$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft File: NSX5xUTpmw5jRgCZyS39lNSb9so.mft (raw, json) Hash identifier: wfL0vKkkifux04BjRs3FvvoVFIm+worJhAJBuqlLtGs= Subject key identifier: 8F:15:E7:35:FF:C7:E1:E1:08:BD:0D:86:A0:92:65:3D:73:6B:E1:CF Authority key identifier: 35:25:F9:C5:44:E9:9B:0E:63:46:00:99:C9:2D:FD:94:D4:9B:F6:CA Certificate issuer: /CN=A91D9D7A/serialNumber=3525F9C544E99B0E63460099C92DFD94D49BF6CA Certificate serial: 02D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft Manifest number: 02CF Signing time: Wed 25 Mar 2026 01:01:20 +0000 Manifest this update: Wed 25 Mar 2026 01:01:19 +0000 Manifest next update: Wed 01 Apr 2026 01:01:19 +0000 Files and hashes: 1: NSX5xUTpmw5jRgCZyS39lNSb9so.crl (hash: xCkEJe9PHxRcm1rhysr8Vhb9C917u32w7pLCqR+s0PU=) 2: 81B7763C280211ED93948C10C4F9AE02.roa (hash: cFYWu32x1i7BJE6ej7tEMyDU8GB+7ACwMuOY9C/hNmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.crl rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 725 (0x2d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9D7A, serialNumber=3525F9C544E99B0E63460099C92DFD94D49BF6CA Validity Not Before: Mar 25 01:01:19 2026 GMT Not After : Apr 1 01:01:19 2026 GMT Subject: CN=69c333e0-3513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:85:46:db:2a:37:be:d4:49:3b:49:af:aa:9c: 23:7b:89:84:c1:2e:98:d5:dd:25:cf:78:92:4f:d8: 30:6b:2c:82:c8:25:ed:e1:af:96:1e:27:52:06:31: 15:53:d0:49:78:55:01:2b:b5:9f:e8:f2:c8:f7:9f: 80:ed:65:6f:11:64:b3:76:0a:6a:64:d4:c7:58:96: f2:a8:53:aa:29:90:b3:8c:9c:33:9c:b6:ae:ef:73: c7:b8:33:f9:98:0f:8e:98:f4:58:7f:90:93:9d:87: db:d5:37:f5:f4:55:68:9f:31:7b:59:8c:59:89:3d: bd:9d:4a:36:11:fc:28:d5:0a:41:0f:38:2c:fc:1e: fe:0e:23:a3:69:eb:e1:e7:15:5d:f9:cf:97:7e:c4: bf:4d:7a:53:00:81:f1:e9:92:16:fa:ae:92:e8:42: d2:8a:59:c5:e8:0e:b0:6d:67:c1:27:22:5f:a5:a2: 5f:5e:80:85:4a:07:a5:e6:50:16:ad:4d:96:82:2d: 13:5a:44:4a:df:46:c8:24:ec:0b:2c:f6:95:a2:ec: ef:bc:53:d1:ca:04:09:61:b8:c4:9a:25:da:7a:97: 49:1f:70:68:14:3f:5c:e0:ca:44:1e:dd:5c:3b:48: 55:e9:5f:cb:69:0e:b8:13:6d:ff:ea:b4:ac:94:12: dc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:15:E7:35:FF:C7:E1:E1:08:BD:0D:86:A0:92:65:3D:73:6B:E1:CF X509v3 Authority Key Identifier: keyid:35:25:F9:C5:44:E9:9B:0E:63:46:00:99:C9:2D:FD:94:D4:9B:F6:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:65:42:53:7c:78:12:8f:b2:36:cb:5a:21:f9:03:32:4b:2a: 17:26:f9:0e:9b:17:91:f7:99:aa:77:a0:d0:a6:a3:38:a3:5d: 3f:aa:12:2d:0b:ac:b3:f2:4f:db:e5:09:7d:5d:95:1c:c8:d2: 58:92:eb:20:dd:7c:a7:d6:06:a7:71:ae:78:58:d0:96:5d:db: 8c:77:0b:f9:30:c7:f4:df:b4:cc:b6:dc:78:b3:9e:d0:6d:47: 9b:99:02:89:ca:0d:d9:a6:5a:22:df:d6:4c:ef:65:dd:d7:42: 59:ae:c4:34:0a:2b:f2:c9:b1:9d:66:fd:60:82:21:57:0e:00: 62:ae:05:6c:09:fd:50:af:da:4d:a7:7a:55:a0:0c:74:87:fd: 32:9c:1a:55:0b:5f:47:ea:f1:2a:68:33:85:1a:94:a5:a8:f7: 3f:b9:ee:8a:a0:76:84:a7:da:4c:29:55:6a:c5:8e:e8:66:d9: a4:c5:ab:37:dc:8a:44:86:fb:42:da:24:0f:42:1a:6b:95:dd: e8:59:1d:82:d6:66:2e:34:54:88:cd:35:86:91:94:94:34:31: 58:47:28:4c:75:59:83:c4:ba:86:14:57:16:d8:7e:55:52:d2: a0:0e:b8:01:a2:d9:18:ae:a2:32:89:0a:1a:ed:58:92:af:c0: f9:04:b8:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlEN0ExMTAvBgNVBAUTKDM1MjVGOUM1NDRFOTlCMEU2MzQ2MDA5OUM5MkRGRDk0 RDQ5QkY2Q0EwHhcNMjYwMzI1MDEwMTE5WhcNMjYwNDAxMDEwMTE5WjAYMRYwFAYD VQQDEw02OWMzMzNlMC0zNTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34VG2yo3vtRJO0mvqpwje4mEwS6Y1d0lz3iST9gwayyCyCXt4a+WHidSBjEV U9BJeFUBK7Wf6PLI95+A7WVvEWSzdgpqZNTHWJbyqFOqKZCzjJwznLau73PHuDP5 mA+OmPRYf5CTnYfb1Tf19FVonzF7WYxZiT29nUo2Efwo1QpBDzgs/B7+DiOjaevh 5xVd+c+XfsS/TXpTAIHx6ZIW+q6S6ELSilnF6A6wbWfBJyJfpaJfXoCFSgel5lAW rU2Wgi0TWkRK30bIJOwLLPaVouzvvFPRygQJYbjEmiXaepdJH3BoFD9c4MpEHt1c O0hV6V/LaQ64E23/6rSslBLcRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI8V5zX/ x+HhCL0NhqCSZT1za+HPMB8GA1UdIwQYMBaAFDUl+cVE6ZsOY0YAmckt/ZTUm/bK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUQ3QS84OUE5QUEyNDI3 ODMxMUVEOUJBMDI0NTBDNEY5QUUwMi9OU1g1eFVUcG13NWpSZ0NaeVMzOWxOU2I5 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05TWDV4VVRwbXc1alJnQ1p5UzM5bE5TYjlzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUQ3QS84OUE5QUEyNDI3ODMxMUVEOUJBMDI0NTBDNEY5QUUwMi9OU1g1eFVUcG13 NWpSZ0NaeVMzOWxOU2I5c28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa2VCU3x4Eo+yNstaIfkDMksqFyb5DpsXkfeZqneg0KajOKNdP6oSLQuss/JP 2+UJfV2VHMjSWJLrIN18p9YGp3GueFjQll3bjHcL+TDH9N+0zLbceLOe0G1Hm5kC icoN2aZaIt/WTO9l3ddCWa7ENAor8smxnWb9YIIhVw4AYq4FbAn9UK/aTad6VaAM dIf9MpwaVQtfR+rxKmgzhRqUpaj3P7nuiqB2hKfaTClVasWO6GbZpMWrN9yKRIb7 QtokD0Iaa5Xd6FkdgtZmLjRUiM01hpGUlDQxWEcoTHVZg8S6hhRXFth+VVLSoA64 AaLZGK6iMokKGu1Ykq/A+QS4iQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:35:12 2026 by rpki-client