$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft File: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft (raw, json) Hash identifier: 2OgGwUtS9rbH4lyVsapcMbSTykXMaDZzef2JCwVL/ds= Subject key identifier: 22:B4:A1:5C:00:12:9E:08:6E:C9:27:41:BC:03:19:53:53:4C:19:3C Authority key identifier: 34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE Certificate issuer: /CN=A9150EAB/serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE Certificate serial: 0B97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft Manifest number: 1308 Signing time: Tue 24 Mar 2026 18:53:10 +0000 Manifest this update: Tue 24 Mar 2026 18:53:10 +0000 Manifest next update: Tue 31 Mar 2026 18:53:10 +0000 Files and hashes: 1: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl (hash: 9I8Tso71hiwWhxUM7SS4TQOlvqHyijG80N/NnsAUvpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2967 (0xb97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EAB, serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE Validity Not Before: Mar 24 18:53:10 2026 GMT Not After : Mar 31 18:53:10 2026 GMT Subject: CN=69c2dd96-4fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:06:fc:4b:d3:81:ef:d6:a4:d7:73:c6:93:4f: c8:9b:55:bb:c0:89:a4:cf:1f:17:76:ab:71:ce:c2: 17:2b:6f:4d:f2:40:49:b7:53:b4:23:a4:91:36:f9: cc:b4:4e:54:b0:34:f5:ba:2b:88:e6:80:16:05:36: f7:be:cf:b6:a9:92:50:d3:2d:ae:3a:cf:31:94:2a: 1d:ae:80:f1:01:8a:8b:3a:f6:36:da:30:67:b1:5c: 5a:8c:b8:98:2c:0c:e6:0b:3c:f8:d1:3b:02:7b:20: c9:c5:c0:f6:19:58:8c:d6:68:e1:5b:ae:16:8e:ce: 57:54:07:4a:7c:ad:e8:7d:fd:de:39:c3:a0:a1:c1: 20:44:6b:db:36:46:84:14:ea:b5:5e:e0:22:de:50: 0c:70:e7:6f:0c:3a:bb:99:94:f4:27:41:f0:2b:a5: 36:8d:9c:fb:3b:70:76:38:bf:49:46:6c:9d:ff:3d: 5e:6c:b8:1d:4c:8d:99:86:86:50:0a:81:cd:b1:f2: fb:73:80:4b:ce:2d:88:30:ba:f9:35:69:3e:a4:46: 4e:ac:99:0d:5c:de:ce:44:d3:bb:09:c5:78:c5:98: 00:29:ba:98:df:cd:67:7a:cb:de:03:ca:57:42:b7: e7:df:ae:67:49:96:ec:df:76:8b:44:6b:6a:03:f0: db:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B4:A1:5C:00:12:9E:08:6E:C9:27:41:BC:03:19:53:53:4C:19:3C X509v3 Authority Key Identifier: keyid:34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:f4:39:07:a8:ee:4f:da:8a:d0:16:35:97:de:7e:51:51:02: 4f:b7:9a:34:f9:0e:63:e2:1a:41:0b:db:c7:de:e6:6d:72:79: d3:71:3e:01:67:87:dc:24:5a:b2:b0:81:e3:01:fc:3d:a9:00: 03:4c:6d:bb:c0:e0:70:c2:61:6b:8f:71:bf:fc:65:d6:db:1f: ef:06:fb:3f:6d:28:20:7d:f4:8a:d5:ef:5b:c6:f1:12:ac:6d: 89:e5:32:44:1b:0f:d0:ec:67:44:cf:75:bd:c2:b7:88:45:c5: 47:f3:4a:af:f8:ed:98:ef:c2:e7:a1:a4:4c:43:e9:2a:af:00: aa:91:0d:5b:33:d6:b4:96:79:90:58:c2:7e:bf:14:f7:51:db: 54:28:7b:3e:ce:c1:3d:39:a4:b4:87:df:1c:32:23:51:6d:c0: 9e:6f:67:36:55:18:bc:e8:a4:27:0e:ee:3e:10:52:bc:66:ba: d3:81:ba:85:c0:2a:f6:4b:36:f2:05:ad:bb:78:88:43:42:f4: aa:69:a0:05:69:7c:1d:0e:a1:0f:72:58:38:8e:60:bb:f6:41: 8f:cf:67:6d:90:9b:c8:47:4d:ef:be:30:a0:51:78:5f:9c:2f: 13:4d:ba:ca:ab:64:72:0c:e2:77:4e:f6:1d:ad:58:c9:c8:32: 37:51:8d:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFQUIxMTAvBgNVBAUTKDM0MUQwOTAyMUNCRjlGRDNCQjRDQjg4RTNEMEVEMUM3 NjRERUQwRkUwHhcNMjYwMzI0MTg1MzEwWhcNMjYwMzMxMTg1MzEwWjAYMRYwFAYD VQQDEw02OWMyZGQ5Ni00ZmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAngb8S9OB79ak13PGk0/Im1W7wImkzx8XdqtxzsIXK29N8kBJt1O0I6SRNvnM tE5UsDT1uiuI5oAWBTb3vs+2qZJQ0y2uOs8xlCodroDxAYqLOvY22jBnsVxajLiY LAzmCzz40TsCeyDJxcD2GViM1mjhW64Wjs5XVAdKfK3off3eOcOgocEgRGvbNkaE FOq1XuAi3lAMcOdvDDq7mZT0J0HwK6U2jZz7O3B2OL9JRmyd/z1ebLgdTI2ZhoZQ CoHNsfL7c4BLzi2IMLr5NWk+pEZOrJkNXN7ORNO7CcV4xZgAKbqY381nesveA8pX Qrfn365nSZbs33aLRGtqA/Db8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCK0oVwA Ep4IbsknQbwDGVNTTBk8MB8GA1UdIwQYMBaAFDQdCQIcv5/Tu0y4jj0O0cdk3tD+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVBQi8xQjJFNzA1MDQ0 NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245TzdUTGlPUFE3UngyVGUw UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05CMEpBaHlfbjlPN1RMaU9QUTdSeDJUZTBQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVBQi8xQjJFNzA1MDQ0NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245 TzdUTGlPUFE3UngyVGUwUDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJfQ5B6juT9qK0BY1l95+UVECT7eaNPkOY+IaQQvbx97mbXJ503E+AWeH3CRa srCB4wH8PakAA0xtu8DgcMJha49xv/xl1tsf7wb7P20oIH30itXvW8bxEqxtieUy RBsP0OxnRM91vcK3iEXFR/NKr/jtmO/C56GkTEPpKq8AqpENWzPWtJZ5kFjCfr8U 91HbVCh7Ps7BPTmktIffHDIjUW3Anm9nNlUYvOikJw7uPhBSvGa604G6hcAq9ks2 8gWtu3iIQ0L0qmmgBWl8HQ6hD3JYOI5gu/ZBj89nbZCbyEdN774woFF4X5wvE026 yqtkcgzid072Ha1YycgyN1GNMA== -----END CERTIFICATE-----Generated at Thu Mar 26 15:51:11 2026 by rpki-client