$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json) Hash identifier: Aym4lzElPF0Uitrn7qkFM3NQecPUVfG+cn91/4nzZTM= Subject key identifier: 3B:EF:3D:F4:FC:A9:A1:29:C8:D6:AD:44:46:29:2C:EE:FD:7F:72:25 Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft Manifest number: 01D9 Signing time: Wed 25 Mar 2026 02:56:09 +0000 Manifest this update: Wed 25 Mar 2026 02:56:08 +0000 Manifest next update: Wed 01 Apr 2026 02:56:08 +0000 Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: XuP9McdPHPx5nXthdvWTxwLOoXY36lSqGWilFXHXfr8=) 2: 0B421064DD2411EFA5DECA6CC4F9AE02.roa (hash: +S1F0zYbzMvWkIw6OtTYzr4kRvSGMZIIi7dYMQVKPYc=) 3: 36020660DD2411EF9F4FB925C4F9AE02.roa (hash: i1Pu+9UVIaU6wY+KGS3N0zfxP0rOfpHG8M6EeBicwr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD, serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: Mar 25 02:56:08 2026 GMT Not After : Apr 1 02:56:08 2026 GMT Subject: CN=69c34ec9-7f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2d:e3:af:e0:80:24:6d:2c:f1:f6:a4:31:7e: af:0e:c7:6b:e8:68:b5:f5:a8:36:64:b4:16:51:14: c2:af:45:3d:f5:80:1e:cc:25:8b:73:4a:64:66:15: 07:e7:f2:12:4f:8c:21:8d:1a:07:0c:c2:5b:cf:5a: 19:4f:cb:ab:bf:80:85:66:87:96:f1:11:54:6f:51: 56:de:39:63:16:89:0e:62:a5:4c:f1:52:b0:0c:de: 56:03:73:5c:ed:ed:76:3a:ab:04:dc:61:c1:ba:0e: fa:54:06:cd:a8:74:98:31:ef:a9:20:33:d7:2d:4b: c0:1b:e2:95:3a:de:68:8a:39:0c:28:4f:e5:ea:e8: 04:87:7c:4a:d9:71:0d:d2:6b:88:d4:50:8b:84:ec: 6a:e0:1c:77:a5:21:81:38:46:6f:e3:da:65:c4:19: 06:f3:7f:e4:9f:78:ae:f5:c7:78:2d:5e:ff:51:31: 07:4c:a9:03:62:b9:d1:f3:08:24:ef:3e:e8:ff:54: 14:7d:d1:24:1f:a3:95:65:0e:2a:cb:9d:f6:a2:a5: 46:9b:db:c2:e0:57:95:72:a6:bf:65:c0:a1:64:08: 5b:83:86:f6:0f:ac:58:36:2a:bf:1f:df:bf:bb:9a: 30:93:a1:f5:6e:d1:f2:79:ba:88:19:98:1a:12:aa: 67:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:EF:3D:F4:FC:A9:A1:29:C8:D6:AD:44:46:29:2C:EE:FD:7F:72:25 X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a5:70:30:49:e8:29:1b:a0:4d:66:e0:07:7f:f5:8a:9d:60: 24:58:46:6d:c0:02:30:7f:25:4d:09:ac:29:57:60:fb:87:47: 5b:e0:54:03:37:31:d8:7a:3b:dc:cb:dc:86:5c:1a:9b:71:f2: 72:e9:e6:9a:fb:2a:07:d5:db:4b:0b:87:15:4d:07:2f:21:45: cb:ec:87:5a:24:b4:6e:90:0b:d6:6c:50:34:8d:8a:88:81:bf: a7:c3:15:f2:ac:7f:ba:f1:fa:08:f4:b5:f9:a7:02:5e:37:41: 19:e7:fb:6c:a3:d9:5c:4f:94:a2:96:7b:ae:4c:22:e1:da:f8: dc:b3:6d:ed:cb:0b:cc:0d:75:00:7b:8b:26:0a:81:09:75:d4: 01:8c:d6:41:0f:6e:98:3d:0c:58:db:2e:6b:fc:bb:fc:c4:08: 98:64:1f:df:21:58:5e:dc:5b:69:b0:ef:a0:3d:ac:db:5d:b4: 85:f2:70:12:55:df:31:16:89:bb:ef:37:80:58:d2:61:3a:8a: 04:7e:0a:0a:1f:ee:1b:97:ff:5b:6b:e9:d3:ec:e9:95:af:be: 68:bb:50:ba:15:96:c1:9c:1a:ab:12:f4:e3:89:f3:e7:d3:14: 27:00:e7:9d:d1:c4:60:d3:26:58:b1:5e:8d:9a:11:14:29:99: 64:58:5e:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjYwMzI1MDI1NjA4WhcNMjYwNDAxMDI1NjA4WjAYMRYwFAYD VQQDEw02OWMzNGVjOS03Zjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwC3jr+CAJG0s8fakMX6vDsdr6Gi19ag2ZLQWURTCr0U99YAezCWLc0pkZhUH 5/IST4whjRoHDMJbz1oZT8urv4CFZoeW8RFUb1FW3jljFokOYqVM8VKwDN5WA3Nc 7e12OqsE3GHBug76VAbNqHSYMe+pIDPXLUvAG+KVOt5oijkMKE/l6ugEh3xK2XEN 0muI1FCLhOxq4Bx3pSGBOEZv49plxBkG83/kn3iu9cd4LV7/UTEHTKkDYrnR8wgk 7z7o/1QUfdEkH6OVZQ4qy532oqVGm9vC4FeVcqa/ZcChZAhbg4b2D6xYNiq/H9+/ u5owk6H1btHyebqIGZgaEqpn1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDvvPfT8 qaEpyNatREYpLO79f3IlMB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzhGRC9BNUE2RjM3QTYxRjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFj NEZWYVlBc2hlU0RybmhyRTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn6VwMEnoKRugTWbgB3/1ip1gJFhGbcACMH8lTQmsKVdg+4dHW+BUAzcx2Ho7 3Mvchlwam3HycunmmvsqB9XbSwuHFU0HLyFFy+yHWiS0bpAL1mxQNI2KiIG/p8MV 8qx/uvH6CPS1+acCXjdBGef7bKPZXE+UopZ7rkwi4dr43LNt7csLzA11AHuLJgqB CXXUAYzWQQ9umD0MWNsua/y7/MQImGQf3yFYXtxbabDvoD2s2120hfJwElXfMRaJ u+83gFjSYTqKBH4KCh/uG5f/W2vp0+zpla++aLtQuhWWwZwaqxL044nz59MUJwDn ndHEYNMmWLFejZoRFCmZZFhekw== -----END CERTIFICATE-----Generated at Thu Mar 26 15:27:15 2026 by rpki-client