$ rpki-client -vvf rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft File: nlcX9fFLsp9ntXrX2dXweRWunEM.mft (raw, json) Hash identifier: bi4C0c1aw+QwBGHf9V3/YJ5eXU7gnFVwSfDu3a/49XE= Subject key identifier: 6C:1B:55:58:DE:7B:C9:86:E4:8F:97:FA:AE:55:6A:8A:98:0B:DA:D5 Authority key identifier: 9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 Certificate issuer: /CN=A914E01E/serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43 Certificate serial: 0434 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft Manifest number: 042D Signing time: Tue 24 Mar 2026 23:58:33 +0000 Manifest this update: Tue 24 Mar 2026 23:58:33 +0000 Manifest next update: Tue 31 Mar 2026 23:58:33 +0000 Files and hashes: 1: nlcX9fFLsp9ntXrX2dXweRWunEM.crl (hash: FVY5BT9V7TkVgHTghCP/I2eQ6GLWPPTf3+6419p7JJA=) 2: B775BD7A9EA911EC95EBD87CC4F9AE02.roa (hash: AIiAPtcEdSGDtm5Xu/SA/2I+9nLKM1Ar3r+Ob3EnuAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:58:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1076 (0x434) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E01E, serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43 Validity Not Before: Mar 24 23:58:33 2026 GMT Not After : Mar 31 23:58:33 2026 GMT Subject: CN=69c32529-04b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:82:ee:d4:7d:2e:57:78:09:46:df:a1:e3:7b: 63:e0:f9:52:e4:0b:64:82:83:24:97:e2:4e:c5:44: 75:0d:f3:95:65:56:36:1c:e3:a0:46:e7:62:80:37: 7f:27:64:fc:76:eb:b2:2f:0f:19:f5:14:2b:3c:36: 00:06:06:06:84:5c:dd:09:78:8d:ae:8e:23:f9:58: c1:4a:a4:b6:3a:6e:66:5d:90:72:c8:7c:5e:65:50: cf:b3:93:0a:f0:fb:7a:fa:8b:c4:19:f8:3e:2f:14: e5:19:c7:15:45:2b:11:67:eb:e5:6a:e0:3c:aa:68: 17:30:ae:0f:e8:30:c1:6f:d9:c1:21:93:5c:c4:55: e4:89:f8:bd:e0:11:18:77:4a:b3:70:d4:78:d2:0a: 99:b6:1e:b0:4d:62:b7:59:e0:99:4b:4e:2d:1b:a0: ba:49:57:e8:6a:5e:56:c5:fe:b8:e2:f2:65:30:74: 1c:f0:52:c2:40:77:d5:58:85:a1:b0:7e:6e:d8:6a: 9f:c1:c0:21:56:46:fd:d6:ea:20:7b:d5:d1:98:0d: 45:f7:64:f6:1a:cf:08:03:34:7f:94:f1:45:52:47: d4:7d:5a:31:82:87:eb:ed:e8:df:a3:a5:78:ef:92: 2e:f1:d1:33:88:cd:b3:5b:f4:ba:09:25:bb:ca:1c: 3e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1B:55:58:DE:7B:C9:86:E4:8F:97:FA:AE:55:6A:8A:98:0B:DA:D5 X509v3 Authority Key Identifier: keyid:9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:2e:a0:dd:cf:73:a0:c7:d7:92:ff:2c:09:ea:a0:db:13:98: 72:ca:ae:96:0b:5f:f5:72:7b:f6:08:e4:b8:7f:76:f7:eb:60: d4:bc:f5:97:2a:25:84:01:c5:8a:a1:54:6a:c4:cd:06:d9:ab: cf:d3:f8:b9:3f:91:e7:48:e9:83:25:a3:18:e4:ac:a8:3c:44: 12:db:f0:36:6b:1b:4c:6d:89:0c:a4:ae:e8:7c:81:a9:e0:fd: 29:ca:d3:5a:10:11:71:05:8a:77:87:5a:2e:2a:91:aa:ca:7f: b0:5f:b0:b7:df:e8:fa:2e:56:4c:b3:17:5e:33:b9:9d:9d:97: d6:52:2a:c5:14:00:50:fe:ed:0b:9b:90:e3:8f:f2:f7:ac:53: 76:3e:02:28:b3:9f:4a:c2:a7:dc:fa:1a:c9:66:8a:a0:b1:ed: fd:a3:db:4a:8b:07:ea:cf:2b:2f:fe:0c:65:22:0c:7f:7c:6a: cf:90:c9:18:ee:bd:07:31:6c:26:d9:5b:89:37:45:27:e1:f9: 39:92:23:c8:a0:5c:c7:53:70:04:eb:86:97:2e:88:25:fb:1c: 7c:3d:db:13:91:02:ad:39:d8:b4:bb:eb:ff:a8:55:c8:67:4e: e9:fe:06:20:53:ed:6e:6b:a2:60:97:8e:77:98:49:60:c1:69: da:e3:6c:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMUUxMTAvBgNVBAUTKDlFNTcxN0Y1RjE0QkIyOUY2N0I1N0FEN0Q5RDVGMDc5 MTVBRTlDNDMwHhcNMjYwMzI0MjM1ODMzWhcNMjYwMzMxMjM1ODMzWjAYMRYwFAYD VQQDEw02OWMzMjUyOS0wNGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYLu1H0uV3gJRt+h43tj4PlS5AtkgoMkl+JOxUR1DfOVZVY2HOOgRudigDd/ J2T8duuyLw8Z9RQrPDYABgYGhFzdCXiNro4j+VjBSqS2Om5mXZByyHxeZVDPs5MK 8Pt6+ovEGfg+LxTlGccVRSsRZ+vlauA8qmgXMK4P6DDBb9nBIZNcxFXkifi94BEY d0qzcNR40gqZth6wTWK3WeCZS04tG6C6SVfoal5Wxf644vJlMHQc8FLCQHfVWIWh sH5u2GqfwcAhVkb91uoge9XRmA1F92T2Gs8IAzR/lPFFUkfUfVoxgofr7ejfo6V4 75Iu8dEziM2zW/S6CSW7yhw+yQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGwbVVje e8mG5I+X+q5VaoqYC9rVMB8GA1UdIwQYMBaAFJ5XF/XxS7KfZ7V619nV8HkVrpxD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAxRS9DNUM2RjA1RTlF QTYxMUVDOEZCMDM2NTRDNEY5QUUwMi9ubGNYOWZGTHNwOW50WHJYMmRYd2VSV3Vu RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25sY1g5ZkZMc3A5bnRYclgyZFh3ZVJXdW5FTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAxRS9DNUM2RjA1RTlFQTYxMUVDOEZCMDM2NTRDNEY5QUUwMi9ubGNYOWZGTHNw OW50WHJYMmRYd2VSV3VuRU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoS6g3c9zoMfXkv8sCeqg2xOYcsqulgtf9XJ79gjkuH929+tg1Lz1lyolhAHF iqFUasTNBtmrz9P4uT+R50jpgyWjGOSsqDxEEtvwNmsbTG2JDKSu6HyBqeD9KcrT WhARcQWKd4daLiqRqsp/sF+wt9/o+i5WTLMXXjO5nZ2X1lIqxRQAUP7tC5uQ44/y 96xTdj4CKLOfSsKn3PoayWaKoLHt/aPbSosH6s8rL/4MZSIMf3xqz5DJGO69BzFs JtlbiTdFJ+H5OZIjyKBcx1NwBOuGly6IJfscfD3bE5ECrTnYtLvr/6hVyGdO6f4G IFPtbmuiYJeOd5hJYMFp2uNseg== -----END CERTIFICATE-----Generated at Thu Mar 26 08:29:38 2026 by rpki-client