$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft File: nL4Q18HdRLflkLUHi_xPhs-Nslo.mft (raw, json) Hash identifier: KRaXMZPbvNmx0lgNw0zAGFHWShMeHkJ5tnsaUkxMPgw= Subject key identifier: 2B:7B:3E:2A:95:AD:A1:9E:80:10:71:72:F0:53:E9:4F:7B:BE:C7:B7 Authority key identifier: 9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A Certificate issuer: /CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft Manifest number: 01B7 Signing time: Tue 03 Mar 2026 03:39:39 +0000 Manifest this update: Tue 03 Mar 2026 03:39:38 +0000 Manifest next update: Tue 10 Mar 2026 03:39:38 +0000 Files and hashes: 1: nL4Q18HdRLflkLUHi_xPhs-Nslo.crl (hash: O8DzAl3aUFUxj+A/qd4ldvUNIflW8zrBsx5X5Uwoo+o=) 2: 43C5BAA282F411EE99AAAB12C4F9AE02.roa (hash: a1wzRh8XwhAFQd8Ja2EntSNyYcs9nQlwwooXA0U/t20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 03:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BCAC, serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Validity Not Before: Mar 3 03:39:38 2026 GMT Not After : Mar 10 03:39:38 2026 GMT Subject: CN=69a657fa-ae8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b6:1e:0d:77:da:35:73:14:57:9e:ec:79:97: 97:55:69:ca:47:0d:40:8c:0b:4a:45:25:8f:41:d4: f3:43:13:51:8b:e8:97:e1:8f:48:b1:09:e8:01:f1: 1f:9b:29:b9:db:e2:28:9d:d6:72:8f:aa:c6:49:50: 07:93:15:ca:1f:20:bd:d5:28:fc:44:b3:e1:d2:bf: 6c:9f:41:e4:fe:12:7b:6e:81:ed:7b:48:09:25:36: 1c:f6:07:70:77:a5:18:48:d4:f5:c2:3b:d6:23:08: 38:37:9c:10:7e:f2:eb:b2:d7:59:27:fc:b2:27:bd: fb:6c:9c:5c:cc:03:70:43:70:5a:44:ec:54:e2:44: 1e:da:e8:3d:6c:46:12:cc:18:fe:d7:af:da:e2:5c: b7:49:e8:87:77:ae:9d:c4:84:be:80:3a:6c:33:c7: b9:85:75:67:71:37:50:92:7c:57:cd:b2:8d:2b:1d: f2:07:53:ce:61:5e:5c:24:cf:6c:99:62:6e:f0:48: 4d:61:0e:22:51:42:7b:33:0d:ee:23:ba:2b:c9:74: 05:ea:03:2b:ec:0e:40:7d:87:99:56:1a:3e:03:6b: c0:42:e4:d9:53:f9:c2:ca:f5:16:51:e0:cf:18:a2: ba:55:f6:ee:ae:10:97:64:96:26:b4:29:b1:58:ab: 6f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7B:3E:2A:95:AD:A1:9E:80:10:71:72:F0:53:E9:4F:7B:BE:C7:B7 X509v3 Authority Key Identifier: keyid:9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:d6:7b:84:da:1c:91:5f:49:8d:d1:2b:4b:ee:11:b4:bc:91: 0e:96:ed:37:d0:db:7f:df:82:3b:29:9f:b9:70:27:d8:d2:de: 80:68:7a:e3:ef:32:24:ab:0e:b6:16:f2:46:1e:6b:0d:1d:09: 03:e4:50:e1:72:28:0e:eb:93:96:c3:c0:65:bd:99:75:ae:fc: 81:3f:9f:8e:74:cf:16:b2:94:2c:57:35:d8:ac:0a:31:b0:78: fc:c6:45:48:54:fe:44:8b:16:5b:41:d7:22:9e:1c:2f:37:a5: 01:0c:fe:ff:66:8b:43:7e:2d:ef:58:d2:70:01:62:9a:0d:f4: 99:d8:32:4d:52:b6:2e:52:1c:cc:0e:cd:d1:cf:9b:70:e4:3a: 4f:3b:4e:9c:1f:2d:d2:78:9c:be:ec:05:a6:5c:ef:fb:0f:f5: 5c:13:75:52:82:a0:ad:5b:fe:f2:cd:db:e9:3b:d7:a5:77:28: 48:7e:32:d5:05:ac:28:ef:5d:3a:57:e7:0d:fc:5c:de:2f:76: 64:93:20:ee:93:0c:bc:9f:25:cd:db:8d:2c:b5:82:81:d4:e4: 56:45:4c:a6:20:6a:31:07:42:10:0c:b5:5e:17:12:b1:5f:f9: c1:1a:e2:08:db:b7:43:f4:0d:5d:75:23:9f:71:9c:1f:ba:59: 44:e6:a6:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJDQUMxMTAvBgNVBAUTKDlDQkUxMEQ3QzFERDQ0QjdFNTkwQjUwNzhCRkM0Rjg2 Q0Y4REIyNUEwHhcNMjYwMzAzMDMzOTM4WhcNMjYwMzEwMDMzOTM4WjAYMRYwFAYD VQQDEw02OWE2NTdmYS1hZThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bYeDXfaNXMUV57seZeXVWnKRw1AjAtKRSWPQdTzQxNRi+iX4Y9IsQnoAfEf mym52+IondZyj6rGSVAHkxXKHyC91Sj8RLPh0r9sn0Hk/hJ7boHte0gJJTYc9gdw d6UYSNT1wjvWIwg4N5wQfvLrstdZJ/yyJ737bJxczANwQ3BaROxU4kQe2ug9bEYS zBj+16/a4ly3SeiHd66dxIS+gDpsM8e5hXVncTdQknxXzbKNKx3yB1POYV5cJM9s mWJu8EhNYQ4iUUJ7Mw3uI7oryXQF6gMr7A5AfYeZVho+A2vAQuTZU/nCyvUWUeDP GKK6VfburhCXZJYmtCmxWKtvOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCt7PiqV raGegBBxcvBT6U97vse3MB8GA1UdIwQYMBaAFJy+ENfB3US35ZC1B4v8T4bPjbJa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkNBQy8wMTUyMjU4RTgy RjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJMZmxrTFVIaV94UGhzLU5z bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MNFExOEhkUkxmbGtMVUhpX3hQaHMtTnNsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkNBQy8wMTUyMjU4RTgyRjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJM ZmxrTFVIaV94UGhzLU5zbG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI9Z7hNockV9JjdErS+4RtLyRDpbtN9Dbf9+COymfuXAn2NLegGh64+8yJKsO thbyRh5rDR0JA+RQ4XIoDuuTlsPAZb2Zda78gT+fjnTPFrKULFc12KwKMbB4/MZF SFT+RIsWW0HXIp4cLzelAQz+/2aLQ34t71jScAFimg30mdgyTVK2LlIczA7N0c+b cOQ6TztOnB8t0nicvuwFplzv+w/1XBN1UoKgrVv+8s3b6TvXpXcoSH4y1QWsKO9d OlfnDfxc3i92ZJMg7pMMvJ8lzduNLLWCgdTkVkVMpiBqMQdCEAy1XhcSsV/5wRri CNu3Q/QNXXUjn3GcH7pZROamZw== -----END CERTIFICATE-----Generated at Wed Mar 4 13:58:49 2026 by rpki-client