$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft File: nuqkUJudasqRzaQCHxBekhA363Q.mft (raw, json) Hash identifier: pyaecLkiyynVzedZktk0hITS7ExE5WA5GDGgN8T70hQ= Subject key identifier: 16:A6:75:44:0D:5B:DE:5C:C2:F1:60:28:79:EE:DB:C9:BF:B5:2D:C5 Authority key identifier: 9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74 Certificate issuer: /CN=A91F2BA6/serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74 Certificate serial: 0A3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft Manifest number: 0A2D Signing time: Sun 01 Mar 2026 23:11:21 +0000 Manifest this update: Sun 01 Mar 2026 23:11:21 +0000 Manifest next update: Sun 08 Mar 2026 23:11:21 +0000 Files and hashes: 1: nuqkUJudasqRzaQCHxBekhA363Q.crl (hash: hgy/0EJE6QRI5Y8dqH977ni4jjUdofaataV1hZ5/05o=) 2: 5A7E13CA8C2B11EA90152018C4F9AE02.roa (hash: hntqZR06bEi96YIe77PYhaN+w+8+mUWcyue+uEJX0V4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2620 (0xa3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2BA6, serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74 Validity Not Before: Mar 1 23:11:21 2026 GMT Not After : Mar 8 23:11:21 2026 GMT Subject: CN=69a4c799-8337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b3:c3:6e:c3:fd:0d:d7:c4:90:0c:9f:5a:5f: f4:cd:4a:8c:74:10:05:f2:ac:57:be:ab:f6:62:48: 40:24:06:dc:96:67:c1:5a:06:92:0f:75:39:aa:71: a1:56:86:97:f1:e4:7e:01:3a:7c:e7:53:24:ef:c7: 2e:e3:65:1c:f2:a2:06:a1:1f:23:1e:b3:60:e1:06: 58:2b:d8:01:6d:f4:d4:5d:c1:dc:cb:cd:a6:31:6c: 96:7b:95:a8:3a:78:64:b6:7f:34:8e:f0:94:2c:21: 2b:f9:19:1d:24:c8:da:16:9d:ab:55:5d:b6:eb:22: 9a:60:89:df:53:38:9f:01:ac:e5:72:f3:bc:ce:46: 4c:29:76:e2:7a:36:2a:9c:7d:3a:bf:48:4c:04:3e: e1:36:15:d5:ba:73:ef:0e:ef:42:23:60:29:04:0e: 1d:28:24:85:08:9d:39:82:6d:be:2b:c4:90:c0:17: 50:44:06:86:52:80:1c:94:ba:4e:7b:0c:04:af:43: 0c:a8:a2:be:e4:54:aa:a9:07:65:f2:ee:30:41:0d: 65:0f:e4:9d:52:13:82:3a:3e:5c:7b:39:b0:19:27: 3c:92:c6:2a:91:83:8a:fc:51:c4:d0:fe:e6:59:58: 89:a0:63:75:af:40:88:c6:cc:3c:6e:26:bb:b7:eb: bc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A6:75:44:0D:5B:DE:5C:C2:F1:60:28:79:EE:DB:C9:BF:B5:2D:C5 X509v3 Authority Key Identifier: keyid:9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ac:20:8c:e7:7b:77:07:61:cd:cc:a4:79:7a:19:14:92:cc: 43:eb:1e:94:27:0a:2b:ec:0f:9d:1c:c7:a1:c5:ab:2b:02:e0: 51:89:74:43:2c:b9:4b:d5:54:77:be:d6:f6:40:ff:b6:15:bc: 88:38:53:1f:c5:7c:a2:51:41:75:47:13:23:16:f7:fd:4a:3d: 4e:56:a5:44:8c:cb:43:db:8b:6e:84:0c:93:fd:0f:f9:c8:b0: ec:d3:5a:b8:9a:27:7e:95:d5:b1:55:0a:b9:f0:f9:d4:1d:36: da:40:53:6e:9a:24:99:6a:24:4d:97:8f:f9:67:78:aa:0e:cb: 7b:05:7b:2b:9e:e4:76:b7:f6:ba:f7:71:0b:34:cc:d0:ec:49: 61:74:65:09:3a:80:d2:b8:b2:06:44:58:2b:b0:b6:a8:4e:20: de:24:32:3a:c3:8e:b4:be:24:97:79:04:ad:14:6e:dd:bf:f0: c6:f9:f7:7e:ca:f6:c0:eb:1b:75:48:02:b5:9c:a9:ae:4c:94: 02:48:bd:83:56:f3:ad:b0:5c:97:8b:2e:63:c4:6b:f2:a4:61: ae:95:4f:70:9a:a2:8e:6d:bc:97:1d:d1:37:7e:f7:df:ea:fd: 8e:d1:e9:65:6b:cb:4e:3f:ac:5a:2c:2d:48:66:1a:25:5b:a1: e3:82:aa:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCQTYxMTAvBgNVBAUTKDlFRUFBNDUwOUI5RDZBQ0E5MUNEQTQwMjFGMTA1RTky MTAzN0VCNzQwHhcNMjYwMzAxMjMxMTIxWhcNMjYwMzA4MjMxMTIxWjAYMRYwFAYD VQQDEw02OWE0Yzc5OS04MzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbPDbsP9DdfEkAyfWl/0zUqMdBAF8qxXvqv2YkhAJAbclmfBWgaSD3U5qnGh VoaX8eR+ATp851Mk78cu42Uc8qIGoR8jHrNg4QZYK9gBbfTUXcHcy82mMWyWe5Wo Onhktn80jvCULCEr+RkdJMjaFp2rVV226yKaYInfUzifAazlcvO8zkZMKXbiejYq nH06v0hMBD7hNhXVunPvDu9CI2ApBA4dKCSFCJ05gm2+K8SQwBdQRAaGUoAclLpO ewwEr0MMqKK+5FSqqQdl8u4wQQ1lD+SdUhOCOj5cezmwGSc8ksYqkYOK/FHE0P7m WViJoGN1r0CIxsw8bia7t+u8KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBamdUQN W95cwvFgKHnu28m/tS3FMB8GA1UdIwQYMBaAFJ7qpFCbnWrKkc2kAh8QXpIQN+t0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkJBNi84NERENzlFMDhC NzYxMUVBOTEwNTA3NDNDNEY5QUUwMi9udXFrVUp1ZGFzcVJ6YVFDSHhCZWtoQTM2 M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL251cWtVSnVkYXNxUnphUUNIeEJla2hBMzYzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkJBNi84NERENzlFMDhCNzYxMUVBOTEwNTA3NDNDNEY5QUUwMi9udXFrVUp1ZGFz cVJ6YVFDSHhCZWtoQTM2M1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKqwgjOd7dwdhzcykeXoZFJLMQ+selCcKK+wPnRzHocWrKwLgUYl0Qyy5S9VU d77W9kD/thW8iDhTH8V8olFBdUcTIxb3/Uo9TlalRIzLQ9uLboQMk/0P+ciw7NNa uJonfpXVsVUKufD51B022kBTbpokmWokTZeP+Wd4qg7LewV7K57kdrf2uvdxCzTM 0OxJYXRlCTqA0riyBkRYK7C2qE4g3iQyOsOOtL4kl3kErRRu3b/wxvn3fsr2wOsb dUgCtZyprkyUAki9g1bzrbBcl4suY8Rr8qRhrpVPcJqijm28lx3RN3733+r9jtHp ZWvLTj+sWiwtSGYaJVuh44Kq0g== -----END CERTIFICATE-----Generated at Mon Mar 2 13:54:08 2026 by rpki-client