$ rpki-client -vvf rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft File: NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft (raw, json) Hash identifier: Ne02JL/SJCISmh8RJksKyCyP43RzQp8IlXiVn+o3s4w= Subject key identifier: 7B:65:63:E7:A3:B7:D8:ED:08:85:CC:64:5B:F0:8B:E8:45:96:DB:14 Authority key identifier: 34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B Certificate issuer: /CN=A91A56E7/serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Certificate serial: 0C97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft Manifest number: 0C8F Signing time: Mon 02 Mar 2026 02:23:54 +0000 Manifest this update: Mon 02 Mar 2026 02:23:52 +0000 Manifest next update: Mon 09 Mar 2026 02:23:52 +0000 Files and hashes: 1: NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl (hash: hWx6ZzKxczgVXftI+VYsukLu/4tb71FT/+mgKK/FlJQ=) 2: 2157C3E011C211EA93417583C4F9AE02.roa (hash: yqBrYS+OQh89LeyuxvtAswEE9eX5g7RnQPP/zPqycgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3223 (0xc97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A56E7, serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Validity Not Before: Mar 2 02:23:52 2026 GMT Not After : Mar 9 02:23:52 2026 GMT Subject: CN=69a4f4b9-e488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:71:53:91:a4:b4:ee:f0:4b:06:95:75:fd:60: a7:92:09:64:ca:6a:47:62:26:d3:4c:76:42:99:f0: b2:0e:00:63:58:95:60:15:63:94:f0:99:dd:1f:98: 06:54:99:81:92:f9:69:3e:98:84:53:5f:b2:f6:b8: 20:ca:6b:3d:96:3c:f2:da:74:94:85:46:ab:59:de: ba:a6:fa:9e:8c:65:e4:0e:3b:24:9d:3b:60:1c:79: 0c:9a:e0:38:29:ea:3e:37:54:26:3a:b2:a2:e0:c0: 12:e7:9f:c3:77:9f:a9:40:6c:fe:dc:fd:8b:ff:65: 8f:3c:29:f9:79:f6:ff:1a:d7:a5:36:f3:9e:32:58: 5a:49:57:c3:38:46:32:80:c1:af:1b:08:d7:a6:7c: bb:24:16:25:c1:c6:e6:2a:6f:ea:fc:85:d5:0b:c2: be:6c:81:0b:9b:a4:e1:87:28:36:c4:8e:ee:86:78: a3:9f:d0:9a:93:76:c4:67:76:cd:cd:23:bc:49:b3: 00:66:3c:ea:d6:72:74:86:c6:b2:c8:9f:00:f1:30: 15:47:e6:f0:20:19:0d:8d:83:b9:9e:f9:86:97:d1: 07:0d:10:af:b7:b3:00:22:75:0b:37:8a:55:36:6d: 9c:8d:d4:92:5c:fd:69:1a:68:87:56:82:f5:82:06: be:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:65:63:E7:A3:B7:D8:ED:08:85:CC:64:5B:F0:8B:E8:45:96:DB:14 X509v3 Authority Key Identifier: keyid:34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:d6:21:90:7f:85:76:2d:bb:d7:e9:1b:d5:d9:a2:bc:e3:55: 20:86:d5:b2:08:a6:a5:4c:a5:cd:bc:59:e5:93:0e:03:7c:e5: f9:e1:47:75:87:4a:5d:6f:d3:a8:67:f1:c0:23:16:fc:64:f4: 7a:24:11:ff:2e:7b:df:39:85:0d:e6:9e:18:2b:83:79:30:c5: 8a:24:f4:e4:f5:19:ec:42:d9:dc:87:63:80:f6:c6:08:74:79: be:14:ed:f1:cb:66:9c:28:cf:58:d7:aa:c3:aa:1f:59:0c:b7: 4d:17:d6:b8:e2:2f:ff:97:de:47:1a:aa:d4:15:86:a8:be:02: 03:98:92:6c:e4:f6:1c:14:0a:c2:ec:68:b3:1b:9c:cd:f0:ba: f4:f7:bb:b0:01:d2:da:64:db:0c:9e:81:44:e0:d5:31:22:61: 43:ec:38:19:74:98:43:9f:44:c1:8d:fd:99:f4:33:ef:6e:c6: b1:19:b6:e2:6f:ac:7b:61:2a:4b:2d:ed:be:9f:97:73:29:6b: 8e:23:0f:01:76:99:bd:db:16:aa:5b:8b:a3:11:bb:3f:f5:35: 70:eb:2f:22:d9:bf:ca:85:4d:8e:1d:b9:b8:c1:f5:13:ab:60: 41:4d:cd:f0:52:7f:67:b4:0b:d8:57:5f:48:93:28:44:07:7e: 05:d7:88:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2RTcxMTAvBgNVBAUTKDM0NzYzNkYwRTk4QUY4MjQ4MjZCMUJDRjk2RjNDNzc2 RDgxMkY1NUIwHhcNMjYwMzAyMDIyMzUyWhcNMjYwMzA5MDIyMzUyWjAYMRYwFAYD VQQDEw02OWE0ZjRiOS1lNDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3FTkaS07vBLBpV1/WCnkglkympHYibTTHZCmfCyDgBjWJVgFWOU8JndH5gG VJmBkvlpPpiEU1+y9rggyms9ljzy2nSUhUarWd66pvqejGXkDjsknTtgHHkMmuA4 Keo+N1QmOrKi4MAS55/Dd5+pQGz+3P2L/2WPPCn5efb/GtelNvOeMlhaSVfDOEYy gMGvGwjXpny7JBYlwcbmKm/q/IXVC8K+bIELm6Thhyg2xI7uhnijn9Cak3bEZ3bN zSO8SbMAZjzq1nJ0hsayyJ8A8TAVR+bwIBkNjYO5nvmGl9EHDRCvt7MAInULN4pV Nm2cjdSSXP1pGmiHVoL1gga+gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHtlY+ej t9jtCIXMZFvwi+hFltsUMB8GA1UdIwQYMBaAFDR2NvDpivgkgmsbz5bzx3bYEvVb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTZFNy83ODYwRjhCQTEx QzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1DU0NheHZQbHZQSGR0Z1M5 VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IWTI4T21LLUNTQ2F4dlBsdlBIZHRnUzlWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTZFNy83ODYwRjhCQTExQzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1D U0NheHZQbHZQSGR0Z1M5VnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsdYhkH+Fdi271+kb1dmivONVIIbVsgimpUylzbxZ5ZMOA3zl+eFHdYdKXW/T qGfxwCMW/GT0eiQR/y573zmFDeaeGCuDeTDFiiT05PUZ7ELZ3IdjgPbGCHR5vhTt 8ctmnCjPWNeqw6ofWQy3TRfWuOIv/5feRxqq1BWGqL4CA5iSbOT2HBQKwuxosxuc zfC69Pe7sAHS2mTbDJ6BRODVMSJhQ+w4GXSYQ59EwY39mfQz727GsRm24m+se2Eq Sy3tvp+XcylrjiMPAXaZvdsWqluLoxG7P/U1cOsvItm/yoVNjh25uMH1E6tgQU3N 8FJ/Z7QL2FdfSJMoRAd+BdeImw== -----END CERTIFICATE-----Generated at Mon Mar 2 05:44:12 2026 by rpki-client