$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft File: nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft (raw, json) Hash identifier: blzwfLYi/5hD7tdx8Xp2C4ekBFYREMpSWFt63auJgXg= Subject key identifier: 89:8B:22:39:C4:FA:13:F8:09:57:CD:F5:F3:4A:10:C2:92:A6:02:F4 Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 Certificate issuer: /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft Manifest number: 0199 Signing time: Sun 01 Mar 2026 23:21:49 +0000 Manifest this update: Sun 01 Mar 2026 23:21:48 +0000 Manifest next update: Sun 08 Mar 2026 23:21:48 +0000 Files and hashes: 1: nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl (hash: YSRQkFNoY2wlSj8602btgLFFJrhXP9D/gGlPjKIuAfY=) 2: 09E42D1E921B11EF829E0041C4F9AE02.roa (hash: SDwSi/u1Twlfmf5SHraNC99SEJgc829wXFAGy78aUeI=) 3: 51E59058921B11EFB656CB41C4F9AE02.roa (hash: CVc7+YJqczn4U+OfPIE/fZkWaSeGEEqcCtAyFsmbXlk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CAF, serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Validity Not Before: Mar 1 23:21:48 2026 GMT Not After : Mar 8 23:21:48 2026 GMT Subject: CN=69a4ca0d-2198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8a:ef:b4:43:a9:e6:59:6c:1c:03:74:7d:e9: df:f7:4a:04:9a:23:bb:5d:1c:a8:88:e7:b6:80:66: 5e:9e:7b:fc:55:f5:49:fd:53:24:f0:40:c1:9b:f7: d6:d5:e7:63:79:bd:47:28:e7:7b:f3:5a:de:bc:c3: 97:ce:e0:2d:d6:7d:0e:8e:4b:6c:87:10:a8:4a:cb: bc:f2:0e:91:2c:52:af:be:a9:8d:92:90:68:21:b3: 4d:e5:1d:c3:07:9a:7d:57:c7:16:12:26:83:b4:6b: 75:5f:30:0c:1e:14:86:5f:82:71:f3:1b:87:7d:9c: fa:6a:16:b6:52:67:ff:9b:da:e2:5e:ae:bd:38:54: 95:a9:45:76:9a:99:02:82:af:64:30:31:9f:67:c4: 24:fe:71:8e:aa:f4:b9:c5:5f:d5:81:73:f5:8d:ee: 4b:75:35:0a:9b:4d:4d:fa:69:8f:e2:af:e3:94:e4: c6:dc:7b:ef:48:2a:bc:d5:e7:ca:17:f7:5a:d8:6b: 3f:e6:00:53:91:0d:64:30:1c:0f:3d:6f:e0:f8:a9: 3e:55:f9:37:7a:0f:5e:d7:a9:46:b2:88:b8:a0:5d: d4:9f:b5:88:51:14:ee:dc:87:16:39:cf:da:e1:68: 0e:3c:02:70:8e:25:f2:d9:84:96:0a:9b:a7:cc:36: 84:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8B:22:39:C4:FA:13:F8:09:57:CD:F5:F3:4A:10:C2:92:A6:02:F4 X509v3 Authority Key Identifier: keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:21:0f:81:ab:43:17:e6:86:fe:45:0d:a1:08:09:bf:20:3b: 97:0f:3b:02:dc:8f:24:39:8b:cc:ca:4a:da:5a:6e:74:2f:89: 5b:ee:58:be:3a:11:7c:38:49:bc:ef:dc:f4:c0:f6:95:78:3d: 8a:e6:6f:2a:9a:e9:1a:85:53:ca:77:12:45:b4:f0:f8:5c:8f: 9e:65:79:91:48:21:df:d4:a8:b9:55:3b:ed:91:eb:b3:c6:77: 52:98:89:5b:27:3a:d6:99:bd:48:74:4d:8a:d8:cd:e3:7c:45: 72:77:46:8e:e7:6b:16:cf:fc:65:08:db:41:80:c6:f8:7f:48: 04:0b:c5:4d:76:a0:48:36:99:4a:ba:06:47:d1:48:ce:2a:c7: 54:8e:5d:e4:e3:25:f7:0b:9a:8b:9b:5f:9b:de:d5:e1:a2:d1: d4:f6:f1:87:d9:66:33:77:df:3a:8b:48:bb:7e:d7:e8:2f:48: 12:60:5f:19:a7:3b:2d:44:a0:86:2c:83:35:71:1d:78:a0:9f: c9:fd:31:5e:72:80:71:0f:19:7c:c0:2b:81:07:34:e8:60:dc: c6:d2:fa:bb:0c:73:83:62:2a:b8:80:98:77:c1:aa:82:26:54: 5e:84:49:71:a8:4f:7e:c3:c5:7e:6f:85:ef:62:23:50:10:e4: 17:a5:e3:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQUYxMTAvBgNVBAUTKDlGMDJEQTNBQjVGQjQ1MzE3NTA3QzQ4MDIxQ0UwQThC OTM3MjU1QzkwHhcNMjYwMzAxMjMyMTQ4WhcNMjYwMzA4MjMyMTQ4WjAYMRYwFAYD VQQDEw02OWE0Y2EwZC0yMTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIrvtEOp5llsHAN0fenf90oEmiO7XRyoiOe2gGZennv8VfVJ/VMk8EDBm/fW 1edjeb1HKOd781revMOXzuAt1n0OjktshxCoSsu88g6RLFKvvqmNkpBoIbNN5R3D B5p9V8cWEiaDtGt1XzAMHhSGX4Jx8xuHfZz6aha2Umf/m9riXq69OFSVqUV2mpkC gq9kMDGfZ8Qk/nGOqvS5xV/VgXP1je5LdTUKm01N+mmP4q/jlOTG3HvvSCq81efK F/da2Gs/5gBTkQ1kMBwPPW/g+Kk+Vfk3eg9e16lGsoi4oF3Un7WIURTu3IcWOc/a 4WgOPAJwjiXy2YSWCpunzDaE4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFImLIjnE +hP4CVfN9fNKEMKSpgL0MB8GA1UdIwQYMBaAFJ8C2jq1+0UxdQfEgCHOCouTclXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNBRi9GM0UwRkFFNEI2 RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JURjFCOFNBSWM0S2k1TnlW Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL253TGFPclg3UlRGMUI4U0FJYzRLaTVOeVZjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNBRi9GM0UwRkFFNEI2RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JU RjFCOFNBSWM0S2k1TnlWY2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsSEPgatDF+aG/kUNoQgJvyA7lw87AtyPJDmLzMpK2lpudC+JW+5YvjoRfDhJ vO/c9MD2lXg9iuZvKprpGoVTyncSRbTw+FyPnmV5kUgh39SouVU77ZHrs8Z3UpiJ Wyc61pm9SHRNitjN43xFcndGjudrFs/8ZQjbQYDG+H9IBAvFTXagSDaZSroGR9FI zirHVI5d5OMl9wuai5tfm97V4aLR1Pbxh9lmM3ffOotIu37X6C9IEmBfGac7LUSg hiyDNXEdeKCfyf0xXnKAcQ8ZfMArgQc06GDcxtL6uwxzg2IquICYd8GqgiZUXoRJ cahPfsPFfm+F72IjUBDkF6Xj+g== -----END CERTIFICATE-----Generated at Mon Mar 2 09:24:01 2026 by rpki-client