$ rpki-client -vvf rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft File: NUOeC_NciIu4TRsk7N5wYM90TpE.mft (raw, json) Hash identifier: /NOHlhDEC1EnA8gezN8BvjpiQ7oIXVvuL/GzCdiGN20= Subject key identifier: D6:10:51:7C:A3:47:02:07:09:93:57:1E:7B:A3:6C:83:9F:32:C9:B4 Authority key identifier: 35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91 Certificate issuer: /CN=A917C422/serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91 Certificate serial: 2C05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft Manifest number: 2BEB Signing time: Mon 02 Mar 2026 00:50:22 +0000 Manifest this update: Mon 02 Mar 2026 00:50:20 +0000 Manifest next update: Mon 09 Mar 2026 00:50:20 +0000 Files and hashes: 1: NUOeC_NciIu4TRsk7N5wYM90TpE.crl (hash: I6tPmI7Agy/kk5vna0HQsHrRI3II8A7qo29Chx3Q2UI=) 2: F645F318500C11EBA2295426C4F9AE02.roa (hash: T/3Qd5JLkUZ8axH+b8NITt79vh28jc8CtqLL9xCu9/o=) 3: 6313DADA500011EBB74A2C2AC4F9AE02.roa (hash: h/xjw2uGVTtL8b2ydd+g45aswVdSOXMWt+z5VztwbYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11269 (0x2c05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C422, serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91 Validity Not Before: Mar 2 00:50:20 2026 GMT Not After : Mar 9 00:50:20 2026 GMT Subject: CN=69a4dece-fde9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1a:6f:83:8a:d9:43:43:be:43:62:6c:05:12: 4c:7b:69:5f:43:a9:5a:30:8a:dd:2d:81:18:d4:d7: 22:9e:0c:28:2d:4f:05:c0:46:65:e8:bd:94:c2:87: fc:43:70:83:bb:c0:79:02:8a:99:d2:cf:c8:39:85: eb:3a:10:49:b6:ef:8e:16:b8:65:df:dd:3f:e4:64: 27:a5:cf:ad:b8:c3:bc:da:cf:46:9f:26:8b:ef:5d: dc:56:7d:20:17:70:ad:b0:57:0e:b0:c2:4b:bd:bb: 7b:4e:ed:15:25:99:63:b6:e4:53:bd:de:a4:79:ff: 4e:77:c5:b3:02:0b:fe:7e:be:0a:56:2c:c2:de:cd: 7b:a6:26:44:00:c7:08:42:0f:ff:ee:9d:f2:02:d4: eb:08:18:75:5e:89:57:d7:d6:e5:66:32:34:d0:9f: 7a:5e:f4:81:07:65:f6:51:fc:3f:5c:5d:4e:3f:db: 7b:88:6f:04:a9:5d:b1:af:28:59:2c:b6:9f:cb:30: bc:2d:4d:6e:17:9b:3f:3d:5d:9d:6f:ae:45:87:6c: 85:7b:3a:05:7d:27:de:bd:02:99:36:ae:58:aa:33: 16:56:21:ed:a8:6a:22:d5:03:ce:7a:62:40:6b:46: e2:13:98:c2:11:a7:3f:3e:e6:41:00:0e:e5:ba:6b: b1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:10:51:7C:A3:47:02:07:09:93:57:1E:7B:A3:6C:83:9F:32:C9:B4 X509v3 Authority Key Identifier: keyid:35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:ce:d8:3a:a7:c1:35:7c:08:5c:96:6e:13:c0:4d:97:b8:88: 7e:f9:82:11:9e:d1:14:04:40:7b:84:4e:3f:2e:4a:a4:80:89: 3c:b8:2d:81:8a:2d:2b:e2:da:21:93:92:39:36:da:5f:9b:50: 61:2f:95:41:0f:66:2b:f3:78:ba:9b:79:9e:ff:75:38:48:38: de:85:ef:99:83:12:bf:1f:13:ab:f4:43:73:99:99:da:de:55: 06:73:23:f7:f6:51:3a:4f:37:a6:f2:d0:86:18:65:fd:89:54: a8:82:50:cf:34:ad:26:53:48:84:3d:b2:98:e1:83:a1:6e:ac: ae:de:7f:e1:32:73:c3:89:13:b2:28:e6:0c:c0:8b:a4:87:68: e7:b3:35:16:99:8a:c8:b5:91:18:ee:ce:fa:84:e5:6f:b0:ae: e2:aa:5a:b3:d8:da:d6:d2:61:35:dc:3d:2f:28:0d:9b:df:a8: 18:c6:9d:fa:ed:df:83:34:b7:57:2b:54:53:4b:06:de:9d:b0: 90:38:87:84:09:b4:07:9e:34:3e:e0:6f:04:50:6e:a4:f2:12: eb:fd:4c:ec:f5:da:b4:d4:c3:b8:48:ff:1a:c0:bd:f7:6f:94: fb:cc:34:5a:18:80:20:ff:ec:a9:cd:18:de:9a:32:79:21:9c: 45:ed:2b:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0MjIxMTAvBgNVBAUTKDM1NDM5RTBCRjM1Qzg4OEJCODREMUIyNEVDREU3MDYw Q0Y3NDRFOTEwHhcNMjYwMzAyMDA1MDIwWhcNMjYwMzA5MDA1MDIwWjAYMRYwFAYD VQQDEw02OWE0ZGVjZS1mZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRpvg4rZQ0O+Q2JsBRJMe2lfQ6laMIrdLYEY1NcingwoLU8FwEZl6L2Uwof8 Q3CDu8B5AoqZ0s/IOYXrOhBJtu+OFrhl390/5GQnpc+tuMO82s9GnyaL713cVn0g F3CtsFcOsMJLvbt7Tu0VJZljtuRTvd6kef9Od8WzAgv+fr4KVizC3s17piZEAMcI Qg//7p3yAtTrCBh1XolX19blZjI00J96XvSBB2X2Ufw/XF1OP9t7iG8EqV2xryhZ LLafyzC8LU1uF5s/PV2db65Fh2yFezoFfSfevQKZNq5YqjMWViHtqGoi1QPOemJA a0biE5jCEac/PuZBAA7lumuxpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNYQUXyj RwIHCZNXHnujbIOfMsm0MB8GA1UdIwQYMBaAFDVDngvzXIiLuE0bJOzecGDPdE6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQyMi8zRTc0NTM2OEVE NTUxMUUzODA3MkM1N0U1OTExRUEzMi9OVU9lQ19OY2lJdTRUUnNrN041d1lNOTBU cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05VT2VDX05jaUl1NFRSc2s3TjV3WU05MFRwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzQyMi8zRTc0NTM2OEVENTUxMUUzODA3MkM1N0U1OTExRUEzMi9OVU9lQ19OY2lJ dTRUUnNrN041d1lNOTBUcEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgc7YOqfBNXwIXJZuE8BNl7iIfvmCEZ7RFARAe4ROPy5KpICJPLgtgYotK+La IZOSOTbaX5tQYS+VQQ9mK/N4upt5nv91OEg43oXvmYMSvx8Tq/RDc5mZ2t5VBnMj 9/ZROk83pvLQhhhl/YlUqIJQzzStJlNIhD2ymOGDoW6srt5/4TJzw4kTsijmDMCL pIdo57M1FpmKyLWRGO7O+oTlb7Cu4qpas9ja1tJhNdw9LygNm9+oGMad+u3fgzS3 VytUU0sG3p2wkDiHhAm0B540PuBvBFBupPIS6/1M7PXatNTDuEj/GsC992+U+8w0 WhiAIP/sqc0Y3poyeSGcRe0rXw== -----END CERTIFICATE-----Generated at Mon Mar 2 15:58:52 2026 by rpki-client