$ rpki-client -vvf rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft File: NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft (raw, json) Hash identifier: +oouso4Kb6wMlKMoSevs9pvryStb6GNf9u9eOGXw8LA= Subject key identifier: FB:26:76:C2:A7:02:87:E2:C6:A7:E8:D7:46:30:B5:F1:65:ED:E2:0B Authority key identifier: 35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B Certificate issuer: /CN=A916378F/serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B Certificate serial: 0858 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft Manifest number: 0830 Signing time: Tue 24 Mar 2026 20:47:03 +0000 Manifest this update: Tue 24 Mar 2026 20:47:03 +0000 Manifest next update: Tue 31 Mar 2026 20:47:03 +0000 Files and hashes: 1: NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl (hash: veypukbMbG4SJ3hZyzDOLzPAl0RClg3+dvxlSOUJIKc=) 2: 4D47DE5A127E11EB91021F3AC4F9AE02.roa (hash: /CMhnqrhdVYNSUaizVq/uPj8VXgZqAfmKsDyp7bdTWE=) 3: 8977329C6BFA11F0A5B94819C4F9AE02.roa (hash: c6LJhskoptnL62vsB9jLZiT/hEUllVG1aUqGIGkiID8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2136 (0x858) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916378F, serialNumber=3588F1BB5CB699B034811D179279BF5B9BBC1E5B Validity Not Before: Mar 24 20:47:03 2026 GMT Not After : Mar 31 20:47:03 2026 GMT Subject: CN=69c2f847-a763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ec:50:66:08:f4:15:be:d2:fe:97:c6:7f:6e: 97:cd:b6:90:0f:0c:91:4d:f0:3a:b1:b4:c6:0d:4b: 9d:b5:2a:41:dc:b0:33:f9:66:a9:fd:98:ea:68:d0: d2:5b:33:fa:74:94:05:2e:fc:53:79:73:dc:6e:63: 99:83:60:45:b3:6c:ed:dc:4b:60:62:e2:13:a7:2a: ef:f9:4b:d5:70:02:5f:35:7d:f8:ff:ce:51:94:20: 03:f8:47:ac:0f:31:4b:fb:9a:e2:89:8f:9e:25:3b: fd:6e:ba:26:71:99:38:a5:a1:02:b2:e4:07:22:29: 92:11:79:60:c2:d9:56:56:ff:6d:20:02:c8:d5:72: 83:8a:10:59:2e:a5:84:1c:60:50:d7:7b:9f:12:7f: 3a:5c:4e:40:11:76:f5:5b:bc:b2:49:aa:7b:f3:63: 0b:b6:06:51:c5:52:79:e6:89:2c:06:bd:8a:c5:85: 16:1b:c4:db:33:b1:6b:ee:77:8a:4f:68:ef:07:d7: c3:80:f9:5a:46:79:33:a9:31:df:01:9d:6e:a3:e2: c8:80:14:9e:9f:65:72:87:8a:63:68:03:d7:bb:ab: d5:76:20:6e:ab:36:a5:7d:d4:33:0b:f8:62:33:2c: c8:0e:bb:ce:e5:ef:06:95:d5:06:f8:74:9f:d5:fd: f9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:26:76:C2:A7:02:87:E2:C6:A7:E8:D7:46:30:B5:F1:65:ED:E2:0B X509v3 Authority Key Identifier: keyid:35:88:F1:BB:5C:B6:99:B0:34:81:1D:17:92:79:BF:5B:9B:BC:1E:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYjxu1y2mbA0gR0Xknm_W5u8Hls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916378F/A5A9C4A8127111EB88D4BD80C4F9AE02/NYjxu1y2mbA0gR0Xknm_W5u8Hls.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:da:a0:a3:86:ef:e9:64:4f:82:7c:1e:ef:79:51:a3:92:18: dd:27:b3:40:17:76:23:aa:7d:fd:76:26:c4:44:c3:0d:e5:4b: 6d:3e:8b:5c:05:47:5e:8d:c8:67:7e:40:eb:db:fd:11:c3:3b: 6c:c4:f0:a6:11:f9:94:12:95:dc:61:29:1a:7a:9f:92:b1:27: 22:cb:53:99:44:b5:44:ed:cf:bd:f2:94:27:ab:49:2a:66:24: 50:ba:5a:66:b5:96:bb:85:78:ef:f7:d7:68:8b:03:df:99:75: 0e:c9:de:ba:94:79:be:a5:b8:a8:11:45:16:93:dd:ec:c2:ef: f0:4e:4d:f8:85:4e:7a:0f:6c:51:49:4e:ee:f2:4a:29:3a:bd: 33:58:ab:4a:8c:74:f3:37:20:37:f3:7a:00:75:05:21:75:52: f8:96:d3:ef:83:f1:11:d6:c2:56:46:20:63:18:cc:c0:0c:76: 8d:39:3a:a9:20:4a:aa:07:a5:8b:22:ea:49:86:a7:2a:fd:08: 0e:76:6d:0d:83:c5:b3:d8:e5:09:7a:1a:f5:fa:e8:52:60:e3: 4c:36:b5:f0:f9:6f:c9:2b:71:0f:e6:ba:8e:14:cf:7f:2b:de: 6b:df:62:17:af:66:c4:99:24:aa:e7:ac:39:c7:29:60:e1:10: 69:7d:26:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3OEYxMTAvBgNVBAUTKDM1ODhGMUJCNUNCNjk5QjAzNDgxMUQxNzkyNzlCRjVC OUJCQzFFNUIwHhcNMjYwMzI0MjA0NzAzWhcNMjYwMzMxMjA0NzAzWjAYMRYwFAYD VQQDEw02OWMyZjg0Ny1hNzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuxQZgj0Fb7S/pfGf26XzbaQDwyRTfA6sbTGDUudtSpB3LAz+Wap/ZjqaNDS WzP6dJQFLvxTeXPcbmOZg2BFs2zt3EtgYuITpyrv+UvVcAJfNX34/85RlCAD+Ees DzFL+5riiY+eJTv9bromcZk4paECsuQHIimSEXlgwtlWVv9tIALI1XKDihBZLqWE HGBQ13ufEn86XE5AEXb1W7yySap782MLtgZRxVJ55oksBr2KxYUWG8TbM7Fr7neK T2jvB9fDgPlaRnkzqTHfAZ1uo+LIgBSen2Vyh4pjaAPXu6vVdiBuqzalfdQzC/hi MyzIDrvO5e8GldUG+HSf1f35cwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPsmdsKn Aofixqfo10YwtfFl7eILMB8GA1UdIwQYMBaAFDWI8btctpmwNIEdF5J5v1ubvB5b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzc4Ri9BNUE5QzRBODEy NzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1iQTBnUjBYa25tX1c1dThI bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Zanh1MXkybWJBMGdSMFhrbm1fVzV1OEhscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mzc4Ri9BNUE5QzRBODEyNzExMUVCODhENEJEODBDNEY5QUUwMi9OWWp4dTF5Mm1i QTBnUjBYa25tX1c1dThIbHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAttqgo4bv6WRPgnwe73lRo5IY3SezQBd2I6p9/XYmxETDDeVLbT6LXAVHXo3I Z35A69v9EcM7bMTwphH5lBKV3GEpGnqfkrEnIstTmUS1RO3PvfKUJ6tJKmYkULpa ZrWWu4V47/fXaIsD35l1DsneupR5vqW4qBFFFpPd7MLv8E5N+IVOeg9sUUlO7vJK KTq9M1irSox08zcgN/N6AHUFIXVS+JbT74PxEdbCVkYgYxjMwAx2jTk6qSBKqgel iyLqSYanKv0IDnZtDYPFs9jlCXoa9froUmDjTDa18PlvyStxD+a6jhTPfyvea99i F69mxJkkquesOccpYOEQaX0msQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:46:03 2026 by rpki-client