$ rpki-client -vvf rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft File: NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft (raw, json) Hash identifier: ysTp7UKHa/Bfb5+OP999JNMnFGwClpnQcKrVBCsN4tg= Subject key identifier: CE:CB:4E:76:D0:FA:D4:AE:C1:18:F9:DE:F4:3B:4E:3B:AA:0C:EE:06 Authority key identifier: 34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA Certificate issuer: /CN=A91C99B4/serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA Certificate serial: 07B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft Manifest number: 0789 Signing time: Sat 28 Feb 2026 22:09:28 +0000 Manifest this update: Sat 28 Feb 2026 22:09:27 +0000 Manifest next update: Sat 07 Mar 2026 22:09:27 +0000 Files and hashes: 1: NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl (hash: zyJgxzKQdesmxlVlDpA5cacaJKfuYXqyttTgTEEV51g=) 2: 9E0384D2D4AE11F0B3093770C4F9AE02.roa (hash: v9CiHNMRCrRNTUccG0SyqMKRfuFAi8FsxcmJZoqH2g8=) 3: F3BEC03CE13B11F090F650ED6F6F56BC.roa (hash: 9Q6UVfld/+rzBWvRbqts4WlKXGhealsLgosXkfmaleY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 22:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1976 (0x7b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C99B4, serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA Validity Not Before: Feb 28 22:09:27 2026 GMT Not After : Mar 7 22:09:27 2026 GMT Subject: CN=69a36798-6afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:95:13:ce:e1:95:93:52:5b:b1:54:6e:f0:dd: 00:50:8e:86:25:df:7a:59:19:f7:d4:3b:84:92:82: a3:24:c7:34:cb:2f:d2:9e:63:65:d3:a5:0d:59:af: 6d:f3:59:28:96:df:80:82:bd:d7:90:b9:21:9d:dd: 1f:ec:b5:bb:85:f8:69:38:31:98:e3:cd:0f:9c:15: 0d:5f:f3:70:8b:9e:81:aa:8e:08:5e:58:09:21:98: ab:b2:00:ee:ab:6d:09:3a:53:f3:3b:04:3c:f8:44: 7d:13:8d:71:2f:ab:6b:3d:9a:5e:0b:79:a9:b8:d0: 91:5f:f6:e7:da:2b:cc:6f:b8:8c:72:52:76:31:8d: f5:5a:45:2b:5e:58:f7:f7:87:a5:cd:06:0f:b7:e5: 76:f5:a4:70:2f:7d:4a:0d:83:da:a0:a9:d8:b1:5c: cf:39:95:4b:a2:65:17:5c:3b:9e:27:f1:ad:1e:54: 84:0b:7a:08:71:d6:02:47:46:33:fb:fe:99:3e:5f: 2a:17:a8:c6:63:42:51:e6:8e:89:ee:1e:68:10:3a: 84:b0:18:95:57:37:8a:f8:fd:48:8f:c3:a2:42:eb: 8a:6a:1e:2b:58:c6:02:d0:d4:50:30:20:6d:79:74: 3b:34:47:fc:54:8a:1e:8a:ee:c5:8a:0b:63:1b:3a: 65:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CB:4E:76:D0:FA:D4:AE:C1:18:F9:DE:F4:3B:4E:3B:AA:0C:EE:06 X509v3 Authority Key Identifier: keyid:34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:18:bb:98:01:c2:92:cf:8b:a9:66:06:b4:54:cd:34:26:56: 20:18:48:c1:c4:fe:93:09:c8:9a:98:15:e4:83:74:53:5a:59: b1:32:b0:e0:fb:45:c1:52:8f:ad:79:f1:02:5a:05:0e:66:92: 3e:86:7e:d5:81:7e:08:00:a4:12:80:4a:21:66:01:32:0a:48: 88:ca:48:2b:e2:f7:9b:72:14:1b:69:5b:7b:fe:8f:1f:c4:91: d2:c6:53:69:53:94:5f:05:0c:12:2a:f2:61:4f:7d:05:bb:37: 29:80:a0:f3:5b:e9:ef:c8:07:28:1e:82:76:39:7f:5f:db:20: 20:27:1a:7a:5b:f9:e8:3a:a8:cb:f0:40:1e:98:e8:ac:5c:5b: c8:2c:1d:ef:9d:19:70:f9:47:64:bb:a0:7f:8c:c1:b8:97:8b: 95:d9:0e:fd:d8:c0:1a:75:47:d5:37:18:55:c0:7f:dc:db:9b: 61:c7:ae:e7:9d:37:08:ec:1e:a4:60:2b:1b:16:aa:de:06:c7: dc:a2:98:c4:fc:60:72:49:c5:92:59:8d:75:ad:68:35:d4:5f: 90:b9:ff:72:0a:a7:4f:48:91:75:d0:32:00:1c:30:a2:84:bf: 2c:eb:8d:4c:90:6a:99:89:28:08:4f:99:92:73:7c:94:e9:2c: 2d:69:9e:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5QjQxMTAvBgNVBAUTKDM0OEJFNjY5NEVENzA0MUFBRjI4RDBFQzhDNkM2NTY1 NTkxRjJEREEwHhcNMjYwMjI4MjIwOTI3WhcNMjYwMzA3MjIwOTI3WjAYMRYwFAYD VQQDDA02OWEzNjc5OC02YWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZUTzuGVk1JbsVRu8N0AUI6GJd96WRn31DuEkoKjJMc0yy/SnmNl06UNWa9t 81kolt+Agr3XkLkhnd0f7LW7hfhpODGY480PnBUNX/Nwi56Bqo4IXlgJIZirsgDu q20JOlPzOwQ8+ER9E41xL6trPZpeC3mpuNCRX/bn2ivMb7iMclJ2MY31WkUrXlj3 94elzQYPt+V29aRwL31KDYPaoKnYsVzPOZVLomUXXDueJ/GtHlSEC3oIcdYCR0Yz +/6ZPl8qF6jGY0JR5o6J7h5oEDqEsBiVVzeK+P1Ij8OiQuuKah4rWMYC0NRQMCBt eXQ7NEf8VIoeiu7FigtjGzpl3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM7LTnbQ +tSuwRj53vQ7TjuqDO4GMB8GA1UdIwQYMBaAFDSL5mlO1wQaryjQ7IxsZWVZHy3a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTlCNC81REU1OTY5NjU5 NDkxMUVCQTQ4Qzc4NzFDNEY5QUUwMi9OSXZtYVU3WEJCcXZLTkRzakd4bFpWa2ZM ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Jdm1hVTdYQkJxdktORHNqR3hsWlZrZkxkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTlCNC81REU1OTY5NjU5NDkxMUVCQTQ4Qzc4NzFDNEY5QUUwMi9OSXZtYVU3WEJC cXZLTkRzakd4bFpWa2ZMZG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVxi7mAHCks+LqWYGtFTNNCZWIBhIwcT+kwnImpgV5IN0U1pZsTKw4PtFwVKP rXnxAloFDmaSPoZ+1YF+CACkEoBKIWYBMgpIiMpIK+L3m3IUG2lbe/6PH8SR0sZT aVOUXwUMEiryYU99Bbs3KYCg81vp78gHKB6Cdjl/X9sgICcaelv56Dqoy/BAHpjo rFxbyCwd750ZcPlHZLugf4zBuJeLldkO/djAGnVH1TcYVcB/3NubYceu5503COwe pGArGxaq3gbH3KKYxPxgcknFklmNda1oNdRfkLn/cgqnT0iRddAyABwwooS/LOuN TJBqmYkoCE+ZknN8lOksLWmecQ== -----END CERTIFICATE-----Generated at Sun Mar 1 21:13:46 2026 by rpki-client