$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft File: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft (raw, json) Hash identifier: zcbhuFGSrFqaIvGqmmZYmB+zC9EYQKgeRWsyIqrAG40= Subject key identifier: FF:C1:BF:31:50:3B:B4:B1:3A:1D:CD:1C:C7:3E:CC:88:F0:3B:ED:D0 Authority key identifier: 35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 Certificate issuer: /CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Certificate serial: 19CD Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft Manifest number: 4BCD Signing time: Thu 26 Mar 2026 15:22:37 +0000 Manifest this update: Thu 26 Mar 2026 15:22:36 +0000 Manifest next update: Thu 02 Apr 2026 15:22:36 +0000 Files and hashes: 1: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl (hash: tZqgNojggJK4Sj0RhxmkLzI9KqarnoVyvbn8F8kh53o=) 2: F22C58CEE69611EAA594260CC4F9AE02.roa (hash: 9yNn6fM/mAMTPBWBJguXD7+aFLMZWUxYjmpKTvo8s9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6605 (0x19cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Validity Not Before: Mar 26 15:22:36 2026 GMT Not After : Apr 2 15:22:36 2026 GMT Subject: CN=69c54f3c-7dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6f:32:b9:0e:f6:8b:e6:c8:d8:13:31:3e:4b: 1f:dc:aa:c7:fd:e9:fe:c2:b0:49:4d:3f:15:02:6a: dd:6a:07:bd:00:f7:e0:b6:cf:ed:88:bb:44:99:42: 20:73:9c:df:8d:87:dc:5b:28:2a:cf:fe:17:80:42: 7e:bd:c3:47:10:48:63:5f:45:a1:b5:d5:64:56:08: 45:5d:9d:43:e8:d3:99:85:e4:cf:2e:0b:a2:dd:f0: 18:17:d2:59:31:ad:f0:81:0b:1b:c2:92:7b:a6:be: d2:46:65:b2:90:8d:50:50:76:bd:b8:6c:c3:2a:5b: 88:8b:ce:3a:07:9f:71:b9:fb:54:b8:4c:be:24:21: 63:33:b8:a3:36:2d:f0:24:c5:8d:34:c3:ef:4b:20: a1:21:16:02:9b:eb:d5:cd:56:77:1a:d6:3c:3c:b8: be:26:56:d8:d3:05:9e:86:84:89:71:1b:c2:15:4a: b3:50:d2:5c:4f:61:bc:31:40:d2:d0:6b:58:fe:a8: 01:1e:5b:7d:62:c1:3c:d4:59:f3:9a:68:87:ca:26: 90:9e:65:4f:84:33:5d:c7:11:d9:79:1f:79:4e:d9: 38:fa:b1:28:c8:62:b0:a4:c1:af:ed:ee:c6:68:06: 26:59:c1:90:86:31:91:bb:43:dc:9f:40:49:05:55: 22:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C1:BF:31:50:3B:B4:B1:3A:1D:CD:1C:C7:3E:CC:88:F0:3B:ED:D0 X509v3 Authority Key Identifier: keyid:35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:f6:2d:6c:07:42:66:62:a0:6d:9b:e7:a8:24:16:14:15:72: f0:d8:7a:ac:78:08:76:3c:c3:9a:09:90:c7:a6:f6:5d:ab:9d: f8:d0:16:ce:d1:36:03:62:9d:42:fd:5d:3c:22:62:c8:fc:c7: ce:b1:69:c2:08:b7:b1:04:95:a7:36:35:94:cb:94:80:2d:5a: 75:e3:fb:e4:f6:2e:16:8b:78:d4:cf:3a:91:35:dc:c7:1d:f7: 82:23:2c:07:0c:e7:fa:3c:6e:34:b6:d9:2f:00:16:22:51:83: 21:98:f6:0c:11:6a:e8:59:e9:68:58:84:b1:5b:e1:98:d0:65: 23:3b:f2:dd:33:12:16:bd:b1:01:d6:cf:fa:c9:5b:04:8c:a1: 09:cb:a9:6f:ad:5d:7b:58:d5:f9:3c:5f:3f:58:97:e0:6f:17: 0f:07:bc:f0:d5:ca:40:71:da:58:e2:07:7d:f8:71:02:db:d7: b3:86:da:79:d9:ef:2c:99:1b:d7:d5:9c:03:f1:92:53:9d:d2: 08:e9:a0:62:0f:4f:23:ba:54:b3:46:a0:e5:92:16:92:43:6d: 77:e7:40:ca:a7:99:81:aa:e4:57:8a:24:d3:f6:78:f8:68:23: 77:d6:dd:5e:55:89:7f:27:27:9f:9e:82:f7:fb:be:03:87:4e: 1e:72:f2:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDM1QTNGNjFGQzVERkYxOTJDMUQ5MEM3NEFCODJDN0Ey NUQ3RTE2RDgwHhcNMjYwMzI2MTUyMjM2WhcNMjYwNDAyMTUyMjM2WjAYMRYwFAYD VQQDEw02OWM1NGYzYy03ZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtm8yuQ72i+bI2BMxPksf3KrH/en+wrBJTT8VAmrdage9APfgts/tiLtEmUIg c5zfjYfcWygqz/4XgEJ+vcNHEEhjX0WhtdVkVghFXZ1D6NOZheTPLgui3fAYF9JZ Ma3wgQsbwpJ7pr7SRmWykI1QUHa9uGzDKluIi846B59xuftUuEy+JCFjM7ijNi3w JMWNNMPvSyChIRYCm+vVzVZ3GtY8PLi+JlbY0wWehoSJcRvCFUqzUNJcT2G8MUDS 0GtY/qgBHlt9YsE81FnzmmiHyiaQnmVPhDNdxxHZeR95Ttk4+rEoyGKwpMGv7e7G aAYmWcGQhjGRu0Pcn0BJBVUiOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP/BvzFQ O7SxOh3NHMc+zIjwO+3QMB8GA1UdIwQYMBaAFDWj9h/F3/GSwdkMdKuCx6JdfhbY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8wREYzQjI1RTcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjhaTEIyUXgwcTRMSG9sMS1G dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL05hUDJIOFhmOFpMQjJReDBxNExIb2wxLUZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RURCMi8wREYzQjI1RTcwRTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjha TEIyUXgwcTRMSG9sMS1GdGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr/YtbAdCZmKgbZvnqCQWFBVy8Nh6rHgIdjzDmgmQx6b2Xaud+NAWztE2A2Kd Qv1dPCJiyPzHzrFpwgi3sQSVpzY1lMuUgC1adeP75PYuFot41M86kTXcxx33giMs Bwzn+jxuNLbZLwAWIlGDIZj2DBFq6FnpaFiEsVvhmNBlIzvy3TMSFr2xAdbP+slb BIyhCcupb61de1jV+TxfP1iX4G8XDwe88NXKQHHaWOIHffhxAtvXs4baednvLJkb 19WcA/GSU53SCOmgYg9PI7pUs0ag5ZIWkkNtd+dAyqeZgarkV4ok0/Z4+Ggjd9bd XlWJfycnn56C9/u+A4dOHnLyJg== -----END CERTIFICATE-----Generated at Thu Mar 26 22:27:53 2026 by rpki-client