$ rpki-client -vvf rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft File: NS1M7Db4784NhRINl9keIqNY9Ys.mft (raw, json) Hash identifier: qAmo9xj1cir26ou8v/91OWvAGRJce5FnGW8o98lj9z8= Subject key identifier: 41:F0:39:F2:56:D1:BD:7A:AF:15:6C:43:CA:6A:5E:6A:2F:25:04:6F Authority key identifier: 35:2D:4C:EC:36:F8:EF:CE:0D:85:12:0D:97:D9:1E:22:A3:58:F5:8B Certificate issuer: /CN=A9151AC7/serialNumber=352D4CEC36F8EFCE0D85120D97D91E22A358F58B Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft Manifest number: CC Signing time: Wed 25 Mar 2026 06:00:17 +0000 Manifest this update: Wed 25 Mar 2026 06:00:17 +0000 Manifest next update: Wed 01 Apr 2026 06:00:17 +0000 Files and hashes: 1: NS1M7Db4784NhRINl9keIqNY9Ys.crl (hash: ILiImZ8szuIC+huV0QcCsnj7VI5OUErxwmrQ3hlYGw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.crl rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151AC7, serialNumber=352D4CEC36F8EFCE0D85120D97D91E22A358F58B Validity Not Before: Mar 25 06:00:17 2026 GMT Not After : Apr 1 06:00:17 2026 GMT Subject: CN=69c379f1-a193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9d:f7:48:82:6f:ba:34:33:8e:9b:b7:05:e8: 0c:57:20:e4:0d:e9:f5:62:78:77:77:5b:5d:b0:c4: b2:8d:03:f5:1c:ea:62:42:38:6e:1a:1b:f3:f4:d4: ed:a2:8f:16:0e:aa:d3:cb:3b:c1:94:a3:95:fa:8d: 26:e8:25:ea:42:b6:b4:05:e6:4b:9a:76:06:e0:e7: 27:5e:64:41:52:04:68:8d:9d:e1:ff:65:26:93:c4: a0:22:fc:fd:41:dd:e1:4a:8b:33:66:62:2b:cb:d2: b6:c1:3c:6a:ac:dd:23:e9:6c:85:e6:3e:de:f3:b9: 84:39:7e:01:0a:9b:19:f7:92:99:3c:f1:ca:e6:47: 07:be:fd:43:cf:60:0d:17:38:e7:eb:26:47:72:cc: de:b2:12:57:f2:0a:9d:ac:f5:b0:95:8b:88:fa:a0: 09:58:eb:be:b4:fd:4c:c7:77:90:4f:96:6e:85:cd: 9c:34:99:ca:92:5b:15:ef:c3:fe:03:c3:5e:ba:8d: dd:d6:c5:28:08:31:eb:70:69:7c:f8:59:b2:c4:8c: 4d:94:83:6e:cb:a0:77:2b:74:c6:48:59:02:67:9b: d5:49:5b:ca:9e:0d:a6:9a:cb:c3:f8:bc:a0:97:f5: 85:33:59:81:69:0d:f1:01:22:e3:54:a6:3e:c1:c9: 83:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F0:39:F2:56:D1:BD:7A:AF:15:6C:43:CA:6A:5E:6A:2F:25:04:6F X509v3 Authority Key Identifier: keyid:35:2D:4C:EC:36:F8:EF:CE:0D:85:12:0D:97:D9:1E:22:A3:58:F5:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:0d:96:d7:b4:b7:5e:f7:cc:15:9d:53:99:c3:a4:6c:13:86: 65:ed:a6:1b:a3:50:ab:1c:f2:7f:ff:18:f0:62:d8:71:15:d9: de:a2:be:68:5e:a8:74:c9:c7:78:8f:64:61:f3:c4:c8:55:f3: 3e:0f:77:b0:cc:3c:93:56:8b:f5:4d:46:d9:0f:a9:89:f1:f4: b9:e2:62:3b:94:d8:9a:39:ed:cd:86:e6:43:b3:36:b1:d2:4c: 39:f9:cc:b1:4a:97:1d:52:66:08:a7:b5:1e:a9:82:c5:79:43: 30:eb:1c:d3:43:04:fc:52:98:fb:1b:24:fe:df:d1:23:d7:f9: da:3b:b6:3c:99:53:9a:5f:10:a8:dc:6b:fc:06:34:a4:23:ef: 85:a1:b8:d3:fa:93:06:be:9b:18:10:43:d4:97:aa:38:7b:1f: 5e:9a:55:ee:b1:7a:b1:c3:23:e1:20:d5:15:f3:a1:4e:42:fb: 35:cc:72:83:82:4a:91:ec:58:03:b9:b2:c3:18:29:bf:c6:97: f1:15:44:d8:0c:38:00:58:30:07:37:45:95:be:c6:dd:dc:38: 19:b0:99:aa:b8:d7:a4:dc:af:81:19:80:c5:63:88:7a:d5:6b: d0:9e:25:23:7e:15:34:99:a9:31:ec:64:68:ce:5f:09:28:8f: cc:b2:d1:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFBQzcxMTAvBgNVBAUTKDM1MkQ0Q0VDMzZGOEVGQ0UwRDg1MTIwRDk3RDkxRTIy QTM1OEY1OEIwHhcNMjYwMzI1MDYwMDE3WhcNMjYwNDAxMDYwMDE3WjAYMRYwFAYD VQQDEw02OWMzNzlmMS1hMTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt533SIJvujQzjpu3BegMVyDkDen1Ynh3d1tdsMSyjQP1HOpiQjhuGhvz9NTt oo8WDqrTyzvBlKOV+o0m6CXqQra0BeZLmnYG4OcnXmRBUgRojZ3h/2Umk8SgIvz9 Qd3hSoszZmIry9K2wTxqrN0j6WyF5j7e87mEOX4BCpsZ95KZPPHK5kcHvv1Dz2AN Fzjn6yZHcszeshJX8gqdrPWwlYuI+qAJWOu+tP1Mx3eQT5Zuhc2cNJnKklsV78P+ A8Neuo3d1sUoCDHrcGl8+FmyxIxNlINuy6B3K3TGSFkCZ5vVSVvKng2mmsvD+Lyg l/WFM1mBaQ3xASLjVKY+wcmDAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEHwOfJW 0b16rxVsQ8pqXmovJQRvMB8GA1UdIwQYMBaAFDUtTOw2+O/ODYUSDZfZHiKjWPWL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUFDNy80MUE0NkI1MEYz OTcxMUVGOTEwMUQyMTBDNEY5QUUwMi9OUzFNN0RiNDc4NE5oUklObDlrZUlxTlk5 WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05TMU03RGI0Nzg0TmhSSU5sOWtlSXFOWTlZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUFDNy80MUE0NkI1MEYzOTcxMUVGOTEwMUQyMTBDNEY5QUUwMi9OUzFNN0RiNDc4 NE5oUklObDlrZUlxTlk5WXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkA2W17S3XvfMFZ1TmcOkbBOGZe2mG6NQqxzyf/8Y8GLYcRXZ3qK+aF6odMnH eI9kYfPEyFXzPg93sMw8k1aL9U1G2Q+pifH0ueJiO5TYmjntzYbmQ7M2sdJMOfnM sUqXHVJmCKe1HqmCxXlDMOsc00ME/FKY+xsk/t/RI9f52ju2PJlTml8QqNxr/AY0 pCPvhaG40/qTBr6bGBBD1JeqOHsfXppV7rF6scMj4SDVFfOhTkL7Ncxyg4JKkexY A7mywxgpv8aX8RVE2Aw4AFgwBzdFlb7G3dw4GbCZqrjXpNyvgRmAxWOIetVr0J4l I34VNJmpMexkaM5fCSiPzLLR4Q== -----END CERTIFICATE-----Generated at Thu Mar 26 18:56:29 2026 by rpki-client