$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft File: nQi_OKDTi4yrfP2I9djE7WZ3jME.mft (raw, json) Hash identifier: aCqUE+YjaQDQU3P/pnK8vL1yITzkM2YeeNAqP6iVS04= Subject key identifier: CE:5E:B6:DC:93:F9:0A:08:4F:68:C7:CC:2B:97:74:B1:8A:DD:30:A6 Authority key identifier: 9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 Certificate issuer: /CN=A913F0DF/serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft Manifest number: 01A2 Signing time: Sun 01 Mar 2026 05:01:06 +0000 Manifest this update: Sun 01 Mar 2026 05:01:05 +0000 Manifest next update: Sun 08 Mar 2026 05:01:05 +0000 Files and hashes: 1: nQi_OKDTi4yrfP2I9djE7WZ3jME.crl (hash: 2+wRwEj8ordYMaaxOZE64Xhqha8w+x1LExn1xkc06YU=) 2: 7C7AF8E6E67011EEB76DCB76C4F9AE02.roa (hash: CH0RcTjT3+/CHefP1yxI2QXlV1Q7xfsQAzCv5/ZeECQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 05:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0DF, serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Validity Not Before: Mar 1 05:01:05 2026 GMT Not After : Mar 8 05:01:05 2026 GMT Subject: CN=69a3c812-c4ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1f:7c:7b:85:2b:28:7b:b9:50:22:5c:66:70: 97:b2:d4:6f:4d:18:4a:f9:78:f5:2e:f1:c6:06:ae: dc:9f:51:f8:6c:d2:e8:a5:15:69:37:8f:70:62:69: b4:14:df:3e:24:1c:ec:cb:08:20:22:53:75:8a:a9: 5a:09:c7:1a:9b:90:5e:69:18:91:65:5c:ca:61:6f: 6f:d9:14:06:01:51:ae:df:2d:fe:2f:02:68:2a:96: cd:d0:ee:2c:78:59:de:ed:a6:94:00:d3:a4:08:0d: df:03:c6:8b:31:a0:06:b7:a6:fd:12:70:a3:12:b7: 74:06:88:98:54:71:c0:4e:54:6c:e3:5d:66:f1:58: 61:36:bd:95:18:aa:3a:12:51:a2:83:81:da:25:73: ad:f2:57:43:14:a4:05:d0:05:58:9d:0d:10:e9:d0: e6:84:7a:2b:d9:b1:30:04:91:a2:d3:08:20:26:97: 6c:f9:d9:66:24:c0:2e:24:1f:5e:21:5b:92:6b:93: 97:cc:cc:11:2c:2d:56:2a:1c:17:80:51:24:64:bc: aa:fc:0c:4f:37:d0:41:80:6c:ba:af:e7:4d:e0:2e: d3:21:e0:f3:2f:cc:ba:57:49:d6:5d:7f:f6:a6:0d: 98:b1:25:84:36:17:7f:10:9f:26:16:9b:a6:3c:53: 84:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5E:B6:DC:93:F9:0A:08:4F:68:C7:CC:2B:97:74:B1:8A:DD:30:A6 X509v3 Authority Key Identifier: keyid:9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:02:75:51:4b:57:01:4f:b7:e8:59:cc:57:53:dc:bf:a5:91: fa:b3:7e:f0:50:33:0d:a2:4b:00:bd:77:f8:f9:0d:52:65:72: 15:4d:d5:e5:24:56:d0:a1:38:ca:86:0c:7a:2f:90:6b:78:9a: 5f:ab:fa:bd:8d:dc:18:cc:5d:21:34:ec:e3:34:e5:5b:e7:0d: aa:28:78:6a:99:1a:66:71:d6:03:0c:79:55:58:1b:2b:e5:c7: 79:10:70:6e:a0:2a:10:6f:74:fd:32:ed:53:be:c4:0b:52:16: cc:4d:f5:5f:95:48:69:a2:64:a2:07:64:37:b2:b9:92:2a:49: f8:43:b4:f1:86:d3:5e:28:c4:40:9a:3d:4f:57:cb:b4:a8:8f: 40:4a:05:c4:bf:9a:fc:9d:99:8a:e3:1f:2c:c5:a1:bf:b1:32: be:ad:a0:46:23:d3:d4:8c:56:55:11:b1:b7:ef:9d:c4:7e:41: b9:54:6e:9b:61:a4:2f:b6:3f:ca:c5:56:ce:64:fd:7a:88:ab: 0a:3f:06:35:a1:69:0c:0e:c8:9b:da:b4:b4:75:08:c9:a3:5a: d9:c1:13:00:87:90:c4:ad:00:de:2a:c1:50:e7:f5:d2:23:f7: e7:8e:58:f0:96:55:6a:1a:8c:e3:08:c2:fa:30:7d:d5:a8:c0: f0:b0:63:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwREYxMTAvBgNVBAUTKDlEMDhCRjM4QTBEMzhCOENBQjdDRkQ4OEY1RDhDNEVE NjY3NzhDQzEwHhcNMjYwMzAxMDUwMTA1WhcNMjYwMzA4MDUwMTA1WjAYMRYwFAYD VQQDDA02OWEzYzgxMi1jNGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2R98e4UrKHu5UCJcZnCXstRvTRhK+Xj1LvHGBq7cn1H4bNLopRVpN49wYmm0 FN8+JBzsywggIlN1iqlaCccam5BeaRiRZVzKYW9v2RQGAVGu3y3+LwJoKpbN0O4s eFne7aaUANOkCA3fA8aLMaAGt6b9EnCjErd0BoiYVHHATlRs411m8VhhNr2VGKo6 ElGig4HaJXOt8ldDFKQF0AVYnQ0Q6dDmhHor2bEwBJGi0wggJpds+dlmJMAuJB9e IVuSa5OXzMwRLC1WKhwXgFEkZLyq/AxPN9BBgGy6r+dN4C7TIeDzL8y6V0nWXX/2 pg2YsSWENhd/EJ8mFpumPFOEnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM5ettyT +QoIT2jHzCuXdLGK3TCmMB8GA1UdIwQYMBaAFJ0Ivzig04uMq3z9iPXYxO1md4zB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBERi9FNTA4MzY0ODk5 MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0eXJmUDJJOWRqRTdXWjNq TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RaV9PS0RUaTR5cmZQMkk5ZGpFN1daM2pNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBERi9FNTA4MzY0ODk5MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0 eXJmUDJJOWRqRTdXWjNqTUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAowJ1UUtXAU+36FnMV1Pcv6WR+rN+8FAzDaJLAL13+PkNUmVyFU3V5SRW0KE4 yoYMei+Qa3iaX6v6vY3cGMxdITTs4zTlW+cNqih4apkaZnHWAwx5VVgbK+XHeRBw bqAqEG90/TLtU77EC1IWzE31X5VIaaJkogdkN7K5kipJ+EO08YbTXijEQJo9T1fL tKiPQEoFxL+a/J2ZiuMfLMWhv7Eyvq2gRiPT1IxWVRGxt++dxH5BuVRum2GkL7Y/ ysVWzmT9eoirCj8GNaFpDA7Im9q0tHUIyaNa2cETAIeQxK0A3irBUOf10iP3545Y 8JZVahqM4wjC+jB91ajA8LBjkw== -----END CERTIFICATE-----Generated at Mon Mar 2 02:00:40 2026 by rpki-client