$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft File: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft (raw, json) Hash identifier: 2x4vDjydUZrggpAAxrsPuSdqbRyDbrcVP2B3YJQWfGs= Subject key identifier: 64:ED:95:6B:40:A1:EB:BC:13:12:F0:C7:0D:55:8E:17:45:13:48:C9 Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Certificate serial: 1202 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft Manifest number: 1073 Signing time: Thu 26 Mar 2026 17:30:54 +0000 Manifest this update: Thu 26 Mar 2026 17:30:53 +0000 Manifest next update: Thu 02 Apr 2026 17:30:53 +0000 Files and hashes: 1: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl (hash: mB3IEuBqvEBsyzEWTHebgdgUApONTr+p5n1shbiab5A=) 2: C2356A948FE811E98B967A66C4F9AE02.roa (hash: Spu6ueKiAix7Vx1bbz3QuH8zuY42SfhsOYEFzJ/3W4o=) 3: B969078EB94B11EB8CFABC23C4F9AE02.roa (hash: KmEu0JXVBtwzMz7EetZKwa8KqrgE2kj5+Y9cCaXraFo=) 4: C435900ACF7C11F0AAC14644C4F9AE02.roa (hash: m9D73VL27f9lVIbOReJ6AOP2zRgFJFj+KEXEimjyt7I=) 5: 9394D360345F11F0AB96776CC4F9AE02.roa (hash: Dy3vf2brgO7ffq8geCJNrRWY4aeeqFaFWyK7H7SMUrk=) 6: 71043990C4D811EA88E6B21FC4F9AE02.roa (hash: SwqLx1ykNlWfnGxIgnnplctUN2Uh69BTnr1sDfxJRlM=) 7: 8224E55C345F11F0BD514C6CC4F9AE02.roa (hash: k1IfgBcHOoF2DvAmPhMFiueaAUbhFvWp7b5AsEN0aGA=) 8: 2A4EE13E7CFD11F08A91EE21C4F9AE02.roa (hash: VlAWA5/d+uBjOMZi4UPagGvqPim5oPM3SxEdySpg39I=) 9: 50D040327CFD11F0B32D4522C4F9AE02.roa (hash: J+oM/GM4p3/6d6pclXs1NjnCH5p34XNUGcl5IM3ZZ78=) 10: C3BEAC38CF7C11F0B0EB4644C4F9AE02.roa (hash: 0xacdRxIlt6XlMYC4ytgm5Wnpkb/XtvJrzfDYrQNkow=) 11: C4A85FD48FE811E98B967A66C4F9AE02.roa (hash: Yra/cySrBt0zcZ3P5GOXeK6swd+KmGvdWYxnM5VydGA=) 12: F3011EAAB88311EBB2078C50C4F9AE02.roa (hash: RdnFjFlQSbXhKdwY5kMqtzBzkUycrU7RuwuLidB948U=) 13: 49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa (hash: t0lrWYbEsDKRavSA+NYxahXVuuhYWwqHsIgE48/DyB8=) 14: 5C4E5A6EB9E511EB9717B256C4F9AE02.roa (hash: wW2NNDoiiggQLts6yoRWeEta8EfkfmkpuQXd4IRvuj4=) 15: FD5158C044C511F0ABA4E977C4F9AE02.roa (hash: jAhN4tezvJPwZDVpGZejWw4TU5H1Av+GZW6zZMmb67I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 17:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4610 (0x1202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Validity Not Before: Mar 26 17:30:53 2026 GMT Not After : Apr 2 17:30:53 2026 GMT Subject: CN=69c56d4e-c8d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fb:78:5e:7b:98:2d:a6:11:e0:70:08:98:6e: 7a:74:83:56:3e:97:30:8d:81:52:76:68:04:03:b6: 5c:ac:a5:c0:c6:dd:5b:42:ca:62:cd:0c:70:58:b9: 57:a2:06:2b:63:c3:ca:a9:c6:49:57:a1:23:df:5c: af:75:ed:59:97:0b:1b:7d:f0:e9:8f:b3:a7:a6:d9: d0:8e:5c:9a:77:4f:7f:b5:79:68:51:73:c7:81:59: 37:4a:24:6c:ea:26:84:c0:10:3a:2f:cd:05:4e:43: 14:69:8f:f1:55:e6:85:3e:9a:21:79:ed:56:55:a2: e3:ad:1c:cb:b4:b7:6d:a3:20:08:98:f1:67:30:79: 62:46:93:11:9d:c3:7f:de:42:f0:8c:7f:06:b5:b4: d6:c7:7b:16:ab:27:bc:13:93:60:15:db:55:32:d7: 78:9b:92:2a:27:e8:f8:72:c1:a9:33:00:91:3a:0a: ca:c0:68:6f:f9:55:55:48:99:99:93:b0:2e:72:3d: 92:d4:fe:93:79:95:0c:4a:76:71:0a:64:80:dc:6b: 3f:48:13:50:a9:35:8d:98:45:3e:8d:b6:fb:37:90: e4:57:da:02:5a:bb:df:53:66:bd:0d:a7:9f:13:95: a8:30:c6:79:36:69:d4:3d:44:64:b8:56:07:93:c3: a5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:ED:95:6B:40:A1:EB:BC:13:12:F0:C7:0D:55:8E:17:45:13:48:C9 X509v3 Authority Key Identifier: keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:76:a0:2d:4b:d7:d7:aa:fa:35:19:69:53:0e:f6:26:71:73: aa:59:67:20:df:7d:4a:1b:75:3b:80:13:ad:7d:3f:d9:68:0a: 19:04:66:0d:50:4e:e8:be:68:04:9a:64:11:b0:37:c9:39:5c: b0:21:65:e4:d2:78:e4:36:a8:5b:40:77:55:f6:bb:d1:05:17: 4b:61:a5:2c:8f:39:42:17:d0:92:1f:17:d2:87:fa:00:06:61: c5:07:a2:50:64:21:7b:3b:0c:e3:d3:e4:88:c9:af:64:30:1f: fd:24:0c:58:85:26:44:d8:8b:cb:e2:a5:9a:eb:21:7d:6d:dd: 1a:a8:0d:af:d3:bc:4e:b1:d5:f8:11:40:73:d4:4b:55:c4:64: e7:e9:47:cf:eb:4f:72:93:27:0c:70:ca:3f:6e:be:33:6f:2e: b2:ff:a4:4a:7f:1c:5a:33:18:40:ef:26:fd:e0:78:c5:78:75: 06:cd:f0:a7:8e:aa:d4:59:51:12:7e:f6:28:27:ff:14:66:91: 4b:fc:8a:60:0d:51:73:81:b6:27:d9:b0:06:94:65:18:48:8e: bc:19:4b:96:ec:50:a0:d9:e4:39:65:11:01:fd:bb:02:0d:ce: 02:54:b0:77:4c:26:1d:d0:db:12:00:ae:37:b7:2b:cb:1d:66: 47:91:f9:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5 RDNGRDdCNjAwHhcNMjYwMzI2MTczMDUzWhcNMjYwNDAyMTczMDUzWjAYMRYwFAYD VQQDEw02OWM1NmQ0ZS1jOGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtft4XnuYLaYR4HAImG56dINWPpcwjYFSdmgEA7ZcrKXAxt1bQspizQxwWLlX ogYrY8PKqcZJV6Ej31yvde1ZlwsbffDpj7OnptnQjlyad09/tXloUXPHgVk3SiRs 6iaEwBA6L80FTkMUaY/xVeaFPpohee1WVaLjrRzLtLdtoyAImPFnMHliRpMRncN/ 3kLwjH8GtbTWx3sWqye8E5NgFdtVMtd4m5IqJ+j4csGpMwCROgrKwGhv+VVVSJmZ k7Aucj2S1P6TeZUMSnZxCmSA3Gs/SBNQqTWNmEU+jbb7N5DkV9oCWrvfU2a9Daef E5WoMMZ5NmnUPURkuFYHk8OlVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGTtlWtA oeu8ExLwxw1VjhdFE0jJMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDNEQi8wREMzNUQzRThERDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0 Q0ZyNkJzQ1Q1VXFkUDllMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwHagLUvX16r6NRlpUw72JnFzqllnIN99Sht1O4ATrX0/2WgKGQRmDVBO6L5o BJpkEbA3yTlcsCFl5NJ45DaoW0B3Vfa70QUXS2GlLI85QhfQkh8X0of6AAZhxQei UGQhezsM49PkiMmvZDAf/SQMWIUmRNiLy+KlmushfW3dGqgNr9O8TrHV+BFAc9RL VcRk5+lHz+tPcpMnDHDKP26+M28usv+kSn8cWjMYQO8m/eB4xXh1Bs3wp46q1FlR En72KCf/FGaRS/yKYA1Rc4G2J9mwBpRlGEiOvBlLluxQoNnkOWURAf27Ag3OAlSw d0wmHdDbEgCuN7cryx1mR5H54g== -----END CERTIFICATE-----Generated at Sat Mar 28 10:30:28 2026 by rpki-client