$ rpki-client -vvf rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft File: NfWNhhxBvf6ka4xykLGqxnDnzBs.mft (raw, json) Hash identifier: nJGIlcP6UjkhckMP9AXerhi116a/QUJvejoaHGS+E5Q= Subject key identifier: 01:89:D6:B8:E9:50:CD:0D:9B:05:ED:AA:B6:EE:98:6B:9B:AC:D1:5A Authority key identifier: 35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B Certificate issuer: /CN=A91B35BB/serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Certificate serial: 0BD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft Manifest number: 0BC6 Signing time: Thu 26 Mar 2026 18:50:30 +0000 Manifest this update: Thu 26 Mar 2026 18:50:30 +0000 Manifest next update: Thu 02 Apr 2026 18:50:30 +0000 Files and hashes: 1: NfWNhhxBvf6ka4xykLGqxnDnzBs.crl (hash: h003504m1pt+3MKekGvy5LWHYAnLdcIvI+aY3XUQ/nQ=) 2: 8F9F2F823C0111EAB6CB9936C4F9AE02.roa (hash: 3Z/JPqjZbXTvwbBYHDVc+0ddb1oxhY9tStpnOx9ITdQ=) 3: 902F47663C0111EAB6CB9936C4F9AE02.roa (hash: VuSr3kOQUjg9+28LT7ROPq/HuUEw9XEa1A4ZWRbVfXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3031 (0xbd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B35BB, serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Validity Not Before: Mar 26 18:50:30 2026 GMT Not After : Apr 2 18:50:30 2026 GMT Subject: CN=69c57ff6-9953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a2:86:d3:9b:5f:17:07:ed:1b:1e:a0:a2:b5: 21:53:ce:9d:70:36:5b:51:ee:ca:17:a5:16:25:78: 7a:28:87:e4:92:74:c3:a9:88:c6:6c:44:4d:11:57: c9:8f:70:b9:bb:8e:3f:42:da:88:bf:31:a5:c0:2f: 6e:b0:4a:89:db:c2:9b:5e:5f:f0:9d:11:3b:a7:d7: 46:c7:50:f5:9a:98:b0:1e:c4:e8:7c:3a:c1:4d:e6: 6f:46:8b:19:ad:da:16:91:74:be:1a:a3:bb:b5:ab: a7:06:f7:d3:ad:48:ed:9a:02:f5:70:a0:40:27:c1: 24:0b:72:64:de:82:81:c0:0d:2d:91:32:4b:03:56: e7:c2:ce:7c:72:4a:bd:62:fc:10:9c:b2:8e:21:ed: ea:e3:c5:a8:56:94:5f:ed:16:01:2a:75:43:82:3c: 45:eb:35:51:0e:15:c0:84:c6:e0:f0:ae:01:5d:e1: 5f:57:73:95:e1:cf:3c:7f:2a:24:11:2a:e6:fb:1b: 1a:9d:4f:6e:a0:01:b5:54:99:8e:c7:50:44:fc:3f: 28:bc:32:9e:ab:39:51:ff:18:91:30:76:4e:3f:ad: fc:7d:81:b0:74:35:7a:6e:e5:66:c0:b8:a2:82:47: 53:86:9c:12:08:51:cf:63:49:bb:e4:3d:93:ec:e0: c7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:89:D6:B8:E9:50:CD:0D:9B:05:ED:AA:B6:EE:98:6B:9B:AC:D1:5A X509v3 Authority Key Identifier: keyid:35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:47:92:31:cf:b6:dc:2b:36:b2:c5:18:5b:35:ad:e0:fa:d9: 85:8e:7b:44:d8:a3:86:cf:78:f5:dd:b1:12:55:d6:85:d9:e7: 56:aa:4e:e7:e2:27:33:6a:9a:1a:bd:70:4d:43:d4:b9:1c:1c: 01:93:04:24:10:25:5a:cf:52:54:c6:84:e0:36:8f:8b:aa:37: fc:54:6c:13:c7:3e:0e:86:59:70:4a:0a:33:6e:a2:b9:c7:29: bc:61:be:a9:51:fe:b8:c2:d5:c9:c6:bd:83:8b:fb:39:4a:4b: 1e:e3:a9:c4:a9:97:55:ea:83:cf:76:6a:b5:94:42:70:78:58: 50:da:a7:7d:a5:6b:01:ad:4f:4c:d1:8a:16:dc:f0:77:ed:a9: 26:e7:30:0d:4b:6c:9d:0d:7e:6c:92:8e:6e:2c:46:7b:4c:dc: 2f:de:16:53:ac:42:2b:4a:21:19:9d:38:3b:f8:8e:9d:39:c4: 96:6d:05:f5:66:36:d2:2b:31:2a:0d:5b:af:2a:b1:a0:ff:da: 8b:b6:bb:ca:e2:b1:62:34:9f:33:a6:7e:2a:bf:a2:43:bf:65: 4a:67:a4:24:b3:5f:56:a5:09:52:5f:44:28:87:68:f1:1e:c7: 83:7c:b9:81:c1:56:1d:5a:b6:67:9b:57:d2:c0:0f:73:60:75: c6:bb:0f:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1QkIxMTAvBgNVBAUTKDM1RjU4RDg2MUM0MUJERkVBNDZCOEM3MjkwQjFBQUM2 NzBFN0NDMUIwHhcNMjYwMzI2MTg1MDMwWhcNMjYwNDAyMTg1MDMwWjAYMRYwFAYD VQQDEw02OWM1N2ZmNi05OTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6aKG05tfFwftGx6gorUhU86dcDZbUe7KF6UWJXh6KIfkknTDqYjGbERNEVfJ j3C5u44/QtqIvzGlwC9usEqJ28KbXl/wnRE7p9dGx1D1mpiwHsTofDrBTeZvRosZ rdoWkXS+GqO7taunBvfTrUjtmgL1cKBAJ8EkC3Jk3oKBwA0tkTJLA1bnws58ckq9 YvwQnLKOIe3q48WoVpRf7RYBKnVDgjxF6zVRDhXAhMbg8K4BXeFfV3OV4c88fyok ESrm+xsanU9uoAG1VJmOx1BE/D8ovDKeqzlR/xiRMHZOP638fYGwdDV6buVmwLii gkdThpwSCFHPY0m75D2T7ODHmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAGJ1rjp UM0NmwXtqrbumGubrNFaMB8GA1UdIwQYMBaAFDX1jYYcQb3+pGuMcpCxqsZw58wb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzVCQi81Nzg5QjFBNDND MDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZmNmthNHh5a0xHcXhuRG56 QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mV05oaHhCdmY2a2E0eHlrTEdxeG5EbnpCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzVCQi81Nzg5QjFBNDNDMDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZm NmthNHh5a0xHcXhuRG56QnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHkeSMc+23Cs2ssUYWzWt4PrZhY57RNijhs949d2xElXWhdnnVqpO5+InM2qa Gr1wTUPUuRwcAZMEJBAlWs9SVMaE4DaPi6o3/FRsE8c+DoZZcEoKM26iuccpvGG+ qVH+uMLVyca9g4v7OUpLHuOpxKmXVeqDz3ZqtZRCcHhYUNqnfaVrAa1PTNGKFtzw d+2pJucwDUtsnQ1+bJKObixGe0zcL94WU6xCK0ohGZ04O/iOnTnElm0F9WY20isx Kg1bryqxoP/ai7a7yuKxYjSfM6Z+Kr+iQ79lSmekJLNfVqUJUl9EKIdo8R7Hg3y5 gcFWHVq2Z5tX0sAPc2B1xrsPpg== -----END CERTIFICATE-----Generated at Fri Mar 27 00:37:31 2026 by rpki-client