$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft File: nlE6zE17kAFKhn-1KviSKeALpKw.mft (raw, json) Hash identifier: L1MVshgdS4zZdrJoo/7kjdgit3FFjmiM7Zhogl5aC7I= Subject key identifier: 5C:02:C0:BC:B2:09:14:95:3A:0B:46:04:71:F2:26:DC:85:0A:92:CC Authority key identifier: 9E:51:3A:CC:4D:7B:90:01:4A:86:7F:B5:2A:F8:92:29:E0:0B:A4:AC Certificate issuer: /CN=A91B2472/serialNumber=9E513ACC4D7B90014A867FB52AF89229E00BA4AC Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft Manifest number: 013D Signing time: Wed 25 Mar 2026 04:37:12 +0000 Manifest this update: Wed 25 Mar 2026 04:37:12 +0000 Manifest next update: Wed 01 Apr 2026 04:37:12 +0000 Files and hashes: 1: nlE6zE17kAFKhn-1KviSKeALpKw.crl (hash: gcyBeZdfxyHXbtlsCBCyT4b8soJ0hY0NHrN97nYXf3w=) 2: 1B4BDA5C48B011EF9D34415EC4F9AE02.roa (hash: i0u++KF1Q5xKES8G1ajMnqQJU/uhVCVuB5dgmU3QsM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.crl rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2472, serialNumber=9E513ACC4D7B90014A867FB52AF89229E00BA4AC Validity Not Before: Mar 25 04:37:12 2026 GMT Not After : Apr 1 04:37:12 2026 GMT Subject: CN=69c36678-02bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a0:e6:c4:89:e7:74:16:72:b2:ba:58:6a:4a: 32:12:9a:69:c0:2c:06:6e:79:5c:3a:ef:2a:64:9f: e9:f8:bf:b2:f6:4d:36:ed:11:59:fa:7f:7f:36:bf: 71:30:77:a0:20:b6:47:ff:31:ec:fd:4b:c5:0e:71: 55:89:bd:e2:68:b4:6a:80:8f:15:bb:6c:45:f1:0e: 6e:b2:11:2d:d2:9d:3a:60:92:4b:79:3b:68:65:b2: 08:dd:97:f8:b6:70:38:6b:81:71:f7:22:b4:31:a2: 44:d2:a0:48:80:4c:6d:b0:f6:c7:7e:b1:2c:91:3b: 66:c8:16:12:03:1d:e0:30:d4:fa:c1:3e:83:e2:78: dc:23:38:ba:ae:1b:c5:fa:aa:2f:ca:c7:e3:80:0c: 68:71:fe:47:c0:ba:27:67:1f:0b:71:33:ec:df:be: 71:3c:22:df:f6:82:2f:8b:3e:51:a4:26:c8:79:99: cf:3c:14:fe:37:7d:26:82:0e:df:c7:3a:46:76:1e: 6f:a7:f5:5b:d6:51:fe:43:82:1c:2c:d6:4f:15:80: da:bc:22:49:f3:92:4f:4f:2f:00:c8:7b:4c:5b:5a: a8:54:de:08:b8:55:ea:9e:62:6a:78:be:a6:46:aa: 9d:f5:ab:b0:ab:44:30:d0:a8:89:ad:47:90:5a:d9: c5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:02:C0:BC:B2:09:14:95:3A:0B:46:04:71:F2:26:DC:85:0A:92:CC X509v3 Authority Key Identifier: keyid:9E:51:3A:CC:4D:7B:90:01:4A:86:7F:B5:2A:F8:92:29:E0:0B:A4:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:5f:61:10:c4:5c:4c:7d:9a:13:c1:17:03:b6:e2:95:b6:87: cc:51:0e:26:87:90:1d:55:9e:12:70:80:3d:f4:f7:5d:b8:c2: 35:4e:02:64:d2:81:85:fe:ce:e1:39:5a:a6:4a:8b:aa:0b:55: fd:26:b1:00:a6:e4:7c:12:49:b1:3e:42:4f:45:6f:96:bb:77: 65:de:f4:8b:f6:ea:7c:83:c3:79:d8:bf:a3:ca:34:67:7c:49: 9f:25:43:4d:d9:7b:cf:b8:ea:f3:ec:2d:ab:87:86:e0:bd:fb: 8e:0f:95:e1:ce:6a:de:bf:4a:06:d1:d1:8d:04:a9:6a:69:aa: 8d:6a:53:4a:12:b5:a4:2e:88:c3:b2:04:2a:b4:91:15:4b:56: e5:83:c7:2f:2f:a9:fd:8d:14:44:6e:70:8d:59:1e:90:2e:86: d6:10:59:bb:59:82:ed:93:a1:6b:28:24:15:c0:5a:ec:00:86: a3:fb:cf:d4:b1:40:5b:a5:c3:d7:ac:d0:1c:48:43:1e:6a:39: 5f:94:4b:97:25:d2:c4:35:f4:a1:a4:7c:c2:05:c7:e0:7e:09: 60:f9:fa:f3:bf:fa:f2:1c:0b:49:29:1b:a5:d7:8a:21:ce:22: 8d:4b:3a:29:85:2d:4f:9f:0c:92:f1:f8:99:a7:d8:7a:d3:9a: 8f:fe:bf:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI0NzIxMTAvBgNVBAUTKDlFNTEzQUNDNEQ3QjkwMDE0QTg2N0ZCNTJBRjg5MjI5 RTAwQkE0QUMwHhcNMjYwMzI1MDQzNzEyWhcNMjYwNDAxMDQzNzEyWjAYMRYwFAYD VQQDEw02OWMzNjY3OC0wMmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqDmxInndBZysrpYakoyEpppwCwGbnlcOu8qZJ/p+L+y9k027RFZ+n9/Nr9x MHegILZH/zHs/UvFDnFVib3iaLRqgI8Vu2xF8Q5ushEt0p06YJJLeTtoZbII3Zf4 tnA4a4Fx9yK0MaJE0qBIgExtsPbHfrEskTtmyBYSAx3gMNT6wT6D4njcIzi6rhvF +qovysfjgAxocf5HwLonZx8LcTPs375xPCLf9oIviz5RpCbIeZnPPBT+N30mgg7f xzpGdh5vp/Vb1lH+Q4IcLNZPFYDavCJJ85JPTy8AyHtMW1qoVN4IuFXqnmJqeL6m Rqqd9auwq0Qw0KiJrUeQWtnFNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFwCwLyy CRSVOgtGBHHyJtyFCpLMMB8GA1UdIwQYMBaAFJ5ROsxNe5ABSoZ/tSr4kingC6Ss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjQ3Mi9FNjJCNzM1QTQ4 MTkxMUVGQjhCRTQ1MzRDNEY5QUUwMi9ubEU2ekUxN2tBRktobi0xS3ZpU0tlQUxw S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25sRTZ6RTE3a0FGS2huLTFLdmlTS2VBTHBLdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjQ3Mi9FNjJCNzM1QTQ4MTkxMUVGQjhCRTQ1MzRDNEY5QUUwMi9ubEU2ekUxN2tB Rktobi0xS3ZpU0tlQUxwS3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsV9hEMRcTH2aE8EXA7bilbaHzFEOJoeQHVWeEnCAPfT3XbjCNU4CZNKBhf7O 4TlapkqLqgtV/SaxAKbkfBJJsT5CT0Vvlrt3Zd70i/bqfIPDedi/o8o0Z3xJnyVD Tdl7z7jq8+wtq4eG4L37jg+V4c5q3r9KBtHRjQSpammqjWpTShK1pC6Iw7IEKrSR FUtW5YPHLy+p/Y0URG5wjVkekC6G1hBZu1mC7ZOhaygkFcBa7ACGo/vP1LFAW6XD 16zQHEhDHmo5X5RLlyXSxDX0oaR8wgXH4H4JYPn687/68hwLSSkbpdeKIc4ijUs6 KYUtT58MkvH4mafYetOaj/6/bA== -----END CERTIFICATE-----Generated at Fri Mar 27 00:56:19 2026 by rpki-client