$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft File: NFMkWvnnaQX2mpDxzs2F6og_6hY.mft (raw, json) Hash identifier: 1jpbBzWQuVhiDBhnaAHP0rdoK+ZTBhN2JCU7rqhcUu4= Subject key identifier: A9:42:92:27:C7:10:65:CC:DA:72:6D:5C:63:1E:5A:34:2B:72:8F:E7 Authority key identifier: 34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 Certificate issuer: /CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Certificate serial: 07ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft Manifest number: 07E0 Signing time: Tue 24 Mar 2026 21:01:45 +0000 Manifest this update: Tue 24 Mar 2026 21:01:45 +0000 Manifest next update: Tue 31 Mar 2026 21:01:45 +0000 Files and hashes: 1: NFMkWvnnaQX2mpDxzs2F6og_6hY.crl (hash: WPqf6fyHqBJd2BVnFkaSjZ1xB6nrqVFJfvqPIW9E4yE=) 2: 0BAA4608297211EB99ECF956C4F9AE02.roa (hash: wKAEYn7N0s61lmDabEnuaSxEMJJCyF8MvcXmo7hrc/w=) 3: E9D321CEF2F611EE95E10935C4F9AE02.roa (hash: uGgUAHKjFCdKGRYwfRLplSrRPtlghY9PMVrAiNXtlcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2029 (0x7ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6064, serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Validity Not Before: Mar 24 21:01:45 2026 GMT Not After : Mar 31 21:01:45 2026 GMT Subject: CN=69c2fbb9-1d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b3:94:4f:f6:e0:be:b4:0e:62:58:c2:1d:57: 39:73:45:87:d2:c0:fb:e2:ce:c5:f8:6a:ce:45:b2: 8f:65:67:2d:0e:56:20:db:1b:10:85:48:99:3a:17: 17:f1:71:cc:96:96:e1:df:3d:fd:b3:d8:57:eb:57: e5:63:27:b3:92:7e:20:5f:c3:5a:02:e3:1c:e6:eb: 4b:9a:87:92:e8:d4:fb:b2:e7:9e:7e:17:27:55:c4: 9a:79:38:2d:fa:b0:bc:2c:ce:0d:18:a3:ac:07:df: 45:4b:8c:80:74:db:61:14:82:80:da:0f:9e:58:bd: a6:1a:49:14:2e:52:d6:ee:1e:de:dc:b9:92:5d:6b: c8:8c:40:9e:c0:6d:be:21:eb:97:13:81:bd:59:7c: 77:cf:08:dd:fd:07:cb:15:8e:e6:20:57:f5:a9:85: 0d:07:eb:4b:39:bc:dd:91:32:bd:8d:40:27:4d:31: 07:21:09:c6:12:84:17:d4:5f:c6:4b:a4:5e:af:23: 8c:45:48:9a:f3:e7:9a:be:81:78:fa:87:6b:1f:53: 8c:42:75:81:6b:ab:37:2e:fa:86:af:ce:e6:ec:5e: c6:f9:71:8e:d0:21:9e:6e:a8:ba:4d:03:c5:ec:ef: ff:5b:54:8d:fb:6c:40:12:39:25:b0:c0:6e:5e:5d: db:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:42:92:27:C7:10:65:CC:DA:72:6D:5C:63:1E:5A:34:2B:72:8F:E7 X509v3 Authority Key Identifier: keyid:34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d7:64:b5:2c:78:35:78:77:f5:b3:35:50:23:a2:7d:97:61: 26:93:87:a0:b3:dd:63:ad:07:6e:eb:61:b5:ea:44:86:4c:58: 97:e0:62:b9:d2:04:87:d9:ed:d7:45:e1:32:aa:44:06:8c:7a: 35:78:05:26:18:60:27:44:9e:a1:b8:62:e8:bf:cf:95:5b:13: 59:75:71:b0:23:a8:d3:01:7d:04:8d:68:6e:88:55:67:9a:80: 32:51:84:47:dc:cc:d3:3a:6f:a8:b2:5b:3b:cd:2e:0c:d8:ea: 03:0a:1f:7a:a5:8b:b0:54:b4:3f:b4:08:a4:be:83:57:f1:2d: 21:36:60:5a:be:e6:14:88:33:c9:a3:39:da:05:ae:85:9a:5e: 08:84:c1:02:ac:8c:e2:32:f4:4a:2a:bd:af:3a:d4:fc:dd:7d: 15:29:ac:92:63:07:fa:99:bb:70:40:28:eb:71:e5:1d:07:49: e8:9d:d7:57:e6:27:eb:89:5b:a4:ba:c3:39:9c:15:33:8d:60: a5:63:79:c5:00:dd:ab:7d:f1:a7:6d:2e:37:d4:63:6f:06:3e: 81:c0:a4:c0:e7:c3:9d:c1:cf:bc:ea:74:06:96:da:6a:08:ab: ea:c4:09:33:13:de:74:ec:67:ef:38:7e:a4:06:35:65:21:ae: b7:8d:31:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwNjQxMTAvBgNVBAUTKDM0NTMyNDVBRjlFNzY5MDVGNjlBOTBGMUNFQ0Q4NUVB ODgzRkVBMTYwHhcNMjYwMzI0MjEwMTQ1WhcNMjYwMzMxMjEwMTQ1WjAYMRYwFAYD VQQDEw02OWMyZmJiOS0xZDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurOUT/bgvrQOYljCHVc5c0WH0sD74s7F+GrORbKPZWctDlYg2xsQhUiZOhcX 8XHMlpbh3z39s9hX61flYyezkn4gX8NaAuMc5utLmoeS6NT7sueefhcnVcSaeTgt +rC8LM4NGKOsB99FS4yAdNthFIKA2g+eWL2mGkkULlLW7h7e3LmSXWvIjECewG2+ IeuXE4G9WXx3zwjd/QfLFY7mIFf1qYUNB+tLObzdkTK9jUAnTTEHIQnGEoQX1F/G S6ReryOMRUia8+eavoF4+odrH1OMQnWBa6s3LvqGr87m7F7G+XGO0CGebqi6TQPF 7O//W1SN+2xAEjklsMBuXl3bnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKlCkifH EGXM2nJtXGMeWjQrco/nMB8GA1UdIwQYMBaAFDRTJFr552kF9pqQ8c7NheqIP+oW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA2NC81MkZFRjczQTI5 NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFRWDJtcER4enMyRjZvZ182 aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GTWtXdm5uYVFYMm1wRHh6czJGNm9nXzZoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA2NC81MkZFRjczQTI5NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFR WDJtcER4enMyRjZvZ182aFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOtdktSx4NXh39bM1UCOifZdhJpOHoLPdY60HbuthtepEhkxYl+BiudIEh9nt 10XhMqpEBox6NXgFJhhgJ0Seobhi6L/PlVsTWXVxsCOo0wF9BI1obohVZ5qAMlGE R9zM0zpvqLJbO80uDNjqAwofeqWLsFS0P7QIpL6DV/EtITZgWr7mFIgzyaM52gWu hZpeCITBAqyM4jL0Siq9rzrU/N19FSmskmMH+pm7cEAo63HlHQdJ6J3XV+Yn64lb pLrDOZwVM41gpWN5xQDdq33xp20uN9RjbwY+gcCkwOfDncHPvOp0Bpbaagir6sQJ MxPedOxn7zh+pAY1ZSGut40x3Q== -----END CERTIFICATE-----Generated at Thu Mar 26 12:45:41 2026 by rpki-client