$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft File: nMiKhtCzfs7o1XZX75l4lTJoDN8.mft (raw, json) Hash identifier: 17WbsGPBdL+dK2lbmv3F/8Us37oHSfjxKxPQ4Zjfqe0= Subject key identifier: 25:A4:0D:05:4D:2A:14:E7:43:E5:9E:ED:81:FB:67:E7:98:E9:7E:D2 Authority key identifier: 9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF Certificate issuer: /CN=A91A4B39/serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft Manifest number: 01A7 Signing time: Fri 27 Mar 2026 03:39:49 +0000 Manifest this update: Fri 27 Mar 2026 03:39:49 +0000 Manifest next update: Fri 03 Apr 2026 03:39:49 +0000 Files and hashes: 1: nMiKhtCzfs7o1XZX75l4lTJoDN8.crl (hash: fEcIlpSM3+b3LJN/gVcpzqIW6OmPxQN9kU3fjEBE+J4=) 2: AA778F4CAF8A11EEB167DB64C4F9AE02.roa (hash: ehn04kQEo37JdGgytx1K1uXVldIdvvguae3z+PPv2LQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 03:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B39, serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF Validity Not Before: Mar 27 03:39:49 2026 GMT Not After : Apr 3 03:39:49 2026 GMT Subject: CN=69c5fc05-710c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:99:5c:1c:17:7b:0c:8c:80:cd:ef:51:48:bf: ef:02:27:c5:a9:1a:ae:74:d7:00:2d:94:9a:61:0c: f1:1b:ce:fd:dc:a0:86:b8:4e:82:ae:8f:f8:a0:46: 7d:bb:ed:bb:a2:bf:cf:b8:c6:86:4b:00:b9:7a:5e: dd:52:3d:ef:7e:da:6e:d9:62:21:09:78:f5:23:8a: f0:7c:7b:28:ca:de:0f:51:97:a0:07:e2:d7:fb:a7: 23:92:d8:45:73:50:46:f9:c1:ef:e7:e3:31:01:dd: 33:ce:ff:78:bc:b8:67:ff:7d:80:e7:23:44:32:b0: 76:72:3c:89:62:3e:c9:57:e4:9e:8d:48:57:55:44: 37:c9:64:f7:e4:e2:77:31:27:99:e5:a0:df:04:00: 3e:5e:c9:c1:46:fc:85:fa:3d:12:4b:5d:6b:61:5f: e4:f6:9d:19:58:27:25:30:f4:f7:07:66:5e:98:82: 6e:a5:97:30:14:f0:9c:31:43:68:a5:c2:7b:25:04: 66:ed:4a:7b:c5:89:82:0d:92:c1:7c:1c:48:99:10: 15:d8:24:13:4e:6d:07:78:ac:ca:b5:2f:60:b1:b2: d4:9a:8b:57:b8:ea:e2:7f:26:48:34:eb:b7:41:f6: 31:69:47:8d:8c:8d:21:ec:28:be:35:c2:0a:58:f9: 76:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A4:0D:05:4D:2A:14:E7:43:E5:9E:ED:81:FB:67:E7:98:E9:7E:D2 X509v3 Authority Key Identifier: keyid:9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:31:70:74:ce:73:d2:78:59:9e:a3:45:5c:f3:6a:d6:ea:58: 49:cd:55:7c:ed:b8:7a:e3:0d:2d:cd:22:af:95:4d:86:5d:c0: 86:8c:c2:5c:e0:2c:cc:2e:f9:14:4c:10:0d:30:a3:49:37:5b: 59:15:ab:0e:2b:62:67:e2:cb:2e:ec:e7:ea:e3:26:e3:fd:86: 62:08:80:25:44:57:45:31:52:a9:c4:6e:7b:23:05:0f:a7:87: 0d:2c:65:88:10:df:f3:98:3b:52:ab:ef:ef:76:ae:bc:1e:04: c1:ae:8b:4d:18:72:2f:fc:57:46:6c:1e:05:cc:75:40:53:9f: f7:ad:0b:d2:9b:31:0a:3d:59:3a:a6:fd:15:29:12:12:0c:a0: 42:b0:f7:6f:a2:d0:d2:4a:24:1f:d7:a7:44:df:38:4a:b3:d2: 09:89:36:28:8b:61:66:56:b4:01:dc:29:5d:4b:0c:b0:e3:70: 48:36:47:c2:65:90:59:9e:35:45:0d:94:87:16:ee:59:9c:37: 8c:28:4b:1f:b6:fb:0a:d1:91:4e:50:fb:38:8b:60:44:4c:e2: 46:3c:97:bd:9e:95:e6:3e:53:57:d1:cb:87:ca:69:e6:93:0b: 87:a2:76:78:ce:1f:be:6a:66:3f:be:a1:9d:be:16:05:e2:c4: bf:83:71:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMzkxMTAvBgNVBAUTKDlDQzg4QTg2RDBCMzdFQ0VFOEQ1NzY1N0VGOTk3ODk1 MzI2ODBDREYwHhcNMjYwMzI3MDMzOTQ5WhcNMjYwNDAzMDMzOTQ5WjAYMRYwFAYD VQQDEw02OWM1ZmMwNS03MTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6plcHBd7DIyAze9RSL/vAifFqRqudNcALZSaYQzxG8793KCGuE6Cro/4oEZ9 u+27or/PuMaGSwC5el7dUj3vftpu2WIhCXj1I4rwfHsoyt4PUZegB+LX+6cjkthF c1BG+cHv5+MxAd0zzv94vLhn/32A5yNEMrB2cjyJYj7JV+SejUhXVUQ3yWT35OJ3 MSeZ5aDfBAA+XsnBRvyF+j0SS11rYV/k9p0ZWCclMPT3B2ZemIJupZcwFPCcMUNo pcJ7JQRm7Up7xYmCDZLBfBxImRAV2CQTTm0HeKzKtS9gsbLUmotXuOrifyZINOu3 QfYxaUeNjI0h7Ci+NcIKWPl2KwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCWkDQVN KhTnQ+We7YH7Z+eY6X7SMB8GA1UdIwQYMBaAFJzIiobQs37O6NV2V++ZeJUyaAzf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIzOS9GRUY1NDlFOEFG MTYxMUVFOEM0OEE3NERDNEY5QUUwMi9uTWlLaHRDemZzN28xWFpYNzVsNGxUSm9E TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25NaUtodEN6ZnM3bzFYWlg3NWw0bFRKb0ROOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIzOS9GRUY1NDlFOEFGMTYxMUVFOEM0OEE3NERDNEY5QUUwMi9uTWlLaHRDemZz N28xWFpYNzVsNGxUSm9ETjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZTFwdM5z0nhZnqNFXPNq1upYSc1VfO24euMNLc0ir5VNhl3AhozCXOAszC75 FEwQDTCjSTdbWRWrDitiZ+LLLuzn6uMm4/2GYgiAJURXRTFSqcRueyMFD6eHDSxl iBDf85g7Uqvv73auvB4Ewa6LTRhyL/xXRmweBcx1QFOf960L0psxCj1ZOqb9FSkS EgygQrD3b6LQ0kokH9enRN84SrPSCYk2KIthZla0AdwpXUsMsONwSDZHwmWQWZ41 RQ2UhxbuWZw3jChLH7b7CtGRTlD7OItgREziRjyXvZ6V5j5TV9HLh8pp5pMLh6J2 eM4fvmpmP76hnb4WBeLEv4Nx1A== -----END CERTIFICATE-----Generated at Sat Mar 28 12:11:49 2026 by rpki-client