$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft File: NFMkWvnnaQX2mpDxzs2F6og_6hY.mft (raw, json) Hash identifier: Tlh+R0YTFjS2aCkLLLpz4s5tmfFw6PPUmkquHExIqgc= Subject key identifier: 7B:DC:0B:FC:C0:4E:66:92:C9:1E:30:C1:97:4C:D4:EF:2E:8F:33:5E Authority key identifier: 34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 Certificate issuer: /CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Certificate serial: 07E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft Manifest number: 07D4 Signing time: Mon 02 Mar 2026 01:50:59 +0000 Manifest this update: Mon 02 Mar 2026 01:50:58 +0000 Manifest next update: Mon 09 Mar 2026 01:50:58 +0000 Files and hashes: 1: NFMkWvnnaQX2mpDxzs2F6og_6hY.crl (hash: EcxYjX/1GBAtrvylg3IQUtRd9lMX016+mfkxDG7guHU=) 2: 0BAA4608297211EB99ECF956C4F9AE02.roa (hash: wKAEYn7N0s61lmDabEnuaSxEMJJCyF8MvcXmo7hrc/w=) 3: E9D321CEF2F611EE95E10935C4F9AE02.roa (hash: uGgUAHKjFCdKGRYwfRLplSrRPtlghY9PMVrAiNXtlcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2017 (0x7e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6064, serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Validity Not Before: Mar 2 01:50:58 2026 GMT Not After : Mar 9 01:50:58 2026 GMT Subject: CN=69a4ed03-3576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e9:43:6f:c2:db:29:2b:77:0e:22:b3:3d:b2: 51:f2:cb:32:86:1f:60:2f:ff:15:67:b7:34:40:bc: 63:9d:48:6a:44:b8:9e:4f:33:44:dd:d3:0e:c6:b5: e5:2f:d7:42:71:94:c3:82:6b:9a:07:29:e5:4e:70: 90:ab:00:71:06:d4:53:4a:d4:38:6a:0b:ee:5e:eb: b6:47:0d:8e:53:3c:b0:b1:2d:19:65:36:21:fb:d3: 0d:c0:6d:1d:5c:4a:b7:7f:77:ef:b7:fe:67:40:6f: 23:09:79:9c:e8:39:df:a5:b3:0d:1d:c4:cb:27:48: 0a:06:ab:71:5f:7a:fb:2d:fe:b9:1a:ab:0e:9d:bf: 7e:fa:6f:9a:23:b2:55:e6:da:29:7f:dc:77:e0:2a: b6:77:5d:82:c8:af:e8:de:87:c5:ce:ff:c0:3c:43: 84:32:af:d0:5c:fd:9a:89:36:2e:fb:b4:59:ba:3f: 51:30:9e:87:db:8d:28:6d:8b:58:cf:2c:0c:0a:1b: 2f:0f:87:9c:79:41:a3:c1:01:66:fd:4c:20:7d:3c: 48:ab:00:b3:bd:54:cf:db:24:d4:86:25:af:c9:b3: 7e:a1:d1:e5:0e:c9:da:41:ad:e7:1c:6b:dd:3f:f0: 31:b6:69:d8:0c:f0:1b:58:24:eb:c7:a1:e3:fa:6b: 6c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DC:0B:FC:C0:4E:66:92:C9:1E:30:C1:97:4C:D4:EF:2E:8F:33:5E X509v3 Authority Key Identifier: keyid:34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:7d:d5:bf:56:5c:35:24:a2:69:20:b1:97:61:38:09:3c:51: bb:39:a3:8e:8c:78:c2:58:ef:dc:a5:4a:76:85:76:7e:7e:68: 60:16:49:42:2a:27:57:7e:e4:e2:86:ad:50:49:3e:51:7e:c2: eb:2f:12:75:5f:6e:24:8a:82:9b:c9:66:58:43:94:57:c6:7a: 62:70:a4:af:b1:72:40:d0:47:d4:47:15:f1:77:ac:6a:1f:85: 2f:1e:51:4f:3f:b8:e9:31:da:7c:fd:4a:45:a8:e4:9c:c4:64: a5:c4:bf:f1:3a:f6:3a:43:fe:99:d1:32:66:fa:52:0d:b0:ef: 8e:75:b9:c6:0b:b2:e3:e0:c2:02:c7:0d:91:92:8b:7f:91:75: 72:17:4a:bc:88:dc:95:8b:10:e4:ff:09:0b:17:8a:6f:6c:8a: f0:e5:d4:aa:24:f2:0f:3d:a5:81:cc:75:0d:29:70:7c:28:87: 1a:ac:ad:a0:96:3d:c5:eb:2e:30:9c:46:b4:4b:f5:3e:ee:68: 03:e2:85:cd:96:ee:08:cf:f9:da:58:d6:fb:0a:71:25:2d:04: 30:ec:c5:af:f4:fd:aa:6e:fb:ad:db:23:b1:c1:5f:62:51:cc: 58:c3:a6:3a:86:b4:29:d7:34:8f:c2:a0:3c:4f:2f:a0:c3:3c: e3:f1:e3:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwNjQxMTAvBgNVBAUTKDM0NTMyNDVBRjlFNzY5MDVGNjlBOTBGMUNFQ0Q4NUVB ODgzRkVBMTYwHhcNMjYwMzAyMDE1MDU4WhcNMjYwMzA5MDE1MDU4WjAYMRYwFAYD VQQDEw02OWE0ZWQwMy0zNTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOlDb8LbKSt3DiKzPbJR8ssyhh9gL/8VZ7c0QLxjnUhqRLieTzNE3dMOxrXl L9dCcZTDgmuaBynlTnCQqwBxBtRTStQ4agvuXuu2Rw2OUzywsS0ZZTYh+9MNwG0d XEq3f3fvt/5nQG8jCXmc6DnfpbMNHcTLJ0gKBqtxX3r7Lf65GqsOnb9++m+aI7JV 5topf9x34Cq2d12CyK/o3ofFzv/APEOEMq/QXP2aiTYu+7RZuj9RMJ6H240obYtY zywMChsvD4eceUGjwQFm/UwgfTxIqwCzvVTP2yTUhiWvybN+odHlDsnaQa3nHGvd P/AxtmnYDPAbWCTrx6Hj+mtsewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHvcC/zA TmaSyR4wwZdM1O8ujzNeMB8GA1UdIwQYMBaAFDRTJFr552kF9pqQ8c7NheqIP+oW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA2NC81MkZFRjczQTI5 NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFRWDJtcER4enMyRjZvZ182 aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GTWtXdm5uYVFYMm1wRHh6czJGNm9nXzZoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA2NC81MkZFRjczQTI5NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFR WDJtcER4enMyRjZvZ182aFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsn3Vv1ZcNSSiaSCxl2E4CTxRuzmjjox4wljv3KVKdoV2fn5oYBZJQionV37k 4oatUEk+UX7C6y8SdV9uJIqCm8lmWEOUV8Z6YnCkr7FyQNBH1EcV8Xesah+FLx5R Tz+46THafP1KRajknMRkpcS/8Tr2OkP+mdEyZvpSDbDvjnW5xguy4+DCAscNkZKL f5F1chdKvIjclYsQ5P8JCxeKb2yK8OXUqiTyDz2lgcx1DSlwfCiHGqytoJY9xesu MJxGtEv1Pu5oA+KFzZbuCM/52ljW+wpxJS0EMOzFr/T9qm77rdsjscFfYlHMWMOm Ooa0Kdc0j8KgPE8voMM84/HjTQ== -----END CERTIFICATE-----Generated at Mon Mar 2 08:05:57 2026 by rpki-client