$ rpki-client -vvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft File: NwOTvGRg5S0PXgIdVS9YF0M-suc.mft (raw, json) Hash identifier: HmP0oO/EgLKrXr7NDknkyp3/L7egEmNRxvjk/A8SIUk= Subject key identifier: D5:06:7F:BC:0C:46:7F:5F:B3:57:C5:D0:D5:76:23:36:6B:91:5D:CF Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 Certificate issuer: /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Certificate serial: 14BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft Manifest number: 14B2 Signing time: Tue 24 Mar 2026 16:45:49 +0000 Manifest this update: Tue 24 Mar 2026 16:45:49 +0000 Manifest next update: Tue 31 Mar 2026 16:45:49 +0000 Files and hashes: 1: NwOTvGRg5S0PXgIdVS9YF0M-suc.crl (hash: BY6nKYj3rcbYZUQx1MqwxZR648GcgsHSnPNsPpDZx24=) 2: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (hash: hJB0fg4PvfDHbWpDoExt2hBG5m90vZAeqjoeirpmrtY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5308 (0x14bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D5CF, serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Validity Not Before: Mar 24 16:45:49 2026 GMT Not After : Mar 31 16:45:49 2026 GMT Subject: CN=69c2bfbd-92c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:05:10:2a:e8:19:b8:17:e2:3e:26:75:e6:c8: 14:35:98:33:dd:12:59:59:3d:51:ce:cf:eb:4f:85: 56:9e:50:3c:b9:7b:47:e4:f6:d5:a9:ae:1e:ff:71: ec:44:d6:0d:f4:8f:18:ea:41:a3:ab:fd:be:30:77: 4a:c5:cb:6f:be:24:5f:7b:ab:cf:cc:69:92:c3:f9: 1a:ae:f9:a9:63:75:55:62:3f:1e:ab:87:cc:e7:35: 63:56:b3:8e:b6:c7:b0:75:93:bf:c8:76:7b:f9:9b: ef:89:b9:a4:26:80:e4:1e:f1:58:6d:3b:d6:c1:10: f2:84:90:62:8f:56:72:3b:55:6e:4e:df:42:85:f7: 99:26:3b:b7:21:10:3d:c7:62:4d:60:1c:a4:c2:09: bb:62:c5:39:0b:b0:3b:ae:72:0f:6c:50:e4:f7:dd: 38:34:b0:d1:a6:75:1f:07:12:f2:f3:e8:ac:5a:97: 8b:e5:34:3b:95:e3:06:42:a3:a9:f4:2e:6e:b5:0a: 20:79:ae:1b:4f:17:3e:8c:24:82:44:05:21:e1:9d: 51:b5:cb:62:41:ea:ba:d5:c4:a6:87:0d:de:10:ff: 49:96:2c:2d:92:6d:f6:03:ba:cd:4b:67:fe:8f:eb: 2d:62:56:54:36:44:15:40:02:4c:49:de:17:62:79: 3c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:06:7F:BC:0C:46:7F:5F:B3:57:C5:D0:D5:76:23:36:6B:91:5D:CF X509v3 Authority Key Identifier: keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:58:4f:5a:e0:91:ca:97:45:e0:e3:8d:3a:99:c0:fd:00:35: 9e:19:47:da:50:7e:a8:65:7e:fb:7c:b6:e1:2e:8b:aa:2a:6f: fc:37:a7:3f:8d:d0:5b:58:5f:08:d5:11:c5:e8:bf:35:26:2f: 2b:b2:20:ef:00:f5:c2:7c:3d:e4:53:95:54:de:d2:87:f8:b9: 03:f6:89:50:58:62:f7:10:67:25:b1:25:92:58:08:03:e3:9d: a1:76:4a:37:86:03:d2:32:a3:f3:1e:c7:38:ed:56:75:90:d2: e3:4a:dc:8e:03:ff:90:a6:77:82:0c:11:f4:37:7e:36:fd:0c: 3c:00:75:df:9d:75:b5:cb:20:3b:2d:fc:87:cc:ec:a7:b6:4c: 56:c8:b8:62:d5:1b:c5:8a:f5:18:22:65:1d:c0:23:37:42:48: 0f:08:b8:ff:c2:ca:dd:ce:c8:5a:c7:9b:75:e4:c0:98:76:0d: 53:84:e8:a5:73:87:02:90:e1:80:37:de:32:b4:b2:a1:46:e4: 0a:bf:1e:c1:11:eb:4c:f1:f1:e1:e4:78:6c:26:f6:e7:11:3d: 59:74:fc:06:72:bb:bd:ea:c0:a1:57:c6:9f:90:54:ac:f0:b3: da:b8:3b:f4:d4:0b:74:61:a5:82:28:de:42:55:35:d4:cc:a2: 3a:c4:2b:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ1Q0YxMTAvBgNVBAUTKDM3MDM5M0JDNjQ2MEU1MkQwRjVFMDIxRDU1MkY1ODE3 NDMzRUIyRTcwHhcNMjYwMzI0MTY0NTQ5WhcNMjYwMzMxMTY0NTQ5WjAYMRYwFAYD VQQDEw02OWMyYmZiZC05MmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmwUQKugZuBfiPiZ15sgUNZgz3RJZWT1Rzs/rT4VWnlA8uXtH5PbVqa4e/3Hs RNYN9I8Y6kGjq/2+MHdKxctvviRfe6vPzGmSw/karvmpY3VVYj8eq4fM5zVjVrOO tsewdZO/yHZ7+ZvvibmkJoDkHvFYbTvWwRDyhJBij1ZyO1VuTt9ChfeZJju3IRA9 x2JNYBykwgm7YsU5C7A7rnIPbFDk9904NLDRpnUfBxLy8+isWpeL5TQ7leMGQqOp 9C5utQogea4bTxc+jCSCRAUh4Z1RtctiQeq61cSmhw3eEP9Jliwtkm32A7rNS2f+ j+stYlZUNkQVQAJMSd4XYnk87wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNUGf7wM Rn9fs1fF0NV2IzZrkV3PMB8GA1UdIwQYMBaAFDcDk7xkYOUtD14CHVUvWBdDPrLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDVDRi85OEQwQjRGODdC MUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVTMFBYZ0lkVlM5WUYwTS1z dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL053T1R2R1JnNVMwUFhnSWRWUzlZRjBNLXN1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDVDRi85OEQwQjRGODdCMUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVT MFBYZ0lkVlM5WUYwTS1zdWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP1hPWuCRypdF4OONOpnA/QA1nhlH2lB+qGV++3y24S6Lqipv/DenP43QW1hf CNURxei/NSYvK7Ig7wD1wnw95FOVVN7Sh/i5A/aJUFhi9xBnJbElklgIA+OdoXZK N4YD0jKj8x7HOO1WdZDS40rcjgP/kKZ3ggwR9Dd+Nv0MPAB13511tcsgOy38h8zs p7ZMVsi4YtUbxYr1GCJlHcAjN0JIDwi4/8LK3c7IWsebdeTAmHYNU4TopXOHApDh gDfeMrSyoUbkCr8ewRHrTPHx4eR4bCb25xE9WXT8BnK7verAoVfGn5BUrPCz2rg7 9NQLdGGlgijeQlU11MyiOsQrWg== -----END CERTIFICATE-----Generated at Thu Mar 26 00:56:42 2026 by rpki-client