$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft File: NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft (raw, json) Hash identifier: afg3/kqdbnG8yKGyUGmibKzbkR+1ipolYmUVkIrNKFE= Subject key identifier: 5F:BA:70:EE:BF:F6:42:60:EA:2A:2F:5A:B2:3C:31:F4:C3:83:B5:6F Authority key identifier: 34:F0:F8:CD:87:B8:8C:4F:52:0E:46:FB:95:D2:DB:84:FA:04:33:62 Certificate issuer: /CN=A91A7B36/serialNumber=34F0F8CD87B88C4F520E46FB95D2DB84FA043362 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft Manifest number: 9A Signing time: Wed 25 Mar 2026 06:37:37 +0000 Manifest this update: Wed 25 Mar 2026 06:37:36 +0000 Manifest next update: Wed 01 Apr 2026 06:37:36 +0000 Files and hashes: 1: NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl (hash: b0YYUbmdpIz3LjcxLnc924DqUtZsRJdaN3mYhUSnuRY=) 2: 5E4EF73E409011F0986B1F68C4F9AE02.roa (hash: lbwk8mNKjMeoW18suzzRQjcBAL5Bd/eKgngvQTadOm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B36, serialNumber=34F0F8CD87B88C4F520E46FB95D2DB84FA043362 Validity Not Before: Mar 25 06:37:36 2026 GMT Not After : Apr 1 06:37:36 2026 GMT Subject: CN=69c382b1-a5a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5c:f4:bd:12:a6:90:ae:d4:52:3b:6d:7d:96: d4:ea:13:3d:fd:d8:9f:27:cd:f0:8d:10:6b:0d:d4: f0:76:03:f3:c8:87:a6:81:06:7a:03:2e:01:0f:8f: 38:4f:35:56:b6:3c:b5:45:ab:ad:b4:1d:04:dc:9f: a5:a8:ce:4d:b4:4d:7d:da:45:a7:6a:3f:96:82:6c: fd:15:73:5d:99:21:31:20:49:5a:e4:97:88:68:47: 29:89:34:22:9b:8a:b2:bf:cc:9c:85:3e:e5:82:dc: 65:fa:29:93:5e:c4:b9:d5:c3:6d:18:2f:d0:d7:2e: 2f:1d:3a:92:a5:86:cb:b9:0f:0f:e1:f4:4c:6c:4f: 5a:09:f7:e4:39:af:0d:fc:6a:1f:e7:f4:b6:72:c9: c0:4e:2a:b6:45:07:3a:3a:a6:60:85:21:7c:52:ae: 12:fe:49:38:68:26:0d:17:17:b7:6f:26:6b:04:73: b3:b8:8c:cd:2d:12:8a:d4:f9:3b:8a:5f:b2:02:77: 81:ab:6c:89:61:b3:46:a1:e0:15:f1:a3:c1:3e:4b: 95:5d:c7:77:16:f5:38:94:34:7b:d7:a8:37:8d:ef: fc:57:fa:5f:79:e0:72:33:c5:e5:cc:37:76:41:84: 29:8b:62:01:30:e9:fb:93:34:41:6e:5d:12:9a:79: bf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:BA:70:EE:BF:F6:42:60:EA:2A:2F:5A:B2:3C:31:F4:C3:83:B5:6F X509v3 Authority Key Identifier: keyid:34:F0:F8:CD:87:B8:8C:4F:52:0E:46:FB:95:D2:DB:84:FA:04:33:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:d4:ad:a4:d5:0d:51:5f:aa:80:d1:1c:c7:d7:42:a9:fc:da: 1c:70:36:4e:5e:a9:25:7e:ee:86:c8:23:17:91:f6:a3:ca:8d: 86:dc:dc:19:b4:90:49:29:82:3c:9d:42:64:77:41:bd:ed:a8: f9:ad:c6:02:36:13:d6:2f:d5:bf:71:41:cb:a4:8a:9e:33:f4: 0a:9e:2c:64:f2:ab:fb:c0:23:85:67:66:6c:e7:08:83:cd:a8: 36:6e:5a:65:bd:9e:d9:ef:68:f7:fe:35:e9:c4:5c:9f:79:2c: b7:d5:a4:13:83:d6:e3:e7:47:c1:65:92:7f:33:72:67:cd:40: 90:f6:e7:74:7f:54:69:1b:f1:96:fe:4d:34:5d:44:d9:5c:3e: b5:1a:39:e6:e9:a3:4a:fb:2c:2f:ab:cc:ae:ab:81:c3:2e:39: 24:5f:de:8d:e7:26:93:5e:49:4f:77:79:65:25:41:58:66:13: 5c:92:ae:3c:9b:90:5f:e4:e5:61:a0:0e:e4:1a:54:b8:b2:7d: e2:67:e7:28:ab:b5:83:4b:a8:50:b6:34:5a:b5:2e:4e:ee:43: ec:e6:ca:35:73:aa:c8:71:0a:bc:30:67:80:28:ef:94:23:90: fe:b8:8a:b9:7d:3d:cd:7e:49:56:69:2b:33:a9:42:50:8f:54: 4d:af:3e:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdCMzYxMTAvBgNVBAUTKDM0RjBGOENEODdCODhDNEY1MjBFNDZGQjk1RDJEQjg0 RkEwNDMzNjIwHhcNMjYwMzI1MDYzNzM2WhcNMjYwNDAxMDYzNzM2WjAYMRYwFAYD VQQDEw02OWMzODJiMS1hNWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1z0vRKmkK7UUjttfZbU6hM9/difJ83wjRBrDdTwdgPzyIemgQZ6Ay4BD484 TzVWtjy1RauttB0E3J+lqM5NtE192kWnaj+Wgmz9FXNdmSExIEla5JeIaEcpiTQi m4qyv8ychT7lgtxl+imTXsS51cNtGC/Q1y4vHTqSpYbLuQ8P4fRMbE9aCffkOa8N /Gof5/S2csnATiq2RQc6OqZghSF8Uq4S/kk4aCYNFxe3byZrBHOzuIzNLRKK1Pk7 il+yAneBq2yJYbNGoeAV8aPBPkuVXcd3FvU4lDR716g3je/8V/pfeeByM8XlzDd2 QYQpi2IBMOn7kzRBbl0Smnm/KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF+6cO6/ 9kJg6iovWrI8MfTDg7VvMB8GA1UdIwQYMBaAFDTw+M2HuIxPUg5G+5XS24T6BDNi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0IzNi83MkU2RkEyNjQw OEYxMUYwQjM0QUVGNDdDNEY5QUUwMi9OUEQ0elllNGpFOVNEa2I3bGRMYmhQb0VN MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05QRDR6WWU0akU5U0RrYjdsZExiaFBvRU0ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0IzNi83MkU2RkEyNjQwOEYxMUYwQjM0QUVGNDdDNEY5QUUwMi9OUEQ0elllNGpF OVNEa2I3bGRMYmhQb0VNMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI9StpNUNUV+qgNEcx9dCqfzaHHA2Tl6pJX7uhsgjF5H2o8qNhtzcGbSQSSmC PJ1CZHdBve2o+a3GAjYT1i/Vv3FBy6SKnjP0Cp4sZPKr+8AjhWdmbOcIg82oNm5a Zb2e2e9o9/416cRcn3kst9WkE4PW4+dHwWWSfzNyZ81AkPbndH9UaRvxlv5NNF1E 2Vw+tRo55umjSvssL6vMrquBwy45JF/ejecmk15JT3d5ZSVBWGYTXJKuPJuQX+Tl YaAO5BpUuLJ94mfnKKu1g0uoULY0WrUuTu5D7ObKNXOqyHEKvDBngCjvlCOQ/riK uX09zX5JVmkrM6lCUI9UTa8+eA== -----END CERTIFICATE-----Generated at Thu Mar 26 06:51:57 2026 by rpki-client