$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft File: nNdxObeuQMY2CS0SiGlE3j8a_-I.mft (raw, json) Hash identifier: VAERSycaGarpKh3TgEywZkbTTc/8esoETbYO+mlKqQA= Subject key identifier: E4:72:99:C4:81:9F:B8:86:C8:7E:F8:59:B1:4F:1B:4E:C1:09:66:FC Authority key identifier: 9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2 Certificate issuer: /CN=A91F3BDE/serialNumber=9CD77139B7AE40C636092D12886944DE3F1AFFE2 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft Manifest number: 2D Signing time: Thu 26 Mar 2026 18:15:46 +0000 Manifest this update: Thu 26 Mar 2026 18:15:45 +0000 Manifest next update: Thu 02 Apr 2026 18:15:45 +0000 Files and hashes: 1: nNdxObeuQMY2CS0SiGlE3j8a_-I.crl (hash: CMSb/+2SqOEUoBIpc2wQqlE1W0pcoVzm1JIIFRPmyEI=) 2: 0FFE750C1EAF11F195BB007D1D3D8C67.roa (hash: BrK0FrMPMwFevxo3blKFfc/tytf2FzSWadOgigE4AiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.crl rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 18:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3BDE, serialNumber=9CD77139B7AE40C636092D12886944DE3F1AFFE2 Validity Not Before: Mar 26 18:15:45 2026 GMT Not After : Apr 2 18:15:45 2026 GMT Subject: CN=69c577d2-1ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a3:af:ca:8e:fd:07:90:7c:98:5d:af:ba:2c: ad:04:42:f8:67:af:e1:b7:a9:97:7b:4d:d9:46:4b: 65:a5:14:cc:6d:d6:f0:8f:c1:bf:64:db:3f:d4:66: 78:84:46:b2:12:19:c2:0a:6d:63:a8:1b:88:f6:b2: be:d7:f3:e9:f3:c6:08:d4:f6:c7:e3:63:21:f8:ae: 41:47:2f:f9:d7:cf:c9:5f:cc:77:32:9d:d5:70:16: 35:08:03:9e:fc:31:cd:0f:7e:13:43:47:4a:79:e7: ab:5f:7e:5c:08:f2:90:5f:91:7f:95:86:7f:93:30: 29:71:d9:dc:42:d1:9b:ac:74:70:67:07:43:a1:a1: be:11:70:d2:be:73:b6:4c:8d:bd:b4:de:4a:31:72: ec:e8:c3:cf:62:1a:85:00:c7:46:54:cc:f7:6b:f4: 0b:c1:5b:f9:a6:21:16:2a:33:50:d4:e0:56:f9:46: a4:a5:f2:48:b2:ce:9a:d5:36:34:f1:dd:0a:00:00: cc:3e:51:11:b0:c2:e8:90:38:b4:14:2e:74:6f:94: c3:2f:de:eb:87:9e:c2:34:86:d9:15:c3:eb:02:b3: 9b:37:fc:4b:21:ff:0e:cd:71:97:65:81:7f:15:7a: c7:55:c4:be:b8:27:d3:74:c0:aa:da:cc:1c:65:e3: 55:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:72:99:C4:81:9F:B8:86:C8:7E:F8:59:B1:4F:1B:4E:C1:09:66:FC X509v3 Authority Key Identifier: keyid:9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:f6:45:ad:aa:9c:ff:35:62:fd:c2:a8:2a:5c:41:aa:eb:1a: 5c:77:02:85:6c:e1:6c:bc:d1:77:18:7e:6a:e5:b9:56:a6:f1: cb:ec:e3:0f:3b:96:dd:92:a4:ea:c5:5f:06:f0:22:da:f7:02: 7a:34:5a:c0:3f:20:d3:33:5a:06:b2:c6:5c:44:d6:07:72:0d: 43:f9:61:e9:a3:86:14:a3:7a:1e:cb:62:74:b4:dd:00:4b:4d: 4b:6b:32:b5:d5:ca:25:9f:10:77:3f:43:5e:bf:ac:ee:3a:ea: 27:6e:03:ec:43:00:51:7b:37:42:c8:db:77:d0:86:0d:4c:09: 0d:90:e0:ff:b3:e1:bb:2c:fe:7f:33:20:f1:1c:76:30:28:8c: bd:e6:59:53:1a:a5:8a:ef:d5:d8:55:2e:b8:64:0b:1a:20:d3: 0d:f4:e2:5b:b6:dd:cd:6a:bb:06:8d:20:82:2a:fb:04:69:6b: 24:0e:6e:c6:2a:d8:de:f5:3b:f8:85:dd:c8:69:cb:5a:b2:ae: e8:36:15:b2:6a:5c:73:be:52:6c:29:e7:13:58:40:7a:8f:28: 7a:f2:39:f2:1f:4e:58:77:a9:fc:96:41:1c:af:72:cf:72:12: a8:d0:3a:89:58:42:a8:bf:39:96:ec:95:38:22:3e:8a:ea:7c: a1:8f:0e:e1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG M0JERTExMC8GA1UEBRMoOUNENzcxMzlCN0FFNDBDNjM2MDkyRDEyODg2OTQ0REUz RjFBRkZFMjAeFw0yNjAzMjYxODE1NDVaFw0yNjA0MDIxODE1NDVaMBgxFjAUBgNV BAMTDTY5YzU3N2QyLTFjZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqo6/Kjv0HkHyYXa+6LK0EQvhnr+G3qZd7TdlGS2WlFMxt1vCPwb9k2z/UZniE RrISGcIKbWOoG4j2sr7X8+nzxgjU9sfjYyH4rkFHL/nXz8lfzHcyndVwFjUIA578 Mc0PfhNDR0p556tfflwI8pBfkX+Vhn+TMClx2dxC0ZusdHBnB0Ohob4RcNK+c7ZM jb203koxcuzow89iGoUAx0ZUzPdr9AvBW/mmIRYqM1DU4Fb5RqSl8kiyzprVNjTx 3QoAAMw+URGwwuiQOLQULnRvlMMv3uuHnsI0htkVw+sCs5s3/Esh/w7NcZdlgX8V esdVxL64J9N0wKrazBxl41V5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5HKZxIGf uIbIfvhZsU8bTsEJZvwwHwYDVR0jBBgwFoAUnNdxObeuQMY2CS0SiGlE3j8a/+Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzQkRFLzZGRjIzQjkwRjAx NzExRjA4NTU0MUYyNDQ3NkY1NkJDL25OZHhPYmV1UU1ZMkNTMFNpR2xFM2o4YV8t SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbk5keE9iZXVRTVkyQ1MwU2lHbEUzajhhXy1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz QkRFLzZGRjIzQjkwRjAxNzExRjA4NTU0MUYyNDQ3NkY1NkJDL25OZHhPYmV1UU1Z MkNTMFNpR2xFM2o4YV8tSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAU9kWtqpz/NWL9wqgqXEGq6xpcdwKFbOFsvNF3GH5q5blWpvHL7OMPO5bdkqTq xV8G8CLa9wJ6NFrAPyDTM1oGssZcRNYHcg1D+WHpo4YUo3oey2J0tN0AS01LazK1 1colnxB3P0Nev6zuOuonbgPsQwBRezdCyNt30IYNTAkNkOD/s+G7LP5/MyDxHHYw KIy95llTGqWK79XYVS64ZAsaINMN9OJbtt3NarsGjSCCKvsEaWskDm7GKtje9Tv4 hd3Iactasq7oNhWyalxzvlJsKecTWEB6jyh68jnyH05Yd6n8lkEcr3LPchKo0DqJ WEKovzmW7JU4Ij6K6nyhjw7h -----END CERTIFICATE-----Generated at Thu Mar 26 23:10:42 2026 by rpki-client