$ rpki-client -vvf rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft File: NjlSt_QXggYJMArokUgSGEuPw9w.mft (raw, json) Hash identifier: b2/YK1xe2cUA60yZzsh9NBEBBbuOtux6Nn+MyCCBi2Y= Subject key identifier: 94:F9:46:76:5B:66:DB:0D:AB:4C:F8:88:2F:A1:33:F1:91:C5:61:BD Authority key identifier: 36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC Certificate issuer: /CN=A91A70FA/serialNumber=363952B7F417820609300AE8914812184B8FC3DC Certificate serial: 1CF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft Manifest number: 1CDB Signing time: Mon 02 Mar 2026 16:12:59 +0000 Manifest this update: Mon 02 Mar 2026 16:12:59 +0000 Manifest next update: Mon 09 Mar 2026 16:12:59 +0000 Files and hashes: 1: NjlSt_QXggYJMArokUgSGEuPw9w.crl (hash: Ho4HGy/0QVEFK3/NBaE0EPrzrLmKLtQEqEXbU7H+RmE=) 2: EC1B43EA393111EAA1873746C4F9AE02.roa (hash: Y1gVzkwfOLuyPoIfE59zPK8DMvF4H060KJy8V8tGtwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7415 (0x1cf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A70FA, serialNumber=363952B7F417820609300AE8914812184B8FC3DC Validity Not Before: Mar 2 16:12:59 2026 GMT Not After : Mar 9 16:12:59 2026 GMT Subject: CN=69a5b70b-b181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:80:8d:2a:93:93:53:a5:49:b0:28:60:00:cb: f1:d4:5d:d0:9e:b6:69:28:d2:d4:be:ed:c4:67:fa: bd:e3:43:a5:ec:c3:8d:ae:a1:eb:cc:af:70:e3:ba: ca:c3:b0:e0:78:ef:43:5e:98:ad:b0:c7:c3:73:2d: 21:8f:12:54:9d:50:7c:ab:d2:e2:f1:40:07:8a:a1: c3:75:ef:fc:df:03:05:86:3c:44:c8:3c:b4:92:5a: d0:89:ac:c0:48:ca:a6:12:9b:70:3e:98:1d:4a:ff: e9:65:74:2f:97:6d:85:50:7a:72:ea:9f:28:5d:a7: d0:4d:70:77:eb:a6:06:c7:1a:39:dd:b4:93:e5:80: d0:e1:5e:7e:bc:33:52:f2:73:b0:8f:33:35:aa:f5: 72:fc:4e:66:0e:e0:a9:7c:59:b4:5a:11:c7:09:90: ff:e6:0b:1b:0e:c0:36:dd:f6:f7:8a:d4:99:6a:e5: 68:0c:d4:70:58:67:a1:14:31:05:6f:cc:59:8c:f4: 21:a5:19:1a:58:1a:70:2d:e6:ba:2d:01:67:0a:09: 1e:2f:81:8d:d5:ef:dd:66:16:57:f4:99:33:71:14: a8:d3:2b:c0:af:6d:59:86:52:85:c9:c9:b9:c4:1b: aa:e3:89:2d:71:3e:77:68:a8:34:b9:e9:4b:df:c4: d3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F9:46:76:5B:66:DB:0D:AB:4C:F8:88:2F:A1:33:F1:91:C5:61:BD X509v3 Authority Key Identifier: keyid:36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:dd:c4:91:a4:a2:af:8f:5b:57:11:a3:ac:12:5d:2e:3d:cd: 49:40:80:97:aa:10:5e:71:cb:13:b9:a3:e4:44:c3:ce:90:9a: 4c:e3:12:3b:4d:0f:30:59:4f:1c:3e:6e:c9:36:db:3c:57:2d: 63:e7:5d:9a:7f:05:ab:46:fa:a1:54:4b:79:07:51:81:6f:20: 04:16:b3:db:5e:67:9a:eb:e8:c4:d2:00:92:cf:24:95:c1:94: b7:43:d9:77:25:6e:dd:a7:b4:fd:0b:27:2b:10:d8:7b:fa:66: dc:cb:98:6c:0d:9c:42:cb:14:a4:94:cf:ba:c5:ab:59:0c:d0: af:cc:d2:39:44:3a:77:e0:d9:71:99:e1:c3:ec:10:08:f4:4e: 9c:82:cb:84:38:21:6a:f5:23:1b:cf:7b:ec:cb:c7:5d:b9:f0: 46:16:65:6b:3d:e9:66:23:47:7c:d3:b7:b4:73:1e:3f:9f:b5: c9:ec:f0:ab:00:6d:9c:08:2d:4d:92:98:cb:86:d1:6f:fe:38: 51:5d:aa:97:e0:ab:2d:44:5e:57:c6:75:d8:52:a0:d3:47:a9: 2c:80:96:64:df:5b:17:72:5d:d7:78:36:99:a7:23:76:19:99: ee:09:e8:1c:e3:b8:f1:d2:67:0a:2d:99:ad:a9:d2:84:28:d0: 3f:c9:f8:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcwRkExMTAvBgNVBAUTKDM2Mzk1MkI3RjQxNzgyMDYwOTMwMEFFODkxNDgxMjE4 NEI4RkMzREMwHhcNMjYwMzAyMTYxMjU5WhcNMjYwMzA5MTYxMjU5WjAYMRYwFAYD VQQDEw02OWE1YjcwYi1iMTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoCNKpOTU6VJsChgAMvx1F3QnrZpKNLUvu3EZ/q940Ol7MONrqHrzK9w47rK w7DgeO9DXpitsMfDcy0hjxJUnVB8q9Li8UAHiqHDde/83wMFhjxEyDy0klrQiazA SMqmEptwPpgdSv/pZXQvl22FUHpy6p8oXafQTXB366YGxxo53bST5YDQ4V5+vDNS 8nOwjzM1qvVy/E5mDuCpfFm0WhHHCZD/5gsbDsA23fb3itSZauVoDNRwWGehFDEF b8xZjPQhpRkaWBpwLea6LQFnCgkeL4GN1e/dZhZX9JkzcRSo0yvAr21ZhlKFycm5 xBuq44ktcT53aKg0uelL38TTZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJT5RnZb ZtsNq0z4iC+hM/GRxWG9MB8GA1UdIwQYMBaAFDY5Urf0F4IGCTAK6JFIEhhLj8Pc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzBGQS82NEZCN0UxQ0Uz QTcxMUU2QTVCMjAxNzhDNEY5QUUwMi9OamxTdF9RWGdnWUpNQXJva1VnU0dFdVB3 OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05qbFN0X1FYZ2dZSk1Bcm9rVWdTR0V1UHc5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzBGQS82NEZCN0UxQ0UzQTcxMUU2QTVCMjAxNzhDNEY5QUUwMi9OamxTdF9RWGdn WUpNQXJva1VnU0dFdVB3OXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtt3EkaSir49bVxGjrBJdLj3NSUCAl6oQXnHLE7mj5ETDzpCaTOMSO00PMFlP HD5uyTbbPFctY+ddmn8Fq0b6oVRLeQdRgW8gBBaz215nmuvoxNIAks8klcGUt0PZ dyVu3ae0/QsnKxDYe/pm3MuYbA2cQssUpJTPusWrWQzQr8zSOUQ6d+DZcZnhw+wQ CPROnILLhDghavUjG8977MvHXbnwRhZlaz3pZiNHfNO3tHMeP5+1yezwqwBtnAgt TZKYy4bRb/44UV2ql+CrLUReV8Z12FKg00epLICWZN9bF3Jd13g2macjdhmZ7gno HOO48dJnCi2ZranShCjQP8n4XA== -----END CERTIFICATE-----Generated at Mon Mar 2 20:19:06 2026 by rpki-client