$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft File: NuTjWeIN2mUTPhIaktbWrLHlMSM.mft (raw, json) Hash identifier: NCXxc6WwXbGgRKTMZNVBJTmQv8989X1bizB/UhXXCKU= Subject key identifier: 4E:F0:6F:80:B1:B4:3B:80:72:DB:C1:12:A2:31:37:92:EB:AB:60:72 Authority key identifier: 36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23 Certificate issuer: /CN=A91DD112/serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123 Certificate serial: 039F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft Manifest number: 039A Signing time: Wed 25 Mar 2026 00:24:13 +0000 Manifest this update: Wed 25 Mar 2026 00:24:12 +0000 Manifest next update: Wed 01 Apr 2026 00:24:12 +0000 Files and hashes: 1: NuTjWeIN2mUTPhIaktbWrLHlMSM.crl (hash: X77i3LVt5IGTKsIy17v9j5aVvul9O+Avk2SA0NuYxW0=) 2: 0D09EE14D79411EC955CCA68C4F9AE02.roa (hash: l5eDnWVvvZlf84IjmEjoAxyefCJGwblf1w9vPN/tkqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 927 (0x39f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD112, serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123 Validity Not Before: Mar 25 00:24:12 2026 GMT Not After : Apr 1 00:24:12 2026 GMT Subject: CN=69c32b2d-3786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:27:9c:fd:f1:17:9b:ac:65:5f:85:70:91:59: 43:10:e6:cb:f3:bd:ab:e2:de:e5:08:bb:8f:64:25: f0:f6:6f:80:90:e0:e9:ae:33:2d:30:16:6d:89:af: b1:d6:20:f8:f4:3f:8f:1e:60:51:e5:ad:db:e1:9b: c4:fd:ce:39:e4:eb:02:55:06:45:77:f9:3e:c6:9d: 13:7c:93:d0:5e:97:23:ab:75:3f:de:2a:36:da:bd: aa:08:e1:c8:a2:52:b4:1c:05:bd:26:f9:53:15:29: 4d:8a:78:b9:1d:79:35:45:d0:76:b6:bf:97:9a:53: a3:26:12:a7:72:73:a0:fa:9d:1c:66:ef:48:39:f4: 8d:ea:cb:d6:9a:f0:f6:1f:fb:dd:02:36:70:bc:1c: 13:25:7d:04:f2:ce:b4:6b:52:86:41:4f:04:bc:b3: 96:5e:ba:c8:87:e4:7e:8c:bc:7a:e4:46:5d:76:9a: 7f:ac:4d:b9:88:6c:d2:30:3b:70:b3:53:e3:9f:f1: 91:59:d5:36:ba:65:78:a9:c5:21:f3:86:53:bb:a1: f5:63:d6:80:81:ea:23:ee:c4:69:4d:4e:9d:3f:11: 1d:60:31:7d:41:0a:0a:1f:a9:5e:19:c8:42:3c:4e: f1:20:8b:8f:46:a7:21:5a:21:11:e7:f5:8b:52:fb: fe:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F0:6F:80:B1:B4:3B:80:72:DB:C1:12:A2:31:37:92:EB:AB:60:72 X509v3 Authority Key Identifier: keyid:36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:7d:78:a3:c7:13:cc:3b:84:99:d8:ad:41:48:d5:2b:f7:56: 5c:c3:bf:6a:c6:21:69:ce:7b:73:a1:cd:fa:5e:61:5d:02:43: 73:a6:4b:f4:2c:68:3f:8d:e0:87:5d:54:b6:48:e4:05:7f:75: 0a:26:fd:4e:85:b8:49:17:cb:d5:14:0f:f4:f8:3a:af:78:f4: c2:d5:09:47:c5:a6:2b:16:4c:1b:7f:16:a3:f2:6e:02:28:b9: 2a:61:f9:b1:4d:c9:e2:34:68:b6:27:fc:23:2b:36:60:2d:b5: c3:d4:8d:d9:c1:70:39:e8:91:5e:f3:aa:8e:c3:fd:11:7a:21: 20:19:18:1c:f0:8b:20:65:81:8d:d4:d5:48:70:c5:ab:0a:ed: d2:1b:4d:f7:a4:2f:cf:c9:62:e1:0b:80:6d:fe:ee:f9:50:6d: 7a:f8:c1:5d:04:06:60:72:76:25:f3:28:81:71:f6:be:77:d6: f4:13:92:b2:8a:a7:71:48:25:9d:87:91:e5:28:ba:5b:70:60: 82:53:44:17:9f:0d:70:87:ed:31:95:f4:61:f8:96:1b:6c:cb: e1:df:70:2b:ee:89:8e:c4:bd:10:6e:90:69:ff:74:af:f8:4e: c3:fa:b3:3d:f0:c4:8f:c2:71:ef:eb:ca:81:70:28:2b:ed:cb: 8a:78:da:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxMTIxMTAvBgNVBAUTKDM2RTRFMzU5RTIwRERBNjUxMzNFMTIxQTkyRDZENkFD QjFFNTMxMjMwHhcNMjYwMzI1MDAyNDEyWhcNMjYwNDAxMDAyNDEyWjAYMRYwFAYD VQQDEw02OWMzMmIyZC0zNzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAniec/fEXm6xlX4VwkVlDEObL872r4t7lCLuPZCXw9m+AkODprjMtMBZtia+x 1iD49D+PHmBR5a3b4ZvE/c455OsCVQZFd/k+xp0TfJPQXpcjq3U/3io22r2qCOHI olK0HAW9JvlTFSlNini5HXk1RdB2tr+XmlOjJhKncnOg+p0cZu9IOfSN6svWmvD2 H/vdAjZwvBwTJX0E8s60a1KGQU8EvLOWXrrIh+R+jLx65EZddpp/rE25iGzSMDtw s1Pjn/GRWdU2umV4qcUh84ZTu6H1Y9aAgeoj7sRpTU6dPxEdYDF9QQoKH6leGchC PE7xIIuPRqchWiER5/WLUvv+nwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE7wb4Cx tDuActvBEqIxN5Lrq2ByMB8GA1UdIwQYMBaAFDbk41niDdplEz4SGpLW1qyx5TEj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDExMi9EQUJBQjVEQ0Q3 OEYxMUVDOTdCNTlFNjJDNEY5QUUwMi9OdVRqV2VJTjJtVVRQaElha3RiV3JMSGxN U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051VGpXZUlOMm1VVFBoSWFrdGJXckxIbE1TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDExMi9EQUJBQjVEQ0Q3OEYxMUVDOTdCNTlFNjJDNEY5QUUwMi9OdVRqV2VJTjJt VVRQaElha3RiV3JMSGxNU00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALH14o8cTzDuEmditQUjVK/dWXMO/asYhac57c6HN+l5hXQJDc6ZL9CxoP43g h11UtkjkBX91Cib9ToW4SRfL1RQP9Pg6r3j0wtUJR8WmKxZMG38Wo/JuAii5KmH5 sU3J4jRotif8Iys2YC21w9SN2cFwOeiRXvOqjsP9EXohIBkYHPCLIGWBjdTVSHDF qwrt0htN96Qvz8li4QuAbf7u+VBtevjBXQQGYHJ2JfMogXH2vnfW9BOSsoqncUgl nYeR5Si6W3BgglNEF58NcIftMZX0YfiWG2zL4d9wK+6JjsS9EG6Qaf90r/hOw/qz PfDEj8Jx7+vKgXAoK+3LinjaOg== -----END CERTIFICATE-----Generated at Thu Mar 26 12:39:37 2026 by rpki-client