$ rpki-client -vvf rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft File: nL-xN0vpMpetwbIdvTeY0VvSdN8.mft (raw, json) Hash identifier: nkk0UVS8crCwj5Mmso3GUGz7jXPv+lIOE+zUlzB8uNo= Subject key identifier: E5:72:EB:21:87:17:87:FB:AC:0D:2C:F8:A9:A2:88:E7:BA:8B:2D:27 Authority key identifier: 9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF Certificate issuer: /CN=A9152696/serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF Certificate serial: 0CD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft Manifest number: 0CCB Signing time: Mon 02 Mar 2026 02:20:16 +0000 Manifest this update: Mon 02 Mar 2026 02:20:13 +0000 Manifest next update: Mon 09 Mar 2026 02:20:13 +0000 Files and hashes: 1: nL-xN0vpMpetwbIdvTeY0VvSdN8.crl (hash: xl0WR4XyqyD60bitJ0v15L2t+awUKKf3UvbrXQHhZAw=) 2: E905CD5808F111EA8E4F1D51C4F9AE02.roa (hash: isdogO69KQFGu46kiXPUMXjezpBNqbUl3557H/EGWLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3284 (0xcd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152696, serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF Validity Not Before: Mar 2 02:20:13 2026 GMT Not After : Mar 9 02:20:13 2026 GMT Subject: CN=69a4f3df-4dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c7:19:47:84:6f:ae:ea:cf:c3:5e:c6:3c:b7: d6:b8:e2:95:a3:b1:0f:11:31:60:ed:2f:f8:b3:c9: 77:54:fc:9c:1d:36:75:75:1e:26:97:d9:b0:82:a6: 4c:57:47:2a:67:85:1c:e4:fd:d9:1e:4d:b4:d4:a5: ac:76:c1:9c:28:64:7e:b0:84:0d:bb:2a:cf:ba:b0: c5:17:f2:d2:ae:0e:1e:be:02:bd:f6:20:7c:03:1f: 84:53:3d:f5:60:8f:9e:20:fd:63:b1:a4:ab:3f:97: 87:b6:9f:23:da:f9:9f:b9:da:9c:de:c6:f9:3c:38: 67:9e:c4:70:5c:48:0f:f2:7c:a7:28:4a:bb:9a:aa: 3a:45:cb:45:81:97:fc:70:d1:0f:23:d8:3e:0f:e9: 07:43:7d:05:b3:4c:7b:d9:49:af:ea:29:11:1b:5a: cd:f6:3f:e7:19:64:17:d2:80:7b:66:0e:62:b9:e0: ca:f2:73:73:a2:dc:bd:6d:8e:f1:8d:e3:32:e2:59: 7f:30:46:ca:03:71:ee:f1:69:cf:6e:da:d4:55:b8: ad:a9:5b:36:46:fc:a2:42:f8:7c:03:96:af:50:aa: fd:d2:7b:9a:15:d8:21:b8:de:49:3f:68:04:a6:2f: a0:55:4d:10:6a:72:a1:e2:ae:a5:92:ce:65:d2:f4: 26:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:72:EB:21:87:17:87:FB:AC:0D:2C:F8:A9:A2:88:E7:BA:8B:2D:27 X509v3 Authority Key Identifier: keyid:9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:f5:81:6e:6d:cc:f4:e2:96:c3:e4:32:5b:46:f3:bd:0e:5b: ce:1b:94:0f:74:a0:b1:89:e2:76:bc:1a:f4:20:98:fe:39:3f: ef:dc:1b:c4:a5:83:50:8b:17:7d:b8:24:54:9d:d6:38:24:a4: e2:f5:cf:d7:44:03:b9:cc:74:aa:07:4e:5b:7b:ec:95:ef:49: d0:0b:d4:97:72:02:a2:bb:98:8c:01:73:1e:08:04:55:83:2f: 4b:95:1d:60:f9:c4:a3:f4:4e:b1:31:64:5e:38:c2:06:55:f5: 9f:e9:72:34:84:15:e7:dc:fd:cb:0b:01:97:45:00:81:9e:9a: c9:f5:ec:03:cd:a2:62:9f:8d:35:50:62:d4:d1:e3:cd:6b:7d: af:67:ad:97:bf:4d:92:98:53:09:a5:59:74:c7:67:35:79:b9: bb:b6:30:47:a1:d4:85:d7:9c:dd:50:49:db:24:a6:cc:9c:5c: 95:67:dd:9e:25:64:28:67:e5:55:75:29:1d:f4:97:58:9d:95: c8:ce:38:5a:be:d3:8e:93:ea:c9:4c:36:b8:46:5e:24:31:6a: 9e:a9:35:95:0e:1d:98:3e:04:cc:c9:ab:66:e5:f8:7b:cb:86: b9:fc:95:58:6e:01:5d:74:18:19:ff:5d:79:08:cc:26:55:ab: 67:5b:6d:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI2OTYxMTAvBgNVBAUTKDlDQkZCMTM3NEJFOTMyOTdBREMxQjIxREJEMzc5OEQx NUJEMjc0REYwHhcNMjYwMzAyMDIyMDEzWhcNMjYwMzA5MDIyMDEzWjAYMRYwFAYD VQQDEw02OWE0ZjNkZi00ZGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMcZR4RvrurPw17GPLfWuOKVo7EPETFg7S/4s8l3VPycHTZ1dR4ml9mwgqZM V0cqZ4Uc5P3ZHk201KWsdsGcKGR+sIQNuyrPurDFF/LSrg4evgK99iB8Ax+EUz31 YI+eIP1jsaSrP5eHtp8j2vmfudqc3sb5PDhnnsRwXEgP8nynKEq7mqo6RctFgZf8 cNEPI9g+D+kHQ30Fs0x72Umv6ikRG1rN9j/nGWQX0oB7Zg5iueDK8nNzoty9bY7x jeMy4ll/MEbKA3Hu8WnPbtrUVbitqVs2RvyiQvh8A5avUKr90nuaFdghuN5JP2gE pi+gVU0QanKh4q6lks5l0vQmjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOVy6yGH F4f7rA0s+KmiiOe6iy0nMB8GA1UdIwQYMBaAFJy/sTdL6TKXrcGyHb03mNFb0nTf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjY5Ni83MjVDQTFENDA2 Q0QxMUVBQUU1RTc5MzRDNEY5QUUwMi9uTC14TjB2cE1wZXR3YklkdlRlWTBWdlNk TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MLXhOMHZwTXBldHdiSWR2VGVZMFZ2U2ROOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjY5Ni83MjVDQTFENDA2Q0QxMUVBQUU1RTc5MzRDNEY5QUUwMi9uTC14TjB2cE1w ZXR3YklkdlRlWTBWdlNkTjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQPWBbm3M9OKWw+QyW0bzvQ5bzhuUD3SgsYnidrwa9CCY/jk/79wbxKWDUIsX fbgkVJ3WOCSk4vXP10QDucx0qgdOW3vsle9J0AvUl3ICoruYjAFzHggEVYMvS5Ud YPnEo/ROsTFkXjjCBlX1n+lyNIQV59z9ywsBl0UAgZ6ayfXsA82iYp+NNVBi1NHj zWt9r2etl79NkphTCaVZdMdnNXm5u7YwR6HUhdec3VBJ2ySmzJxclWfdniVkKGfl VXUpHfSXWJ2VyM44Wr7TjpPqyUw2uEZeJDFqnqk1lQ4dmD4EzMmrZuX4e8uGufyV WG4BXXQYGf9deQjMJlWrZ1ttkw== -----END CERTIFICATE-----Generated at Mon Mar 2 14:48:17 2026 by rpki-client