$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft File: nGj0A_AkAXvdJtbdDSAnpAK58oE.mft (raw, json) Hash identifier: JkYwPT82nOXd3ldQW18ZlXawe/wN33slY27S4dI2nmM= Subject key identifier: A5:1E:21:3B:79:D9:59:9A:D0:4A:92:C3:22:1A:BB:21:70:1A:AE:1B Authority key identifier: 9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81 Certificate issuer: /CN=A91B190F/serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft Manifest number: 0120 Signing time: Wed 25 Mar 2026 05:01:19 +0000 Manifest this update: Wed 25 Mar 2026 05:01:18 +0000 Manifest next update: Wed 01 Apr 2026 05:01:18 +0000 Files and hashes: 1: nGj0A_AkAXvdJtbdDSAnpAK58oE.crl (hash: /cVTAvOPODbVP/ffim5zHomfHR5LwjzdVSRKN5uY/7w=) 2: B3634C229F4D11F098C42465C4F9AE02.roa (hash: WwFFmG8/4wsEls41tloUK6sLzod+S/W4CA8w6ITWHJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B190F, serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281 Validity Not Before: Mar 25 05:01:18 2026 GMT Not After : Apr 1 05:01:18 2026 GMT Subject: CN=69c36c1e-b6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:54:fb:a0:58:7c:d8:c0:a9:68:23:17:f2:28: 1a:16:f0:c4:6c:d0:75:e0:09:6d:af:17:50:1c:29: 31:4a:e2:04:c0:5a:7a:c3:ed:00:5c:18:b9:cd:59: 2f:f5:4c:93:6b:66:d6:26:ab:a1:df:ed:38:b6:af: 81:ca:e3:31:ab:55:7f:44:a1:d5:66:5b:5c:56:50: c4:09:e0:b5:20:3f:81:8a:e8:d4:cd:c7:f2:3e:60: 14:94:06:6b:fe:b8:4d:db:ae:b7:0a:3f:04:af:ff: 76:bc:5e:50:f1:94:ca:98:25:cb:11:94:74:d0:46: 1b:7d:b4:6a:b5:48:63:a3:ff:f8:11:b0:0e:42:30: bb:37:73:02:b9:d1:e6:e2:fb:b0:ae:82:c5:97:2e: 90:a0:ff:5e:ed:26:fc:60:b9:7e:8e:43:18:33:56: d7:5b:a4:d4:62:59:94:2f:d4:10:df:63:02:96:bd: 4b:89:94:18:c4:59:6b:00:97:6b:a4:b2:c4:8a:29: e8:fb:3f:e5:21:c3:9c:28:c2:0d:68:c7:15:58:88: 4a:82:be:fd:a9:b7:41:4c:75:c7:dc:18:ae:e4:12: 22:7a:59:c2:7c:62:44:6c:88:04:ed:6f:eb:67:b1: fd:c0:12:09:cf:bc:33:77:fa:61:8d:04:a2:78:82: cc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1E:21:3B:79:D9:59:9A:D0:4A:92:C3:22:1A:BB:21:70:1A:AE:1B X509v3 Authority Key Identifier: keyid:9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:5f:1a:9c:8e:3a:81:84:11:20:92:94:44:68:96:85:6a:81: fa:63:43:f3:d0:2f:f5:83:b9:00:19:3e:c2:ef:13:94:92:c6: c5:44:47:d7:f8:12:ce:eb:87:05:dc:5b:49:d1:71:de:e8:9d: b9:e3:a1:85:9f:2b:04:35:c5:e1:d8:ab:19:00:7e:8c:c5:a4: 05:91:76:9b:ce:44:7a:c6:a7:b4:aa:8f:d6:14:58:aa:57:32: b0:bf:d2:bd:8d:b8:0b:5f:5c:1d:16:75:87:4c:21:8f:ca:5d: b6:37:f1:0d:d0:24:56:c8:45:45:cc:fc:f4:bc:d2:fb:0d:42: 18:3f:4f:f0:c9:64:de:f7:ae:e2:63:b0:f2:9e:34:c7:c1:3a: d3:ff:33:12:46:d6:3e:ee:42:a6:93:08:9a:e9:dd:d2:03:93: c2:1a:d5:e6:b6:01:a4:aa:93:90:3c:2b:b1:1b:a4:39:8b:ee: 82:c1:9a:66:e5:b3:dc:ab:42:7c:86:d6:ae:dc:41:8c:cd:ea: 07:78:82:68:e3:62:7d:83:69:56:c8:a7:2b:80:01:74:5c:87: 95:67:2a:39:5b:f3:ec:b4:1c:18:03:35:e5:14:e8:4a:8f:7c: fa:bd:58:6f:8e:b3:c5:b2:59:89:8d:94:29:34:d8:dc:d8:d4: 60:dc:04:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE5MEYxMTAvBgNVBAUTKDlDNjhGNDAzRjAyNDAxN0JERDI2RDZERDBEMjAyN0E0 MDJCOUYyODEwHhcNMjYwMzI1MDUwMTE4WhcNMjYwNDAxMDUwMTE4WjAYMRYwFAYD VQQDEw02OWMzNmMxZS1iNmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAplT7oFh82MCpaCMX8igaFvDEbNB14AltrxdQHCkxSuIEwFp6w+0AXBi5zVkv 9UyTa2bWJquh3+04tq+ByuMxq1V/RKHVZltcVlDECeC1ID+BiujUzcfyPmAUlAZr /rhN2663Cj8Er/92vF5Q8ZTKmCXLEZR00EYbfbRqtUhjo//4EbAOQjC7N3MCudHm 4vuwroLFly6QoP9e7Sb8YLl+jkMYM1bXW6TUYlmUL9QQ32MClr1LiZQYxFlrAJdr pLLEiino+z/lIcOcKMINaMcVWIhKgr79qbdBTHXH3Biu5BIielnCfGJEbIgE7W/r Z7H9wBIJz7wzd/phjQSieILMdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKUeITt5 2Vma0EqSwyIauyFwGq4bMB8GA1UdIwQYMBaAFJxo9APwJAF73SbW3Q0gJ6QCufKB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTkwRi9CRkE5NkZBQTdC RUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9uR2owQV9Ba0FYdmRKdGJkRFNBbnBBSzU4 b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25HajBBX0FrQVh2ZEp0YmREU0FucEFLNThvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTkwRi9CRkE5NkZBQTdCRUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9uR2owQV9Ba0FY dmRKdGJkRFNBbnBBSzU4b0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiF8anI46gYQRIJKURGiWhWqB+mND89Av9YO5ABk+wu8TlJLGxURH1/gSzuuH BdxbSdFx3uidueOhhZ8rBDXF4dirGQB+jMWkBZF2m85EesantKqP1hRYqlcysL/S vY24C19cHRZ1h0whj8pdtjfxDdAkVshFRcz89LzS+w1CGD9P8Mlk3veu4mOw8p40 x8E60/8zEkbWPu5CppMImund0gOTwhrV5rYBpKqTkDwrsRukOYvugsGaZuWz3KtC fIbWrtxBjM3qB3iCaONifYNpVsinK4ABdFyHlWcqOVvz7LQcGAM15RToSo98+r1Y b46zxbJZiY2UKTTY3NjUYNwETg== -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:53 2026 by rpki-client