$ rpki-client -vvf rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft File: NmIvmQC0aq380FRk8Q1CsTBiUXY.mft (raw, json) Hash identifier: QPkcLc51/1CP2xe6Re6mhgUvt/HQfPS87SpTo8n2gSM= Subject key identifier: 34:95:A7:59:4B:7B:1B:82:78:B3:09:2B:8E:F4:6A:06:2C:36:04:B7 Authority key identifier: 36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76 Certificate issuer: /CN=A919CE1D/serialNumber=36622F9900B46AADFCD05464F10D42B130625176 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft Manifest number: 76 Signing time: Sun 01 Mar 2026 09:09:58 +0000 Manifest this update: Sun 01 Mar 2026 09:09:58 +0000 Manifest next update: Sun 08 Mar 2026 09:09:58 +0000 Files and hashes: 1: NmIvmQC0aq380FRk8Q1CsTBiUXY.crl (hash: o+XlOr2y1ikdLA5cbKNUix+gXoxHWpEm9F9Qjv1R0h8=) 2: 2518C04062E011F08D04F42EC4F9AE02.roa (hash: rrBoaZeZAYohnofQuu333DPGl97BqUXv9lxtd9Vptcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CE1D, serialNumber=36622F9900B46AADFCD05464F10D42B130625176 Validity Not Before: Mar 1 09:09:58 2026 GMT Not After : Mar 8 09:09:58 2026 GMT Subject: CN=69a40266-fe35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:31:26:02:77:3b:d9:4d:b9:b6:6e:25:1e:d5: f8:31:4b:79:b0:8f:4b:96:70:c7:e3:ed:de:26:4c: 37:e6:f8:f8:36:67:3b:59:7e:01:59:69:aa:6d:a9: 12:40:f6:7c:cc:5e:07:a0:37:7a:71:fc:06:2a:1b: 51:f5:a5:99:28:46:fe:a4:d1:29:23:79:0e:35:8c: 61:03:92:15:d7:cf:90:75:d0:c2:4d:60:1e:a1:d5: 82:83:17:ab:fd:c6:ac:5a:ab:aa:51:ea:93:e8:f8: 04:53:d6:bc:eb:dc:05:9e:be:44:b4:49:4b:58:fa: 4b:8c:f4:9a:b0:b1:26:6a:6a:b6:2f:ca:aa:c5:4b: 4e:c1:25:98:95:6d:97:71:d5:d6:07:b8:a6:20:5d: d7:01:a4:6a:e5:48:f5:f1:e8:3e:32:e8:d3:40:d5: 8d:e2:c2:df:06:70:93:27:b7:6a:28:9c:1d:71:0e: 3c:65:af:8b:c5:01:06:24:70:85:9d:9e:81:d3:4d: dc:1a:46:70:64:9b:73:9f:ad:23:73:d2:c9:51:d6: 64:99:d3:b4:23:3d:bf:e1:3b:87:ee:22:d4:d6:b2: 0d:1e:75:9e:c2:c9:66:55:78:c0:67:77:4c:22:ff: 51:33:41:f5:39:41:4e:0e:4e:d7:fc:38:7c:4e:21: d9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:95:A7:59:4B:7B:1B:82:78:B3:09:2B:8E:F4:6A:06:2C:36:04:B7 X509v3 Authority Key Identifier: keyid:36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:74:44:81:e7:8f:44:7b:7c:b5:75:eb:13:e7:17:4d:46:8a: fb:13:e0:9d:34:86:78:07:ac:16:49:db:35:35:f1:84:0d:bd: 36:de:98:94:38:5a:c8:79:8d:aa:1f:9f:14:3a:f9:54:08:fc: 85:22:9d:97:95:c9:2b:93:96:8c:5e:58:a4:43:9a:0c:f3:41: 7d:82:7f:44:33:da:dd:d2:bd:e2:73:86:79:31:45:dd:a3:ef: 59:7d:08:07:0d:5b:18:fd:9f:ca:c9:f1:60:ec:2b:fe:c1:21: 75:f4:b3:8d:b5:a1:28:39:56:8e:00:2a:73:1b:55:32:3e:c6: f5:ed:4c:c9:13:58:f9:37:90:ad:30:37:e4:f1:80:77:3a:98: 6e:25:3c:54:ea:db:59:ba:49:6d:b5:fe:7a:1b:ef:ee:f2:41: f2:0b:62:ff:9c:11:e3:35:36:f0:e0:62:3d:79:f5:4e:94:52: ce:b5:ab:cf:d2:e2:30:e7:a3:a5:f6:79:6e:27:d5:2f:0d:af: f2:15:f3:ef:ce:27:6b:f2:09:9a:7e:07:4c:6b:c7:8b:58:41: b6:75:02:79:27:71:03:a3:cd:49:74:7b:e6:bd:c6:ef:de:2f: d2:85:a5:99:72:67:1a:d0:64:29:69:a9:9a:75:4d:12:49:f9: fd:66:09:7d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 Q0UxRDExMC8GA1UEBRMoMzY2MjJGOTkwMEI0NkFBREZDRDA1NDY0RjEwRDQyQjEz MDYyNTE3NjAeFw0yNjAzMDEwOTA5NThaFw0yNjAzMDgwOTA5NThaMBgxFjAUBgNV BAMTDTY5YTQwMjY2LWZlMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsMSYCdzvZTbm2biUe1fgxS3mwj0uWcMfj7d4mTDfm+Pg2ZztZfgFZaaptqRJA 9nzMXgegN3px/AYqG1H1pZkoRv6k0SkjeQ41jGEDkhXXz5B10MJNYB6h1YKDF6v9 xqxaq6pR6pPo+ART1rzr3AWevkS0SUtY+kuM9JqwsSZqarYvyqrFS07BJZiVbZdx 1dYHuKYgXdcBpGrlSPXx6D4y6NNA1Y3iwt8GcJMnt2oonB1xDjxlr4vFAQYkcIWd noHTTdwaRnBkm3OfrSNz0slR1mSZ07QjPb/hO4fuItTWsg0edZ7CyWZVeMBnd0wi /1EzQfU5QU4OTtf8OHxOIdkLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNJWnWUt7 G4J4swkrjvRqBiw2BLcwHwYDVR0jBBgwFoAUNmIvmQC0aq380FRk8Q1CsTBiUXYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDRTFEL0I1NDhEQkUyNjJE RjExRjBBMUUzN0UwRUM0RjlBRTAyL05tSXZtUUMwYXEzODBGUms4UTFDc1RCaVVY WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTm1Jdm1RQzBhcTM4MEZSazhRMUNzVEJpVVhZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlD RTFEL0I1NDhEQkUyNjJERjExRjBBMUUzN0UwRUM0RjlBRTAyL05tSXZtUUMwYXEz ODBGUms4UTFDc1RCaVVYWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQASdESB549Ee3y1desT5xdNRor7E+CdNIZ4B6wWSds1NfGEDb023piUOFrIeY2q H58UOvlUCPyFIp2Xlckrk5aMXlikQ5oM80F9gn9EM9rd0r3ic4Z5MUXdo+9ZfQgH DVsY/Z/KyfFg7Cv+wSF19LONtaEoOVaOACpzG1UyPsb17UzJE1j5N5CtMDfk8YB3 OphuJTxU6ttZuklttf56G+/u8kHyC2L/nBHjNTbw4GI9efVOlFLOtavP0uIw56Ol 9nluJ9UvDa/yFfPvzidr8gmafgdMa8eLWEG2dQJ5J3EDo81JdHvmvcbv3i/ShaWZ cmca0GQpaamadU0SSfn9Zgl9 -----END CERTIFICATE-----Generated at Mon Mar 2 10:59:51 2026 by rpki-client