$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft File: NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft (raw, json) Hash identifier: NNaononcHb75mEK4bnFZHWMrfcZ2oI/+7lVVXMdNnOE= Subject key identifier: 84:32:A8:5F:F6:86:48:B3:EB:5E:C9:F2:47:D0:FE:42:83:F8:3C:AF Authority key identifier: 34:F4:67:6C:06:63:83:91:47:97:3D:4C:86:9B:49:DC:8C:66:40:F3 Certificate issuer: /CN=A91BB9EF/serialNumber=34F4676C0663839147973D4C869B49DC8C6640F3 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft Manifest number: 35 Signing time: Sun 01 Mar 2026 10:00:24 +0000 Manifest this update: Sun 01 Mar 2026 10:00:24 +0000 Manifest next update: Sun 08 Mar 2026 10:00:24 +0000 Files and hashes: 1: NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl (hash: zsyhglnVeQ4MEbShmoe6O0aCHsLXShnrFB6psiTWHR8=) 2: E57517B0C84F11F0B9AA990CC4F9AE02.roa (hash: APz1fq2YwQ7yS7mDD19LwdpN2CTZ/bZgxloH7c0/wbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB9EF, serialNumber=34F4676C0663839147973D4C869B49DC8C6640F3 Validity Not Before: Mar 1 10:00:24 2026 GMT Not After : Mar 8 10:00:24 2026 GMT Subject: CN=69a40e38-847d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:4d:88:27:12:c8:44:79:05:55:da:3f:ff: 3a:5f:6d:a2:21:c3:87:81:3e:65:38:9e:99:92:bf: 1e:54:d5:3d:0e:69:86:5a:3b:7b:58:f6:20:b7:4b: c0:5a:f8:60:46:7c:0d:4f:57:c4:4a:0e:05:5f:fb: 7b:46:f7:e9:fc:9d:c3:f5:78:4f:18:e3:45:63:15: 06:bb:f3:f2:1f:62:78:78:25:07:cd:76:71:04:99: 74:7e:a8:77:7f:89:29:95:85:d5:52:02:e8:23:cc: e4:fc:a5:73:27:71:64:03:82:7d:3a:76:e1:7f:88: ee:7c:76:79:53:4d:2a:fd:ff:6e:ad:46:40:f1:0b: 85:d4:70:17:ad:2c:72:38:fd:16:55:78:20:cd:ca: 72:f7:85:7d:d6:60:f1:cc:c6:83:20:9f:38:d2:fa: 3f:34:29:45:80:fa:58:c2:f0:9b:8b:04:86:dc:e5: 4a:ea:05:79:1e:b2:51:b8:a8:2c:6a:2f:27:52:0f: 79:d5:d6:16:53:1d:2c:7d:cc:81:6e:d9:1d:2c:49: 2c:52:26:d8:d3:97:da:6e:0c:08:46:56:14:fc:0f: 53:60:a0:72:42:9a:75:16:01:64:e9:f9:33:18:dd: 22:93:6c:8a:29:34:94:89:17:0e:0a:93:b1:19:66: 8e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:32:A8:5F:F6:86:48:B3:EB:5E:C9:F2:47:D0:FE:42:83:F8:3C:AF X509v3 Authority Key Identifier: keyid:34:F4:67:6C:06:63:83:91:47:97:3D:4C:86:9B:49:DC:8C:66:40:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:bb:10:1d:a7:c5:43:48:23:1e:eb:65:67:77:1e:ef:65:08: a3:bb:97:16:48:cb:05:77:f9:a2:9b:3a:d8:05:d9:07:04:00: 87:c7:f7:ee:1b:86:66:83:bb:84:cf:87:85:9e:97:58:b0:6d: e3:c2:bf:5a:d3:25:d6:6f:f8:4c:1d:09:4d:f1:55:fc:c8:70: 8d:b7:db:25:fc:97:d7:58:00:d2:08:35:16:58:5f:bf:9d:be: ea:d9:d1:f6:3c:6d:f4:37:22:d3:d7:2f:18:b7:47:e9:e8:c8: 15:ad:d0:22:43:ff:4b:96:52:95:ed:7a:c8:f8:0d:18:fc:1d: 99:ca:1e:06:ab:29:b9:6f:9f:c0:58:7e:fc:c7:b9:1e:97:a6: 0b:df:63:1e:21:f7:2a:ef:15:64:b2:23:fb:d7:91:32:e6:18: e2:57:46:c5:b3:5b:f7:30:7b:55:16:26:e3:03:5f:94:96:28: ee:59:a4:3f:22:72:82:b0:cf:8a:b1:c6:fc:c1:1b:1c:92:e0: e9:f8:34:3f:a0:fa:75:35:30:8a:64:48:84:bd:06:89:00:8b: 06:1d:f2:c6:65:9c:50:dd:7a:17:fc:5c:d1:b2:db:5d:e3:9c: 0d:af:9b:5b:7d:18:53:90:f3:71:63:30:96:6d:b7:7c:d3:f5: bc:fc:80:ff -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjlFRjExMC8GA1UEBRMoMzRGNDY3NkMwNjYzODM5MTQ3OTczRDRDODY5QjQ5REM4 QzY2NDBGMzAeFw0yNjAzMDExMDAwMjRaFw0yNjAzMDgxMDAwMjRaMBgxFjAUBgNV BAMTDTY5YTQwZTM4LTg0N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwYU2IJxLIRHkFVdo//zpfbaIhw4eBPmU4npmSvx5U1T0OaYZaO3tY9iC3S8Ba +GBGfA1PV8RKDgVf+3tG9+n8ncP1eE8Y40VjFQa78/IfYnh4JQfNdnEEmXR+qHd/ iSmVhdVSAugjzOT8pXMncWQDgn06duF/iO58dnlTTSr9/26tRkDxC4XUcBetLHI4 /RZVeCDNynL3hX3WYPHMxoMgnzjS+j80KUWA+ljC8JuLBIbc5UrqBXkeslG4qCxq LydSD3nV1hZTHSx9zIFu2R0sSSxSJtjTl9puDAhGVhT8D1NgoHJCmnUWAWTp+TMY 3SKTbIopNJSJFw4Kk7EZZo5dAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhDKoX/aG SLPrXsnyR9D+QoP4PK8wHwYDVR0jBBgwFoAUNPRnbAZjg5FHlz1MhptJ3IxmQPMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCOUVGLzg3ODcyM0U2Qzg0 RjExRjA4QkVCQ0QwQkM0RjlBRTAyL05QUm5iQVpqZzVGSGx6MU1ocHRKM0l4bVFQ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlBSbmJBWmpnNUZIbHoxTWhwdEozSXhtUVBNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC OUVGLzg3ODcyM0U2Qzg0RjExRjA4QkVCQ0QwQkM0RjlBRTAyL05QUm5iQVpqZzVG SGx6MU1ocHRKM0l4bVFQTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAzuxAdp8VDSCMe62Vndx7vZQiju5cWSMsFd/mimzrYBdkHBACHx/fuG4Zmg7uE z4eFnpdYsG3jwr9a0yXWb/hMHQlN8VX8yHCNt9sl/JfXWADSCDUWWF+/nb7q2dH2 PG30NyLT1y8Yt0fp6MgVrdAiQ/9LllKV7XrI+A0Y/B2Zyh4Gqym5b5/AWH78x7ke l6YL32MeIfcq7xVksiP715Ey5hjiV0bFs1v3MHtVFibjA1+UlijuWaQ/InKCsM+K scb8wRsckuDp+DQ/oPp1NTCKZEiEvQaJAIsGHfLGZZxQ3XoX/FzRsttd45wNr5tb fRhTkPNxYzCWbbd80/W8/ID/ -----END CERTIFICATE-----Generated at Mon Mar 2 14:48:44 2026 by rpki-client