$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft File: N1NyjlTwmkhRPf_S-nGARBH82yA.mft (raw, json) Hash identifier: Rsw5ZNFHGTApzx8RPqUeoks62Q70pV1pLqiFPZSNBL0= Subject key identifier: 44:5A:09:DE:BE:24:8C:F3:EA:38:07:C0:98:F5:0D:97:BE:7A:CB:8D Authority key identifier: 37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20 Certificate issuer: /CN=A919D6BB/serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20 Certificate serial: 0D27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft Manifest number: 0D0D Signing time: Mon 02 Mar 2026 00:49:57 +0000 Manifest this update: Mon 02 Mar 2026 00:49:56 +0000 Manifest next update: Mon 09 Mar 2026 00:49:56 +0000 Files and hashes: 1: N1NyjlTwmkhRPf_S-nGARBH82yA.crl (hash: LCUMGZIA5dd0nE8nZW3ACMAogUsijShPEBakKK/x3jc=) 2: B647F704090C11EFB666C967C4F9AE02.roa (hash: nMJlJs5RVl9hK1ao5B9tFWVbxrXwgcmPLTkIzplwg3c=) 3: CA39F7F0FB6311E999847F4DC4F9AE02.roa (hash: Ra9KeGGoq4qKoY1lvMm4sJXsGfKv+RNnldeY/mU1RTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3367 (0xd27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D6BB, serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20 Validity Not Before: Mar 2 00:49:56 2026 GMT Not After : Mar 9 00:49:56 2026 GMT Subject: CN=69a4deb5-0f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:07:a5:f3:73:58:a8:f9:8a:b6:6e:b3:70:d3: 99:71:ee:a1:24:c8:c8:f8:72:fc:53:5b:7a:64:b4: d7:0f:cd:1f:42:cb:2d:a2:61:90:0c:01:11:e7:66: d3:e9:6c:a8:6c:1f:12:33:ef:bd:e8:23:f3:76:96: c9:9c:70:e6:b2:c9:96:15:01:7b:5b:3b:86:d9:5f: 62:ff:50:3b:e3:66:e7:fc:b5:3c:6c:84:1b:c7:4e: 8b:e4:39:b6:ba:2e:4b:ab:58:1b:b4:57:26:b7:99: 65:34:92:33:b5:0c:77:1b:ec:1c:9b:94:7a:5a:d2: 8f:60:e5:4d:dd:a4:6e:52:e0:5c:de:28:3a:26:92: da:39:9e:ca:44:59:b4:72:9e:80:bb:5e:a0:3d:59: 8e:f8:b7:ea:94:b6:27:68:a4:81:ed:78:9f:5d:57: 89:f7:17:51:3d:ab:ff:1c:b1:78:40:13:2d:74:f2: b1:1c:88:9b:67:25:69:98:cc:d9:e2:d0:e3:08:2f: ff:dd:06:98:27:a0:b7:b9:b2:fb:32:c7:10:df:3b: 26:0e:7f:a0:e5:d0:23:e7:aa:ab:ce:f2:01:95:a1: b9:53:a0:b9:78:f6:52:3c:b4:e1:a2:9f:a6:c9:7b: d2:0a:6e:88:ab:7f:88:c2:86:9e:b1:b8:40:65:b3: 0b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5A:09:DE:BE:24:8C:F3:EA:38:07:C0:98:F5:0D:97:BE:7A:CB:8D X509v3 Authority Key Identifier: keyid:37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:57:9d:79:75:87:01:8f:41:29:64:42:ba:e1:d4:11:45:33: 85:09:7a:01:35:ac:67:1e:49:49:17:14:36:01:06:f1:6f:f6: a6:60:52:d6:0f:86:1f:fd:99:c6:b8:c2:70:75:a7:b6:7f:df: ed:3a:39:50:b9:f0:c4:dc:6a:9c:a1:ee:0c:e5:7a:55:c5:2b: bf:89:3e:22:d1:98:58:52:21:12:7b:d5:f2:50:f9:ab:ab:c3: 6c:88:73:a0:1f:b6:49:97:78:c9:2b:1c:c7:87:9e:33:77:25: 46:a8:61:0d:c5:67:21:15:4e:cf:74:6f:6a:2b:7f:85:ad:bb: 37:94:05:70:58:6b:82:4e:b5:76:84:ed:b9:ff:5e:23:a2:90: 8c:2c:74:d1:f2:7a:d5:36:80:cb:09:7a:ed:62:fe:e3:18:40: 56:fc:4d:d9:ff:ec:f1:13:c1:c7:18:ca:a0:9b:e4:6b:3d:09: bd:2d:bb:b8:ae:30:f2:d0:45:65:a1:2b:c4:17:af:b2:7e:03: 7c:41:0f:15:3f:64:d0:ae:4d:90:6a:b7:7e:a6:86:99:7f:33: 9e:19:25:69:19:4d:28:8a:fa:cb:ce:44:6b:ad:af:43:83:40: 11:05:97:ce:ad:7b:fa:4e:74:f2:80:80:79:b2:95:86:5a:cf: 83:65:61:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2QkIxMTAvBgNVBAUTKDM3NTM3MjhFNTRGMDlBNDg1MTNERkZEMkZBNzE4MDQ0 MTFGQ0RCMjAwHhcNMjYwMzAyMDA0OTU2WhcNMjYwMzA5MDA0OTU2WjAYMRYwFAYD VQQDEw02OWE0ZGViNS0wZjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwel83NYqPmKtm6zcNOZce6hJMjI+HL8U1t6ZLTXD80fQsstomGQDAER52bT 6WyobB8SM++96CPzdpbJnHDmssmWFQF7WzuG2V9i/1A742bn/LU8bIQbx06L5Dm2 ui5Lq1gbtFcmt5llNJIztQx3G+wcm5R6WtKPYOVN3aRuUuBc3ig6JpLaOZ7KRFm0 cp6Au16gPVmO+LfqlLYnaKSB7XifXVeJ9xdRPav/HLF4QBMtdPKxHIibZyVpmMzZ 4tDjCC//3QaYJ6C3ubL7MscQ3zsmDn+g5dAj56qrzvIBlaG5U6C5ePZSPLThop+m yXvSCm6Iq3+IwoaesbhAZbMLRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFERaCd6+ JIzz6jgHwJj1DZe+esuNMB8GA1UdIwQYMBaAFDdTco5U8JpIUT3/0vpxgEQR/Nsg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDZCQi8zQUIwRjc2QUZC NjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21raFJQZl9TLW5HQVJCSDgy eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04xTnlqbFR3bWtoUlBmX1MtbkdBUkJIODJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDZCQi8zQUIwRjc2QUZCNjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21r aFJQZl9TLW5HQVJCSDgyeUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjFedeXWHAY9BKWRCuuHUEUUzhQl6ATWsZx5JSRcUNgEG8W/2pmBS1g+GH/2Z xrjCcHWntn/f7To5ULnwxNxqnKHuDOV6VcUrv4k+ItGYWFIhEnvV8lD5q6vDbIhz oB+2SZd4ySscx4eeM3clRqhhDcVnIRVOz3Rvait/ha27N5QFcFhrgk61doTtuf9e I6KQjCx00fJ61TaAywl67WL+4xhAVvxN2f/s8RPBxxjKoJvkaz0JvS27uK4w8tBF ZaErxBevsn4DfEEPFT9k0K5NkGq3fqaGmX8znhklaRlNKIr6y85Ea62vQ4NAEQWX zq17+k508oCAebKVhlrPg2Vhdg== -----END CERTIFICATE-----Generated at Mon Mar 2 12:17:09 2026 by rpki-client