$ rpki-client -vvf rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft File: nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft (raw, json) Hash identifier: uUXV/GdTqC33rpaLN13m23PLO77BjQdVC/xJmdnak+M= Subject key identifier: DC:57:9B:37:D1:52:D3:93:D4:05:A5:B3:CB:CC:20:23:D7:DD:18:5A Authority key identifier: 9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9 Certificate issuer: /CN=A91529DF/serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft Manifest number: 1F Signing time: Sun 01 Mar 2026 10:22:07 +0000 Manifest this update: Sun 01 Mar 2026 10:22:06 +0000 Manifest next update: Sun 08 Mar 2026 10:22:06 +0000 Files and hashes: 1: nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl (hash: v3AE5PeWbWX4I8+Sni/TmSQ2NxuS2cVBTHuD8cKabTA=) 2: FFB52996ED3C11F08785EF274C6F56BC.roa (hash: OoVBLoUT5miBH3MJ0SxwCQXvStMXH6JblWzdGUt2G6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91529DF, serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9 Validity Not Before: Mar 1 10:22:06 2026 GMT Not After : Mar 8 10:22:06 2026 GMT Subject: CN=69a4134f-ac63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f6:19:f2:ee:68:bd:f6:86:6a:65:79:4d:f1: d9:a1:bb:84:7c:5a:39:62:bf:94:c5:b1:65:22:e8: f7:aa:f5:c7:b0:3f:d1:45:66:83:67:8e:c5:63:bc: 9f:47:fe:02:5d:c4:29:5f:d3:26:2e:56:e3:fa:4b: e4:1f:c3:3f:83:b5:9f:7d:89:85:cb:4c:59:77:e9: 25:2f:20:70:a9:3e:5c:f7:c5:1b:22:a4:70:65:43: 16:9b:96:b2:eb:00:f0:aa:37:e1:ed:60:50:d5:a3: 78:9d:81:46:9c:0d:a7:dd:c6:f5:94:c2:0b:10:ca: 9c:d7:68:08:c2:55:d9:cc:c1:e5:1a:a6:01:d1:d2: c4:e8:62:e2:ad:ff:65:05:ba:0d:a0:4a:49:36:a9: 02:f9:73:bf:10:92:c5:ca:c3:12:91:30:ce:d9:17: 29:18:89:db:dd:08:11:20:9f:98:cf:65:40:0f:30: 66:43:87:10:b0:14:b7:34:b5:f3:33:8e:d3:2e:1d: 8c:f3:fa:ff:da:81:dd:0c:c4:9b:ae:8c:c0:d5:8e: 5f:41:b4:1e:ee:08:8a:65:08:da:5f:12:b1:4c:5e: 3e:eb:59:12:98:b8:86:71:90:86:f3:b9:cd:80:90: b3:b5:7f:8e:83:72:dd:8b:03:b2:46:79:39:c7:af: 24:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:57:9B:37:D1:52:D3:93:D4:05:A5:B3:CB:CC:20:23:D7:DD:18:5A X509v3 Authority Key Identifier: keyid:9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:a6:2f:8e:ea:5f:8b:d0:76:52:89:ee:9b:b5:ce:9e:6b:ba: 35:fd:f2:14:a1:a2:38:f8:67:fb:6a:10:17:3b:01:67:07:dc: 37:3f:d1:10:2a:6c:19:14:08:50:35:d6:b0:6b:46:72:71:cb: 4d:60:34:ca:f2:9a:34:f7:d9:fc:3a:71:c7:02:57:73:51:51: d6:b1:08:6f:48:1a:39:16:da:46:c3:38:93:96:ac:83:d4:6e: 7b:44:a6:49:17:e5:8b:dd:3a:85:28:f1:02:fb:15:34:ca:b6: 66:30:6a:be:0d:4c:49:6c:5a:36:12:d9:c0:f6:8d:f6:46:0c: 37:39:a1:a7:0e:77:f8:1a:e1:e4:e7:67:a2:f8:d2:3d:99:f8: 9c:23:25:08:02:b8:ea:77:b9:fa:81:09:fd:0d:0c:f7:36:00: fc:dd:c6:63:a6:aa:1a:4d:29:cd:4e:6e:5c:62:7c:f4:ce:ee: 4f:b7:e8:2c:98:89:0d:93:6f:e7:95:96:2e:09:77:10:f6:b8: 80:cd:62:6c:be:a2:e6:04:41:7a:e2:38:ca:14:e7:eb:b7:1e: e1:d3:a6:6f:6a:0c:98:a2:17:af:53:d4:2b:e7:cc:fc:58:ba: 99:bc:11:ab:c4:ce:2e:71:47:78:b9:9c:3f:0f:25:9f:61:c9: 27:7a:1f:26 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MjlERjExMC8GA1UEBRMoOUU2Q0ZBQUI5NEI0MkIyMTc2MDFFMTMzMEEwMjc4MjJC OUNBMUZCOTAeFw0yNjAzMDExMDIyMDZaFw0yNjAzMDgxMDIyMDZaMBgxFjAUBgNV BAMTDTY5YTQxMzRmLWFjNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw9hny7mi99oZqZXlN8dmhu4R8Wjliv5TFsWUi6Peq9cewP9FFZoNnjsVjvJ9H /gJdxClf0yYuVuP6S+Qfwz+DtZ99iYXLTFl36SUvIHCpPlz3xRsipHBlQxablrLr APCqN+HtYFDVo3idgUacDafdxvWUwgsQypzXaAjCVdnMweUapgHR0sToYuKt/2UF ug2gSkk2qQL5c78QksXKwxKRMM7ZFykYidvdCBEgn5jPZUAPMGZDhxCwFLc0tfMz jtMuHYzz+v/agd0MxJuujMDVjl9BtB7uCIplCNpfErFMXj7rWRKYuIZxkIbzuc2A kLO1f46Dct2LA7JGeTnHryTZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3FebN9FS 05PUBaWzy8wgI9fdGFowHwYDVR0jBBgwFoAUnmz6q5S0KyF2AeEzCgJ4IrnKH7kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyOURGL0UyN0M5M0FFRUQy RTExRjA4MEM0NjAzMjQ3NkY1NkJDL25tejZxNVMwS3lGMkFlRXpDZ0o0SXJuS0g3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbm16NnE1UzBLeUYyQWVFekNnSjRJcm5LSDdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy OURGL0UyN0M5M0FFRUQyRTExRjA4MEM0NjAzMjQ3NkY1NkJDL25tejZxNVMwS3lG MkFlRXpDZ0o0SXJuS0g3ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBVpi+O6l+L0HZSie6btc6ea7o1/fIUoaI4+Gf7ahAXOwFnB9w3P9EQKmwZFAhQ Ndawa0ZycctNYDTK8po099n8OnHHAldzUVHWsQhvSBo5FtpGwziTlqyD1G57RKZJ F+WL3TqFKPEC+xU0yrZmMGq+DUxJbFo2EtnA9o32Rgw3OaGnDnf4GuHk52ei+NI9 mficIyUIArjqd7n6gQn9DQz3NgD83cZjpqoaTSnNTm5cYnz0zu5Pt+gsmIkNk2/n lZYuCXcQ9riAzWJsvqLmBEF64jjKFOfrtx7h06ZvagyYohevU9Qr58z8WLqZvBGr xM4ucUd4uZw/DyWfYckneh8m -----END CERTIFICATE-----Generated at Mon Mar 2 04:46:23 2026 by rpki-client