$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft File: NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft (raw, json) Hash identifier: pbDIGzKBXPuK8kJWJQ3sbOguhasd7U/kwzUIK0IDSJs= Subject key identifier: 24:C8:36:73:3A:F8:B4:BD:23:65:FE:A2:FC:70:AC:1E:EF:5B:B9:BF Authority key identifier: 34:F4:67:6C:06:63:83:91:47:97:3D:4C:86:9B:49:DC:8C:66:40:F3 Certificate issuer: /CN=A91BB9EF/serialNumber=34F4676C0663839147973D4C869B49DC8C6640F3 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft Manifest number: 42 Signing time: Wed 25 Mar 2026 07:36:29 +0000 Manifest this update: Wed 25 Mar 2026 07:36:28 +0000 Manifest next update: Wed 01 Apr 2026 07:36:28 +0000 Files and hashes: 1: NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl (hash: d4FnjjcnN7xQil2ICXX9v+icR7UkS1A7wz89vSftpNU=) 2: E57517B0C84F11F0B9AA990CC4F9AE02.roa (hash: PoRqLZ1iDKniKKiDSN0IaMYeEcnEhdUqkDtLadUJ/NE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB9EF, serialNumber=34F4676C0663839147973D4C869B49DC8C6640F3 Validity Not Before: Mar 25 07:36:28 2026 GMT Not After : Apr 1 07:36:28 2026 GMT Subject: CN=69c3907d-fb07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:17:9e:58:2b:34:24:89:7a:6c:d7:b1:c8:d4: 93:68:d0:24:31:86:43:12:09:b9:95:7c:b0:05:2c: 2d:92:b4:f6:d7:eb:03:81:a2:16:c3:b0:4d:6a:de: 14:03:cb:02:0c:bb:44:12:91:f9:0c:ce:f2:f8:0b: 95:96:b7:8d:a2:c1:83:17:ab:83:0e:87:ff:3b:13: 7b:0a:13:f1:b0:b6:2b:1c:fa:0d:09:e3:bf:86:1c: 18:e9:4c:9d:a1:08:c3:19:60:4a:d4:72:22:64:cd: 28:85:8e:b1:4d:10:2d:48:68:98:ce:e0:19:a3:cd: 44:26:0e:92:cd:9e:de:48:a2:17:da:c6:70:c2:91: 6c:23:4e:cc:b7:76:e5:e5:4e:ec:86:1f:23:55:c3: 39:40:c8:5a:da:76:72:a3:8a:24:a7:34:6b:8b:2e: 4e:ec:05:4f:84:90:84:ae:7b:49:71:1d:d2:0b:6c: a9:05:af:8e:2a:a8:a6:b7:bd:2b:c2:dc:69:32:f6: 9d:e7:61:e1:fb:5a:a4:9a:78:41:a9:9a:7e:10:c0: 15:b6:d3:9c:c8:83:04:c6:8a:c4:32:08:64:82:bc: c8:ed:c2:42:d7:85:0c:2a:cf:97:81:9a:a5:6d:10: b7:72:d2:a6:2d:63:2e:a0:cc:15:7b:76:be:39:40: 08:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C8:36:73:3A:F8:B4:BD:23:65:FE:A2:FC:70:AC:1E:EF:5B:B9:BF X509v3 Authority Key Identifier: keyid:34:F4:67:6C:06:63:83:91:47:97:3D:4C:86:9B:49:DC:8C:66:40:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:64:d9:fb:6d:ec:3e:5e:0a:ea:fe:75:bf:e5:85:2a:5f:67: 18:cc:37:77:21:96:f5:94:0c:14:a4:21:1f:22:60:c7:51:be: 07:57:ef:8a:5d:ae:d9:67:51:64:86:75:f9:88:f5:43:4c:d4: ca:ca:b0:37:2f:cf:88:f9:55:b2:89:b7:b7:79:60:58:52:5c: 7d:5a:3f:a2:d5:54:32:4b:fb:aa:d6:5a:6d:f5:11:e0:01:b4: 2a:cb:f1:00:22:59:2d:ab:84:c1:34:7f:4c:d2:63:da:fa:b8: 10:8a:ff:6c:0b:2e:9e:96:9e:c9:64:d1:9a:ef:be:6a:aa:0b: 03:45:49:5c:53:b7:e9:08:98:6c:ad:4c:fb:9f:87:18:3f:3c: 91:c2:e5:38:fc:c4:61:7d:68:94:44:94:76:82:60:b8:c9:96: 2a:b5:09:65:ae:07:ae:61:e4:86:4d:cd:c1:3e:ed:d2:57:3a: 0f:f5:f7:de:0a:a1:6f:db:91:b2:9a:c2:f0:ee:72:b8:93:f2: a2:ce:54:d3:d8:e3:c0:3a:52:cf:69:53:6b:b1:b0:14:61:76: d1:7c:b1:c3:c7:a2:90:5b:f7:29:06:ac:bd:47:c1:d2:59:63: 15:e6:10:68:50:af:3a:7e:8f:88:5f:6b:51:38:5a:2f:dc:d5: ce:1c:79:f0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjlFRjExMC8GA1UEBRMoMzRGNDY3NkMwNjYzODM5MTQ3OTczRDRDODY5QjQ5REM4 QzY2NDBGMzAeFw0yNjAzMjUwNzM2MjhaFw0yNjA0MDEwNzM2MjhaMBgxFjAUBgNV BAMTDTY5YzM5MDdkLWZiMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrF55YKzQkiXps17HI1JNo0CQxhkMSCbmVfLAFLC2StPbX6wOBohbDsE1q3hQD ywIMu0QSkfkMzvL4C5WWt42iwYMXq4MOh/87E3sKE/Gwtisc+g0J47+GHBjpTJ2h CMMZYErUciJkzSiFjrFNEC1IaJjO4BmjzUQmDpLNnt5IohfaxnDCkWwjTsy3duXl TuyGHyNVwzlAyFradnKjiiSnNGuLLk7sBU+EkISue0lxHdILbKkFr44qqKa3vSvC 3Gky9p3nYeH7WqSaeEGpmn4QwBW205zIgwTGisQyCGSCvMjtwkLXhQwqz5eBmqVt ELdy0qYtYy6gzBV7dr45QAhpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJMg2czr4 tL0jZf6i/HCsHu9bub8wHwYDVR0jBBgwFoAUNPRnbAZjg5FHlz1MhptJ3IxmQPMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCOUVGLzg3ODcyM0U2Qzg0 RjExRjA4QkVCQ0QwQkM0RjlBRTAyL05QUm5iQVpqZzVGSGx6MU1ocHRKM0l4bVFQ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlBSbmJBWmpnNUZIbHoxTWhwdEozSXhtUVBNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC OUVGLzg3ODcyM0U2Qzg0RjExRjA4QkVCQ0QwQkM0RjlBRTAyL05QUm5iQVpqZzVG SGx6MU1ocHRKM0l4bVFQTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB7ZNn7bew+Xgrq/nW/5YUqX2cYzDd3IZb1lAwUpCEfImDHUb4HV++KXa7ZZ1Fk hnX5iPVDTNTKyrA3L8+I+VWyibe3eWBYUlx9Wj+i1VQyS/uq1lpt9RHgAbQqy/EA Ilktq4TBNH9M0mPa+rgQiv9sCy6elp7JZNGa775qqgsDRUlcU7fpCJhsrUz7n4cY PzyRwuU4/MRhfWiURJR2gmC4yZYqtQllrgeuYeSGTc3BPu3SVzoP9ffeCqFv25Gy msLw7nK4k/KizlTT2OPAOlLPaVNrsbAUYXbRfLHDx6KQW/cpBqy9R8HSWWMV5hBo UK86fo+IX2tROFov3NXOHHnw -----END CERTIFICATE-----Generated at Thu Mar 26 22:33:57 2026 by rpki-client