$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json) Hash identifier: KdluHcM4GPzmPEH63W8/tElbjyyrNTjplGmWzk6P880= Subject key identifier: F7:6E:EE:1C:CD:28:0C:0D:84:7E:19:93:AB:B1:F2:7C:A9:5F:E4:B3 Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0D0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft Manifest number: 0CA9 Signing time: Mon 02 Mar 2026 02:00:20 +0000 Manifest this update: Mon 02 Mar 2026 02:00:18 +0000 Manifest next update: Mon 09 Mar 2026 02:00:18 +0000 Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: 09odMtgISjTTRnmB6oRjuH1Imf/Tcbtp2i1HxeHiopw=) 2: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: WVkxMnAPmYEx2pir9yJBj6S9Ri2HeWB84QrUcGBIgX0=) 3: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: uM9esMnbJemVTDXSBi0eBdZiTFnt+Mq64Yuw7Vo5ff8=) 4: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: mpanMW6E++IIJhwRfBokQkjYWR4BXeWQNkL+zlkPQk0=) 5: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: yVyxrQ/XexxsyDCtzcGEooxv2C0cJKVEzNUoJUfFCpg=) 6: 0592D90E02E111F0BFF53A15C4F9AE02.roa (hash: JKDdsewbmTds8DX8z5n44dixpiguXnj1mkHopckNnnI=) 7: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: EXrq9SaZzH6ZvSPXc9dAkv/CRi57VwFICygbDK3FbAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3338 (0xd0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Mar 2 02:00:18 2026 GMT Not After : Mar 9 02:00:18 2026 GMT Subject: CN=69a4ef33-6b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ab:2e:f9:a1:28:22:32:18:66:cb:1f:b8:a7: 95:47:ce:cc:58:62:86:8c:18:12:99:78:a8:a3:ba: 21:bf:73:22:99:9b:fd:44:6a:42:12:fe:c3:a9:df: 9e:92:fc:5a:dc:bb:e0:f5:25:2c:9b:06:a4:f1:59: 01:a1:a8:d5:a7:fa:a3:3a:fb:05:00:24:fb:6a:57: a7:41:4e:84:68:47:1b:2e:3f:68:e5:1e:04:53:7a: 46:d9:ed:df:8a:77:21:35:37:b3:2e:63:c0:00:08: 75:a1:a1:6e:5d:ee:0a:e3:b5:d6:eb:2f:92:83:cc: fd:7d:21:dc:6e:18:b1:4c:39:07:54:7b:cb:08:1a: a8:17:aa:3a:51:ba:c3:dc:a4:63:a2:33:46:74:18: cd:0e:fc:42:14:b8:e7:6a:a0:ff:af:9c:3c:6c:00: 68:3e:62:a9:01:4f:00:ae:04:ab:88:f4:89:de:33: 59:85:4a:6e:6d:1d:ba:79:93:78:dd:6c:b8:55:7b: 7f:fb:88:a3:0e:dd:81:ed:70:10:bf:d4:9c:32:2a: 23:2f:a6:c6:74:95:08:f6:c7:31:ff:a6:cc:90:51: 3a:51:c4:34:26:24:e3:4f:d9:fb:53:a0:c3:f4:33: 44:af:9c:be:25:b4:13:a1:63:f2:af:52:da:9c:be: be:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:6E:EE:1C:CD:28:0C:0D:84:7E:19:93:AB:B1:F2:7C:A9:5F:E4:B3 X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5b:3c:1b:e0:90:98:1f:4d:c5:97:45:aa:8f:b9:b7:17:6c: 75:4e:29:71:db:34:85:b7:4c:66:99:f0:18:7e:2a:e8:b1:1b: 4d:80:af:43:98:11:0c:e4:dd:3b:74:12:a2:3a:78:a7:db:23: bc:e6:eb:34:87:12:c2:81:93:59:22:38:6a:61:d6:44:19:d6: 29:e1:cf:a6:b6:38:91:0a:ef:6d:0b:bc:83:cb:a2:51:05:9d: 36:22:27:41:78:2b:a1:40:d6:fd:c8:83:5c:64:7e:31:88:bb: 31:58:56:1d:4f:b6:49:d5:c3:6a:ba:01:1a:24:f6:1d:af:17: 79:97:e1:b6:e7:52:4d:bd:6f:31:56:fb:e0:a5:06:b6:2a:ee: aa:6d:0d:df:1d:59:fa:b6:a7:70:db:cc:d2:bb:96:84:2e:bd: 2e:47:fc:f7:4a:c1:97:62:b2:f2:36:78:ce:0d:18:65:f9:42: aa:3e:80:e4:c3:43:7f:04:71:a4:5d:10:df:c1:e0:5d:e2:e1: 20:21:3b:07:e4:30:74:e7:5d:46:fe:04:e3:ac:92:e0:ee:8d: f8:e4:65:1f:83:61:ac:2d:47:a6:23:fe:75:76:85:ea:ee:e6: 0f:7e:14:da:7e:f0:2c:ee:ea:8a:33:46:18:e3:ee:c0:72:70: c1:b3:53:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjYwMzAyMDIwMDE4WhcNMjYwMzA5MDIwMDE4WjAYMRYwFAYD VQQDEw02OWE0ZWYzMy02YjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36su+aEoIjIYZssfuKeVR87MWGKGjBgSmXioo7ohv3MimZv9RGpCEv7Dqd+e kvxa3Lvg9SUsmwak8VkBoajVp/qjOvsFACT7alenQU6EaEcbLj9o5R4EU3pG2e3f inchNTezLmPAAAh1oaFuXe4K47XW6y+Sg8z9fSHcbhixTDkHVHvLCBqoF6o6UbrD 3KRjojNGdBjNDvxCFLjnaqD/r5w8bABoPmKpAU8ArgSriPSJ3jNZhUpubR26eZN4 3Wy4VXt/+4ijDt2B7XAQv9ScMiojL6bGdJUI9scx/6bMkFE6UcQ0JiTjT9n7U6DD 9DNEr5y+JbQToWPyr1LanL6+TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPdu7hzN KAwNhH4Zk6ux8nypX+SzMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQwOC9GOUMzMzM5MjFEODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIw R255aTJaeWIwLWZtQXp5NGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG1s8G+CQmB9NxZdFqo+5txdsdU4pcds0hbdMZpnwGH4q6LEbTYCvQ5gRDOTd O3QSojp4p9sjvObrNIcSwoGTWSI4amHWRBnWKeHPprY4kQrvbQu8g8uiUQWdNiIn QXgroUDW/ciDXGR+MYi7MVhWHU+2SdXDaroBGiT2Ha8XeZfhtudSTb1vMVb74KUG tiruqm0N3x1Z+rancNvM0ruWhC69Lkf890rBl2Ky8jZ4zg0YZflCqj6A5MNDfwRx pF0Q38HgXeLhICE7B+QwdOddRv4E46yS4O6N+ORlH4NhrC1HpiP+dXaF6u7mD34U 2n7wLO7qijNGGOPuwHJwwbNT1A== -----END CERTIFICATE-----Generated at Mon Mar 2 12:25:22 2026 by rpki-client