$ rpki-client -vvf rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft File: nqxU6fn1nmg49IRgQhBWMwZtII4.mft (raw, json) Hash identifier: B49HIbvYb9WkPjQqXYAERpsi7NYwObQowr6Yjfh6NFo= Subject key identifier: 55:19:0F:43:AD:9B:62:A0:A1:48:F0:0B:04:09:C2:05:D6:90:AC:7A Authority key identifier: 9E:AC:54:E9:F9:F5:9E:68:38:F4:84:60:42:10:56:33:06:6D:20:8E Certificate issuer: /CN=A91570D9/serialNumber=9EAC54E9F9F59E6838F4846042105633066D208E Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqxU6fn1nmg49IRgQhBWMwZtII4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft Manifest number: 69 Signing time: Sun 01 Mar 2026 09:20:12 +0000 Manifest this update: Sun 01 Mar 2026 09:20:11 +0000 Manifest next update: Sun 08 Mar 2026 09:20:11 +0000 Files and hashes: 1: nqxU6fn1nmg49IRgQhBWMwZtII4.crl (hash: oArVwMxTElAoPRjt4Huqo87uvhn7DGTd+ixXYBeMImo=) 2: AA3F24B67D8011F083953324C4F9AE02.roa (hash: jpFnK8zVyNjnf/ogEum40gO9rvhMUFJcUISF9Dfv6jM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.crl rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqxU6fn1nmg49IRgQhBWMwZtII4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91570D9, serialNumber=9EAC54E9F9F59E6838F4846042105633066D208E Validity Not Before: Mar 1 09:20:11 2026 GMT Not After : Mar 8 09:20:11 2026 GMT Subject: CN=69a404cc-f25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b4:6e:de:20:90:5e:5f:53:a0:66:8f:0d:cc: 23:f6:3d:fe:1c:79:f3:11:86:29:aa:e3:48:c4:9a: 7b:5c:fe:fc:8c:8e:cc:6f:f8:6f:86:7b:08:7c:bc: 6e:56:ce:a5:37:4b:34:c9:70:d0:46:c5:31:7d:55: cf:f1:2d:9d:af:b2:db:6b:7d:01:d5:1e:68:75:0e: a2:e0:46:12:2c:48:41:a2:ae:cc:8a:b0:5b:17:22: 78:c1:15:d2:07:0f:dd:14:43:e4:f1:33:d2:9c:fd: 0d:40:e9:80:40:bf:9f:4b:27:58:fa:9c:c0:b0:5d: d5:46:a2:25:c4:e9:4f:6d:0e:c7:6d:f7:f3:c2:59: 3d:9f:58:22:a4:35:e3:86:8c:b5:0e:e5:11:5f:dd: f9:16:d6:e3:7c:6b:95:4e:66:ef:cd:68:c3:4b:c7: 16:ca:bb:f9:d6:fb:3c:33:62:c3:21:2e:df:98:72: a0:72:3e:29:26:2f:cc:7b:33:74:25:70:0e:50:f6: f8:fe:4b:13:57:78:a4:1c:99:7d:14:d8:77:42:c5: 3c:c8:c7:8c:a6:ac:5a:0c:26:5a:93:2b:0a:2b:dd: 59:c0:d1:41:12:c9:7f:ef:14:e0:5a:a2:0c:84:97: 33:16:24:a5:c1:c5:c7:dd:99:c4:df:5e:cf:e4:b5: 1b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:19:0F:43:AD:9B:62:A0:A1:48:F0:0B:04:09:C2:05:D6:90:AC:7A X509v3 Authority Key Identifier: keyid:9E:AC:54:E9:F9:F5:9E:68:38:F4:84:60:42:10:56:33:06:6D:20:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqxU6fn1nmg49IRgQhBWMwZtII4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b7:5a:f5:71:8c:1a:c6:48:13:4e:ac:24:cd:48:ab:ca:2d: 72:50:9b:a4:1c:48:43:b9:a0:88:4e:cb:51:53:42:e8:d9:e7: f9:a0:25:e5:6d:81:53:c4:79:bc:08:ea:08:5f:96:7b:9d:b6: ff:10:c7:cc:26:2e:05:06:61:c9:46:db:cf:fa:52:80:3f:8a: 5e:7b:73:d0:ec:03:dd:09:49:5b:a8:d3:0d:ee:c9:3e:04:7c: 00:7b:60:0c:5a:8f:43:b6:f0:c9:3f:df:a8:18:46:51:75:2a: 23:62:a1:41:ba:57:61:ed:93:fa:c9:b4:d9:b4:7e:5a:09:46: 6d:46:7f:36:fa:45:c5:78:b6:ea:30:2f:16:ef:fc:c6:de:1b: ca:02:e0:5f:07:15:4e:f3:59:5b:87:e8:a2:be:30:e2:42:82: 5f:48:80:f1:e8:d0:04:a6:84:19:fb:a1:b4:e5:81:5d:d7:f5: e3:82:b0:3d:23:fc:a1:14:c0:80:10:2d:8b:e6:5a:82:97:0b: f8:71:b3:f5:5e:d1:1b:04:39:9e:9f:a3:e0:4d:0a:09:56:76: 91:a9:53:10:29:cd:70:42:8f:a8:0e:af:96:30:90:90:0d:a2: 4f:da:eb:5d:e5:4f:be:76:ff:40:56:79:b5:6f:8e:b5:71:7b: 42:97:67:54 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NzBEOTExMC8GA1UEBRMoOUVBQzU0RTlGOUY1OUU2ODM4RjQ4NDYwNDIxMDU2MzMw NjZEMjA4RTAeFw0yNjAzMDEwOTIwMTFaFw0yNjAzMDgwOTIwMTFaMBgxFjAUBgNV BAMTDTY5YTQwNGNjLWYyNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCttG7eIJBeX1OgZo8NzCP2Pf4cefMRhimq40jEmntc/vyMjsxv+G+Gewh8vG5W zqU3SzTJcNBGxTF9Vc/xLZ2vsttrfQHVHmh1DqLgRhIsSEGirsyKsFsXInjBFdIH D90UQ+TxM9Kc/Q1A6YBAv59LJ1j6nMCwXdVGoiXE6U9tDsdt9/PCWT2fWCKkNeOG jLUO5RFf3fkW1uN8a5VOZu/NaMNLxxbKu/nW+zwzYsMhLt+YcqByPikmL8x7M3Ql cA5Q9vj+SxNXeKQcmX0U2HdCxTzIx4ymrFoMJlqTKwor3VnA0UESyX/vFOBaogyE lzMWJKXBxcfdmcTfXs/ktRs9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVRkPQ62b YqChSPALBAnCBdaQrHowHwYDVR0jBBgwFoAUnqxU6fn1nmg49IRgQhBWMwZtII4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3MEQ5LzJFQ0IyRkZBN0Q4 MDExRjBBOTc4NTQyM0M0RjlBRTAyL25xeFU2Zm4xbm1nNDlJUmdRaEJXTXdadElJ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnF4VTZmbjFubWc0OUlSZ1FoQldNd1p0SUk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 MEQ5LzJFQ0IyRkZBN0Q4MDExRjBBOTc4NTQyM0M0RjlBRTAyL25xeFU2Zm4xbm1n NDlJUmdRaEJXTXdadElJNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAKt1r1cYwaxkgTTqwkzUiryi1yUJukHEhDuaCITstRU0Lo2ef5oCXlbYFTxHm8 COoIX5Z7nbb/EMfMJi4FBmHJRtvP+lKAP4pee3PQ7APdCUlbqNMN7sk+BHwAe2AM Wo9DtvDJP9+oGEZRdSojYqFBuldh7ZP6ybTZtH5aCUZtRn82+kXFeLbqMC8W7/zG 3hvKAuBfBxVO81lbh+iivjDiQoJfSIDx6NAEpoQZ+6G05YFd1/XjgrA9I/yhFMCA EC2L5lqClwv4cbP1XtEbBDmen6PgTQoJVnaRqVMQKc1wQo+oDq+WMJCQDaJP2utd 5U++dv9AVnm1b461cXtCl2dU -----END CERTIFICATE-----Generated at Mon Mar 2 10:25:33 2026 by rpki-client