$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft File: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft (raw, json) Hash identifier: 2oMRbg9Z5DI8Eb0WBLkEjFst5vddTDDeAVRGYdmJBhQ= Subject key identifier: 58:30:28:ED:0C:1C:66:9E:A5:69:72:F6:2C:D2:19:7E:B4:48:E0:27 Authority key identifier: 9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 Certificate issuer: /CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Certificate serial: 089E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft Manifest number: 0890 Signing time: Tue 24 Mar 2026 20:19:00 +0000 Manifest this update: Tue 24 Mar 2026 20:19:00 +0000 Manifest next update: Tue 31 Mar 2026 20:19:00 +0000 Files and hashes: 1: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl (hash: QdPlWUjyRXrfY9riICHKTA+zlkNaDUGm0bKounJCKiU=) 2: 0C5564C2E3AC11EAAAC85761C4F9AE02.roa (hash: fMBT8TBi/iV+GqMKiOn023vwnmaVeX5X3SPin3cqYSg=) 3: 0BC9660CE3AC11EAAAC85761C4F9AE02.roa (hash: 6N8L0/wOzazXZSPR1fOLRJTlX3kPwlL/sXD3aJXqTts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2206 (0x89e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9702, serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Validity Not Before: Mar 24 20:19:00 2026 GMT Not After : Mar 31 20:19:00 2026 GMT Subject: CN=69c2f1b4-5b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:96:5f:15:d6:49:e3:d9:8a:ba:09:96:e8:40: ed:b0:f2:ac:94:03:38:66:50:6d:a0:de:a1:e1:1b: 5b:4c:ca:6c:e2:56:54:3e:af:a6:99:56:e0:d2:f3: be:9f:21:e5:5a:7c:09:9e:5f:47:23:f0:59:8a:eb: 89:84:23:f3:2a:7a:3a:ab:75:cc:fe:65:27:5b:33: 97:b2:30:00:af:20:49:8a:65:ce:27:f6:50:97:50: c3:46:d9:03:c0:22:d2:f4:2a:37:53:98:f1:2d:e7: bf:f2:a7:0f:bd:34:f9:19:a5:d0:f1:f1:e7:79:94: 6a:b2:a3:e7:fa:38:99:2d:a3:6d:51:7b:3e:1e:c6: dc:6d:cb:86:eb:64:e5:39:65:21:48:31:b6:f0:d6: c7:40:2d:3a:a1:d2:6d:a0:6d:42:b3:e6:bd:b7:10: af:90:c2:38:3c:b8:89:72:6d:a6:2d:f3:91:5c:46: 73:bb:67:a6:1c:33:bc:bb:c5:98:f1:8e:6c:b3:f3: c1:4b:04:26:0f:ab:34:26:7c:35:74:4c:aa:3a:91: a7:72:f5:4d:50:2d:55:75:10:49:81:17:1d:b8:bd: 23:b5:ce:58:01:5c:98:27:ee:f5:8b:17:51:42:5b: 0c:e0:14:42:e1:71:74:0a:89:1b:fd:1e:ea:97:a6: fe:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:30:28:ED:0C:1C:66:9E:A5:69:72:F6:2C:D2:19:7E:B4:48:E0:27 X509v3 Authority Key Identifier: keyid:9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:98:73:59:a7:2f:da:5f:eb:c3:21:80:2e:bd:28:00:60:3a: 9b:36:e7:2a:d8:f3:ac:60:71:0f:22:17:5e:ef:2d:97:8f:ba: f6:7c:a1:36:a5:1d:76:44:ee:44:44:e3:c6:a9:5b:dd:36:d0: b8:86:ae:1d:c9:63:3e:68:0f:37:69:fd:96:d4:06:f3:e1:6d: 84:bd:ff:69:c0:19:62:c1:e3:61:ac:59:0d:5c:d3:0c:a3:a5: d3:63:4f:b7:a4:46:c1:f5:43:6d:47:43:cb:94:fd:2e:e7:1c: 00:bf:9a:fe:e3:81:a9:55:94:38:2e:9e:14:48:07:a4:0d:c5: 12:6c:68:45:50:d6:81:d3:83:b6:7e:68:27:5f:07:46:a5:83: aa:fd:d6:81:cb:78:17:b7:36:89:74:0f:af:6a:a0:46:d5:5b: 62:dd:9b:bc:f7:7c:e3:94:16:45:c2:3f:03:e4:49:67:62:1f: 94:20:53:83:22:c6:54:e1:e9:62:9a:11:be:be:a7:78:39:5a: 65:69:e7:78:5b:81:cf:3f:ce:de:a7:39:9c:40:cf:45:e1:b3: 06:ff:69:eb:1b:dd:de:9e:df:76:d5:b4:de:55:7d:75:1e:fe: 31:ed:60:aa:5e:23:ab:59:f1:c7:c6:05:5e:d3:68:fa:76:de: e0:e4:70:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk3MDIxMTAvBgNVBAUTKDlFNjM3NkE1RjJBQTNFMkM3RkY1NTJBRkI4QUY1MERB QzEzRDQ5QjcwHhcNMjYwMzI0MjAxOTAwWhcNMjYwMzMxMjAxOTAwWjAYMRYwFAYD VQQDEw02OWMyZjFiNC01YjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpZfFdZJ49mKugmW6EDtsPKslAM4ZlBtoN6h4RtbTMps4lZUPq+mmVbg0vO+ nyHlWnwJnl9HI/BZiuuJhCPzKno6q3XM/mUnWzOXsjAAryBJimXOJ/ZQl1DDRtkD wCLS9Co3U5jxLee/8qcPvTT5GaXQ8fHneZRqsqPn+jiZLaNtUXs+HsbcbcuG62Tl OWUhSDG28NbHQC06odJtoG1Cs+a9txCvkMI4PLiJcm2mLfORXEZzu2emHDO8u8WY 8Y5ss/PBSwQmD6s0Jnw1dEyqOpGncvVNUC1VdRBJgRcduL0jtc5YAVyYJ+71ixdR QlsM4BRC4XF0Cokb/R7ql6b+3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFgwKO0M HGaepWly9izSGX60SOAnMB8GA1UdIwQYMBaAFJ5jdqXyqj4sf/VSr7ivUNrBPUm3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTcwMi9FRjkxM0QyNkUz QUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBpeF85Vkt2dUs5UTJzRTlT YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tTjJwZktxUGl4XzlWS3Z1SzlRMnNFOVNiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTcwMi9FRjkxM0QyNkUzQUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBp eF85Vkt2dUs5UTJzRTlTYmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc5hzWacv2l/rwyGALr0oAGA6mzbnKtjzrGBxDyIXXu8tl4+69nyhNqUddkTu RETjxqlb3TbQuIauHcljPmgPN2n9ltQG8+FthL3/acAZYsHjYaxZDVzTDKOl02NP t6RGwfVDbUdDy5T9LuccAL+a/uOBqVWUOC6eFEgHpA3FEmxoRVDWgdODtn5oJ18H RqWDqv3Wgct4F7c2iXQPr2qgRtVbYt2bvPd845QWRcI/A+RJZ2IflCBTgyLGVOHp YpoRvr6neDlaZWnneFuBzz/O3qc5nEDPReGzBv9p6xvd3p7fdtW03lV9dR7+Me1g ql4jq1nxx8YFXtNo+nbe4ORwUw== -----END CERTIFICATE-----Generated at Thu Mar 26 06:51:18 2026 by rpki-client