$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft File: nssirN4JZ6BYN-WPxzHTV-N2N_g.mft (raw, json) Hash identifier: lDmtBCq64cr8QW+Dek+84YsBzLWC3Oy3GC/gzSMmt58= Subject key identifier: F7:40:63:6D:83:C1:AB:98:75:B5:0A:00:0E:50:EA:1F:EB:0F:B1:79 Authority key identifier: 9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 Certificate issuer: /CN=A91C6B27/serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Certificate serial: 0C20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft Manifest number: 0C05 Signing time: Sat 04 Apr 2026 18:38:57 +0000 Manifest this update: Sat 04 Apr 2026 18:38:57 +0000 Manifest next update: Sat 11 Apr 2026 18:38:57 +0000 Files and hashes: 1: nssirN4JZ6BYN-WPxzHTV-N2N_g.crl (hash: tmH2riPPEH2zOpIKLa6593ZItqPXfUi0vdnOxUqCNi8=) 2: E5675F48336E11EA94623E18C4F9AE02.roa (hash: 2xiNwjYW2pyIkz7eTV4qaxFN/iMW7ShcypRgqsGtO2A=) 3: E4BB99E2336E11EA94623E18C4F9AE02.roa (hash: pnBE91n4MbWlPAPg/bpDpFdbvV8uWC8bNNguZIXX26E=) 4: 2B1D3BB2305811EA8D5B6479C4F9AE02.roa (hash: N2Nuak7OaRSEZDR308+upPNTawYHUgYAli3HOQeBT88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3104 (0xc20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6B27, serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Validity Not Before: Apr 4 18:38:57 2026 GMT Not After : Apr 11 18:38:57 2026 GMT Subject: CN=69d15ac1-970d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:44:e7:67:3d:4c:95:38:4c:43:c0:94:99:b1: 29:01:94:26:70:fc:8e:20:3d:e7:bd:1e:2a:94:28: 42:bc:23:de:66:bb:0b:ed:07:00:f9:9e:3a:63:00: ef:55:cc:20:21:f5:32:e2:1f:c4:a5:76:76:69:dc: cb:ca:0d:8d:4b:b9:7a:ca:39:20:fd:3a:c6:06:c1: a5:81:97:2b:3b:13:75:68:fd:5a:b0:d1:0c:ef:23: 6e:e1:0d:ab:35:b8:ff:5b:2c:fe:f2:86:e6:01:7b: 08:99:fc:ea:72:a0:33:de:2a:94:a1:04:ec:56:4b: c1:07:f5:8e:52:ed:5b:f8:76:e8:46:81:26:da:21: 7c:5c:7e:6d:1f:dc:12:d1:49:8a:ec:ee:04:ca:c0: b8:24:f9:ed:7e:b7:c0:b6:3c:8e:55:b8:10:f8:52: 2a:f8:93:95:c7:21:1e:5b:74:de:01:e1:f9:db:e1: f7:d1:46:49:66:12:59:7b:56:c7:ac:81:91:2c:2b: 4d:2a:de:cd:1d:06:cf:ae:eb:fc:23:76:90:24:f6: 14:3a:42:54:17:49:f0:53:87:0e:c3:4b:5a:53:57: d7:e8:aa:aa:f8:4d:95:11:a0:ea:3c:9c:9e:8a:41: 38:53:0f:4f:58:62:22:a4:13:7f:17:ce:66:41:7f: fd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:40:63:6D:83:C1:AB:98:75:B5:0A:00:0E:50:EA:1F:EB:0F:B1:79 X509v3 Authority Key Identifier: keyid:9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:09:f7:5f:03:3a:70:70:bb:87:00:c5:ab:77:a7:a9:6a:f5: 9b:ed:7c:fb:7f:6c:b6:96:36:ea:22:a1:91:63:05:87:ad:ed: c1:09:51:a8:c5:c5:11:a1:6f:ca:76:38:cd:2a:c1:97:77:dd: 80:15:fb:d9:a2:58:26:4d:fa:9a:e6:10:8a:48:7c:bf:54:65: f9:5c:e4:84:e8:eb:a5:f4:f0:36:b8:64:52:81:b0:b1:fc:43: c9:51:d0:34:fb:f8:a7:60:51:20:a6:5b:38:69:ff:25:90:ca: d0:89:3d:eb:72:1c:33:42:69:f2:11:57:a9:b8:db:50:b6:a9: 29:a9:18:be:db:06:56:16:f3:d0:ef:11:02:f9:ea:e4:08:52: 40:c5:59:20:08:e0:3b:ef:a8:bf:7c:09:7d:aa:87:93:f7:b7: d4:02:be:e6:40:14:5d:d1:1b:a4:cd:4c:10:d5:dd:07:32:17: e7:68:0a:89:13:03:cd:eb:9a:97:e7:9e:9a:45:38:03:c4:0d: b3:ac:4f:21:15:ef:2c:03:d0:7c:56:89:4d:6c:02:6b:a2:e9: 4c:8c:9d:c9:94:8d:06:b0:a2:fe:6a:d6:10:7e:36:9d:06:38: d4:13:1c:25:37:ab:c6:b7:1c:60:1c:1c:03:cf:8f:71:57:0a: e3:fe:fd:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCMjcxMTAvBgNVBAUTKDlFQ0IyMkFDREUwOTY3QTA1ODM3RTU4RkM3MzFEMzU3 RTM3NjM3RjgwHhcNMjYwNDA0MTgzODU3WhcNMjYwNDExMTgzODU3WjAYMRYwFAYD VQQDEw02OWQxNWFjMS05NzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0TnZz1MlThMQ8CUmbEpAZQmcPyOID3nvR4qlChCvCPeZrsL7QcA+Z46YwDv VcwgIfUy4h/EpXZ2adzLyg2NS7l6yjkg/TrGBsGlgZcrOxN1aP1asNEM7yNu4Q2r Nbj/Wyz+8obmAXsImfzqcqAz3iqUoQTsVkvBB/WOUu1b+HboRoEm2iF8XH5tH9wS 0UmK7O4EysC4JPntfrfAtjyOVbgQ+FIq+JOVxyEeW3TeAeH52+H30UZJZhJZe1bH rIGRLCtNKt7NHQbPruv8I3aQJPYUOkJUF0nwU4cOw0taU1fX6Kqq+E2VEaDqPJye ikE4Uw9PWGIipBN/F85mQX/9awIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPdAY22D wauYdbUKAA5Q6h/rD7F5MB8GA1UdIwQYMBaAFJ7LIqzeCWegWDflj8cx01fjdjf4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkIyNy84MkJGMkJGNDMw NTQxMUVBQUZDOTExNkVDNEY5QUUwMi9uc3Npck40Slo2QllOLVdQeHpIVFYtTjJO X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25zc2lyTjRKWjZCWU4tV1B4ekhUVi1OMk5fZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkIyNy84MkJGMkJGNDMwNTQxMUVBQUZDOTExNkVDNEY5QUUwMi9uc3Npck40Slo2 QllOLVdQeHpIVFYtTjJOX2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcgn3XwM6cHC7hwDFq3enqWr1m+18+39stpY26iKhkWMFh63twQlRqMXFEaFv ynY4zSrBl3fdgBX72aJYJk36muYQikh8v1Rl+VzkhOjrpfTwNrhkUoGwsfxDyVHQ NPv4p2BRIKZbOGn/JZDK0Ik963IcM0Jp8hFXqbjbULapKakYvtsGVhbz0O8RAvnq 5AhSQMVZIAjgO++ov3wJfaqHk/e31AK+5kAUXdEbpM1MENXdBzIX52gKiRMDzeua l+eemkU4A8QNs6xPIRXvLAPQfFaJTWwCa6LpTIydyZSNBrCi/mrWEH42nQY41BMc JTerxrccYBwcA8+PcVcK4/79jw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:51 2026 by rpki-client