$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft File: NZYOHhaeA_Rvr5H04_8TUUamMTo.mft (raw, json) Hash identifier: QjO28CjwZV5h1tjjV6+P6mRaAzoWytVYZmwvZcADN20= Subject key identifier: A5:EF:99:DB:9D:50:E9:93:7E:93:25:D3:64:47:70:57:07:FB:D3:A9 Authority key identifier: 35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A Certificate issuer: /CN=A91BBBA5/serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A Certificate serial: 1418 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft Manifest number: 140E Signing time: Thu 26 Mar 2026 16:52:35 +0000 Manifest this update: Thu 26 Mar 2026 16:52:35 +0000 Manifest next update: Thu 02 Apr 2026 16:52:35 +0000 Files and hashes: 1: NZYOHhaeA_Rvr5H04_8TUUamMTo.crl (hash: +Mtsn8fdCrBpGkjJsQKoM8i9U/Uwm6zQgaEUIyd1+0o=) 2: 21333DA69B2E11E8908CC50FC4F9AE02.roa (hash: MDlcdzXufvKhGOKFUxldUFZUq6m6mjYUqAENV0y3O3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 16:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5144 (0x1418) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBBA5, serialNumber=35960E1E169E03F46FAF91F4E3FF135146A6313A Validity Not Before: Mar 26 16:52:35 2026 GMT Not After : Apr 2 16:52:35 2026 GMT Subject: CN=69c56453-427b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:29:2a:9f:15:0d:5d:f0:04:e1:ff:bc:63:97: bd:38:62:94:9f:2e:6c:5c:3e:13:ee:d4:2a:3a:69: cf:7f:1a:d4:32:21:3e:01:a5:ab:85:c3:1f:ff:1a: af:33:bd:23:07:34:1f:01:8c:75:18:c8:a4:45:0d: 96:e5:6e:0a:f9:1c:a5:b6:63:b0:0b:07:78:67:96: 3b:17:82:57:f8:50:85:23:4b:4f:bc:43:ce:19:3e: 1f:37:00:c7:ff:e6:9f:38:5a:a2:12:0a:b6:36:b9: c7:62:f2:51:4c:e3:d4:52:7a:4b:91:80:fd:eb:f6: cd:cd:5f:3c:d1:82:4b:47:d1:77:ab:ea:33:16:83: 81:20:cd:fa:50:2d:b7:ad:51:8c:bc:66:fb:67:7a: 78:28:42:62:81:14:5b:d0:ee:aa:da:d5:2b:0a:7e: 56:80:62:5f:78:44:36:1d:f3:22:0c:9f:8d:e3:bc: e8:ce:30:7b:58:86:df:dc:13:c1:0d:12:d6:6a:98: 3d:14:16:cc:ab:c6:67:ae:e5:c5:8d:99:19:4e:43: 77:f0:32:df:de:51:78:59:a7:2a:db:cd:19:4e:77: 67:e1:53:35:7e:22:16:45:8c:c4:53:26:b1:4c:b6: bb:d5:6a:88:33:75:70:d3:8e:b8:17:8d:2c:50:15: 7a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EF:99:DB:9D:50:E9:93:7E:93:25:D3:64:47:70:57:07:FB:D3:A9 X509v3 Authority Key Identifier: keyid:35:96:0E:1E:16:9E:03:F4:6F:AF:91:F4:E3:FF:13:51:46:A6:31:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NZYOHhaeA_Rvr5H04_8TUUamMTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBBA5/E6484ACE9B2D11E8B465D80FC4F9AE02/NZYOHhaeA_Rvr5H04_8TUUamMTo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:51:15:26:3c:35:6e:5e:7d:a5:c0:d4:da:8b:df:91:b8:f4: 5d:da:7b:80:68:74:4e:2f:64:cc:3d:b1:8a:90:9b:d0:e4:d5: c5:79:b5:b9:05:9c:c9:86:79:1c:81:3a:a4:72:f1:98:e6:f8: dc:18:80:74:ec:4b:ff:c8:b7:9f:cc:5c:eb:af:a0:83:90:64: 6a:84:e5:18:29:42:91:4f:17:22:17:59:ac:c8:71:64:43:d0: 88:dc:6b:ed:66:e9:1f:35:20:e5:0a:66:0d:fa:35:e3:33:9f: 3a:34:53:ff:eb:51:1f:d9:2b:6b:f1:1f:3f:4d:3a:dd:be:5b: cc:e8:62:a8:db:ee:a1:32:70:00:3f:dc:81:76:e9:27:3d:a9: 24:58:8e:50:5c:f3:7e:b2:03:74:8c:56:09:83:57:b0:7c:89: f5:14:58:37:bf:6d:e4:c0:b2:ca:72:59:df:86:c2:37:b7:5a: f8:8d:cc:c6:14:1b:ec:6c:12:33:2a:5e:35:fd:c3:e9:08:df: 51:31:1d:2a:53:1b:50:97:40:59:bb:2c:c1:8e:6b:0a:dd:5b: b3:e7:57:33:28:6b:82:73:ae:71:bf:47:12:91:e2:34:1c:a3: 8c:89:9c:c8:e6:f9:03:42:55:94:45:fb:76:ed:3c:52:e9:9c: fc:d6:39:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJCQTUxMTAvBgNVBAUTKDM1OTYwRTFFMTY5RTAzRjQ2RkFGOTFGNEUzRkYxMzUx NDZBNjMxM0EwHhcNMjYwMzI2MTY1MjM1WhcNMjYwNDAyMTY1MjM1WjAYMRYwFAYD VQQDEw02OWM1NjQ1My00MjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtikqnxUNXfAE4f+8Y5e9OGKUny5sXD4T7tQqOmnPfxrUMiE+AaWrhcMf/xqv M70jBzQfAYx1GMikRQ2W5W4K+RyltmOwCwd4Z5Y7F4JX+FCFI0tPvEPOGT4fNwDH /+afOFqiEgq2NrnHYvJRTOPUUnpLkYD96/bNzV880YJLR9F3q+ozFoOBIM36UC23 rVGMvGb7Z3p4KEJigRRb0O6q2tUrCn5WgGJfeEQ2HfMiDJ+N47zozjB7WIbf3BPB DRLWapg9FBbMq8ZnruXFjZkZTkN38DLf3lF4Wacq280ZTndn4VM1fiIWRYzEUyax TLa71WqIM3Vw0464F40sUBV6cwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKXvmdud UOmTfpMl02RHcFcH+9OpMB8GA1UdIwQYMBaAFDWWDh4WngP0b6+R9OP/E1FGpjE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkJBNS9FNjQ4NEFDRTlC MkQxMUU4QjQ2NUQ4MEZDNEY5QUUwMi9OWllPSGhhZUFfUnZyNUgwNF84VFVVYW1N VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05aWU9IaGFlQV9SdnI1SDA0XzhUVVVhbU1Uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkJBNS9FNjQ4NEFDRTlCMkQxMUU4QjQ2NUQ4MEZDNEY5QUUwMi9OWllPSGhhZUFf UnZyNUgwNF84VFVVYW1NVG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqFEVJjw1bl59pcDU2ovfkbj0Xdp7gGh0Ti9kzD2xipCb0OTVxXm1uQWcyYZ5 HIE6pHLxmOb43BiAdOxL/8i3n8xc66+gg5BkaoTlGClCkU8XIhdZrMhxZEPQiNxr 7WbpHzUg5QpmDfo14zOfOjRT/+tRH9kra/EfP0063b5bzOhiqNvuoTJwAD/cgXbp Jz2pJFiOUFzzfrIDdIxWCYNXsHyJ9RRYN79t5MCyynJZ34bCN7da+I3MxhQb7GwS MypeNf3D6QjfUTEdKlMbUJdAWbsswY5rCt1bs+dXMyhrgnOucb9HEpHiNByjjImc yOb5A0JVlEX7du08Uumc/NY5aA== -----END CERTIFICATE-----Generated at Sat Mar 28 10:45:15 2026 by rpki-client