$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft File: nLpHShuO1MGFZBkQLgnuXvUcSaU.mft (raw, json) Hash identifier: QRhudR5VD6FxzoLclh92Hr/uIYhT75KvEsYgXlOeP9g= Subject key identifier: 47:84:E0:1E:18:B4:FF:00:DA:4F:4E:88:C8:C1:7A:1C:C9:3E:D7:26 Authority key identifier: 9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5 Certificate issuer: /CN=A91D9B75/serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5 Certificate serial: 05FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft Manifest number: 05E4 Signing time: Tue 24 Mar 2026 22:41:11 +0000 Manifest this update: Tue 24 Mar 2026 22:41:11 +0000 Manifest next update: Tue 31 Mar 2026 22:41:11 +0000 Files and hashes: 1: nLpHShuO1MGFZBkQLgnuXvUcSaU.crl (hash: +LJHQsRgMW0+K9aP331xWC2KhcJcXs+T+nFvugw8J4U=) 2: 5C5F31B09A2A11ECAEE8C819C4F9AE02.roa (hash: /QFvUN14R1O1KVpjrV19SJEs/S3B1Q2N0TzOckdFv0Q=) 3: F1C60FA653DC11EC90927C4DC4F9AE02.roa (hash: hofwfPS1+TvM0/WkparMoyPsYmdvk20TYWiYyP/0qBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1530 (0x5fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9B75, serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5 Validity Not Before: Mar 24 22:41:11 2026 GMT Not After : Mar 31 22:41:11 2026 GMT Subject: CN=69c31307-ec8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:eb:b7:98:be:84:ec:16:b9:5f:3d:09:9d:b5: a0:62:49:78:94:e8:88:cf:c4:9f:82:82:2b:a5:39: 6d:a9:24:06:d6:f7:96:bc:0a:ec:29:9a:ed:f1:35: 4d:e6:5b:3f:00:94:2a:37:83:64:66:ca:58:0b:c4: ef:e9:92:35:57:c6:05:2e:4c:4d:21:47:e8:06:9c: de:19:c1:b1:3b:cf:e8:be:e9:ab:f2:75:fe:82:e2: b5:24:ae:b7:c8:e0:10:30:bf:2b:d5:9b:0e:72:d3: 32:ad:e1:39:af:64:23:2d:1d:30:af:8a:8f:87:72: 96:e8:b2:1b:64:be:a1:ac:0c:17:5b:49:dc:be:09: f6:64:67:f1:3c:2f:43:9c:e9:ce:51:4b:93:de:6a: b3:b9:7b:d0:37:46:f4:13:f0:a5:87:5f:d6:df:cf: 68:c3:ae:6a:1c:04:9c:d5:35:90:0c:38:ba:ae:73: c0:29:74:3b:08:8a:53:50:bf:9f:05:78:ee:c6:2c: 5b:ed:cd:0c:8a:db:e6:cb:52:ff:d5:07:05:8a:de: 88:cb:58:c3:9d:ed:93:a8:70:28:23:b8:c0:e3:e5: 7d:80:39:4c:1e:85:5d:79:65:0e:51:fe:f3:ef:33: 71:fa:9f:6b:54:ac:56:8e:4b:c7:20:f0:7e:94:e5: ef:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:84:E0:1E:18:B4:FF:00:DA:4F:4E:88:C8:C1:7A:1C:C9:3E:D7:26 X509v3 Authority Key Identifier: keyid:9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:4f:ac:6c:ff:9e:da:28:b8:b4:f3:0a:7b:84:07:ea:34:8d: 9c:73:ce:d2:95:6d:c7:9a:03:33:08:7f:9c:d3:42:d0:ab:ff: 69:75:74:2a:1b:0b:69:ac:4c:8b:8b:51:60:fa:14:bc:76:0e: fb:f6:39:3d:f6:8b:a2:dc:27:c3:d5:28:4a:52:28:8b:d2:b7: f4:6a:55:a3:0f:70:5c:b7:a3:35:77:af:ab:60:0c:50:f7:45: 78:ed:db:be:24:51:ec:87:d0:73:82:9d:e9:cf:a2:7f:53:ee: a0:c9:eb:ec:ec:a2:29:33:ce:1d:bd:74:a5:80:e6:78:44:7c: b7:9a:ee:88:d5:73:b0:8f:ae:bc:62:7f:b2:39:b8:f5:75:b5: d1:43:c3:87:2f:7a:6b:5b:d7:fd:cc:a2:2b:50:fd:ce:4e:34: 9a:d9:a1:16:8a:b1:3a:76:6a:28:82:3c:c1:04:56:18:d8:88: 2b:26:14:05:5c:1c:18:be:1f:43:81:79:72:29:b6:3e:e3:5d: b6:c1:28:14:c6:de:d3:03:94:b4:e4:cb:4a:c6:76:cc:25:50: 93:76:2f:9e:0c:e3:22:04:5b:db:51:c7:54:ba:76:89:e4:9c: fb:d6:2f:73:f8:3e:70:25:3d:57:91:5b:19:e1:5b:10:a8:e4: 96:7a:80:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlCNzUxMTAvBgNVBAUTKDlDQkE0NzRBMUI4RUQ0QzE4NTY0MTkxMDJFMDlFRTVF RjUxQzQ5QTUwHhcNMjYwMzI0MjI0MTExWhcNMjYwMzMxMjI0MTExWjAYMRYwFAYD VQQDEw02OWMzMTMwNy1lYzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjOu3mL6E7Ba5Xz0JnbWgYkl4lOiIz8SfgoIrpTltqSQG1veWvArsKZrt8TVN 5ls/AJQqN4NkZspYC8Tv6ZI1V8YFLkxNIUfoBpzeGcGxO8/ovumr8nX+guK1JK63 yOAQML8r1ZsOctMyreE5r2QjLR0wr4qPh3KW6LIbZL6hrAwXW0ncvgn2ZGfxPC9D nOnOUUuT3mqzuXvQN0b0E/Clh1/W389ow65qHASc1TWQDDi6rnPAKXQ7CIpTUL+f BXjuxixb7c0Mitvmy1L/1QcFit6Iy1jDne2TqHAoI7jA4+V9gDlMHoVdeWUOUf7z 7zNx+p9rVKxWjkvHIPB+lOXvWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEeE4B4Y tP8A2k9OiMjBehzJPtcmMB8GA1UdIwQYMBaAFJy6R0objtTBhWQZEC4J7l71HEml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUI3NS85QzAwMjAyRUY0 ODgxMUVCQThEQjdEMENDNEY5QUUwMi9uTHBIU2h1TzFNR0ZaQmtRTGdudVh2VWNT YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25McEhTaHVPMU1HRlpCa1FMZ251WHZVY1NhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUI3NS85QzAwMjAyRUY0ODgxMUVCQThEQjdEMENDNEY5QUUwMi9uTHBIU2h1TzFN R0ZaQmtRTGdudVh2VWNTYVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbU+sbP+e2ii4tPMKe4QH6jSNnHPO0pVtx5oDMwh/nNNC0Kv/aXV0KhsLaaxM i4tRYPoUvHYO+/Y5PfaLotwnw9UoSlIoi9K39GpVow9wXLejNXevq2AMUPdFeO3b viRR7IfQc4Kd6c+if1PuoMnr7OyiKTPOHb10pYDmeER8t5ruiNVzsI+uvGJ/sjm4 9XW10UPDhy96a1vX/cyiK1D9zk40mtmhFoqxOnZqKII8wQRWGNiIKyYUBVwcGL4f Q4F5cim2PuNdtsEoFMbe0wOUtOTLSsZ2zCVQk3YvngzjIgRb21HHVLp2ieSc+9Yv c/g+cCU9V5FbGeFbEKjklnqALw== -----END CERTIFICATE-----Generated at Thu Mar 26 09:25:25 2026 by rpki-client