$ rpki-client -vvf rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft File: pi_NZFSmighl9rlcwOh3RJ7z76k.mft (raw, json) Hash identifier: TBR5iKyeSg8uNQ1gPexD8XyR9Hyd+wkThAj0UbXswgY= Subject key identifier: 3A:26:EB:77:07:9A:3C:51:AB:2C:33:1E:EC:7E:00:2B:25:13:5B:62 Authority key identifier: A6:2F:CD:64:54:A6:8A:08:65:F6:B9:5C:C0:E8:77:44:9E:F3:EF:A9 Certificate issuer: /CN=A911BA76/serialNumber=A62FCD6454A68A0865F6B95CC0E877449EF3EFA9 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft Manifest number: 59 Signing time: Sun 05 Apr 2026 07:28:56 +0000 Manifest this update: Sun 05 Apr 2026 07:28:56 +0000 Manifest next update: Sun 12 Apr 2026 07:28:56 +0000 Files and hashes: 1: pi_NZFSmighl9rlcwOh3RJ7z76k.crl (hash: xfREL8xmYN6gppAMRf1ycZn/bnXjQp0ZjfCyBmlNASc=) 2: 82CDD7C4B0C011F09232CD7BC4F9AE02.roa (hash: KXtLMxhNV80b7UVLzNEenAj/lw44i+8q+VpDj2RXMEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.crl rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:28:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BA76, serialNumber=A62FCD6454A68A0865F6B95CC0E877449EF3EFA9 Validity Not Before: Apr 5 07:28:56 2026 GMT Not After : Apr 12 07:28:56 2026 GMT Subject: CN=69d20f38-462f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c0:8b:37:48:ce:65:1b:bd:bc:14:bc:28:4d: 0d:d7:16:f3:2a:80:fd:96:97:e7:b7:de:b4:44:dc: 58:96:10:f1:bb:c5:19:c4:e7:eb:78:9c:40:be:cf: 81:91:f5:bc:42:f9:b3:df:23:38:ef:39:c9:96:a4: 2e:ee:53:27:85:ca:87:48:11:bd:97:21:3f:d2:61: 97:ac:df:8c:bc:2a:0b:95:53:7f:88:01:34:9d:47: 14:9c:96:2f:92:ea:88:3f:2d:50:42:2c:71:79:06: ed:0d:1c:25:24:4b:1d:1d:ac:d5:8b:f0:cc:5d:b5: 37:93:3f:e7:1b:10:cb:57:5a:29:f8:c6:6b:51:12: e2:ac:2f:98:00:eb:be:d2:0c:45:dd:d4:73:7d:e3: 55:68:9c:76:3e:a1:45:a6:07:c0:56:c0:20:c4:a5: e5:26:63:b6:94:16:b5:7f:d4:55:9b:55:3f:15:6c: 2f:4c:be:68:78:39:be:9f:f0:f5:26:aa:1c:2f:be: 2c:ff:c7:32:f2:6e:09:2d:25:50:7b:70:be:bf:9a: 4d:89:c2:d3:f9:cd:94:f7:46:a6:7a:56:1c:0b:a5: a5:71:37:85:d1:8f:bf:67:0c:16:4c:eb:f4:64:fc: 32:ef:39:5a:79:ab:fe:fd:cb:56:ec:3d:9f:a0:1f: bf:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:26:EB:77:07:9A:3C:51:AB:2C:33:1E:EC:7E:00:2B:25:13:5B:62 X509v3 Authority Key Identifier: keyid:A6:2F:CD:64:54:A6:8A:08:65:F6:B9:5C:C0:E8:77:44:9E:F3:EF:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi_NZFSmighl9rlcwOh3RJ7z76k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BA76/087CC7A0B0C011F0B69EA256C4F9AE02/pi_NZFSmighl9rlcwOh3RJ7z76k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:7c:3d:d8:94:ba:14:6b:74:6b:23:c4:2c:26:5a:85:b6:66: 9c:f3:2d:54:7f:c6:15:ed:16:1f:f3:f3:45:0d:e6:d1:68:f4: e9:96:e6:49:db:57:12:a4:a2:8b:00:3b:d3:8c:97:80:ad:66: 5a:5a:53:a0:1b:e6:f0:f4:4c:57:58:74:19:a9:a2:92:85:49: bf:f9:dc:93:5d:33:0e:ad:68:b7:6e:56:2e:4f:da:91:b3:a6: 1e:0b:23:6c:ec:22:73:57:d1:d9:77:33:7a:94:ff:76:db:14: 96:c0:08:77:73:f2:e1:0c:da:60:dd:46:c6:74:dd:bf:f6:c5: dc:1f:20:62:e4:fc:69:f7:aa:49:8b:6c:54:43:74:07:98:fb: ed:3d:e8:d1:26:57:ac:27:9a:f9:8f:0f:7c:2e:f9:c2:41:45: d2:11:f3:e5:e5:79:6d:10:57:5f:71:2b:9b:80:b5:09:39:d0: 33:fb:77:79:71:01:03:2f:f3:c5:48:b5:51:47:22:91:d1:2a: 81:fa:97:a1:e2:cb:10:8e:f4:3b:14:8e:61:0a:aa:5e:7c:2e: 58:a1:a7:58:4b:bd:5d:fd:5f:d4:5f:d9:32:c7:f3:85:35:ef: 54:7e:3e:51:98:e1:82:53:e6:d0:19:91:0f:f3:fb:49:e1:64: 16:e5:a0:9d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkE3NjExMC8GA1UEBRMoQTYyRkNENjQ1NEE2OEEwODY1RjZCOTVDQzBFODc3NDQ5 RUYzRUZBOTAeFw0yNjA0MDUwNzI4NTZaFw0yNjA0MTIwNzI4NTZaMBgxFjAUBgNV BAMTDTY5ZDIwZjM4LTQ2MmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCGwIs3SM5lG728FLwoTQ3XFvMqgP2Wl+e33rRE3FiWEPG7xRnE5+t4nEC+z4GR 9bxC+bPfIzjvOcmWpC7uUyeFyodIEb2XIT/SYZes34y8KguVU3+IATSdRxScli+S 6og/LVBCLHF5Bu0NHCUkSx0drNWL8MxdtTeTP+cbEMtXWin4xmtREuKsL5gA677S DEXd1HN941VonHY+oUWmB8BWwCDEpeUmY7aUFrV/1FWbVT8VbC9Mvmh4Ob6f8PUm qhwvviz/xzLybgktJVB7cL6/mk2JwtP5zZT3RqZ6VhwLpaVxN4XRj79nDBZM6/Rk /DLvOVp5q/79y1bsPZ+gH78bAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOibrdwea PFGrLDMe7H4AKyUTW2IwHwYDVR0jBBgwFoAUpi/NZFSmighl9rlcwOh3RJ7z76kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCQTc2LzA4N0NDN0EwQjBD MDExRjBCNjlFQTI1NkM0RjlBRTAyL3BpX05aRlNtaWdobDlybGN3T2gzUko3ejc2 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGlfTlpGU21pZ2hsOXJsY3dPaDNSSjd6NzZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC QTc2LzA4N0NDN0EwQjBDMDExRjBCNjlFQTI1NkM0RjlBRTAyL3BpX05aRlNtaWdo bDlybGN3T2gzUko3ejc2ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBDfD3YlLoUa3RrI8QsJlqFtmac8y1Uf8YV7RYf8/NFDebRaPTpluZJ21cSpKKL ADvTjJeArWZaWlOgG+bw9ExXWHQZqaKShUm/+dyTXTMOrWi3blYuT9qRs6YeCyNs 7CJzV9HZdzN6lP922xSWwAh3c/LhDNpg3UbGdN2/9sXcHyBi5Pxp96pJi2xUQ3QH mPvtPejRJlesJ5r5jw98LvnCQUXSEfPl5XltEFdfcSubgLUJOdAz+3d5cQEDL/PF SLVRRyKR0SqB+peh4ssQjvQ7FI5hCqpefC5YoadYS71d/V/UX9kyx/OFNe9Ufj5R mOGCU+bQGZEP8/tJ4WQW5aCd -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:12 2026 by rpki-client