$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft File: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft (raw, json) Hash identifier: oRtlUtZJMtnhQkj2grA1p5Dq9PEMKDQgif0qeozrhnM= Subject key identifier: 2B:77:35:8A:3F:62:08:90:2D:D1:EA:91:81:B0:15:81:FC:32:80:8E Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Certificate serial: 11F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft Manifest number: 1066 Signing time: Sun 01 Mar 2026 23:32:06 +0000 Manifest this update: Sun 01 Mar 2026 23:32:04 +0000 Manifest next update: Sun 08 Mar 2026 23:32:04 +0000 Files and hashes: 1: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl (hash: UDPplUnXh844iR2K9JFtCp8JZQP0VnYdYQrqgngXwCk=) 2: 5C4E5A6EB9E511EB9717B256C4F9AE02.roa (hash: wW2NNDoiiggQLts6yoRWeEta8EfkfmkpuQXd4IRvuj4=) 3: C3BEAC38CF7C11F0B0EB4644C4F9AE02.roa (hash: 0xacdRxIlt6XlMYC4ytgm5Wnpkb/XtvJrzfDYrQNkow=) 4: 71043990C4D811EA88E6B21FC4F9AE02.roa (hash: SwqLx1ykNlWfnGxIgnnplctUN2Uh69BTnr1sDfxJRlM=) 5: C4A85FD48FE811E98B967A66C4F9AE02.roa (hash: Yra/cySrBt0zcZ3P5GOXeK6swd+KmGvdWYxnM5VydGA=) 6: C435900ACF7C11F0AAC14644C4F9AE02.roa (hash: m9D73VL27f9lVIbOReJ6AOP2zRgFJFj+KEXEimjyt7I=) 7: FD5158C044C511F0ABA4E977C4F9AE02.roa (hash: jAhN4tezvJPwZDVpGZejWw4TU5H1Av+GZW6zZMmb67I=) 8: B969078EB94B11EB8CFABC23C4F9AE02.roa (hash: KmEu0JXVBtwzMz7EetZKwa8KqrgE2kj5+Y9cCaXraFo=) 9: F3011EAAB88311EBB2078C50C4F9AE02.roa (hash: RdnFjFlQSbXhKdwY5kMqtzBzkUycrU7RuwuLidB948U=) 10: 9394D360345F11F0AB96776CC4F9AE02.roa (hash: Dy3vf2brgO7ffq8geCJNrRWY4aeeqFaFWyK7H7SMUrk=) 11: C2356A948FE811E98B967A66C4F9AE02.roa (hash: Spu6ueKiAix7Vx1bbz3QuH8zuY42SfhsOYEFzJ/3W4o=) 12: 8224E55C345F11F0BD514C6CC4F9AE02.roa (hash: k1IfgBcHOoF2DvAmPhMFiueaAUbhFvWp7b5AsEN0aGA=) 13: 2A4EE13E7CFD11F08A91EE21C4F9AE02.roa (hash: VlAWA5/d+uBjOMZi4UPagGvqPim5oPM3SxEdySpg39I=) 14: 49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa (hash: t0lrWYbEsDKRavSA+NYxahXVuuhYWwqHsIgE48/DyB8=) 15: 50D040327CFD11F0B32D4522C4F9AE02.roa (hash: J+oM/GM4p3/6d6pclXs1NjnCH5p34XNUGcl5IM3ZZ78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4597 (0x11f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Validity Not Before: Mar 1 23:32:04 2026 GMT Not After : Mar 8 23:32:04 2026 GMT Subject: CN=69a4cc76-d185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b2:4e:b7:11:64:09:a0:66:96:d5:3c:27:c9: 92:66:f2:81:79:e8:c8:d9:36:ee:f3:27:b1:d0:59: 71:68:19:fd:44:ab:2d:b7:7b:f1:f4:76:40:aa:20: 82:ea:9f:99:78:96:99:06:55:ca:d2:f3:91:27:13: 70:33:23:f2:14:01:99:2a:67:6c:1b:b6:8e:c3:9e: 43:a7:94:2b:14:69:b3:cb:1d:c7:93:5a:3f:62:86: 54:6b:4d:51:25:69:0b:a4:51:f8:8d:3d:ec:39:87: 35:ef:de:30:06:fd:98:c7:b3:3c:29:f4:38:b9:c9: cc:66:2e:e9:2a:9e:cf:87:24:90:d9:b3:92:b7:c0: 41:95:4d:eb:86:5c:02:2a:08:40:17:3b:39:1f:30: 50:d2:39:f0:1e:74:e6:0e:6d:03:03:ed:90:44:79: 89:82:37:67:4b:09:3d:7a:28:60:f4:78:ca:3f:42: 88:20:82:54:b9:21:6f:44:f2:0a:b5:33:03:17:11: ac:c6:ce:ab:33:0b:e5:6d:a3:1d:6f:b4:c5:ec:04: 07:9d:6e:de:ba:04:71:02:0d:7f:c4:06:da:4b:d1: 9f:90:92:79:9b:84:64:fa:61:86:1b:6c:f2:ac:ca: 50:11:5f:34:f6:48:d8:8e:37:33:b9:0e:0f:20:8c: c1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:77:35:8A:3F:62:08:90:2D:D1:EA:91:81:B0:15:81:FC:32:80:8E X509v3 Authority Key Identifier: keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:65:3b:fc:02:91:3a:17:9a:1f:74:5e:f0:8a:47:d7:08:54: 90:39:e7:1b:c3:53:54:ae:0c:51:b7:c7:89:07:c2:31:87:44: bd:3a:4c:8b:f6:cc:ab:53:36:47:91:f8:3c:fa:47:1c:f2:ec: 0f:74:7e:d8:3a:e0:b4:e8:db:dc:a9:9f:e5:ff:3d:52:db:aa: 35:ac:1c:77:68:c5:83:ed:31:62:99:80:39:3b:5b:72:72:6d: 13:14:da:f7:a0:a7:fb:8c:38:1f:1b:9f:b7:df:32:93:3f:64: 38:83:80:ff:3c:cc:0d:d9:d9:58:46:ad:dc:7f:2d:41:a0:6c: bc:50:bc:80:33:d5:e6:a7:c8:0d:ac:58:54:52:60:62:1c:fd: 12:ef:96:01:e3:fa:f7:de:ca:ba:a8:9c:50:05:e2:6d:93:78: 1e:5b:a4:11:71:09:94:5f:09:1c:3a:5f:ce:78:8c:8c:f3:69: 0c:ec:25:0e:22:53:9e:1b:cb:01:eb:79:df:b3:db:0d:20:54: ef:5a:7d:5b:f8:62:b3:1d:2e:e0:f1:d2:df:b9:ca:07:b4:96: e2:9b:ba:c9:52:50:9f:58:bc:c1:27:c2:bf:b1:4c:e0:21:b0: be:66:77:dc:bd:e6:de:e9:05:07:2a:cb:6f:7f:c1:1d:28:ec: 24:12:96:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5 RDNGRDdCNjAwHhcNMjYwMzAxMjMzMjA0WhcNMjYwMzA4MjMzMjA0WjAYMRYwFAYD VQQDEw02OWE0Y2M3Ni1kMTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAibJOtxFkCaBmltU8J8mSZvKBeejI2Tbu8yex0FlxaBn9RKstt3vx9HZAqiCC 6p+ZeJaZBlXK0vORJxNwMyPyFAGZKmdsG7aOw55Dp5QrFGmzyx3Hk1o/YoZUa01R JWkLpFH4jT3sOYc1794wBv2Yx7M8KfQ4ucnMZi7pKp7PhySQ2bOSt8BBlU3rhlwC KghAFzs5HzBQ0jnwHnTmDm0DA+2QRHmJgjdnSwk9eihg9HjKP0KIIIJUuSFvRPIK tTMDFxGsxs6rMwvlbaMdb7TF7AQHnW7eugRxAg1/xAbaS9GfkJJ5m4Rk+mGGG2zy rMpQEV809kjYjjczuQ4PIIzBXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCt3NYo/ YgiQLdHqkYGwFYH8MoCOMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDNEQi8wREMzNUQzRThERDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0 Q0ZyNkJzQ1Q1VXFkUDllMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASmU7/AKROheaH3Re8IpH1whUkDnnG8NTVK4MUbfHiQfCMYdEvTpMi/bMq1M2 R5H4PPpHHPLsD3R+2DrgtOjb3Kmf5f89UtuqNawcd2jFg+0xYpmAOTtbcnJtExTa 96Cn+4w4Hxuft98ykz9kOIOA/zzMDdnZWEat3H8tQaBsvFC8gDPV5qfIDaxYVFJg Yhz9Eu+WAeP6997KuqicUAXibZN4HlukEXEJlF8JHDpfzniMjPNpDOwlDiJTnhvL Aet537PbDSBU71p9W/hisx0u4PHS37nKB7SW4pu6yVJQn1i8wSfCv7FM4CGwvmZ3 3L3m3ukFByrLb3/BHSjsJBKW3g== -----END CERTIFICATE-----Generated at Mon Mar 2 05:48:38 2026 by rpki-client