$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft File: NHTCU5hhEAr9ljoWPIAtAmT47H0.mft (raw, json) Hash identifier: ozOrr/c7JYhBVBKwQ1AZA2CfEGXhdgOTU2SEgM5tqrE= Subject key identifier: 4E:60:35:64:A1:5B:B1:8C:21:D1:CF:EF:B4:BA:2A:F4:7E:31:B5:74 Authority key identifier: 34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D Certificate issuer: /CN=A91D63AF/serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft Manifest number: 01A1 Signing time: Wed 25 Mar 2026 03:33:38 +0000 Manifest this update: Wed 25 Mar 2026 03:33:38 +0000 Manifest next update: Wed 01 Apr 2026 03:33:38 +0000 Files and hashes: 1: NHTCU5hhEAr9ljoWPIAtAmT47H0.crl (hash: 9VEaV9mVtAMJ+7lbvSfQkrArkPNMpVZro5GgGPRE5pY=) 2: 6241069011E111EFBBB70B32C4F9AE02.roa (hash: IYaWhsLaflrkWls5/R1on1umbi8diTO+hlwnKy58I+Y=) 3: 8C508DC055F711EFA5200828C4F9AE02.roa (hash: BV76gUVkhOloD3R1sKvIborbJ3XwK55pafoYpUB3234=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63AF, serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D Validity Not Before: Mar 25 03:33:38 2026 GMT Not After : Apr 1 03:33:38 2026 GMT Subject: CN=69c35792-b0a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e9:83:78:48:3a:00:8f:93:e8:8b:e4:ec:b0: 92:9b:8a:90:59:51:4c:10:c6:58:a7:17:eb:3b:87: b5:9e:3b:a8:a6:88:5b:57:92:c8:d2:d5:da:18:fe: ee:63:79:06:ec:92:e6:76:db:19:ff:74:1a:be:20: 11:e5:1a:33:7b:8a:49:83:05:ea:1e:4c:ef:58:82: a2:35:56:a9:4b:39:f7:a9:a2:6f:bd:f3:2c:b1:c0: 2b:e4:74:0b:e3:0b:48:64:81:15:76:37:9c:a9:22: f8:75:27:9a:30:1e:bb:33:5d:ba:28:de:ca:c4:30: ff:16:31:32:7e:1c:35:aa:67:bb:83:ef:62:d6:2e: 3a:e1:fa:8a:8a:85:d0:d6:f7:cb:55:7e:5a:d6:e6: 10:94:95:00:7f:1c:83:11:81:14:0f:21:e3:7e:e5: 1e:87:3a:d2:d9:97:7f:56:1a:6c:a0:a8:cd:bf:61: ae:04:fe:0e:5a:0f:f9:2d:b4:45:d1:6f:0f:93:38: d6:b8:a9:06:22:2b:aa:c0:e8:89:68:c4:0d:54:10: c9:e9:03:93:77:38:ad:a0:d2:26:08:3e:fc:2b:65: 9a:8a:26:46:cd:53:37:3f:cf:01:58:69:a9:27:a6: 63:03:d6:60:5c:1f:75:89:01:97:62:1e:70:b2:5e: 02:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:60:35:64:A1:5B:B1:8C:21:D1:CF:EF:B4:BA:2A:F4:7E:31:B5:74 X509v3 Authority Key Identifier: keyid:34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:04:9d:92:eb:cd:03:d8:58:8a:5a:21:dd:9c:71:c7:b1:bb: 07:e0:9f:34:92:65:14:d9:c5:77:4e:03:54:28:cf:36:22:c9: 9a:8f:60:57:e1:bd:84:74:be:55:5c:9d:5e:5b:ac:68:45:fb: 44:45:b6:48:c6:f2:57:86:fd:a0:c8:c3:b2:99:5e:00:2c:64: ea:d5:a1:a4:f2:78:d7:a8:b4:23:b7:2b:36:17:67:38:9e:1e: 99:5a:6b:fa:df:1d:b5:bb:45:07:23:64:b6:18:52:18:da:6e: 81:14:31:8a:ab:b1:de:b6:92:d2:9f:c4:cb:a1:5c:1c:1f:8a: ec:f0:0a:95:91:34:16:00:9e:14:c8:12:ee:73:3d:f9:1c:9b: f5:4e:17:06:b9:82:c4:2b:ca:c3:2c:65:b6:a4:b2:85:45:05: 1d:51:bc:c2:3a:45:01:0e:21:2a:7d:55:ae:9c:35:8b:f5:67: 0e:b8:be:ad:9e:c1:47:b5:84:07:14:5f:bf:67:9d:82:56:c2: 90:d4:8f:bd:2a:c2:59:15:d0:ff:07:40:3c:a7:da:d8:53:24: 00:a5:a5:fb:e9:7f:2c:57:83:13:27:77:8b:ce:9a:9e:92:8f: 19:bf:d4:a6:68:c3:42:05:9f:2d:5d:22:1f:f5:f2:2d:40:d4: 8d:07:5e:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzQUYxMTAvBgNVBAUTKDM0NzRDMjUzOTg2MTEwMEFGRDk2M0ExNjNDODAyRDAy NjRGOEVDN0QwHhcNMjYwMzI1MDMzMzM4WhcNMjYwNDAxMDMzMzM4WjAYMRYwFAYD VQQDEw02OWMzNTc5Mi1iMGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlemDeEg6AI+T6Ivk7LCSm4qQWVFMEMZYpxfrO4e1njuopohbV5LI0tXaGP7u Y3kG7JLmdtsZ/3QaviAR5Roze4pJgwXqHkzvWIKiNVapSzn3qaJvvfMsscAr5HQL 4wtIZIEVdjecqSL4dSeaMB67M126KN7KxDD/FjEyfhw1qme7g+9i1i464fqKioXQ 1vfLVX5a1uYQlJUAfxyDEYEUDyHjfuUehzrS2Zd/VhpsoKjNv2GuBP4OWg/5LbRF 0W8PkzjWuKkGIiuqwOiJaMQNVBDJ6QOTdzitoNImCD78K2WaiiZGzVM3P88BWGmp J6ZjA9ZgXB91iQGXYh5wsl4CJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE5gNWSh W7GMIdHP77S6KvR+MbV0MB8GA1UdIwQYMBaAFDR0wlOYYRAK/ZY6FjyALQJk+Ox9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNBRi80REZFNjgyNEI2 QjcxMUVFQTlEN0ZDM0FDNEY5QUUwMi9OSFRDVTVoaEVBcjlsam9XUElBdEFtVDQ3 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05IVENVNWhoRUFyOWxqb1dQSUF0QW1UNDdIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNBRi80REZFNjgyNEI2QjcxMUVFQTlEN0ZDM0FDNEY5QUUwMi9OSFRDVTVoaEVB cjlsam9XUElBdEFtVDQ3SDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFgSdkuvNA9hYiloh3Zxxx7G7B+CfNJJlFNnFd04DVCjPNiLJmo9gV+G9hHS+ VVydXlusaEX7REW2SMbyV4b9oMjDspleACxk6tWhpPJ416i0I7crNhdnOJ4emVpr +t8dtbtFByNkthhSGNpugRQxiqux3raS0p/Ey6FcHB+K7PAKlZE0FgCeFMgS7nM9 +Ryb9U4XBrmCxCvKwyxltqSyhUUFHVG8wjpFAQ4hKn1Vrpw1i/VnDri+rZ7BR7WE BxRfv2edglbCkNSPvSrCWRXQ/wdAPKfa2FMkAKWl++l/LFeDEyd3i86anpKPGb/U pmjDQgWfLV0iH/XyLUDUjQde5g== -----END CERTIFICATE-----Generated at Thu Mar 26 16:35:23 2026 by rpki-client