$ rpki-client -vvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft File: NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft (raw, json) Hash identifier: Yufi+AOMwvLU+Vyn9OKJCjmhVZ20VOeIF572ajopVTQ= Subject key identifier: 1C:37:A2:19:45:DD:F5:E0:F3:20:6E:7D:AE:40:54:37:63:6F:46:36 Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06 Certificate issuer: /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06 Certificate serial: 080D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft Manifest number: 0D39 Signing time: Mon 02 Mar 2026 02:28:04 +0000 Manifest this update: Mon 02 Mar 2026 02:28:02 +0000 Manifest next update: Mon 09 Mar 2026 02:28:02 +0000 Files and hashes: 1: NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl (hash: JhFJfP1ySmwWKxk8Y3Qg6tKzNqhX/Lttu630Z51kWOE=) 2: 9E1A4B86526511EE869BEC82C4F9AE02.roa (hash: mmFhk9zuleyk+Z7avHwEC86my2HqXI9Jsw8bW9a65SQ=) 3: 5573F3D8979F11F0BD27D51AC4F9AE02.roa (hash: jLsC6AQ8ZudWYkc2Ht8CrQGZs02EVdFUnnZJBxyHgNU=) 4: 13D5D992979E11F08E996475C4F9AE02.roa (hash: aNQGU8gUhtVzK0StgAqIPs0EzyZY2kTncb0zbJ2pXGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2061 (0x80d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153646, serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06 Validity Not Before: Mar 2 02:28:02 2026 GMT Not After : Mar 9 02:28:02 2026 GMT Subject: CN=69a4f5b3-170d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5e:e1:fd:9a:cc:48:69:54:77:3a:8a:a5:5c: 4f:f6:60:78:2f:7c:38:d5:6d:86:04:38:25:89:e6: 00:ec:b5:c7:7b:f7:ac:cf:38:61:99:42:68:c4:83: 3f:89:e2:dd:55:9a:ec:9d:16:8c:11:00:f5:be:4f: b7:b4:5e:25:7e:bc:13:d0:f6:a5:56:a7:53:21:fc: 62:19:44:fa:37:6b:86:05:f2:72:ba:eb:61:4b:4c: 52:57:6c:30:01:2f:3c:41:7d:67:70:b4:03:77:4b: 18:7e:02:2f:22:fc:a1:aa:1e:53:d3:43:5e:22:75: cd:6d:63:ab:45:fd:24:30:95:a0:ef:25:51:67:92: 24:16:ba:d4:5d:a3:70:61:36:25:c0:67:11:cc:6c: f1:4d:73:63:76:7f:02:44:d5:13:fc:0c:b2:16:ca: 3e:a4:1c:e5:c9:12:4a:40:95:fb:fb:7f:e3:8b:ac: ec:e0:24:ff:c9:46:73:90:64:61:61:7c:65:bd:83: 61:d4:af:32:a9:75:42:38:c5:76:6b:02:12:21:3e: f4:4c:07:dd:1f:b1:0e:7c:61:dc:f4:d0:ca:cd:ea: 21:92:b1:e7:b4:1b:b2:c8:5e:a0:ba:18:21:76:78: e0:5a:fb:4b:f6:8c:22:7d:81:9f:2d:00:cc:c5:bc: e9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:37:A2:19:45:DD:F5:E0:F3:20:6E:7D:AE:40:54:37:63:6F:46:36 X509v3 Authority Key Identifier: keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:92:13:44:54:df:43:24:cf:fc:87:4e:4d:a3:f5:cb:e8:1f: eb:fd:12:21:c6:57:b5:19:8c:e5:24:58:72:17:b4:8d:9a:c7: 86:f5:a0:0b:1a:07:fb:46:69:31:26:9c:f0:3b:c3:54:b8:79: 8d:f9:46:4e:d8:33:0b:e0:79:ff:03:b0:fa:38:76:5c:11:b9: 74:02:bb:74:e1:98:be:98:7c:99:91:7d:23:9f:53:b6:0e:fc: 85:d9:c8:31:72:eb:b9:90:f0:cf:cc:99:80:33:e6:12:bf:3b: 6b:4f:78:d7:48:d4:ca:74:60:49:48:15:12:df:fe:16:f7:56: fa:5f:e2:8d:51:0b:af:e5:2f:2f:88:82:a0:20:11:db:d3:1b: 26:18:d0:6f:84:e0:8d:75:4f:47:04:6d:76:7e:a3:dd:bb:df: c2:2f:dd:6a:52:1d:23:ed:b5:9c:86:16:f8:b5:82:28:ee:7a: 21:8e:75:fb:4a:ec:2c:d1:d3:63:19:18:d7:7d:7d:95:39:4f: 99:96:20:f3:3b:61:17:59:80:c1:c0:b6:e9:a6:a9:b4:c2:c8: 5c:26:cb:ff:9c:6a:1c:e4:d8:17:62:bb:f7:10:3f:2d:19:86: ba:90:8e:23:48:b7:80:13:09:8e:15:46:06:df:57:cf:a4:6a: ce:86:b9:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2NDYxMTAvBgNVBAUTKDM0OTJFRkZFOTYyMkIxRkZGODgxNTk3MDAzNzYzQzFC QTI0QTFFMDYwHhcNMjYwMzAyMDIyODAyWhcNMjYwMzA5MDIyODAyWjAYMRYwFAYD VQQDEw02OWE0ZjViMy0xNzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiF7h/ZrMSGlUdzqKpVxP9mB4L3w41W2GBDglieYA7LXHe/eszzhhmUJoxIM/ ieLdVZrsnRaMEQD1vk+3tF4lfrwT0PalVqdTIfxiGUT6N2uGBfJyuuthS0xSV2ww AS88QX1ncLQDd0sYfgIvIvyhqh5T00NeInXNbWOrRf0kMJWg7yVRZ5IkFrrUXaNw YTYlwGcRzGzxTXNjdn8CRNUT/AyyFso+pBzlyRJKQJX7+3/ji6zs4CT/yUZzkGRh YXxlvYNh1K8yqXVCOMV2awISIT70TAfdH7EOfGHc9NDKzeohkrHntBuyyF6guhgh dnjgWvtL9owifYGfLQDMxbzpTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBw3ohlF 3fXg8yBufa5AVDdjb0Y2MB8GA1UdIwQYMBaAFDSS7/6WIrH/+IFZcAN2PBuiSh4G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzY0Ni82QjhFRkE1QUZG OTgxMUU5ODdDODBBNkFDNEY5QUUwMi9OSkx2X3BZaXNmXzRnVmx3QTNZOEc2SktI Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KTHZfcFlpc2ZfNGdWbHdBM1k4RzZKS0hnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzY0Ni82QjhFRkE1QUZGOTgxMUU5ODdDODBBNkFDNEY5QUUwMi9OSkx2X3BZaXNm XzRnVmx3QTNZOEc2SktIZ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUpITRFTfQyTP/IdOTaP1y+gf6/0SIcZXtRmM5SRYche0jZrHhvWgCxoH+0Zp MSac8DvDVLh5jflGTtgzC+B5/wOw+jh2XBG5dAK7dOGYvph8mZF9I59Ttg78hdnI MXLruZDwz8yZgDPmEr87a09410jUynRgSUgVEt/+FvdW+l/ijVELr+UvL4iCoCAR 29MbJhjQb4TgjXVPRwRtdn6j3bvfwi/dalIdI+21nIYW+LWCKO56IY51+0rsLNHT YxkY1319lTlPmZYg8zthF1mAwcC26aaptMLIXCbL/5xqHOTYF2K79xA/LRmGupCO I0i3gBMJjhVGBt9Xz6Rqzoa59w== -----END CERTIFICATE-----Generated at Mon Mar 2 17:56:28 2026 by rpki-client