$ rpki-client -vvf rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft File: NdqtT3Wuk43GUzSEzejIF93Csig.mft (raw, json) Hash identifier: IuZmO7HJs6P13w7Kd2aSVcVe8lebpju2h109zP/ACyM= Subject key identifier: D7:96:E9:94:82:B4:E2:2C:EF:D6:0F:DE:1D:87:42:A1:68:78:5F:1C Authority key identifier: 35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 Certificate issuer: /CN=A911E351/serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Certificate serial: 0489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft Manifest number: 0484 Signing time: Sun 01 Mar 2026 00:46:18 +0000 Manifest this update: Sun 01 Mar 2026 00:46:18 +0000 Manifest next update: Sun 08 Mar 2026 00:46:18 +0000 Files and hashes: 1: NdqtT3Wuk43GUzSEzejIF93Csig.crl (hash: ZfB3WlVOh2exzNVWyXBjPVYgJUbfsY8B2XD5lhmaKK0=) 2: E9ED080A785011ECBD2B6A10C4F9AE02.roa (hash: FuFTaeRK8tSp81YHz+dX/m9FwXTUZxL+9fQah5rY6z4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 00:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1161 (0x489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E351, serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Validity Not Before: Mar 1 00:46:18 2026 GMT Not After : Mar 8 00:46:18 2026 GMT Subject: CN=69a38c5a-de28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:28:28:a5:9e:0d:56:ae:32:1b:67:8a:10:20: de:95:0b:48:b5:32:a1:df:fb:fe:33:6a:5d:f9:b6: 03:ed:ae:23:76:47:ae:20:00:f9:c5:32:67:95:8e: a0:ea:d4:df:2a:0d:75:41:ab:b8:e6:26:c5:a5:16: b8:25:48:26:70:f9:e9:5e:92:53:a1:38:6b:ff:78: 71:fe:8b:3a:ea:a7:56:c1:d6:3d:9f:11:62:a2:9d: a1:42:53:8d:e6:6e:36:fb:8c:df:22:55:db:f8:ab: d6:2c:8a:dc:8c:79:f8:f0:14:f3:d9:a6:a7:f3:09: 21:68:3e:1c:21:39:ac:45:3d:24:ad:ee:99:28:96: 2b:9c:bb:e6:ce:68:39:93:ed:e2:50:79:4b:62:81: fd:32:0d:b3:2e:da:70:f8:03:ff:70:5c:45:b9:3a: 00:e6:96:ea:ff:2e:bf:a4:35:87:b0:5c:c4:f1:a3: 3e:83:ac:b2:f1:be:3a:c4:6e:1c:80:1d:d6:7a:04: aa:79:7d:37:55:f5:dd:0e:c4:5f:d0:a6:d7:69:48: a7:a9:1d:b4:0f:ff:69:ae:72:6d:c2:05:2d:1e:22: 5e:57:05:0a:ad:46:af:b3:9a:37:50:c7:2b:cc:48: ec:5b:5a:ec:79:f9:d7:a8:a7:ae:48:e5:79:00:6d: fd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:96:E9:94:82:B4:E2:2C:EF:D6:0F:DE:1D:87:42:A1:68:78:5F:1C X509v3 Authority Key Identifier: keyid:35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:8d:61:5d:6e:eb:0a:84:34:1c:29:86:ae:8a:54:c9:2e:ee: a4:0b:2d:ae:0b:24:cd:45:df:5b:bc:2e:45:ee:a1:00:b1:3d: 02:17:75:e8:ff:8d:03:f0:33:12:04:23:16:da:03:56:62:d3: ee:a0:5e:8e:05:3f:e5:8d:2c:cb:37:8f:bb:20:74:89:9c:89: 80:94:47:52:36:27:86:f6:db:a0:a0:e9:d6:f9:d9:ec:d2:74: ba:58:8c:d1:1b:f4:85:44:df:74:71:91:26:e6:74:57:3b:07: 6b:9e:57:07:92:60:2c:08:eb:61:be:4d:97:fc:15:15:dc:44: 8b:c3:e7:11:12:23:65:76:45:af:87:15:2d:f7:b2:64:2b:94: b6:6d:03:9d:46:c5:5a:e1:c8:9d:6a:15:94:72:e7:ee:ac:d3: 2e:e7:52:bb:5b:50:73:54:a6:81:2f:0d:43:db:fb:ad:8a:e0: e8:a8:dd:ae:f1:90:07:b3:5c:3a:97:a6:84:ad:a6:fe:a3:ad: aa:c8:46:f1:13:68:d1:a4:f0:f0:da:ab:d7:b1:1a:04:d7:de: 31:02:4d:07:ab:7d:48:69:9e:be:b2:f5:18:a7:74:82:b0:be: c9:44:7e:45:c7:d9:c1:54:fa:a4:d0:88:0a:9b:11:ce:24:0b: 53:37:27:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUzNTExMTAvBgNVBAUTKDM1REFBRDRGNzVBRTkzOERDNjUzMzQ4NENERThDODE3 RERDMkIyMjgwHhcNMjYwMzAxMDA0NjE4WhcNMjYwMzA4MDA0NjE4WjAYMRYwFAYD VQQDDA02OWEzOGM1YS1kZTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmSgopZ4NVq4yG2eKECDelQtItTKh3/v+M2pd+bYD7a4jdkeuIAD5xTJnlY6g 6tTfKg11Qau45ibFpRa4JUgmcPnpXpJToThr/3hx/os66qdWwdY9nxFiop2hQlON 5m42+4zfIlXb+KvWLIrcjHn48BTz2aan8wkhaD4cITmsRT0kre6ZKJYrnLvmzmg5 k+3iUHlLYoH9Mg2zLtpw+AP/cFxFuToA5pbq/y6/pDWHsFzE8aM+g6yy8b46xG4c gB3WegSqeX03VfXdDsRf0KbXaUinqR20D/9prnJtwgUtHiJeVwUKrUavs5o3UMcr zEjsW1rsefnXqKeuSOV5AG39ZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNeW6ZSC tOIs79YP3h2HQqFoeF8cMB8GA1UdIwQYMBaAFDXarU91rpONxlM0hM3oyBfdwrIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTM1MS81QkNGODhBNjc4 NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0M0dVelNFemVqSUY5M0Nz aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05kcXRUM1d1azQzR1V6U0V6ZWpJRjkzQ3NpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTM1MS81QkNGODhBNjc4NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0 M0dVelNFemVqSUY5M0NzaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATo1hXW7rCoQ0HCmGropUyS7upAstrgskzUXfW7wuRe6hALE9Ahd16P+NA/Az EgQjFtoDVmLT7qBejgU/5Y0syzePuyB0iZyJgJRHUjYnhvbboKDp1vnZ7NJ0uliM 0Rv0hUTfdHGRJuZ0VzsHa55XB5JgLAjrYb5Nl/wVFdxEi8PnERIjZXZFr4cVLfey ZCuUtm0DnUbFWuHInWoVlHLn7qzTLudSu1tQc1SmgS8NQ9v7rYrg6KjdrvGQB7Nc OpemhK2m/qOtqshG8RNo0aTw8Nqr17EaBNfeMQJNB6t9SGmevrL1GKd0grC+yUR+ RcfZwVT6pNCICpsRziQLUzcnMQ== -----END CERTIFICATE-----Generated at Sun Mar 1 20:44:00 2026 by rpki-client