$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft File: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft (raw, json) Hash identifier: v9fTx7hswLk5Lz8S9Z4sy4ZpoaiVsVMetph7fK8d7bM= Subject key identifier: FB:DC:B1:91:68:C8:1F:FE:5A:5F:1B:74:D2:06:D7:FD:20:F1:D5:9A Authority key identifier: 34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B Certificate issuer: /CN=A914C725/serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft Manifest number: 07 Signing time: Mon 02 Mar 2026 16:25:56 +0000 Manifest this update: Mon 02 Mar 2026 16:25:56 +0000 Manifest next update: Mon 09 Mar 2026 16:25:56 +0000 Files and hashes: 1: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl (hash: y+A+2Be1k9Dx4AdZay9iCjoadCSsl/mTBRZvO3+7pSs=) 2: 2D89A3B4139A11F182E65A043E3D8C67.roa (hash: WzPoHRZ+sD0Tq4NDMGpvPyaJehMoEm7aBtLHe8LWFq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:25:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C725, serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B Validity Not Before: Mar 2 16:25:56 2026 GMT Not After : Mar 9 16:25:56 2026 GMT Subject: CN=69a5ba14-0f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3e:39:29:b6:24:7f:c6:63:6b:9a:a3:98:1d: e5:e4:a3:24:18:77:39:a7:4b:3d:a5:3d:b7:fa:f3: 92:df:a9:e8:39:c9:62:e4:3d:bb:3f:44:aa:df:aa: d9:0a:32:af:1e:8d:23:67:39:b8:ac:1e:02:0e:60: b3:43:e8:44:16:c1:e9:f6:7b:26:c9:a6:f7:0c:f7: 0b:ed:b9:87:63:e5:4e:c0:16:2f:11:ca:96:96:4b: 2a:48:42:b5:08:6f:86:10:fb:17:3d:82:5e:01:ab: e2:3a:73:f1:aa:cb:68:d4:4d:91:ad:85:85:45:eb: 3d:f3:be:3f:5a:1f:66:b2:01:3d:d3:2e:40:e1:01: 83:23:68:07:ce:75:90:fb:25:1e:5d:b4:fa:a3:d3: c1:d0:a5:f7:a9:e3:6e:14:d5:f6:6f:9d:93:70:2c: ac:4e:9a:46:61:33:ba:1c:66:85:ad:3a:2e:1d:8a: 81:b5:1e:98:92:62:42:f1:3e:9e:9f:bf:f4:6c:16: 3c:f3:34:b3:de:ee:97:46:8a:c9:a4:0b:24:2c:a4: 3d:81:47:94:b8:49:6d:da:5e:fd:b5:cc:48:bb:dc: f8:df:13:11:18:4f:21:01:12:79:b8:85:a2:eb:26: 6c:67:cf:0f:62:43:3a:9d:b4:bc:4a:88:a1:47:f0: b5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DC:B1:91:68:C8:1F:FE:5A:5F:1B:74:D2:06:D7:FD:20:F1:D5:9A X509v3 Authority Key Identifier: keyid:34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:5b:cc:1e:c5:9b:3e:9a:ef:15:94:9c:f6:e1:4e:ed:6e:76: e7:d8:9d:c3:0a:6a:77:d5:7a:49:a3:09:61:58:84:47:82:47: 3c:5b:fe:4d:7e:e8:8d:37:e7:8d:eb:33:9f:e1:bc:dd:71:12: f0:0e:08:b2:04:3c:69:41:46:7d:f6:0b:2b:03:b1:4a:7f:cf: 46:5b:ad:da:c8:f4:d5:d3:29:fa:e5:a6:94:d5:1b:2c:f9:77: 53:bd:69:85:f9:c8:ef:6d:96:4f:17:b6:46:c9:8e:5f:ed:3e: 47:a2:01:51:37:d4:a5:bb:b2:a3:83:f7:d9:3e:3d:e1:56:e9: 2d:b2:61:dc:9b:4c:9c:63:88:94:28:da:ff:d1:e5:59:fe:9e: 78:fb:37:c8:78:a7:8f:b6:90:ce:90:f3:46:30:23:6b:66:a0: 0a:7b:99:ff:a4:5c:b8:48:66:78:84:12:a7:fe:0d:bd:9d:af: f0:50:2d:81:7f:8b:e0:0a:52:ae:35:31:af:60:ee:43:a3:06: ec:e8:0a:58:25:96:50:d8:ee:56:95:67:f3:5d:b5:6b:88:f1: 77:4f:3a:de:7d:9c:f4:44:77:ce:dd:ff:c4:93:d3:40:a1:31: a6:56:ac:20:fd:d9:6b:dc:b9:04:04:20:51:63:67:b8:da:dc: e6:9d:cc:4d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QzcyNTExMC8GA1UEBRMoMzQ4MThCQ0YwRDg0RTE1OTlCRDk5ODE3OTk1RTVFQzM5 QjFCMDE0QjAeFw0yNjAzMDIxNjI1NTZaFw0yNjAzMDkxNjI1NTZaMBgxFjAUBgNV BAMTDTY5YTViYTE0LTBmMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2PjkptiR/xmNrmqOYHeXkoyQYdzmnSz2lPbf685Lfqeg5yWLkPbs/RKrfqtkK Mq8ejSNnObisHgIOYLND6EQWwen2eybJpvcM9wvtuYdj5U7AFi8RypaWSypIQrUI b4YQ+xc9gl4Bq+I6c/Gqy2jUTZGthYVF6z3zvj9aH2ayAT3TLkDhAYMjaAfOdZD7 JR5dtPqj08HQpfep424U1fZvnZNwLKxOmkZhM7ocZoWtOi4dioG1HpiSYkLxPp6f v/RsFjzzNLPe7pdGismkCyQspD2BR5S4SW3aXv21zEi73PjfExEYTyEBEnm4haLr Jmxnzw9iQzqdtLxKiKFH8LWrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+9yxkWjI H/5aXxt00gbX/SDx1ZowHwYDVR0jBBgwFoAUNIGLzw2E4Vmb2ZgXmV5ew5sbAUsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDNzI1L0FDNkNEMTVDMTM5 OTExRjE5QzI0NzBCMUIzRUU1MjhFL05JR0x6dzJFNFZtYjJaZ1htVjVldzVzYkFV cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTklHTHp3MkU0Vm1iMlpnWG1WNWV3NXNiQVVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD NzI1L0FDNkNEMTVDMTM5OTExRjE5QzI0NzBCMUIzRUU1MjhFL05JR0x6dzJFNFZt YjJaZ1htVjVldzVzYkFVcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCzW8wexZs+mu8VlJz24U7tbnbn2J3DCmp31XpJowlhWIRHgkc8W/5NfuiNN+eN 6zOf4bzdcRLwDgiyBDxpQUZ99gsrA7FKf89GW63ayPTV0yn65aaU1Rss+XdTvWmF +cjvbZZPF7ZGyY5f7T5HogFRN9Slu7Kjg/fZPj3hVuktsmHcm0ycY4iUKNr/0eVZ /p54+zfIeKePtpDOkPNGMCNrZqAKe5n/pFy4SGZ4hBKn/g29na/wUC2Bf4vgClKu NTGvYO5Dowbs6ApYJZZQ2O5WlWfzXbVriPF3TzrefZz0RHfO3f/Ek9NAoTGmVqwg /dlr3LkEBCBRY2e42tzmncxN -----END CERTIFICATE-----Generated at Wed Mar 4 08:16:09 2026 by rpki-client