$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft File: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft (raw, json) Hash identifier: mqyxAuNx6A2OSHm2l5PmLWa9hgYLYXw02NA+Ls1MO24= Subject key identifier: D7:66:81:E9:04:27:DF:3B:D2:11:E1:78:BB:D4:3F:A0:FB:BA:CE:06 Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Certificate serial: 09D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft Manifest number: 092E Signing time: Tue 24 Mar 2026 20:25:46 +0000 Manifest this update: Tue 24 Mar 2026 20:25:45 +0000 Manifest next update: Tue 31 Mar 2026 20:25:45 +0000 Files and hashes: 1: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl (hash: wgWzfLKqxErY3YGcMMbS3tCiflpoQfUXjC+uFQjK5dk=) 2: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (hash: bBolaE4J+ODeMaCpkUYIkQ/PrlqstuijFxA7VnkQpuo=) 3: A98F7960A41F11F0A133244EC4F9AE02.roa (hash: Fkicx7CSwAUsnDPdfHvB6HsA9q0BYXagiCWHfaLV4Bg=) 4: B84CC7D2A41A11F08EC1655BC4F9AE02.roa (hash: LpD49WPYOZPaHio5ZklNa5sGnt+yU3gxsH0FPSNIjpQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2514 (0x9d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Validity Not Before: Mar 24 20:25:45 2026 GMT Not After : Mar 31 20:25:45 2026 GMT Subject: CN=69c2f34a-bfc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6f:49:74:d9:8d:16:04:7b:dd:52:f6:a0:73: 1e:85:ee:8c:15:a3:c7:ea:a6:77:45:b5:af:e5:1c: 6c:67:ae:49:96:a7:95:59:e0:47:62:cd:92:bd:8a: 57:d2:13:9d:fa:20:bd:aa:ef:ca:b7:a0:e8:1e:fa: f0:52:69:eb:24:b8:99:5b:f1:91:dc:4b:ea:21:ed: 0e:ba:33:39:41:0d:bf:3a:d6:e5:35:cb:c1:3f:e2: 00:51:db:a1:61:75:41:34:8d:32:71:3e:eb:fc:24: ab:6b:c9:c3:9b:ed:2f:75:6e:4e:55:a8:d2:1f:61: 4f:58:fd:72:19:05:41:11:53:b7:3f:16:2c:53:d1: 26:cd:fa:e0:35:0f:e0:7b:0a:a0:e2:d7:b6:8b:e6: 92:d6:35:37:8e:91:b3:ef:cb:b7:c4:9d:23:2c:31: 8e:ed:fd:c0:b4:fd:ff:cf:64:ae:ed:2c:b1:4e:e5: 0c:8c:ac:33:a2:8f:ce:9f:44:d8:29:da:0d:27:2f: 67:01:04:33:a0:5f:b1:76:e5:02:87:2e:8b:30:c3: 23:96:10:b4:bd:fd:6a:86:71:80:bc:23:d0:be:4a: 34:a6:0e:77:50:aa:cc:11:81:03:3b:66:ed:54:77: a9:d0:60:23:33:4b:af:80:ef:c0:49:f2:e4:02:27: e0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:66:81:E9:04:27:DF:3B:D2:11:E1:78:BB:D4:3F:A0:FB:BA:CE:06 X509v3 Authority Key Identifier: keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:a7:b0:2d:44:e8:81:56:39:86:53:fc:dd:f0:cc:d8:b4:7f: f3:a0:e9:e6:5e:61:25:30:3b:71:60:c8:8c:dc:c6:ad:ba:0a: d0:21:83:ea:e0:18:b9:7b:af:2d:e7:19:2c:cf:00:0b:d3:d4: 80:99:f3:fa:26:39:49:55:8e:8e:ce:04:4a:ff:39:c4:85:6f: ed:93:59:5a:f6:37:92:bd:55:44:48:6a:29:c8:0b:fb:05:c7: 1e:b2:75:7c:42:82:50:2e:4a:78:ce:9a:8d:a5:3b:b9:0f:93: 7b:c7:5d:2b:6f:ed:50:a7:26:df:ca:45:72:56:fd:a2:ad:b7: 3b:cd:8c:0d:65:4c:c0:69:29:68:7e:89:39:54:8d:17:31:c2: 7f:8c:89:54:7a:cb:9a:43:dd:12:ca:f6:c8:bf:a6:d6:72:9b: ff:ec:3a:e5:f4:c1:2e:6a:c8:a9:8f:cc:64:47:0f:9c:35:be: 7e:f2:c7:e3:d8:57:45:bf:9e:a6:95:10:ce:8f:ad:62:5a:c9: d1:ff:1f:92:00:e4:ad:fc:09:45:46:a1:10:f2:78:31:be:33: 7f:5a:09:58:16:39:24:b0:c3:05:d8:ad:0e:40:7e:84:da:80: 1b:bd:66:79:22:35:ea:48:f4:60:5b:31:b6:d2:be:33:1a:0f: c1:65:8f:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0 OTQ5OTcxNjIwHhcNMjYwMzI0MjAyNTQ1WhcNMjYwMzMxMjAyNTQ1WjAYMRYwFAYD VQQDEw02OWMyZjM0YS1iZmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApG9JdNmNFgR73VL2oHMehe6MFaPH6qZ3RbWv5RxsZ65JlqeVWeBHYs2SvYpX 0hOd+iC9qu/Kt6DoHvrwUmnrJLiZW/GR3EvqIe0OujM5QQ2/OtblNcvBP+IAUduh YXVBNI0ycT7r/CSra8nDm+0vdW5OVajSH2FPWP1yGQVBEVO3PxYsU9EmzfrgNQ/g ewqg4te2i+aS1jU3jpGz78u3xJ0jLDGO7f3AtP3/z2Su7SyxTuUMjKwzoo/On0TY KdoNJy9nAQQzoF+xduUChy6LMMMjlhC0vf1qhnGAvCPQvko0pg53UKrMEYEDO2bt VHep0GAjM0uvgO/ASfLkAifgnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNdmgekE J9870hHheLvUP6D7us4GMB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDA0RS9CQzAzMEM3NkYxREExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFE S0Q4TXEwUGkzR0ZKU1pjV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABaewLUTogVY5hlP83fDM2LR/86Dp5l5hJTA7cWDIjNzGrboK0CGD6uAYuXuv LecZLM8AC9PUgJnz+iY5SVWOjs4ESv85xIVv7ZNZWvY3kr1VREhqKcgL+wXHHrJ1 fEKCUC5KeM6ajaU7uQ+Te8ddK2/tUKcm38pFclb9oq23O82MDWVMwGkpaH6JOVSN FzHCf4yJVHrLmkPdEsr2yL+m1nKb/+w65fTBLmrIqY/MZEcPnDW+fvLH49hXRb+e ppUQzo+tYlrJ0f8fkgDkrfwJRUahEPJ4Mb4zf1oJWBY5JLDDBditDkB+hNqAG71m eSI16kj0YFsxttK+MxoPwWWPKQ== -----END CERTIFICATE-----Generated at Thu Mar 26 12:50:44 2026 by rpki-client