$ rpki-client -vvf rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft File: NtqOcqrHflUzc5DvTGHJVAtFldc.mft (raw, json) Hash identifier: wehESq4Bppqv31l77YwFjiEE+wWxYypnDwDZHLdvX2w= Subject key identifier: B5:BA:A5:12:BD:ED:17:78:44:DF:7E:D0:62:35:34:A9:DF:61:52:BB Authority key identifier: 36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7 Certificate issuer: /CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7 Certificate serial: 0AB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft Manifest number: 0A9A Signing time: Tue 24 Mar 2026 19:21:40 +0000 Manifest this update: Tue 24 Mar 2026 19:21:40 +0000 Manifest next update: Tue 31 Mar 2026 19:21:40 +0000 Files and hashes: 1: NtqOcqrHflUzc5DvTGHJVAtFldc.crl (hash: UILFIjxNDtfuTFvglp47pjVa3+pDunx8HcSQncsyiNI=) 2: 6B5765BC499211ED879F2D11C4F9AE02.roa (hash: Gij6YaDS1wfHNVRKMaJ5A1SN4efMb1QxYQGgmn19MtM=) 3: 6A23E166499211ED879F2D11C4F9AE02.roa (hash: csZJdZSF6nTnFQn9EqcR/ZbPKFiCdQpZdY1Ll4yoD/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2738 (0xab2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91577A2, serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7 Validity Not Before: Mar 24 19:21:40 2026 GMT Not After : Mar 31 19:21:40 2026 GMT Subject: CN=69c2e444-938b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c2:82:01:c7:b8:85:cb:2f:0c:3a:d4:54:b7: 45:01:2d:11:b1:7c:0a:da:2c:65:87:9d:55:cc:79: 2d:3c:6e:61:f5:4c:34:d7:6d:cb:d8:0d:6a:02:5e: 14:1a:db:0f:ce:ed:0c:03:fd:56:47:43:0b:20:28: c4:2e:ce:b7:52:53:ef:d0:47:cc:7f:40:6e:8e:67: 27:11:29:ba:ee:26:17:87:80:6e:c0:c3:a9:87:37: 6e:fd:e4:aa:23:b3:96:65:18:c3:0f:27:b8:b4:0a: a6:3d:e1:fb:b0:5d:a3:17:8b:c3:f4:fc:0d:ac:da: 5d:8d:46:8f:1f:c1:a4:cc:b7:92:e5:e2:f4:6b:e2: a4:c5:41:f2:81:29:52:1b:5b:64:78:e8:55:52:0a: 23:e7:b8:fa:42:e4:91:9b:fb:19:4c:78:18:0a:af: db:c5:64:4c:5c:38:88:49:0e:b8:85:76:81:f8:59: 26:e3:3e:9c:dc:0f:cd:0a:d3:23:fa:df:9a:58:dd: 94:f6:23:e9:c8:7d:73:1c:98:05:76:4f:3f:38:6c: 88:fa:27:65:9b:50:4a:65:7b:6e:db:7a:c8:eb:8d: eb:7b:5b:52:4e:62:d4:ec:ca:6c:9b:96:0f:31:79: d7:6b:fc:83:93:4b:70:58:6f:69:68:86:a8:57:2e: 40:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BA:A5:12:BD:ED:17:78:44:DF:7E:D0:62:35:34:A9:DF:61:52:BB X509v3 Authority Key Identifier: keyid:36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:28:8b:0f:45:28:53:ea:13:72:3c:7a:7c:2d:c0:31:6c:68: f5:0d:81:08:27:81:1c:c8:4b:29:0d:61:05:95:ff:ff:76:68: 63:3a:a1:0c:ff:1a:39:f8:21:f9:dd:46:a2:bd:84:fa:f8:bb: 95:30:e4:9c:96:3a:0c:4d:b4:fe:76:3b:e9:18:23:fd:69:f3: f6:14:d3:a6:8a:77:78:f3:3e:9a:8b:79:25:d0:83:5e:d2:98: 03:2f:b2:2a:ed:96:69:9a:0d:18:0d:f2:b7:2a:d7:f1:fc:28: 8a:df:91:54:5c:de:b9:fd:d8:2b:c2:2a:26:79:35:c7:8d:0c: 7c:47:5c:13:a8:3b:e9:0c:d6:18:e8:87:0f:e7:34:c1:8f:01: 4d:51:89:1d:00:e5:fc:74:60:c3:18:5e:e5:c6:45:2f:90:87: 91:6a:59:18:4f:e5:d6:d5:b7:0a:ce:80:82:14:dc:db:7d:1b: 9c:55:af:c6:19:61:84:d4:e2:d0:fe:b4:55:ef:5e:fa:e2:82: 32:3e:e6:9a:95:b1:9e:67:4e:e7:aa:44:ca:0f:2e:6b:d1:47: 35:7a:6f:0c:ac:b1:87:16:27:b2:77:ce:e9:e3:89:1f:81:43: d1:56:26:25:6e:6a:51:cf:c9:4e:aa:26:16:0b:62:95:4f:cf: ac:a6:cc:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3QTIxMTAvBgNVBAUTKDM2REE4RTcyQUFDNzdFNTUzMzczOTBFRjRDNjFDOTU0 MEI0NTk1RDcwHhcNMjYwMzI0MTkyMTQwWhcNMjYwMzMxMTkyMTQwWjAYMRYwFAYD VQQDEw02OWMyZTQ0NC05MzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8KCAce4hcsvDDrUVLdFAS0RsXwK2ixlh51VzHktPG5h9Uw0123L2A1qAl4U GtsPzu0MA/1WR0MLICjELs63UlPv0EfMf0BujmcnESm67iYXh4BuwMOphzdu/eSq I7OWZRjDDye4tAqmPeH7sF2jF4vD9PwNrNpdjUaPH8GkzLeS5eL0a+KkxUHygSlS G1tkeOhVUgoj57j6QuSRm/sZTHgYCq/bxWRMXDiISQ64hXaB+Fkm4z6c3A/NCtMj +t+aWN2U9iPpyH1zHJgFdk8/OGyI+idlm1BKZXtu23rI643re1tSTmLU7Mpsm5YP MXnXa/yDk0twWG9paIaoVy5AlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLW6pRK9 7Rd4RN9+0GI1NKnfYVK7MB8GA1UdIwQYMBaAFDbajnKqx35VM3OQ70xhyVQLRZXX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzdBMi84QkMxNUM0MDdC MDQxMUVBOURBQUQ0MzJDNEY5QUUwMi9OdHFPY3FySGZsVXpjNUR2VEdISlZBdEZs ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL050cU9jcXJIZmxVemM1RHZUR0hKVkF0RmxkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzdBMi84QkMxNUM0MDdCMDQxMUVBOURBQUQ0MzJDNEY5QUUwMi9OdHFPY3FySGZs VXpjNUR2VEdISlZBdEZsZGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADSiLD0UoU+oTcjx6fC3AMWxo9Q2BCCeBHMhLKQ1hBZX//3ZoYzqhDP8aOfgh +d1Gor2E+vi7lTDknJY6DE20/nY76Rgj/Wnz9hTTpop3ePM+mot5JdCDXtKYAy+y Ku2WaZoNGA3ytyrX8fwoit+RVFzeuf3YK8IqJnk1x40MfEdcE6g76QzWGOiHD+c0 wY8BTVGJHQDl/HRgwxhe5cZFL5CHkWpZGE/l1tW3Cs6AghTc230bnFWvxhlhhNTi 0P60Ve9e+uKCMj7mmpWxnmdO56pEyg8ua9FHNXpvDKyxhxYnsnfO6eOJH4FD0VYm JW5qUc/JTqomFgtilU/PrKbMrg== -----END CERTIFICATE-----Generated at Thu Mar 26 14:26:54 2026 by rpki-client