$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: yt7G3O1yPXb0HatAjKu0GiGn9TnhYVNpx/D2KIQ8ahA= Subject key identifier: 99:64:8A:7C:73:3F:A5:E9:4E:E3:1D:D7:15:A8:14:61:45:5A:48:58 Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 01D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 01CB Signing time: Sun 01 Mar 2026 04:26:56 +0000 Manifest this update: Sun 01 Mar 2026 04:26:56 +0000 Manifest next update: Sun 08 Mar 2026 04:26:56 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: Z1yGshuWXly4W6yUjYsUtAHdL3BkyAOPmoAexZVgqLU=) 2: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: xPqI8byEZA0kbH+t1Ot9il53KHXLD5VMa8Lng8oAAuU=) 3: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: 0taDnwo0qjXesfO3FrAvUEEfUHs3YxCMYz8QGg31osQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: Mar 1 04:26:56 2026 GMT Not After : Mar 8 04:26:56 2026 GMT Subject: CN=69a3c010-740d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ed:ec:a7:48:6b:d7:ce:34:f8:60:fb:9e:28: 52:fe:69:56:cf:ab:11:01:7f:86:82:3f:d0:e2:91: da:3f:44:ca:76:62:fb:c8:26:13:e6:e0:ea:b9:95: 33:92:76:9a:a9:48:9e:f1:66:1c:27:b0:3a:fc:4b: 1a:e4:be:60:5b:70:15:a9:e1:24:f1:d8:a2:bf:2f: 9e:50:f8:3e:b5:01:04:18:b7:89:4c:84:5f:83:0b: b9:59:b9:18:32:6a:d4:33:ee:e7:9d:b7:b3:e9:82: f2:d0:57:a9:9f:72:f4:f5:01:e9:98:5c:9e:52:22: 78:74:6f:2b:b4:58:94:d3:87:df:56:87:6b:2f:18: a2:93:1d:9d:2f:19:45:47:c4:01:1a:ac:f4:fd:ea: a0:8d:ea:83:c2:2d:33:83:80:90:14:9a:d6:3e:45: fe:e6:d5:fd:17:01:8d:73:cd:f4:1b:94:0c:c5:1a: 61:23:6f:50:5f:80:7f:15:70:6a:e2:7c:df:65:6e: b8:38:98:f0:65:6a:6d:37:8a:c0:88:59:ba:4a:2e: b4:2e:b3:9c:03:68:47:10:4c:1f:61:15:3e:e9:24: 63:b5:92:1b:29:dc:6b:c7:52:7e:37:92:fc:f4:99: 3b:d4:aa:91:10:fb:9a:fe:2a:04:00:65:fe:1f:4e: 76:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:64:8A:7C:73:3F:A5:E9:4E:E3:1D:D7:15:A8:14:61:45:5A:48:58 X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ed:20:64:d4:9a:d0:75:3d:ec:7a:aa:43:09:8e:f0:92:45: 0a:75:21:36:d9:c4:54:cd:28:ef:e3:ef:65:4e:4e:af:a9:62: 86:96:90:8c:c2:8c:50:44:5d:5a:f9:4b:f7:fc:3e:25:4b:4f: d0:59:fd:f0:59:0c:52:34:91:7c:cd:69:1d:75:61:3e:41:62: 23:ae:24:b4:44:74:db:e5:89:88:6c:98:ca:e8:3e:42:bb:6c: e8:1c:d4:bc:be:55:26:3c:18:84:1d:5c:bb:f6:51:38:37:d8: 27:e5:3d:94:02:f8:a5:c8:a0:8c:8b:be:d3:9f:06:42:21:04: 52:57:ab:9e:09:5a:b4:6e:a9:8d:89:7a:a7:e9:42:8d:c5:86: ce:64:51:57:91:ce:d7:2b:d3:1e:14:43:fd:a0:c2:cf:83:c6: dc:b0:01:91:d1:9b:98:39:e3:6b:1e:ac:86:fb:c3:87:59:46: f0:eb:61:d9:28:b7:9c:de:ec:4c:16:a5:0f:43:4c:ba:71:56: 2d:fb:06:a4:f9:85:29:53:09:ef:ad:6b:c6:de:c6:96:95:cf: 54:1f:27:fc:bd:d9:8c:95:46:37:c5:f2:4f:12:03:c8:40:fa: 46:c2:0c:13:dd:91:5d:51:02:a2:26:ef:dd:88:46:28:35:a2: ae:03:eb:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjYwMzAxMDQyNjU2WhcNMjYwMzA4MDQyNjU2WjAYMRYwFAYD VQQDDA02OWEzYzAxMC03NDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5e3sp0hr1840+GD7nihS/mlWz6sRAX+Ggj/Q4pHaP0TKdmL7yCYT5uDquZUz knaaqUie8WYcJ7A6/Esa5L5gW3AVqeEk8diivy+eUPg+tQEEGLeJTIRfgwu5WbkY MmrUM+7nnbez6YLy0Fepn3L09QHpmFyeUiJ4dG8rtFiU04ffVodrLxiikx2dLxlF R8QBGqz0/eqgjeqDwi0zg4CQFJrWPkX+5tX9FwGNc830G5QMxRphI29QX4B/FXBq 4nzfZW64OJjwZWptN4rAiFm6Si60LrOcA2hHEEwfYRU+6SRjtZIbKdxrx1J+N5L8 9Jk71KqREPua/ioEAGX+H052BwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJlkinxz P6XpTuMd1xWoFGFFWkhYMB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXO0gZNSa0HU97HqqQwmO8JJFCnUhNtnEVM0o7+PvZU5Or6lihpaQjMKMUERd WvlL9/w+JUtP0Fn98FkMUjSRfM1pHXVhPkFiI64ktER02+WJiGyYyug+Qrts6BzU vL5VJjwYhB1cu/ZRODfYJ+U9lAL4pcigjIu+058GQiEEUlernglatG6pjYl6p+lC jcWGzmRRV5HO1yvTHhRD/aDCz4PG3LABkdGbmDnjax6shvvDh1lG8Oth2Si3nN7s TBalD0NMunFWLfsGpPmFKVMJ761rxt7GlpXPVB8n/L3ZjJVGN8XyTxIDyED6RsIM E92RXVECoibv3YhGKDWirgPrHA== -----END CERTIFICATE-----Generated at Mon Mar 2 01:16:27 2026 by rpki-client