$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft File: nZwAihKi96YP7_liJmsFAqHKC6I.mft (raw, json) Hash identifier: 71V9Vz7fIB9T2eMLaQo/DuyjQODB9UBJGZvdYXs/AUQ= Subject key identifier: 33:17:89:0D:04:38:97:6A:98:56:D2:27:70:EB:4E:58:D7:19:00:FF Authority key identifier: 9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 Certificate issuer: /CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Certificate serial: 05C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft Manifest number: 05B5 Signing time: Sat 28 Mar 2026 23:00:17 +0000 Manifest this update: Sat 28 Mar 2026 23:00:16 +0000 Manifest next update: Sat 04 Apr 2026 23:00:16 +0000 Files and hashes: 1: nZwAihKi96YP7_liJmsFAqHKC6I.crl (hash: cy6reh3/wp2zJSRVp6h3UJt4pB3vHIABLiO+XwHM7rQ=) 2: 46A2104603CF11ECA480B07CC4F9AE02.roa (hash: YWL2tnOxZhR6Kv+bhZGzV6FUKHaCEBSKA7cxdxelpv4=) 3: 460AA4AE03CF11ECA480B07CC4F9AE02.roa (hash: 8wbWE+NHbm5WX/IacxW1nTlGzZjirDSvgH7MSKpS2Nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 23:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1475 (0x5c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB85A, serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Validity Not Before: Mar 28 23:00:16 2026 GMT Not After : Apr 4 23:00:16 2026 GMT Subject: CN=69c85d81-9334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:48:6e:d5:b8:c3:d3:70:77:ec:24:0b:2e:c7: 35:25:0e:79:b6:a9:00:88:6c:a6:fb:ca:4f:05:67: 65:4f:16:f9:4d:f8:b6:e6:00:3f:c7:d6:cd:3a:65: 06:5a:a4:97:46:b8:ea:a9:8b:7c:55:06:e0:79:05: 55:55:4c:a9:3a:19:4e:84:4c:04:ed:c6:5b:1b:2a: 9f:96:72:72:03:e8:98:2e:99:00:65:36:01:24:13: e3:96:8b:2f:90:33:a7:97:b7:00:98:25:59:c0:13: 1f:84:be:8c:fc:76:bb:23:63:1c:13:5b:cd:3a:a6: c9:94:fc:74:33:f4:f5:e9:a2:3a:a9:32:f6:06:f0: db:3b:4c:07:0a:5a:b2:c6:4f:d4:10:86:2e:8e:aa: bf:cd:3b:fc:e7:e5:31:8d:25:f3:ca:ea:68:b8:bf: ac:e3:93:0d:5b:23:d7:bb:50:fa:9e:41:f9:11:7d: aa:f3:13:c5:e4:1f:62:8c:30:95:90:98:01:73:69: b2:95:05:31:91:dc:0f:a2:e4:cc:af:ea:9e:36:eb: 99:73:56:fb:39:67:a8:c9:91:2d:08:62:d5:36:5d: 39:f2:fa:50:6e:7a:14:42:a1:a3:f5:06:94:c8:57: 53:62:e0:8d:76:7c:98:0c:6b:65:3b:75:91:36:c7: 63:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:17:89:0D:04:38:97:6A:98:56:D2:27:70:EB:4E:58:D7:19:00:FF X509v3 Authority Key Identifier: keyid:9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b7:d9:62:72:75:25:42:b1:c9:ad:b5:c8:45:83:0b:99:1c: c4:01:37:d0:8e:6c:ff:d9:3c:7b:49:0b:8c:1f:32:7a:03:32: d3:83:c7:23:a0:8a:22:fc:bd:af:4b:39:4e:be:2d:3b:fb:d0: 5c:4d:da:c8:ba:96:dd:0e:0f:ca:8d:b3:a8:00:4b:f4:e7:61: 42:62:11:d2:24:c1:57:1b:38:41:7b:64:3e:c9:36:d7:39:23: 33:b5:4d:6c:59:2f:e3:e0:91:2c:6b:7c:ae:3d:f5:2b:18:3f: 1a:cd:96:24:7a:32:65:2d:45:aa:77:68:bc:88:a1:0d:1f:09: ec:0f:2f:4e:81:e4:02:e5:b2:da:23:19:c6:da:d5:17:5f:19: d9:b1:4f:bf:49:33:94:52:c1:66:96:d5:63:43:37:b7:6f:21: 59:32:95:b3:ea:ca:e8:ad:be:ff:a4:29:b4:3c:02:9f:f2:c0: b9:36:8d:e2:7a:ea:6b:14:03:94:da:42:90:0a:ce:77:c5:d7: 84:8d:41:8d:aa:43:ba:a7:5f:d4:db:33:72:1f:3c:d3:84:53: 5d:1c:28:98:74:7a:11:31:27:d0:ec:19:18:54:79:03:eb:2b: c9:22:a2:e6:49:37:05:54:7d:0a:5b:d4:d6:64:5e:61:ed:a2: d0:56:ad:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI4NUExMTAvBgNVBAUTKDlEOUMwMDhBMTJBMkY3QTYwRkVGRjk2MjI2NkIwNTAy QTFDQTBCQTIwHhcNMjYwMzI4MjMwMDE2WhcNMjYwNDA0MjMwMDE2WjAYMRYwFAYD VQQDEw02OWM4NWQ4MS05MzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUhu1bjD03B37CQLLsc1JQ55tqkAiGym+8pPBWdlTxb5Tfi25gA/x9bNOmUG WqSXRrjqqYt8VQbgeQVVVUypOhlOhEwE7cZbGyqflnJyA+iYLpkAZTYBJBPjlosv kDOnl7cAmCVZwBMfhL6M/Ha7I2McE1vNOqbJlPx0M/T16aI6qTL2BvDbO0wHClqy xk/UEIYujqq/zTv85+UxjSXzyupouL+s45MNWyPXu1D6nkH5EX2q8xPF5B9ijDCV kJgBc2mylQUxkdwPouTMr+qeNuuZc1b7OWeoyZEtCGLVNl058vpQbnoUQqGj9QaU yFdTYuCNdnyYDGtlO3WRNsdjkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDMXiQ0E OJdqmFbSJ3DrTljXGQD/MB8GA1UdIwQYMBaAFJ2cAIoSovemD+/5YiZrBQKhygui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjg1QS8xODVDMzlCNjAz Q0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2WVA3X2xpSm1zRkFxSEtD NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25ad0FpaEtpOTZZUDdfbGlKbXNGQXFIS0M2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjg1QS8xODVDMzlCNjAzQ0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2 WVA3X2xpSm1zRkFxSEtDNkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjrfZYnJ1JUKxya21yEWDC5kcxAE30I5s/9k8e0kLjB8yegMy04PHI6CKIvy9 r0s5Tr4tO/vQXE3ayLqW3Q4Pyo2zqABL9OdhQmIR0iTBVxs4QXtkPsk21zkjM7VN bFkv4+CRLGt8rj31Kxg/Gs2WJHoyZS1FqndovIihDR8J7A8vToHkAuWy2iMZxtrV F18Z2bFPv0kzlFLBZpbVY0M3t28hWTKVs+rK6K2+/6QptDwCn/LAuTaN4nrqaxQD lNpCkArOd8XXhI1BjapDuqdf1Nszch8804RTXRwomHR6ETEn0OwZGFR5A+srySKi 5kk3BVR9ClvU1mReYe2i0Fatew== -----END CERTIFICATE-----Generated at Mon Mar 30 08:32:30 2026 by rpki-client