$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft File: NCaEGmQGa3hlW77KDAH9CfZXBTY.mft (raw, json) Hash identifier: zXkTEd2kuLm3C+mf5aCVViaEXBWQwO2nbyYWzKlxY50= Subject key identifier: AE:63:8E:01:67:00:FA:DB:EE:A7:7D:A2:36:21:16:93:37:93:F6:F7 Authority key identifier: 34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36 Certificate issuer: /CN=A9157DAE/serialNumber=3426841A64066B78655BBECA0C01FD09F6570536 Certificate serial: 021F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft Manifest number: 021F Signing time: Sat 28 Feb 2026 17:06:52 +0000 Manifest this update: Sat 28 Feb 2026 17:06:51 +0000 Manifest next update: Sat 07 Mar 2026 17:06:51 +0000 Files and hashes: 1: NCaEGmQGa3hlW77KDAH9CfZXBTY.crl (hash: e8YTpxgMiYb17+wQ4aQqTUMPWZWlIqa/DNUCjVXM8OQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.crl rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 17:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=3426841A64066B78655BBECA0C01FD09F6570536 Validity Not Before: Feb 28 17:06:51 2026 GMT Not After : Mar 7 17:06:51 2026 GMT Subject: CN=69a320ac-19f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:18:53:83:3e:b6:24:b2:76:34:88:a4:97:d5: 4c:6a:ab:48:b3:fa:b5:a1:99:ab:c3:a8:5c:64:43: ee:93:3b:38:ab:5e:12:d1:a2:a4:53:00:8e:8f:29: fb:42:fb:01:e5:bb:89:5d:a7:c8:5b:94:d5:4f:fc: 89:ad:f5:6f:68:25:b5:42:f5:f6:4b:52:58:93:4b: 97:c7:aa:c3:99:f7:09:24:88:7a:c6:35:57:df:5b: 95:60:33:81:45:24:f9:dc:31:d9:77:e3:d0:ef:fc: 2f:54:e0:bb:9b:3d:dc:da:d9:b8:c7:21:01:69:18: 6a:e5:05:e5:3f:86:f4:ce:d4:f9:73:70:d8:a4:90: 14:ef:65:18:52:3d:c1:98:86:da:79:cd:c6:0c:82: e8:e1:bb:34:8f:eb:cb:1b:dd:5e:1c:89:83:f8:ad: c6:04:f1:3c:52:ce:2a:72:f7:cb:60:a0:73:82:e0: b6:9e:fb:f9:68:e1:c0:1a:2c:b7:e2:ef:a3:f6:e2: 49:1d:08:0a:16:c1:17:03:94:8d:57:c9:31:6f:1e: ff:7e:74:2f:fc:c7:cb:ad:c1:02:26:41:08:75:e0: ca:7b:6f:d0:7e:2f:46:34:0e:ee:2e:6c:0c:85:19: 8d:c7:2a:b9:a1:5a:57:56:82:c5:33:bd:4a:0a:72: 46:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:63:8E:01:67:00:FA:DB:EE:A7:7D:A2:36:21:16:93:37:93:F6:F7 X509v3 Authority Key Identifier: keyid:34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:f8:2b:e9:8a:f0:1c:c9:82:8a:b6:7f:09:5f:f0:a1:62:b2: fc:43:d4:dc:1d:b2:04:3a:77:65:88:4f:72:9a:99:35:e3:c1: 2d:a3:6f:4d:6d:a4:1d:c9:c6:0d:aa:08:f5:65:9d:66:d6:02: 9f:ad:7a:07:c2:98:4b:f2:a8:00:d7:c3:6f:7e:4c:52:ad:51: 79:0c:6f:1d:09:5e:49:13:66:37:bd:b1:44:ea:62:66:cf:ed: 37:4b:22:19:ba:3c:99:56:76:df:bf:b9:6e:86:7b:a9:2e:70: e8:ab:9c:2f:1a:13:24:b8:6a:07:d7:b9:31:68:a9:26:c4:78: 2c:dd:39:ab:59:76:97:98:70:4c:8f:c6:76:98:23:5d:f5:cf: 71:76:31:ed:23:05:3c:2b:ec:a8:4e:ab:17:94:61:b2:0c:44: a2:38:e8:11:f0:ed:7f:7b:0d:e5:09:18:ca:01:28:63:fd:79: f9:20:f0:02:fe:71:2c:4d:11:43:af:76:a3:d7:2c:38:b3:0d: 80:d5:ef:1c:a7:42:c4:04:c0:dd:bc:dd:fa:10:2a:0b:9a:29: 79:af:53:17:f6:53:d9:7f:31:f7:0d:25:93:ca:98:d0:8d:93: ca:ac:13:81:f4:cb:e7:f7:17:6e:d9:52:61:a6:d5:6a:58:58: 2a:df:33:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKDM0MjY4NDFBNjQwNjZCNzg2NTVCQkVDQTBDMDFGRDA5 RjY1NzA1MzYwHhcNMjYwMjI4MTcwNjUxWhcNMjYwMzA3MTcwNjUxWjAYMRYwFAYD VQQDDA02OWEzMjBhYy0xOWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BhTgz62JLJ2NIikl9VMaqtIs/q1oZmrw6hcZEPukzs4q14S0aKkUwCOjyn7 QvsB5buJXafIW5TVT/yJrfVvaCW1QvX2S1JYk0uXx6rDmfcJJIh6xjVX31uVYDOB RST53DHZd+PQ7/wvVOC7mz3c2tm4xyEBaRhq5QXlP4b0ztT5c3DYpJAU72UYUj3B mIbaec3GDILo4bs0j+vLG91eHImD+K3GBPE8Us4qcvfLYKBzguC2nvv5aOHAGiy3 4u+j9uJJHQgKFsEXA5SNV8kxbx7/fnQv/MfLrcECJkEIdeDKe2/Qfi9GNA7uLmwM hRmNxyq5oVpXVoLFM71KCnJGtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK5jjgFn APrb7qd9ojYhFpM3k/b3MB8GA1UdIwQYMBaAFDQmhBpkBmt4ZVu+ygwB/Qn2VwU2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS8xMDRBN0UxRURG QUQxMUVEOTUxNTNEMzFDNEY5QUUwMi9OQ2FFR21RR2EzaGxXNzdLREFIOUNmWlhC VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL05DYUVHbVFHYTNobFc3N0tEQUg5Q2ZaWEJUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0RBRS8xMDRBN0UxRURGQUQxMUVEOTUxNTNEMzFDNEY5QUUwMi9OQ2FFR21RR2Ez aGxXNzdLREFIOUNmWlhCVFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh/gr6YrwHMmCirZ/CV/woWKy/EPU3B2yBDp3ZYhPcpqZNePBLaNvTW2kHcnG DaoI9WWdZtYCn616B8KYS/KoANfDb35MUq1ReQxvHQleSRNmN72xROpiZs/tN0si Gbo8mVZ237+5boZ7qS5w6KucLxoTJLhqB9e5MWipJsR4LN05q1l2l5hwTI/Gdpgj XfXPcXYx7SMFPCvsqE6rF5RhsgxEojjoEfDtf3sN5QkYygEoY/15+SDwAv5xLE0R Q692o9csOLMNgNXvHKdCxATA3bzd+hAqC5opea9TF/ZT2X8x9w0lk8qY0I2TyqwT gfTL5/cXbtlSYabValhYKt8zwA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:14:37 2026 by rpki-client