$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft File: nag9eBUvVmRHEvSlgLqVNV-IgUc.mft (raw, json) Hash identifier: ca/Dv0yvBpP0IiCagDDGWE6AyQeUl3I9bfdysHkXF+Q= Subject key identifier: 65:A8:89:6A:9D:92:28:99:8A:2F:C3:53:7B:8C:8B:4D:C8:90:41:EE Authority key identifier: 9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 Certificate issuer: /CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Certificate serial: 09A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft Manifest number: 0998 Signing time: Thu 26 Mar 2026 19:52:18 +0000 Manifest this update: Thu 26 Mar 2026 19:52:17 +0000 Manifest next update: Thu 02 Apr 2026 19:52:17 +0000 Files and hashes: 1: nag9eBUvVmRHEvSlgLqVNV-IgUc.crl (hash: Zqw3rjvCOkRmUHSDkmzw9z7Zt+ZM/EsE3l7T4pZbQFE=) 2: 9C3E2D18A98111EAB4B3FD50C4F9AE02.roa (hash: NZTaCCKyWOItzetpiVNKukcwafnTRr5S69WrKLXkglo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 19:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2466 (0x9a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8E33, serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Validity Not Before: Mar 26 19:52:17 2026 GMT Not After : Apr 2 19:52:17 2026 GMT Subject: CN=69c58e72-67c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3f:54:76:66:14:f0:db:50:d4:4f:da:40:52: 36:6d:ad:a0:d7:46:bb:2a:20:9e:80:43:0e:b1:80: 30:6f:0f:66:a6:68:b7:a2:56:95:2e:3b:9a:5f:9a: c8:b3:bf:b0:a3:58:6d:9f:a2:ad:e8:7c:db:92:93: ed:90:43:ec:bc:85:24:1e:d3:5b:bf:2f:29:46:04: b9:51:99:9e:b5:ae:61:2f:d1:73:97:b9:3f:16:b5: 85:05:c3:79:8f:76:b0:f1:01:3c:0f:65:ca:89:0b: 0f:99:4c:f9:af:d3:07:ba:cd:46:5b:15:bd:f2:67: 3a:4e:cb:5c:30:d9:93:a1:29:df:c5:06:48:10:69: 6c:7e:48:b7:42:72:2b:0d:1b:e5:35:24:27:86:88: ba:6e:bc:56:25:ce:f6:24:1b:10:5f:bd:62:af:fa: 33:ab:ce:ce:21:90:52:5c:25:8a:d1:a5:9d:77:ef: 82:3a:7a:dd:10:ef:e1:e1:42:1e:e7:6c:b9:b4:21: 32:90:d7:8a:0c:c3:a3:01:27:58:dc:82:b4:23:b3: 78:4e:4d:8b:c3:6e:37:95:c6:3b:b2:ac:dd:68:97: d0:5f:7c:f9:b0:99:4a:23:04:57:17:0b:83:d4:16: 73:be:35:e7:aa:50:d9:89:cc:c4:b1:89:94:0b:e4: 4a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A8:89:6A:9D:92:28:99:8A:2F:C3:53:7B:8C:8B:4D:C8:90:41:EE X509v3 Authority Key Identifier: keyid:9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:f4:05:3e:06:d4:34:7f:e8:71:a0:f2:2f:f1:b3:67:d4:76: de:6f:c2:bd:7d:70:b5:5f:04:11:24:0f:fc:b5:12:bb:3a:10: 7a:73:22:4e:0c:9e:89:bf:b6:d4:13:0f:4b:8d:90:cb:f0:d0: 0e:5d:20:b0:df:a0:57:07:56:64:37:f3:d0:a6:5c:d4:c8:4f: c9:83:ac:24:c4:e8:56:06:53:a0:09:3f:2e:a7:f3:cf:49:10: 0c:9f:a8:90:be:2e:52:a2:7c:dd:35:22:3e:50:d6:7a:d8:cc: 87:37:6f:18:10:53:37:f4:d3:db:dd:9e:71:60:e7:58:83:55: 46:3e:f4:c5:fc:32:38:5e:13:1f:10:01:b4:8d:31:38:b5:0c: 5b:67:6c:43:92:45:dc:bc:62:5f:95:9b:60:3d:f5:0f:3c:87: 0e:6d:a7:9a:e8:80:5c:bf:71:c8:a4:9b:6d:57:2c:84:20:63: a7:52:08:ed:71:d9:1e:1e:01:e1:50:32:a5:1b:ed:41:a4:82: 8f:e5:47:19:b6:8d:ac:5a:f8:e0:8f:1f:ce:4b:d1:a9:7e:1e: d8:80:f4:3b:bd:14:54:ae:b0:1e:16:61:d4:e5:5b:69:0b:c7: e9:5a:1e:c4:bd:9d:87:99:69:b2:ee:83:6a:aa:1d:9d:0e:82: bf:88:78:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFMzMxMTAvBgNVBAUTKDlEQTgzRDc4MTUyRjU2NjQ0NzEyRjRBNTgwQkE5NTM1 NUY4ODgxNDcwHhcNMjYwMzI2MTk1MjE3WhcNMjYwNDAyMTk1MjE3WjAYMRYwFAYD VQQDEw02OWM1OGU3Mi02N2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsT9UdmYU8NtQ1E/aQFI2ba2g10a7KiCegEMOsYAwbw9mpmi3olaVLjuaX5rI s7+wo1htn6Kt6HzbkpPtkEPsvIUkHtNbvy8pRgS5UZmeta5hL9Fzl7k/FrWFBcN5 j3aw8QE8D2XKiQsPmUz5r9MHus1GWxW98mc6TstcMNmToSnfxQZIEGlsfki3QnIr DRvlNSQnhoi6brxWJc72JBsQX71ir/ozq87OIZBSXCWK0aWdd++COnrdEO/h4UIe 52y5tCEykNeKDMOjASdY3IK0I7N4Tk2Lw243lcY7sqzdaJfQX3z5sJlKIwRXFwuD 1BZzvjXnqlDZiczEsYmUC+RKQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGWoiWqd kiiZii/DU3uMi03IkEHuMB8GA1UdIwQYMBaAFJ2oPXgVL1ZkRxL0pYC6lTVfiIFH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEUzMy9BRDJDRjIxRUE5 N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZtUkhFdlNsZ0xxVk5WLUln VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25hZzllQlV2Vm1SSEV2U2xnTHFWTlYtSWdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEUzMy9BRDJDRjIxRUE5N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZt UkhFdlNsZ0xxVk5WLUlnVWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIfQFPgbUNH/ocaDyL/GzZ9R23m/CvX1wtV8EESQP/LUSuzoQenMiTgyeib+2 1BMPS42Qy/DQDl0gsN+gVwdWZDfz0KZc1MhPyYOsJMToVgZToAk/Lqfzz0kQDJ+o kL4uUqJ83TUiPlDWetjMhzdvGBBTN/TT292ecWDnWINVRj70xfwyOF4THxABtI0x OLUMW2dsQ5JF3LxiX5WbYD31DzyHDm2nmuiAXL9xyKSbbVcshCBjp1II7XHZHh4B 4VAypRvtQaSCj+VHGbaNrFr44I8fzkvRqX4e2ID0O70UVK6wHhZh1OVbaQvH6Voe xL2dh5lpsu6DaqodnQ6Cv4h4Pg== -----END CERTIFICATE-----Generated at Sat Mar 28 12:11:10 2026 by rpki-client