$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft File: nZwAihKi96YP7_liJmsFAqHKC6I.mft (raw, json) Hash identifier: +RaFdVCISAQP/XeL90Ri1BhjMyrlSVekqCOcZJ/E5hA= Subject key identifier: CF:D4:53:4A:F3:A9:87:C6:35:E1:61:2C:D0:67:E2:11:B9:26:53:66 Authority key identifier: 9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 Certificate issuer: /CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Certificate serial: 05AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft Manifest number: 05A5 Signing time: Sat 28 Feb 2026 23:44:15 +0000 Manifest this update: Sat 28 Feb 2026 23:44:14 +0000 Manifest next update: Sat 07 Mar 2026 23:44:14 +0000 Files and hashes: 1: nZwAihKi96YP7_liJmsFAqHKC6I.crl (hash: UOMqXMmH+ILdN5zNRGpjyvN401MPmwzHXE51J4OAfN4=) 2: 460AA4AE03CF11ECA480B07CC4F9AE02.roa (hash: RyN8TdZ33FgQoqBN1enP2qHNRdbXtugooz5NQ7OTf7g=) 3: 46A2104603CF11ECA480B07CC4F9AE02.roa (hash: sFxA7zWd1QKxzt33I3bSrxQFMBjh0wvM8Ox270gKZ1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 23:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1455 (0x5af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB85A, serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Validity Not Before: Feb 28 23:44:14 2026 GMT Not After : Mar 7 23:44:14 2026 GMT Subject: CN=69a37dcf-b4d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d4:c4:14:01:72:95:f8:cf:7a:d6:d1:6c:3e: 61:e5:db:e8:06:78:27:4f:54:29:2f:9c:b8:12:bb: 5a:54:f9:c5:78:aa:e3:b4:d6:cc:2a:5e:e6:b2:7f: e4:d4:4e:09:ca:5c:e0:30:39:19:0d:62:09:71:0d: 44:67:47:d7:a9:c5:94:97:be:92:6a:35:ce:9f:fe: d9:14:b5:c7:ec:a9:49:b8:dc:83:8c:24:95:e1:14: 44:59:ad:da:a6:75:d2:0b:80:e6:c4:c5:fd:38:56: 54:3e:4a:c3:c1:3b:7c:ee:78:21:29:4a:35:fa:f6: cb:58:32:68:5a:27:52:b4:09:73:6e:2c:f7:ba:32: a0:78:6e:7d:de:92:19:52:8a:df:d7:cc:1a:bc:32: 02:c6:f6:95:a8:cd:68:a5:ef:2b:f4:10:28:cb:db: a6:ae:5c:ce:e2:a5:a0:51:ed:cc:f5:bd:b5:06:12: c4:23:25:8b:4d:ea:a1:2e:f9:e1:21:9b:54:af:80: 9e:65:0e:0d:48:ad:6a:a3:b3:81:d3:0c:d1:aa:c0: 08:78:61:57:fd:6d:d7:94:2c:16:07:97:c9:50:9d: d3:54:6d:1f:aa:68:17:5b:40:0b:49:f1:74:e0:e2: 2e:a7:67:61:de:8e:9d:b1:2d:0a:0a:77:ec:ec:f6: d8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D4:53:4A:F3:A9:87:C6:35:E1:61:2C:D0:67:E2:11:B9:26:53:66 X509v3 Authority Key Identifier: keyid:9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:7d:55:d0:a3:7b:89:a4:ed:41:63:4b:43:40:53:0f:a2:b1: e5:42:a9:86:87:f3:d9:c5:a1:8f:87:63:1a:d4:df:cf:55:7d: 6f:fa:3d:c1:49:30:be:b0:be:f3:0b:bf:2b:7d:9e:55:39:e4: 78:fd:b6:8e:d7:e2:5a:13:b8:07:91:eb:70:b9:36:dc:bb:c9: 7c:2c:35:7c:4e:73:ce:7a:e3:cf:b1:26:d1:d2:7a:7c:72:1d: 81:c7:6a:a4:40:9e:f1:52:2e:0b:63:56:3c:82:3e:3b:9f:e3: cb:40:ea:f3:c7:86:24:b4:c6:67:14:81:c3:2e:92:71:4b:22: cc:ee:57:54:51:3a:12:89:0f:76:cd:c1:a8:7d:84:d7:99:e5: 7a:a5:04:06:9b:93:85:b5:0f:f8:23:0e:a0:05:d6:e2:7e:e7: 7a:94:35:d4:cb:17:22:17:78:54:b7:80:9b:f8:37:1d:cf:33: cd:5d:f1:d0:97:56:b6:84:28:98:5a:9b:5a:d7:22:ab:e6:87: 3c:1f:87:7a:99:71:f7:9f:5d:31:0d:24:a6:f1:e1:fa:11:16: 20:88:3f:57:c8:0c:a9:5a:2d:16:4e:b7:a9:d9:8c:3d:75:48: 43:4d:8d:af:0b:2e:87:8e:14:dc:93:f6:73:a2:ee:91:ef:d5: 65:df:ed:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI4NUExMTAvBgNVBAUTKDlEOUMwMDhBMTJBMkY3QTYwRkVGRjk2MjI2NkIwNTAy QTFDQTBCQTIwHhcNMjYwMjI4MjM0NDE0WhcNMjYwMzA3MjM0NDE0WjAYMRYwFAYD VQQDDA02OWEzN2RjZi1iNGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtTEFAFylfjPetbRbD5h5dvoBngnT1QpL5y4ErtaVPnFeKrjtNbMKl7msn/k 1E4JylzgMDkZDWIJcQ1EZ0fXqcWUl76SajXOn/7ZFLXH7KlJuNyDjCSV4RREWa3a pnXSC4DmxMX9OFZUPkrDwTt87nghKUo1+vbLWDJoWidStAlzbiz3ujKgeG593pIZ Uorf18wavDICxvaVqM1ope8r9BAoy9umrlzO4qWgUe3M9b21BhLEIyWLTeqhLvnh IZtUr4CeZQ4NSK1qo7OB0wzRqsAIeGFX/W3XlCwWB5fJUJ3TVG0fqmgXW0ALSfF0 4OIup2dh3o6dsS0KCnfs7PbYQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM/UU0rz qYfGNeFhLNBn4hG5JlNmMB8GA1UdIwQYMBaAFJ2cAIoSovemD+/5YiZrBQKhygui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjg1QS8xODVDMzlCNjAz Q0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2WVA3X2xpSm1zRkFxSEtD NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25ad0FpaEtpOTZZUDdfbGlKbXNGQXFIS0M2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjg1QS8xODVDMzlCNjAzQ0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2 WVA3X2xpSm1zRkFxSEtDNkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVn1V0KN7iaTtQWNLQ0BTD6Kx5UKphofz2cWhj4djGtTfz1V9b/o9wUkwvrC+ 8wu/K32eVTnkeP22jtfiWhO4B5HrcLk23LvJfCw1fE5zznrjz7Em0dJ6fHIdgcdq pECe8VIuC2NWPII+O5/jy0Dq88eGJLTGZxSBwy6ScUsizO5XVFE6EokPds3BqH2E 15nleqUEBpuThbUP+CMOoAXW4n7nepQ11MsXIhd4VLeAm/g3Hc8zzV3x0JdWtoQo mFqbWtciq+aHPB+Heplx959dMQ0kpvHh+hEWIIg/V8gMqVotFk63qdmMPXVIQ02N rwsuh44U3JP2c6Luke/VZd/tMQ== -----END CERTIFICATE-----Generated at Sun Mar 1 20:29:35 2026 by rpki-client