$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft File: NpBAbdMULvZPdhZKfyJsCMwwG1M.mft (raw, json) Hash identifier: X3Zocvc5E6iqlNqkwTKtoSgUqhmFeHRGc+g68wLw5YI= Subject key identifier: 47:97:72:D6:06:FB:2D:2A:1A:3B:4B:06:A3:FA:4C:C9:D8:00:F8:77 Authority key identifier: 36:90:40:6D:D3:14:2E:F6:4F:76:16:4A:7F:22:6C:08:CC:30:1B:53 Certificate issuer: /CN=A91A0807/serialNumber=3690406DD3142EF64F76164A7F226C08CC301B53 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpBAbdMULvZPdhZKfyJsCMwwG1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft Manifest number: 32 Signing time: Sun 01 Mar 2026 10:05:04 +0000 Manifest this update: Sun 01 Mar 2026 10:05:03 +0000 Manifest next update: Sun 08 Mar 2026 10:05:03 +0000 Files and hashes: 1: NpBAbdMULvZPdhZKfyJsCMwwG1M.crl (hash: Lv4qUPPGYZNU6rLZEy//IRXnFkJuPfDgv1M6A/GS4X4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.crl rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpBAbdMULvZPdhZKfyJsCMwwG1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0807, serialNumber=3690406DD3142EF64F76164A7F226C08CC301B53 Validity Not Before: Mar 1 10:05:03 2026 GMT Not After : Mar 8 10:05:03 2026 GMT Subject: CN=69a40f50-780d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bc:72:e9:f8:a7:e7:e2:df:70:f1:38:04:ef: 79:00:ee:8d:97:27:ed:62:03:1a:c6:7a:f3:03:b2: e1:85:f1:74:85:bd:02:dd:36:84:a4:15:50:94:7e: 42:ff:45:13:ee:29:e9:6d:1d:1d:99:b9:ea:65:54: 69:50:05:8d:19:71:7a:25:43:a4:06:84:d7:9b:1b: 27:52:77:cf:d7:6c:3c:d8:01:20:fd:bd:78:f6:57: 59:58:93:22:88:4c:12:6b:a0:60:29:2c:87:59:80: ea:5d:80:3d:69:5d:99:e7:e4:89:70:09:93:a7:05: 73:45:3d:1e:c9:1f:11:a5:2e:36:4c:e1:ed:b3:01: fc:6a:29:8b:22:b9:11:65:1d:99:c3:33:1d:ab:fc: 23:43:34:f2:36:ba:28:cc:f9:e6:cb:6f:f1:59:9d: 32:fd:11:47:59:23:be:82:40:54:db:c2:ff:52:3d: cc:2f:9d:c6:6d:c8:8f:53:b2:30:6b:c6:ea:d6:cf: 21:c1:18:60:26:51:5c:7c:e8:43:89:3e:7e:d8:ce: 66:2e:5a:95:9b:e1:76:5c:e3:6c:8d:da:e1:62:51: ff:13:c7:de:9f:5f:1f:a7:ca:22:6d:05:a7:dd:d5: 2d:13:b5:96:66:39:11:61:88:f6:af:20:16:73:f6: f6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:97:72:D6:06:FB:2D:2A:1A:3B:4B:06:A3:FA:4C:C9:D8:00:F8:77 X509v3 Authority Key Identifier: keyid:36:90:40:6D:D3:14:2E:F6:4F:76:16:4A:7F:22:6C:08:CC:30:1B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpBAbdMULvZPdhZKfyJsCMwwG1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0807/0811DAD4CCBE11F09DBBDC22C4F9AE02/NpBAbdMULvZPdhZKfyJsCMwwG1M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:c7:c9:ec:7e:67:24:32:dc:f8:0b:22:27:a4:fb:01:f7:79: bf:5d:ac:74:1f:ca:78:b9:65:f4:db:db:c7:25:25:08:77:5c: 92:31:94:5d:87:d4:28:59:9d:b4:78:16:1b:17:49:0b:ed:f1: 60:d7:13:da:50:88:3c:46:50:e7:d1:5a:41:c2:2f:d3:6a:b1: 78:61:e9:ec:7a:e3:c1:f6:c3:82:ac:10:5d:0d:e6:82:46:e9: cd:9f:b9:20:d0:ae:16:fc:90:1e:2e:bf:ac:4a:b9:cc:5f:93: b9:96:26:75:bf:50:8e:b0:02:de:97:f5:2a:49:d4:80:82:76: 38:5a:93:be:10:35:c5:61:9d:07:90:98:8f:61:06:fc:4d:70: f1:04:4e:48:ff:d2:7e:2d:de:58:c9:b9:ac:32:97:85:7f:cd: 72:67:33:06:79:10:dc:40:bc:8b:36:03:29:da:b0:3e:35:03: d1:50:3b:fd:2b:53:ab:83:ba:c8:36:e0:d8:0a:16:e9:1f:05: 96:e5:b1:3b:f9:46:59:c4:48:5b:8b:fc:60:50:5c:1f:da:9d: 17:44:f1:4d:b7:47:ae:af:fb:59:75:48:b6:93:5a:9f:7b:0b: ea:1c:fe:d0:b3:c5:87:73:b9:5b:08:c3:98:d3:34:d1:19:5e: 22:15:7b:39 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDgwNzExMC8GA1UEBRMoMzY5MDQwNkREMzE0MkVGNjRGNzYxNjRBN0YyMjZDMDhD QzMwMUI1MzAeFw0yNjAzMDExMDA1MDNaFw0yNjAzMDgxMDA1MDNaMBgxFjAUBgNV BAMTDTY5YTQwZjUwLTc4MGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfvHLp+Kfn4t9w8TgE73kA7o2XJ+1iAxrGevMDsuGF8XSFvQLdNoSkFVCUfkL/ RRPuKeltHR2ZueplVGlQBY0ZcXolQ6QGhNebGydSd8/XbDzYASD9vXj2V1lYkyKI TBJroGApLIdZgOpdgD1pXZnn5IlwCZOnBXNFPR7JHxGlLjZM4e2zAfxqKYsiuRFl HZnDMx2r/CNDNPI2uijM+ebLb/FZnTL9EUdZI76CQFTbwv9SPcwvncZtyI9TsjBr xurWzyHBGGAmUVx86EOJPn7YzmYuWpWb4XZc42yN2uFiUf8Tx96fXx+nyiJtBafd 1S0TtZZmORFhiPavIBZz9vY9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUR5dy1gb7 LSoaO0sGo/pMydgA+HcwHwYDVR0jBBgwFoAUNpBAbdMULvZPdhZKfyJsCMwwG1Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwODA3LzA4MTFEQUQ0Q0NC RTExRjA5REJCREMyMkM0RjlBRTAyL05wQkFiZE1VTHZaUGRoWktmeUpzQ013d0cx TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnBCQWJkTVVMdlpQZGhaS2Z5SnNDTXd3RzFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw ODA3LzA4MTFEQUQ0Q0NCRTExRjA5REJCREMyMkM0RjlBRTAyL05wQkFiZE1VTHZa UGRoWktmeUpzQ013d0cxTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAox8nsfmckMtz4CyInpPsB93m/Xax0H8p4uWX029vHJSUId1ySMZRdh9QoWZ20 eBYbF0kL7fFg1xPaUIg8RlDn0VpBwi/TarF4YenseuPB9sOCrBBdDeaCRunNn7kg 0K4W/JAeLr+sSrnMX5O5liZ1v1COsALel/UqSdSAgnY4WpO+EDXFYZ0HkJiPYQb8 TXDxBE5I/9J+Ld5YybmsMpeFf81yZzMGeRDcQLyLNgMp2rA+NQPRUDv9K1Org7rI NuDYChbpHwWW5bE7+UZZxEhbi/xgUFwf2p0XRPFNt0eur/tZdUi2k1qfewvqHP7Q s8WHc7lbCMOY0zTRGV4iFXs5 -----END CERTIFICATE-----Generated at Sun Mar 1 23:39:50 2026 by rpki-client