumber=361379C1A90E994F28645B7335645EFC3A5E1ACD Validity Not Before: Mar 25 07:50:24 2026 GMT Not After : Apr 1 07:50:24 2026 GMT Subject: CN=69c393c0-56eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:54:08:d5:8a:69:e8:37:07:60:63:b7:f1:ac: c6:7b:94:af:b1:3a:d3:d6:26:5f:69:e5:3d:c9:0c: f4:5d:a2:26:86:62:12:e7:33:f2:2a:f3:97:e4:27: 59:24:7e:5a:24:f9:d0:b9:7a:3a:3c:e1:e7:b7:15: 51:fb:2d:46:68:57:f5:85:b5:64:20:4c:56:14:3c: b6:75:0d:c6:c2:ec:33:44:13:21:67:fe:fa:ff:0a: 35:8c:0d:62:23:6a:de:d9:3d:b8:8a:58:c8:3e:75: 86:0a:0e:ed:e3:5e:26:eb:13:20:28:21:49:8c:86: 08:57:e2:f3:1d:3c:c1:42:c9:5c:b6:6c:15:58:cb: c9:0e:01:a3:ff:28:f4:24:c1:13:f9:be:60:27:2d: 53:c1:74:87:72:43:36:8b:52:7e:cb:5a:50:af:3d: e5:53:13:7d:7b:5f:c8:b1:99:72:5d:8f:a1:ec:13: 5f:74:2f:e6:43:fc:cd:95:e3:c4:40:7d:b8:b6:51: 51:ef:53:ab:19:c1:47:29:ad:1c:b9:9f:c1:8e:89: b5:f1:64:26:64:df:49:02:b6:53:04:54:8a:17:b9: 06:52:83:5d:b1:44:28:93:f6:9d:7d:14:0e:bf:b6: 24:c0:f7:c7:ce:3e:ad:fc:7a:d2:33:db:2d:7d:9e: a7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:BA:CD:F5:09:58:97:F3:D6:FA:08:B7:BF:5B:45:A2:3C:B6:AD:AD X509v3 Authority Key Identifier: keyid:36:13:79:C1:A9:0E:99:4F:28:64:5B:73:35:64:5E:FC:3A:5E:1A:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:e5:3c:67:9b:bd:89:20:63:07:34:e7:2a:2e:b2:d5:f5:99: 01:eb:cd:2d:f7:af:61:d4:0f:d3:e7:41:54:15:4e:e1:a5:f0: a3:be:61:f4:e2:87:30:36:ce:12:cd:80:91:89:79:17:1f:6d: c3:b5:c3:80:8c:4d:c1:f7:ee:3c:20:20:7f:a6:ff:f0:84:16: 97:31:d1:49:80:36:d5:bf:6a:96:69:a8:49:5f:14:ae:e6:8d: 5c:97:59:91:7a:04:58:97:d4:da:87:aa:db:53:09:e9:e2:67: 4f:dd:a0:21:74:b0:53:ab:e8:ff:40:5d:37:93:2f:8c:2a:14: 53:b6:22:3b:a2:de:07:cb:79:1e:ae:26:81:29:74:bc:48:af: d0:3d:94:5d:69:71:0f:44:33:ff:37:14:8c:5b:18:1f:ba:d8: 1e:0a:9f:a1:5b:47:49:65:e5:6c:f7:c5:1f:a8:cb:8d:01:f9: 14:a2:21:fd:99:56:fe:ff:b4:95:50:aa:26:1b:36:c2:8a:2d: 16:61:9c:5a:c9:92:b1:34:be:8c:5d:a8:d1:21:08:1a:ca:fb: b2:c0:a7:60:56:ab:cd:30:70:ac:93:73:5b:af:d7:ac:a9:2c: 13:f8:84:f5:4e:c2:f3:02:ed:07:a0:e2:cf:69:01:30:3d:ae: 6a:76:ad:0d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RENENDExMC8GA1UEBRMoMzYxMzc5QzFBOTBFOTk0RjI4NjQ1QjczMzU2NDVFRkMz QTVFMUFDRDAeFw0yNjAzMjUwNzUwMjRaFw0yNjA0MDEwNzUwMjRaMBgxFjAUBgNV BAMTDTY5YzM5M2MwLTU2ZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6VAjVimnoNwdgY7fxrMZ7lK+xOtPWJl9p5T3JDPRdoiaGYhLnM/Iq85fkJ1kk flok+dC5ejo84ee3FVH7LUZoV/WFtWQgTFYUPLZ1DcbC7DNEEyFn/vr/CjWMDWIj at7ZPbiKWMg+dYYKDu3jXibrEyAoIUmMhghX4vMdPMFCyVy2bBVYy8kOAaP/KPQk wRP5vmAnLVPBdIdyQzaLUn7LWlCvPeVTE317X8ixmXJdj6HsE190L+ZD/M2V48RA fbi2UVHvU6sZwUcprRy5n8GOibXxZCZk30kCtlMEVIoXuQZSg12xRCiT9p19FA6/ tiTA98fOPq38etIz2y19nqeTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUM7rN9QlY l/PW+gi3v1tFojy2ra0wHwYDVR0jBBgwFoAUNhN5wakOmU8oZFtzNWRe/DpeGs0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREQ0Q0L0I5OEMzQTM4RTFB QTExRjBBRkNFODRCODRBNkY1NkJDL05oTjV3YWtPbVU4b1pGdHpOV1JlX0RwZUdz MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTmhONXdha09tVThvWkZ0ek5XUmVfRHBlR3MwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE Q0Q0L0I5OEMzQTM4RTFBQTExRjBBRkNFODRCODRBNkY1NkJDL05oTjV3YWtPbVU4 b1pGdHpOV1JlX0RwZUdzMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBi5Txnm72JIGMHNOcqLrLV9ZkB680t969h1A/T50FUFU7hpfCjvmH04ocwNs4S zYCRiXkXH23DtcOAjE3B9+48ICB/pv/whBaXMdFJgDbVv2qWaahJXxSu5o1cl1mR egRYl9Tah6rbUwnp4mdP3aAhdLBTq+j/QF03ky+MKhRTtiI7ot4Hy3keriaBKXS8 SK/QPZRdaXEPRDP/NxSMWxgfutgeCp+hW0dJZeVs98UfqMuNAfkUoiH9mVb+/7SV UKomGzbCii0WYZxayZKxNL6MXajRIQgayvuywKdgVqvNMHCsk3Nbr9esqSwT+IT1 TsLzAu0HoOLPaQEwPa5qdq0N -----END CERTIFICATE-----Generated at Thu Mar 26 04:41:01 2026 by rpki-client