$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft File: NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft (raw, json) Hash identifier: heB4bonNbR0cu04erjhgiC/9MKIGYWxQVBjewT1EXtw= Subject key identifier: C9:0D:BD:BC:D6:A3:83:DD:E8:4A:81:01:10:BC:F3:95:01:AE:71:63 Authority key identifier: 37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A Certificate issuer: /CN=A91DE7DE/serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Certificate serial: 124E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft Manifest number: 121C Signing time: Mon 02 Mar 2026 00:43:54 +0000 Manifest this update: Mon 02 Mar 2026 00:43:53 +0000 Manifest next update: Mon 09 Mar 2026 00:43:53 +0000 Files and hashes: 1: NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl (hash: uyET7FQOqycIcqoFSfKHw/xXydRe6q1g51wPgHyNC6M=) 2: 7F7F1470091D11F0B7E95627C4F9AE02.roa (hash: f+/uDtECPh4z9lUgGecamZwBqy/HTP1IaGpVkdXlDqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4686 (0x124e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Validity Not Before: Mar 2 00:43:53 2026 GMT Not After : Mar 9 00:43:53 2026 GMT Subject: CN=69a4dd4a-3757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:05:6d:96:e8:8e:11:9c:de:10:2d:5b:54:1e: 70:86:b3:f2:5f:35:ca:5a:6a:9a:dd:f6:59:1d:24: db:4f:10:12:37:31:a7:44:af:44:ad:19:88:43:8c: 8a:1c:43:9f:77:0f:f6:3d:d0:71:f1:07:4d:1d:1a: 3e:0d:0f:a7:94:f0:0f:95:fa:b9:7d:f1:dc:90:5e: c9:e2:d7:6e:5b:14:f5:23:44:c5:d0:18:7b:20:7e: ea:79:25:1e:60:c6:a3:8e:74:05:91:80:63:b4:ce: b8:6b:3f:52:43:88:73:ea:0d:1a:74:d7:01:d2:22: 1f:99:c5:28:8b:a8:b0:e2:d4:21:e4:0f:e6:3a:ea: 2e:21:fc:51:2d:08:2f:4a:d6:3c:e4:04:92:93:36: 0c:c3:b8:4e:c2:cb:39:21:02:a5:9b:36:83:b4:f5: ec:0a:df:36:d7:4c:a8:32:20:a5:2f:45:11:35:c6: ca:49:78:f7:d2:c5:8d:dc:15:55:81:e6:0a:b3:b0: bd:d3:ea:6c:cb:ad:6c:da:17:5e:ce:59:d4:37:aa: f4:8e:3f:60:21:ab:49:e9:c6:8f:51:a0:06:d5:13: ad:39:21:89:7e:36:cf:6e:66:35:66:24:59:e5:e6: 1b:7a:85:63:ce:39:ba:16:b7:af:95:34:4b:d5:40: ec:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0D:BD:BC:D6:A3:83:DD:E8:4A:81:01:10:BC:F3:95:01:AE:71:63 X509v3 Authority Key Identifier: keyid:37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:4c:f2:4a:3a:76:5f:08:1e:84:8c:eb:d9:c8:cd:ef:e9:e1: 82:a1:c1:4f:8c:4a:c9:68:a2:57:53:5b:41:81:fe:0f:ed:56: 1f:bf:c2:0b:84:a3:ef:8c:6f:27:4b:04:fa:48:34:6e:2b:f3: 5c:f8:02:3d:65:70:35:a7:de:70:11:b5:67:77:a9:0c:6e:93: a3:d7:bb:04:f1:3f:25:a5:60:58:39:78:7d:20:c9:6f:9a:b2: ab:cb:23:42:07:00:5e:28:0b:91:b7:93:39:03:ec:1f:71:14: 2a:9d:a0:d1:eb:1e:a7:f9:75:32:c1:b8:2b:f0:d0:4b:5d:13: 88:1e:df:28:4c:aa:19:2a:42:22:00:7e:96:7d:d6:4b:88:63: aa:eb:57:13:52:18:1c:73:95:3d:71:a9:12:c0:d4:fd:3c:d7: de:18:94:63:f6:c9:39:2f:0b:f5:2f:1e:01:03:f8:5d:cf:e1: dc:bb:51:0a:66:f5:c8:c5:91:2b:3d:52:c6:a3:50:83:5f:89: 26:0f:ea:53:1d:6a:51:54:8c:88:d4:fd:7a:d0:e5:5a:8d:9d: 1f:c1:fe:9b:02:4f:63:3a:b2:d5:5d:a6:d8:de:cb:0d:52:8b: 5e:87:1b:9f:4a:1a:d3:03:b5:d7:ca:55:08:d1:5c:48:89:76: 6f:d4:88:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDM3MTI3M0NGRDhDMkM5MDhCNjkxRDZCRUExNzVFOERF ODJCRDQzOUEwHhcNMjYwMzAyMDA0MzUzWhcNMjYwMzA5MDA0MzUzWjAYMRYwFAYD VQQDEw02OWE0ZGQ0YS0zNzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5QVtluiOEZzeEC1bVB5whrPyXzXKWmqa3fZZHSTbTxASNzGnRK9ErRmIQ4yK HEOfdw/2PdBx8QdNHRo+DQ+nlPAPlfq5ffHckF7J4tduWxT1I0TF0Bh7IH7qeSUe YMajjnQFkYBjtM64az9SQ4hz6g0adNcB0iIfmcUoi6iw4tQh5A/mOuouIfxRLQgv StY85ASSkzYMw7hOwss5IQKlmzaDtPXsCt8210yoMiClL0URNcbKSXj30sWN3BVV geYKs7C90+psy61s2hdezlnUN6r0jj9gIatJ6caPUaAG1ROtOSGJfjbPbmY1ZiRZ 5eYbeoVjzjm6FrevlTRL1UDsiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMkNvbzW o4Pd6EqBARC885UBrnFjMB8GA1UdIwQYMBaAFDcSc8/YwskItpHWvqF16N6CvUOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DRUUzRDcxODA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lRaTJrZGEtb1hYbzNvSzlR NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL054Snp6OWpDeVFpMmtkYS1vWFhvM29LOVE1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DRUUzRDcxODA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lR aTJrZGEtb1hYbzNvSzlRNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVEzySjp2XwgehIzr2cjN7+nhgqHBT4xKyWiiV1NbQYH+D+1WH7/CC4Sj74xv J0sE+kg0bivzXPgCPWVwNafecBG1Z3epDG6To9e7BPE/JaVgWDl4fSDJb5qyq8sj QgcAXigLkbeTOQPsH3EUKp2g0esep/l1MsG4K/DQS10TiB7fKEyqGSpCIgB+ln3W S4hjqutXE1IYHHOVPXGpEsDU/TzX3hiUY/bJOS8L9S8eAQP4Xc/h3LtRCmb1yMWR Kz1SxqNQg1+JJg/qUx1qUVSMiNT9etDlWo2dH8H+mwJPYzqy1V2m2N7LDVKLXocb n0oa0wO118pVCNFcSIl2b9SIzg== -----END CERTIFICATE-----Generated at Mon Mar 2 15:20:00 2026 by rpki-client