$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: /2Wkv4uvR7xWldxZruFKthUSnWz84GlVsiKsqjL//WY= Subject key identifier: 22:33:82:52:72:DD:89:8A:24:DE:90:59:59:C4:07:DA:5F:0B:63:53 Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 01E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 01D9 Signing time: Wed 25 Mar 2026 02:52:23 +0000 Manifest this update: Wed 25 Mar 2026 02:52:22 +0000 Manifest next update: Wed 01 Apr 2026 02:52:22 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: msw4aJZmiuB/bfD/gsgdhBY8ZduKcMU/dha7OyZT3Ew=) 2: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: zqESw+IWbG5U3Oh2cbA+9ioqV8DZZkTNSVndFvkCcIc=) 3: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: 2Pvyl2Pg+rvxhHMBAknVnfhicVn7ercKKujcqDRSopc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: Mar 25 02:52:22 2026 GMT Not After : Apr 1 02:52:22 2026 GMT Subject: CN=69c34de6-b9fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2b:42:87:a3:55:2e:69:ed:f1:30:5c:b3:1c: 05:b5:ec:5f:57:69:e6:47:a7:a8:88:20:5a:14:36: 24:5b:f0:ac:8c:c2:a8:7c:31:14:c7:6b:fc:94:65: 17:d8:53:d5:99:5f:c2:d8:84:b8:0a:67:d2:be:36: b8:ec:35:42:4a:e3:4a:b1:e3:55:ba:13:62:b2:9f: c8:ed:ee:6f:2d:2d:05:e6:3b:9d:07:dd:e2:1e:82: 1b:af:9f:a8:8d:b4:38:dc:7c:93:4e:c4:6c:c5:7d: a1:6e:da:5c:58:7e:5b:d3:db:19:55:d6:32:5d:12: 67:a3:d4:30:72:e9:40:2f:b1:5a:20:bb:1d:46:ce: 2d:9e:7c:24:18:5a:05:b5:ac:3b:86:11:bf:81:f8: 1f:bc:ed:c1:c6:b6:9f:dc:80:0f:46:49:6a:6d:29: 47:24:ab:5d:c2:44:6a:00:99:de:dd:34:05:c5:12: 80:7c:e5:f7:00:eb:ce:8c:37:c5:30:90:1c:d1:a2: c2:cd:44:1d:75:6b:34:80:27:f0:b2:80:1d:d6:15: 31:c8:61:08:55:43:ba:91:79:e2:cd:c8:12:da:08: cf:d5:e8:a6:85:78:b8:53:7f:47:a9:37:dd:a2:1e: af:43:26:84:2a:51:9c:07:f7:45:b2:5f:2b:6e:3d: 4f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:33:82:52:72:DD:89:8A:24:DE:90:59:59:C4:07:DA:5F:0B:63:53 X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:9d:8e:df:96:5b:b9:44:46:5d:b2:d9:cb:b2:a3:37:36:33: 4a:a8:09:4d:e7:ae:97:6f:c0:42:f4:a9:4a:a1:6e:a5:a5:8a: 95:23:60:41:16:10:65:18:bf:e4:04:47:77:02:0a:f2:01:15: 11:6f:3d:89:0f:22:c3:18:bc:17:85:75:73:81:ee:f9:75:8c: 1d:fb:a9:c7:a6:c7:43:b6:c1:9d:d6:49:3d:6a:f3:68:ac:90: 51:37:c2:2d:cc:ca:f3:1c:5b:d4:c6:bb:ed:7f:0f:e7:be:96: 35:cd:5d:c9:ec:bc:80:11:b0:57:97:33:ae:e9:58:b7:7b:04: f8:e3:06:38:7c:9a:9c:fc:3c:07:07:d8:f5:2b:d0:46:1d:1a: 3b:28:16:b5:2e:e8:2d:f0:da:d7:a3:5e:41:2a:c2:68:07:f2: e0:c3:0e:4c:53:21:72:7e:a0:80:39:9a:d9:92:9a:55:76:33: f9:ef:b0:80:a9:39:49:8d:24:3e:48:e8:c9:db:cb:bb:d2:1c: a5:4d:a3:f0:ad:20:64:aa:d6:36:8d:b7:f4:47:0f:4b:f3:cf: 5b:12:d3:b1:9d:f1:27:91:d1:ad:cc:b5:d8:2f:19:be:51:8e: 6a:26:0b:ec:ba:0c:b3:32:88:26:0b:2f:2c:21:f0:f5:fe:43: 8a:3c:1e:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjYwMzI1MDI1MjIyWhcNMjYwNDAxMDI1MjIyWjAYMRYwFAYD VQQDEw02OWMzNGRlNi1iOWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3StCh6NVLmnt8TBcsxwFtexfV2nmR6eoiCBaFDYkW/CsjMKofDEUx2v8lGUX 2FPVmV/C2IS4CmfSvja47DVCSuNKseNVuhNisp/I7e5vLS0F5judB93iHoIbr5+o jbQ43HyTTsRsxX2hbtpcWH5b09sZVdYyXRJno9QwculAL7FaILsdRs4tnnwkGFoF taw7hhG/gfgfvO3Bxraf3IAPRklqbSlHJKtdwkRqAJne3TQFxRKAfOX3AOvOjDfF MJAc0aLCzUQddWs0gCfwsoAd1hUxyGEIVUO6kXnizcgS2gjP1eimhXi4U39HqTfd oh6vQyaEKlGcB/dFsl8rbj1P2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCIzglJy 3YmKJN6QWVnEB9pfC2NTMB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFJ2O35ZbuURGXbLZy7KjNzYzSqgJTeeul2/AQvSpSqFupaWKlSNgQRYQZRi/ 5ARHdwIK8gEVEW89iQ8iwxi8F4V1c4Hu+XWMHfupx6bHQ7bBndZJPWrzaKyQUTfC LczK8xxb1Ma77X8P576WNc1dyey8gBGwV5czrulYt3sE+OMGOHyanPw8BwfY9SvQ Rh0aOygWtS7oLfDa16NeQSrCaAfy4MMOTFMhcn6ggDma2ZKaVXYz+e+wgKk5SY0k PkjoydvLu9IcpU2j8K0gZKrWNo239EcPS/PPWxLTsZ3xJ5HRrcy12C8ZvlGOaiYL 7LoMszKIJgsvLCHw9f5Dijwefw== -----END CERTIFICATE-----Generated at Thu Mar 26 07:39:46 2026 by rpki-client