$ rpki-client -vvf rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft File: NfWNhhxBvf6ka4xykLGqxnDnzBs.mft (raw, json) Hash identifier: jxPMVu5E/paBqWQZtSBZx0VZcuMzlXlvqqnEHIqHdm4= Subject key identifier: 02:03:62:84:FC:36:9F:E1:7D:D0:58:B8:C5:40:23:1F:DE:C3:73:47 Authority key identifier: 35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B Certificate issuer: /CN=A91B35BB/serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Certificate serial: 0BCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft Manifest number: 0BBA Signing time: Mon 02 Mar 2026 18:51:53 +0000 Manifest this update: Mon 02 Mar 2026 18:51:53 +0000 Manifest next update: Mon 09 Mar 2026 18:51:53 +0000 Files and hashes: 1: NfWNhhxBvf6ka4xykLGqxnDnzBs.crl (hash: wOzZD7gkFwYiMJ5do+VIUvwUu6Dh/TY3w2dG/cGIjkc=) 2: 8F9F2F823C0111EAB6CB9936C4F9AE02.roa (hash: 3Z/JPqjZbXTvwbBYHDVc+0ddb1oxhY9tStpnOx9ITdQ=) 3: 902F47663C0111EAB6CB9936C4F9AE02.roa (hash: VuSr3kOQUjg9+28LT7ROPq/HuUEw9XEa1A4ZWRbVfXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 18:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3019 (0xbcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B35BB, serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Validity Not Before: Mar 2 18:51:53 2026 GMT Not After : Mar 9 18:51:53 2026 GMT Subject: CN=69a5dc49-3b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6f:48:16:42:14:95:34:09:3b:21:80:fd:41: 61:e2:32:d2:9f:7a:98:cc:3f:ec:71:c4:93:32:40: a4:a3:85:b7:56:c2:7f:a4:ec:cb:c3:90:6b:fa:21: 0e:a2:c3:f7:71:84:4e:38:09:b1:fc:49:58:a5:3e: 18:eb:67:ee:8d:d5:ec:64:ce:3b:e8:d6:b9:53:de: f9:21:12:8a:ec:e4:d7:04:79:3a:95:9e:76:58:04: ef:78:44:bb:d1:43:ad:66:29:07:95:fd:13:cd:98: d0:19:0a:46:e3:c0:24:aa:25:91:40:8c:90:b8:84: fc:0d:84:15:25:26:3c:6f:7d:e4:82:c3:40:fd:e4: d0:cc:bd:59:2b:9b:8a:6c:db:d5:bd:27:64:b1:21: 49:6a:4c:e5:7d:a9:48:20:6f:7f:50:10:4b:2a:6c: 3b:7e:83:da:81:36:75:89:20:b8:44:7c:08:47:8b: ad:a0:f2:69:69:1b:0d:ba:d0:ab:df:64:d2:ff:b6: ae:44:16:cb:7d:f5:1f:8e:2e:1e:dd:77:57:f6:31: e3:3c:b6:c2:4e:3a:fe:cf:1f:7c:05:d5:58:bc:34: 3e:3d:19:7f:43:5c:ce:a9:0b:6f:63:c2:8e:bc:c3: 83:9f:74:c2:60:bd:57:30:c2:2a:8a:fd:d2:1a:f2: 2b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:03:62:84:FC:36:9F:E1:7D:D0:58:B8:C5:40:23:1F:DE:C3:73:47 X509v3 Authority Key Identifier: keyid:35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:81:25:54:34:2a:d1:9b:68:42:e3:6a:7c:25:0a:ad:ae:5e: de:17:f2:71:f1:bd:6e:a5:db:34:48:ca:82:24:23:dd:2f:b7: 2d:eb:c6:1a:8b:28:80:94:fc:03:c4:4b:8b:a2:38:3c:36:a3: ba:cc:9a:88:67:4c:ac:9a:41:02:c1:f0:28:eb:ee:21:f4:51: ba:00:1c:d7:49:4b:81:6d:cd:ac:fd:c0:10:1d:a7:2d:fe:5a: 10:f4:72:e5:cb:c6:61:ea:79:1c:b9:6f:c2:f9:b6:14:75:d1: 78:33:33:18:63:5a:30:ac:16:01:e1:b2:69:0f:42:bd:c7:4c: d1:6a:e6:55:63:09:8c:1d:00:55:ff:aa:85:c3:1b:be:d7:e3: 40:b8:5f:aa:b1:51:b5:ca:8d:fc:eb:d8:6d:c4:0c:b9:07:11: f9:35:1b:63:0e:1f:9a:ef:5c:8c:38:83:fc:2c:2d:76:8c:4d: 4d:d7:ae:76:a0:f5:dd:c8:ef:45:47:05:86:2d:60:f7:fb:49: d3:88:c5:57:bb:10:af:c2:59:6b:67:d4:16:2d:de:58:f9:c1: 31:47:fa:7d:88:b5:62:e5:e8:e0:ba:c7:28:7f:68:76:e5:60: a5:cd:b4:ab:18:0e:ba:8b:81:1d:b7:75:f0:31:43:6d:bf:6c: a4:00:74:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1QkIxMTAvBgNVBAUTKDM1RjU4RDg2MUM0MUJERkVBNDZCOEM3MjkwQjFBQUM2 NzBFN0NDMUIwHhcNMjYwMzAyMTg1MTUzWhcNMjYwMzA5MTg1MTUzWjAYMRYwFAYD VQQDEw02OWE1ZGM0OS0zYjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsW9IFkIUlTQJOyGA/UFh4jLSn3qYzD/sccSTMkCko4W3VsJ/pOzLw5Br+iEO osP3cYROOAmx/ElYpT4Y62fujdXsZM476Na5U975IRKK7OTXBHk6lZ52WATveES7 0UOtZikHlf0TzZjQGQpG48AkqiWRQIyQuIT8DYQVJSY8b33kgsNA/eTQzL1ZK5uK bNvVvSdksSFJakzlfalIIG9/UBBLKmw7foPagTZ1iSC4RHwIR4utoPJpaRsNutCr 32TS/7auRBbLffUfji4e3XdX9jHjPLbCTjr+zx98BdVYvDQ+PRl/Q1zOqQtvY8KO vMODn3TCYL1XMMIqiv3SGvIrowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAIDYoT8 Np/hfdBYuMVAIx/ew3NHMB8GA1UdIwQYMBaAFDX1jYYcQb3+pGuMcpCxqsZw58wb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzVCQi81Nzg5QjFBNDND MDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZmNmthNHh5a0xHcXhuRG56 QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mV05oaHhCdmY2a2E0eHlrTEdxeG5EbnpCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzVCQi81Nzg5QjFBNDNDMDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZm NmthNHh5a0xHcXhuRG56QnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH4ElVDQq0ZtoQuNqfCUKra5e3hfycfG9bqXbNEjKgiQj3S+3LevGGosogJT8 A8RLi6I4PDajusyaiGdMrJpBAsHwKOvuIfRRugAc10lLgW3NrP3AEB2nLf5aEPRy 5cvGYep5HLlvwvm2FHXReDMzGGNaMKwWAeGyaQ9CvcdM0WrmVWMJjB0AVf+qhcMb vtfjQLhfqrFRtcqN/OvYbcQMuQcR+TUbYw4fmu9cjDiD/CwtdoxNTdeudqD13cjv RUcFhi1g9/tJ04jFV7sQr8JZa2fUFi3eWPnBMUf6fYi1YuXo4LrHKH9oduVgpc20 qxgOuouBHbd18DFDbb9spAB0zA== -----END CERTIFICATE-----Generated at Tue Mar 3 00:45:47 2026 by rpki-client