$ rpki-client -vvf rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft File: nlcX9fFLsp9ntXrX2dXweRWunEM.mft (raw, json) Hash identifier: DzvmgeBiRaagZfjYAKEqR1jR/7+7tQRMm6rRh9GwBps= Subject key identifier: AD:89:83:56:74:BF:08:80:22:40:B8:39:D7:40:74:2B:40:4B:1A:35 Authority key identifier: 9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 Certificate issuer: /CN=A914E01E/serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43 Certificate serial: 0428 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft Manifest number: 0421 Signing time: Mon 02 Mar 2026 01:03:17 +0000 Manifest this update: Mon 02 Mar 2026 01:03:14 +0000 Manifest next update: Mon 09 Mar 2026 01:03:14 +0000 Files and hashes: 1: nlcX9fFLsp9ntXrX2dXweRWunEM.crl (hash: b1Q7Rdor++Dranok4WOar/RVw9j/Yn9PVK0QYtD3uT4=) 2: B775BD7A9EA911EC95EBD87CC4F9AE02.roa (hash: AIiAPtcEdSGDtm5Xu/SA/2I+9nLKM1Ar3r+Ob3EnuAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1064 (0x428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E01E, serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43 Validity Not Before: Mar 2 01:03:14 2026 GMT Not After : Mar 9 01:03:14 2026 GMT Subject: CN=69a4e1d5-f2c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:bb:d5:c1:3e:af:c6:54:a3:eb:15:04:06: c3:5c:da:f3:77:1a:88:58:8e:1c:24:e9:09:14:9d: 28:55:c3:a6:10:14:28:4b:d9:89:e3:e8:7e:b2:4f: 89:c1:d9:80:36:90:df:9c:66:43:0e:4b:af:08:e3: ce:7d:8d:27:20:1a:32:25:4a:2a:b7:23:3f:2d:bd: 07:71:36:75:63:3e:0a:de:61:e3:b5:4f:c1:8f:ce: 5a:17:76:0b:77:25:c9:37:cc:d3:56:a8:b3:78:15: fa:ef:d4:e7:e3:85:b9:b9:f8:6e:0c:94:21:1c:e3: 71:02:7d:15:a2:ff:68:97:aa:7f:e5:94:f6:9b:9e: 8b:c1:22:e1:57:c8:e9:bd:60:1f:c3:a6:c5:fb:91: 2e:7b:b0:11:b0:ea:2e:e7:c0:6c:0d:a3:13:d1:ea: 23:62:ba:3d:10:9b:32:67:55:13:c3:d0:e7:a6:46: 59:ed:be:31:5b:a2:d8:da:ee:b4:70:d9:16:b4:80: d2:77:3c:b7:f3:60:0c:8c:9e:c0:0f:96:68:6f:14: 0a:9a:12:d6:3f:a1:30:38:b2:9a:b4:83:10:98:7d: 2b:12:e6:ab:5e:42:a2:e5:8b:e5:45:2e:96:b6:24: 97:23:11:bc:8f:90:b2:92:56:1a:b2:84:f6:7d:a1: 9a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:89:83:56:74:BF:08:80:22:40:B8:39:D7:40:74:2B:40:4B:1A:35 X509v3 Authority Key Identifier: keyid:9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:4a:4f:51:82:f7:84:b6:d4:16:9a:80:8b:a7:86:4a:bb:d4: 89:d3:e3:b9:37:5f:2c:f3:bc:c9:68:94:82:10:ac:e6:94:a9: 77:90:98:cc:3c:ed:34:2a:78:4c:3d:72:f8:11:fe:78:70:dd: b2:84:c7:6a:9e:25:1a:f1:31:a2:81:c7:93:33:57:18:b8:28: fa:85:b3:36:b1:49:d1:75:9d:00:ae:09:a3:3c:75:44:6c:54: 12:d4:aa:90:84:69:f7:0b:4e:c3:42:c3:5e:fc:26:0f:5d:08: 92:1c:1f:f1:73:42:f2:8e:c0:8c:e3:86:05:61:48:bf:21:71: a1:cd:f7:9c:c7:87:ac:31:90:0a:43:61:63:68:f8:78:b6:40: 4e:6d:6b:47:65:c2:51:30:af:df:86:4a:aa:f8:33:ea:de:7e: 3f:af:e0:70:ac:f1:45:49:cd:5e:97:26:6d:bf:88:fd:e9:4a: da:f8:c4:c7:fd:ce:38:c4:e7:86:17:c6:e0:d6:7e:b9:cd:9f: be:7b:1f:0d:72:41:12:75:ea:81:a5:dd:bc:c2:38:51:5e:55: 97:28:10:81:f8:33:3a:a9:1f:50:00:c7:e0:83:5c:07:3b:ca: 64:5e:98:40:c9:34:64:87:4e:32:ab:4e:66:d5:22:c9:c5:34: 80:e6:bc:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMUUxMTAvBgNVBAUTKDlFNTcxN0Y1RjE0QkIyOUY2N0I1N0FEN0Q5RDVGMDc5 MTVBRTlDNDMwHhcNMjYwMzAyMDEwMzE0WhcNMjYwMzA5MDEwMzE0WjAYMRYwFAYD VQQDEw02OWE0ZTFkNS1mMmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCS71cE+r8ZUo+sVBAbDXNrzdxqIWI4cJOkJFJ0oVcOmEBQoS9mJ4+h+sk+J wdmANpDfnGZDDkuvCOPOfY0nIBoyJUoqtyM/Lb0HcTZ1Yz4K3mHjtU/Bj85aF3YL dyXJN8zTVqizeBX679Tn44W5ufhuDJQhHONxAn0Vov9ol6p/5ZT2m56LwSLhV8jp vWAfw6bF+5Eue7ARsOou58BsDaMT0eojYro9EJsyZ1UTw9DnpkZZ7b4xW6LY2u60 cNkWtIDSdzy382AMjJ7AD5ZobxQKmhLWP6EwOLKatIMQmH0rEuarXkKi5YvlRS6W tiSXIxG8j5CyklYasoT2faGa3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK2Jg1Z0 vwiAIkC4OddAdCtASxo1MB8GA1UdIwQYMBaAFJ5XF/XxS7KfZ7V619nV8HkVrpxD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAxRS9DNUM2RjA1RTlF QTYxMUVDOEZCMDM2NTRDNEY5QUUwMi9ubGNYOWZGTHNwOW50WHJYMmRYd2VSV3Vu RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25sY1g5ZkZMc3A5bnRYclgyZFh3ZVJXdW5FTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAxRS9DNUM2RjA1RTlFQTYxMUVDOEZCMDM2NTRDNEY5QUUwMi9ubGNYOWZGTHNw OW50WHJYMmRYd2VSV3VuRU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjEpPUYL3hLbUFpqAi6eGSrvUidPjuTdfLPO8yWiUghCs5pSpd5CYzDztNCp4 TD1y+BH+eHDdsoTHap4lGvExooHHkzNXGLgo+oWzNrFJ0XWdAK4Jozx1RGxUEtSq kIRp9wtOw0LDXvwmD10Ikhwf8XNC8o7AjOOGBWFIvyFxoc33nMeHrDGQCkNhY2j4 eLZATm1rR2XCUTCv34ZKqvgz6t5+P6/gcKzxRUnNXpcmbb+I/elK2vjEx/3OOMTn hhfG4NZ+uc2fvnsfDXJBEnXqgaXdvMI4UV5VlygQgfgzOqkfUADH4INcBzvKZF6Y QMk0ZIdOMqtOZtUiycU0gOa8SA== -----END CERTIFICATE-----Generated at Mon Mar 2 04:05:08 2026 by rpki-client