$ rpki-client -vvf rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft File: nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft (raw, json) Hash identifier: k+KUxIpkeYSePYKY1w2AFG4kr8da0yTGTfRlmNkGlU8= Subject key identifier: EA:89:7D:57:2C:67:BE:73:85:75:D7:72:45:26:1D:2E:96:10:C4:88 Authority key identifier: 9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9 Certificate issuer: /CN=A91529DF/serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft Manifest number: 2B Signing time: Wed 25 Mar 2026 07:55:23 +0000 Manifest this update: Wed 25 Mar 2026 07:55:23 +0000 Manifest next update: Wed 01 Apr 2026 07:55:23 +0000 Files and hashes: 1: nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl (hash: batAZiDxokrVCxHRdIMBlsljnJWI2E8PMGxGbOUS0xA=) 2: FFB52996ED3C11F08785EF274C6F56BC.roa (hash: OoVBLoUT5miBH3MJ0SxwCQXvStMXH6JblWzdGUt2G6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91529DF, serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9 Validity Not Before: Mar 25 07:55:23 2026 GMT Not After : Apr 1 07:55:23 2026 GMT Subject: CN=69c394eb-6bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a2:2f:19:df:64:be:ae:3e:f0:1b:25:12:dc: 08:ab:be:40:6e:9e:8f:3f:f1:4b:11:28:35:76:85: e6:88:c9:98:5c:c6:22:11:ef:42:3b:a2:32:96:02: 9f:3e:c5:2c:d1:49:0f:dc:af:3e:82:36:60:33:32: b9:c2:36:c3:4f:ce:76:20:e3:02:0a:c8:58:97:47: 66:f7:bc:97:af:95:ed:a5:c1:59:62:b1:4f:da:f7: f5:67:36:b0:78:58:40:29:56:a4:86:a6:2e:e3:d7: 21:04:8f:f1:45:11:a3:b0:c0:85:48:0b:d1:15:0a: 4c:21:a4:f5:b9:c7:69:71:8b:0c:f9:48:8c:b1:66: 63:36:6f:71:ba:83:43:57:0f:b7:ba:ce:c0:c2:e6: 34:ae:4b:f5:d7:a3:a4:41:09:b2:d3:f1:e1:97:fc: 00:da:45:23:38:e3:5f:4f:2a:34:03:de:3b:94:99: e5:25:66:2f:49:7f:b1:d1:76:d9:92:96:c7:ea:8a: 09:75:85:5a:de:b9:e8:7f:47:e0:74:69:9c:1b:2f: da:7b:d8:f2:77:67:c4:6d:95:ec:83:77:5b:87:83: b6:84:df:1a:d6:7a:03:9f:e6:6a:1d:f8:94:84:31: 76:81:9d:a9:df:6c:75:ec:f2:bc:be:82:62:45:4e: 6c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:89:7D:57:2C:67:BE:73:85:75:D7:72:45:26:1D:2E:96:10:C4:88 X509v3 Authority Key Identifier: keyid:9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:0c:34:bc:06:64:f2:9d:7c:2a:ed:e7:41:a5:fc:13:68:68: c9:28:16:7d:d0:0f:d0:e2:20:de:f6:25:e7:c0:7c:44:a6:d4: 3e:ab:89:2d:78:7b:72:17:88:88:ba:c0:24:cc:34:32:e1:d1: 90:dd:6c:24:20:46:17:f6:6d:07:0c:86:94:c6:7a:40:a8:1f: ac:b8:1c:f1:ba:ba:b0:c6:62:0a:00:45:d9:d1:fd:ca:d2:d1: 4c:e0:60:34:2d:de:59:50:13:d7:fe:c9:11:eb:44:d4:91:9d: 5d:4c:18:01:9c:1d:19:a8:55:25:4f:74:65:fa:62:95:3a:64: 52:a4:db:2f:df:f8:92:de:77:df:14:5a:b5:92:38:b2:1e:20: 65:f3:2a:85:8f:d1:21:15:20:3b:bd:23:30:45:85:20:db:6b: de:4f:31:10:41:06:79:97:31:6a:2c:8a:ec:fb:95:9e:c8:8e: 67:86:ee:f4:7c:8d:0c:b1:63:08:3b:74:7b:17:d3:ae:c6:8a: 58:58:8b:e1:ad:e3:a5:18:ed:3a:a4:6c:32:bc:aa:f5:eb:54: 6c:e8:1a:cc:a9:a0:9b:1d:d1:33:70:89:df:51:ec:13:62:44: 85:7b:54:2d:be:3d:66:c7:9f:3c:82:0b:56:7b:2b:ca:c5:38: 1d:3a:b3:62 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MjlERjExMC8GA1UEBRMoOUU2Q0ZBQUI5NEI0MkIyMTc2MDFFMTMzMEEwMjc4MjJC OUNBMUZCOTAeFw0yNjAzMjUwNzU1MjNaFw0yNjA0MDEwNzU1MjNaMBgxFjAUBgNV BAMTDTY5YzM5NGViLTZiZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9oi8Z32S+rj7wGyUS3AirvkBuno8/8UsRKDV2heaIyZhcxiIR70I7ojKWAp8+ xSzRSQ/crz6CNmAzMrnCNsNPznYg4wIKyFiXR2b3vJevle2lwVlisU/a9/VnNrB4 WEApVqSGpi7j1yEEj/FFEaOwwIVIC9EVCkwhpPW5x2lxiwz5SIyxZmM2b3G6g0NX D7e6zsDC5jSuS/XXo6RBCbLT8eGX/ADaRSM4419PKjQD3juUmeUlZi9Jf7HRdtmS lsfqigl1hVreueh/R+B0aZwbL9p72PJ3Z8RtleyDd1uHg7aE3xrWegOf5mod+JSE MXaBnanfbHXs8ry+gmJFTmxzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6ol9Vyxn vnOFdddyRSYdLpYQxIgwHwYDVR0jBBgwFoAUnmz6q5S0KyF2AeEzCgJ4IrnKH7kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyOURGL0UyN0M5M0FFRUQy RTExRjA4MEM0NjAzMjQ3NkY1NkJDL25tejZxNVMwS3lGMkFlRXpDZ0o0SXJuS0g3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbm16NnE1UzBLeUYyQWVFekNnSjRJcm5LSDdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy OURGL0UyN0M5M0FFRUQyRTExRjA4MEM0NjAzMjQ3NkY1NkJDL25tejZxNVMwS3lG MkFlRXpDZ0o0SXJuS0g3ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAdDDS8BmTynXwq7edBpfwTaGjJKBZ90A/Q4iDe9iXnwHxEptQ+q4kteHtyF4iI usAkzDQy4dGQ3WwkIEYX9m0HDIaUxnpAqB+suBzxurqwxmIKAEXZ0f3K0tFM4GA0 Ld5ZUBPX/skR60TUkZ1dTBgBnB0ZqFUlT3Rl+mKVOmRSpNsv3/iS3nffFFq1kjiy HiBl8yqFj9EhFSA7vSMwRYUg22veTzEQQQZ5lzFqLIrs+5WeyI5nhu70fI0MsWMI O3R7F9OuxopYWIvhreOlGO06pGwyvKr161Rs6BrMqaCbHdEzcInfUewTYkSFe1Qt vj1mx588ggtWeyvKxTgdOrNi -----END CERTIFICATE-----Generated at Thu Mar 26 15:41:15 2026 by rpki-client