$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft File: nkKx9pFGDihG-nHwbcib8sdB25o.mft (raw, json) Hash identifier: aqAtGfYQ5s6Pl6nvHm76ZU75RFczhodXrsZ2cYJsFmg= Subject key identifier: 22:35:EF:B2:1B:FB:4A:0C:0D:60:ED:CE:A9:B6:48:F4:28:40:25:5E Authority key identifier: 9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A Certificate issuer: /CN=A911BCDD/serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft Manifest number: 01AE Signing time: Sun 01 Mar 2026 04:48:27 +0000 Manifest this update: Sun 01 Mar 2026 04:48:27 +0000 Manifest next update: Sun 08 Mar 2026 04:48:27 +0000 Files and hashes: 1: nkKx9pFGDihG-nHwbcib8sdB25o.crl (hash: 00U3U5auvqBEKp7GpgAdji3vp1DtEZ0YdHI+S2v1G/s=) 2: 5ED417AE869011EEA9011A36C4F9AE02.roa (hash: tVfway4EYKUNfhqwyG9cq94kQv/CEfDWpcb61FcHlfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCDD, serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Validity Not Before: Mar 1 04:48:27 2026 GMT Not After : Mar 8 04:48:27 2026 GMT Subject: CN=69a3c51b-f2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b2:e4:8c:cd:f2:fd:9d:64:4b:3d:ed:2c:91: ef:58:df:d0:91:71:ce:a4:dc:c9:63:97:95:45:fd: 9e:cc:d6:4e:4a:54:f6:7f:c7:f8:2e:23:32:4d:9f: 2e:a8:29:b3:2c:fc:d6:39:40:e1:36:df:19:72:b1: 13:0f:5b:01:8d:77:cd:c3:99:3a:ed:72:9b:44:ef: a8:9a:7e:7a:64:20:60:ba:a6:85:8f:17:ff:85:2a: c6:7f:1c:da:7c:77:72:8a:16:b5:15:84:d6:f1:79: ca:23:24:b1:e8:23:1e:2f:86:f0:06:0d:45:c0:c4: c9:d6:6c:c5:f4:2d:f5:42:0f:79:6d:d4:ad:54:bb: f6:c2:02:9e:1d:58:a7:40:99:90:d9:ad:7d:c2:8c: 67:e3:2d:06:9f:98:86:59:ca:db:96:61:09:d0:4e: 62:30:a1:99:86:54:02:a9:de:bb:5f:4d:eb:c1:07: 3e:41:ed:cd:65:a0:00:fb:1d:ea:06:fc:ac:14:bb: 7b:82:ef:b4:74:c2:2a:46:1e:08:73:16:8a:a6:81: 8d:96:fa:a3:c8:b1:92:88:a4:7c:cd:5f:eb:35:2e: 78:1a:53:29:42:96:d4:54:a9:45:b9:3b:6a:aa:f0: 5a:c9:b6:1b:bf:97:df:d8:9a:8e:46:2e:6e:39:0b: 1f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:35:EF:B2:1B:FB:4A:0C:0D:60:ED:CE:A9:B6:48:F4:28:40:25:5E X509v3 Authority Key Identifier: keyid:9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:56:15:bf:e6:92:43:f9:80:72:62:e8:63:c2:1c:7f:34:cc: e3:68:86:a8:48:56:53:e9:dd:12:b0:b2:69:4c:2a:8a:14:b9: a6:35:d5:a7:50:cc:3e:a2:b5:6e:20:d1:86:b3:4f:24:a3:9e: b9:df:7f:85:0f:92:61:ca:9d:ad:39:8b:61:d5:68:17:c1:5e: 5d:06:78:b3:4f:5b:50:42:16:d0:b9:23:e5:5e:da:8e:a2:85: c3:3d:2a:8f:ff:a6:0b:aa:22:7b:31:01:76:1c:60:32:62:78: 10:c7:30:9d:9d:61:81:73:d1:ba:e8:71:89:7c:e3:81:ca:12: f1:63:ef:d3:49:0c:0f:cd:dc:61:5e:76:d9:46:54:86:13:f8: 8f:d7:80:6a:19:63:ab:cd:ef:21:b2:3d:81:95:cd:72:86:84: 23:d2:42:72:45:20:1e:f3:27:f5:9c:9e:2a:72:32:04:10:a7: 8f:ae:5d:cd:c6:ef:02:1a:88:d8:0d:c1:e7:8d:41:a4:bf:91: 3f:20:29:cd:f7:70:24:bd:a6:c2:34:6d:ea:a7:18:50:b2:04: 98:46:65:b3:00:c7:e0:96:8b:be:ea:91:f7:a6:3e:8f:38:67: 2d:24:1b:1f:3f:01:ad:a9:bb:fa:09:1b:da:37:6a:f0:89:1f: f0:28:81:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDREQxMTAvBgNVBAUTKDlFNDJCMUY2OTE0NjBFMjg0NkZBNzFGMDZEQzg5QkYy Qzc0MURCOUEwHhcNMjYwMzAxMDQ0ODI3WhcNMjYwMzA4MDQ0ODI3WjAYMRYwFAYD VQQDDA02OWEzYzUxYi1mMmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7LkjM3y/Z1kSz3tLJHvWN/QkXHOpNzJY5eVRf2ezNZOSlT2f8f4LiMyTZ8u qCmzLPzWOUDhNt8ZcrETD1sBjXfNw5k67XKbRO+omn56ZCBguqaFjxf/hSrGfxza fHdyiha1FYTW8XnKIySx6CMeL4bwBg1FwMTJ1mzF9C31Qg95bdStVLv2wgKeHVin QJmQ2a19woxn4y0Gn5iGWcrblmEJ0E5iMKGZhlQCqd67X03rwQc+Qe3NZaAA+x3q BvysFLt7gu+0dMIqRh4IcxaKpoGNlvqjyLGSiKR8zV/rNS54GlMpQpbUVKlFuTtq qvBaybYbv5ff2JqORi5uOQsfFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCI177Ib +0oMDWDtzqm2SPQoQCVeMB8GA1UdIwQYMBaAFJ5CsfaRRg4oRvpx8G3Im/LHQdua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNERC8zNDhBRDhBQzg2 MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0RpaEctbkh3YmNpYjhzZEIy NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25rS3g5cEZHRGloRy1uSHdiY2liOHNkQjI1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNERC8zNDhBRDhBQzg2MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0Rp aEctbkh3YmNpYjhzZEIyNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJVYVv+aSQ/mAcmLoY8IcfzTM42iGqEhWU+ndErCyaUwqihS5pjXVp1DMPqK1 biDRhrNPJKOeud9/hQ+SYcqdrTmLYdVoF8FeXQZ4s09bUEIW0Lkj5V7ajqKFwz0q j/+mC6oiezEBdhxgMmJ4EMcwnZ1hgXPRuuhxiXzjgcoS8WPv00kMD83cYV522UZU hhP4j9eAahljq83vIbI9gZXNcoaEI9JCckUgHvMn9ZyeKnIyBBCnj65dzcbvAhqI 2A3B541BpL+RPyApzfdwJL2mwjRt6qcYULIEmEZlswDH4JaLvuqR96Y+jzhnLSQb Hz8Bram7+gkb2jdq8Ikf8CiBWg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:53:39 2026 by rpki-client