$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json) Hash identifier: ejzrTq89zeogu3Wa2Gk3cHFx0d+BK7MJ6qr1h9VDjIQ= Subject key identifier: 16:F2:85:D7:8A:DA:26:24:9E:71:99:37:45:06:82:9D:62:E6:AD:AF Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft Manifest number: 01CD Signing time: Mon 02 Mar 2026 03:09:36 +0000 Manifest this update: Mon 02 Mar 2026 03:09:34 +0000 Manifest next update: Mon 09 Mar 2026 03:09:34 +0000 Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: mm/oPillM8/nMXk1CPKzFsehjzHmiwj929LI4kV/7AI=) 2: 36020660DD2411EF9F4FB925C4F9AE02.roa (hash: i1Pu+9UVIaU6wY+KGS3N0zfxP0rOfpHG8M6EeBicwr4=) 3: 0B421064DD2411EFA5DECA6CC4F9AE02.roa (hash: +S1F0zYbzMvWkIw6OtTYzr4kRvSGMZIIi7dYMQVKPYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:09:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD, serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: Mar 2 03:09:34 2026 GMT Not After : Mar 9 03:09:34 2026 GMT Subject: CN=69a4ff70-e6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a0:e7:cd:ed:9d:5a:1c:3d:25:c2:3e:b8:25: 7b:d7:cd:ee:0c:23:2f:00:eb:9e:46:67:96:88:15: 3b:89:72:21:b9:1e:01:50:e6:02:09:9b:7f:ec:cd: 8b:42:e4:a7:29:7f:91:40:69:93:45:5d:60:9f:3c: 83:b3:02:94:58:e8:cf:91:9d:4f:c7:3f:17:6c:34: d1:ad:e6:7d:0c:c8:9e:f2:7f:f7:5e:7b:8c:48:71: d5:dd:34:67:cc:3b:e6:bb:6a:0d:b3:fb:8c:c9:c3: 1d:1e:fe:ab:50:77:4e:8f:b4:93:f7:29:08:1b:00: 0e:41:0c:8c:ad:a6:e1:4a:76:74:50:d3:f5:aa:7c: 60:b3:09:50:c7:58:76:54:3c:63:d7:76:14:68:67: 58:3a:33:8c:1e:6b:54:3c:ac:34:90:7e:d9:ef:66: f8:d5:7c:1c:eb:99:2a:13:8f:e1:d3:92:7f:55:b0: df:cd:23:8e:16:47:cf:9b:cc:35:0f:68:3e:6d:83: d0:a1:8e:10:6f:b7:4f:b2:fa:0f:81:fe:89:c3:87: c9:37:d8:04:b4:17:a4:76:be:62:3c:80:b4:bb:1a: c9:e8:22:1c:3b:a1:7a:3c:0e:c6:15:fe:8a:d6:a8: af:17:45:8d:fe:0b:4a:08:71:66:c2:ae:0a:b2:26: 20:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F2:85:D7:8A:DA:26:24:9E:71:99:37:45:06:82:9D:62:E6:AD:AF X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:11:9d:e4:0c:f6:51:62:80:fd:48:0a:90:6a:8f:20:a2:d4: c3:84:cb:48:88:5d:0d:c2:3a:47:28:77:0b:e8:74:79:80:73: eb:79:3b:b2:12:7b:59:66:08:a3:ff:8b:56:41:2d:9a:78:71: 36:7e:3d:34:14:25:c5:bf:1b:41:e7:96:bc:5c:5f:ba:81:3a: 6a:fa:85:92:44:7a:8c:ce:02:70:0d:18:a3:c1:44:cd:4c:a2: 9d:f2:d2:f6:e2:ae:16:13:18:94:2d:f5:b6:a9:a7:92:04:03: 9a:82:e0:50:ed:f1:60:0c:32:86:97:f1:60:74:8c:78:67:98: 19:58:e2:b6:d9:24:e5:c3:dd:70:1f:c7:ea:ff:a5:79:eb:b2: 03:b1:0b:0a:c3:df:31:47:c6:b3:3e:97:30:58:df:f7:e2:49: 79:19:77:7d:c0:fd:9c:48:b6:ec:c1:eb:56:e4:59:1d:5a:3f: e5:7c:56:07:50:f9:62:6b:58:c3:89:96:8a:7e:c0:96:72:03: 35:34:07:01:00:05:f6:a3:15:2e:1c:87:2b:54:67:1f:92:15: ba:33:df:82:d5:cf:94:b3:7a:4e:e9:c0:71:f9:f9:bd:42:cb: 5f:f7:3a:7e:2e:40:df:81:ff:02:50:e8:27:9c:21:60:a7:06: 3b:cb:22:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjYwMzAyMDMwOTM0WhcNMjYwMzA5MDMwOTM0WjAYMRYwFAYD VQQDEw02OWE0ZmY3MC1lNmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KDnze2dWhw9JcI+uCV7183uDCMvAOueRmeWiBU7iXIhuR4BUOYCCZt/7M2L QuSnKX+RQGmTRV1gnzyDswKUWOjPkZ1Pxz8XbDTRreZ9DMie8n/3XnuMSHHV3TRn zDvmu2oNs/uMycMdHv6rUHdOj7ST9ykIGwAOQQyMrabhSnZ0UNP1qnxgswlQx1h2 VDxj13YUaGdYOjOMHmtUPKw0kH7Z72b41Xwc65kqE4/h05J/VbDfzSOOFkfPm8w1 D2g+bYPQoY4Qb7dPsvoPgf6Jw4fJN9gEtBekdr5iPIC0uxrJ6CIcO6F6PA7GFf6K 1qivF0WN/gtKCHFmwq4KsiYgmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBbyhdeK 2iYknnGZN0UGgp1i5q2vMB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzhGRC9BNUE2RjM3QTYxRjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFj NEZWYVlBc2hlU0RybmhyRTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjBGd5Az2UWKA/UgKkGqPIKLUw4TLSIhdDcI6Ryh3C+h0eYBz63k7shJ7WWYI o/+LVkEtmnhxNn49NBQlxb8bQeeWvFxfuoE6avqFkkR6jM4CcA0Yo8FEzUyinfLS 9uKuFhMYlC31tqmnkgQDmoLgUO3xYAwyhpfxYHSMeGeYGVjittkk5cPdcB/H6v+l eeuyA7ELCsPfMUfGsz6XMFjf9+JJeRl3fcD9nEi27MHrVuRZHVo/5XxWB1D5YmtY w4mWin7AlnIDNTQHAQAF9qMVLhyHK1RnH5IVujPfgtXPlLN6TunAcfn5vULLX/c6 fi5A34H/AlDoJ5whYKcGO8sixQ== -----END CERTIFICATE-----Generated at Mon Mar 2 06:23:37 2026 by rpki-client