$ rpki-client -vvf rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft File: nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft (raw, json) Hash identifier: wEGFbHSy37dnXLS4ZsGUi+jBsVOQBqas6TNfoKgFlpM= Subject key identifier: D0:56:17:02:F2:E3:41:B4:4F:5C:02:71:37:EB:1E:73:D3:01:D3:3B Authority key identifier: 9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9 Certificate issuer: /CN=A91529DF/serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft Manifest number: 20 Signing time: Tue 03 Mar 2026 08:32:15 +0000 Manifest this update: Tue 03 Mar 2026 08:32:14 +0000 Manifest next update: Tue 10 Mar 2026 08:32:14 +0000 Files and hashes: 1: nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl (hash: Ax1mtxKvg1MRIQUyPco5tbpOZy1H0LN4gLTQZJUl2oc=) 2: FFB52996ED3C11F08785EF274C6F56BC.roa (hash: OoVBLoUT5miBH3MJ0SxwCQXvStMXH6JblWzdGUt2G6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91529DF, serialNumber=9E6CFAAB94B42B217601E1330A027822B9CA1FB9 Validity Not Before: Mar 3 08:32:14 2026 GMT Not After : Mar 10 08:32:14 2026 GMT Subject: CN=69a69c8e-f489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d7:97:35:c1:6d:ff:62:c1:2b:46:2c:45:a6: 2c:59:21:34:94:aa:89:87:98:b8:3e:77:ff:cf:98: ea:01:a6:86:50:f8:5a:a7:b3:1e:94:40:85:df:26: 2f:b2:be:a2:3d:da:a7:2f:b0:1a:15:de:e2:49:de: 0c:44:d9:5a:fe:ba:0b:7e:3f:c1:fe:54:46:f9:9b: 9b:ef:93:58:01:d0:98:d1:72:c3:41:99:c7:a3:fd: b7:95:0a:29:17:b5:3f:19:a0:75:2e:b7:de:ee:26: 06:ec:83:0d:79:cf:1f:0a:42:6a:d3:cd:b3:51:3f: fb:fb:08:f0:22:87:6b:50:08:ed:e7:9c:d0:8e:a9: 2a:90:79:f3:16:36:bf:e7:dc:21:51:dd:de:1e:50: 29:7b:f2:3e:fa:6c:b7:59:51:8e:e9:74:00:09:b0: b5:25:a3:92:6f:9b:68:ab:f6:40:1f:79:15:01:e8: bc:50:2c:72:a3:00:c5:a2:b9:38:5f:ba:72:20:e1: 56:61:7c:a7:ab:a2:76:93:05:fa:20:f8:1a:b6:44: 55:68:db:49:9d:ac:89:9a:0c:59:84:65:32:09:e5: 5e:df:6b:96:be:eb:ee:ee:b2:9b:90:0d:dd:39:e8: a0:8d:73:b4:0c:89:ee:09:f1:84:ed:32:a2:e4:dc: bd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:56:17:02:F2:E3:41:B4:4F:5C:02:71:37:EB:1E:73:D3:01:D3:3B X509v3 Authority Key Identifier: keyid:9E:6C:FA:AB:94:B4:2B:21:76:01:E1:33:0A:02:78:22:B9:CA:1F:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/E27C93AEED2E11F080C46032476F56BC/nmz6q5S0KyF2AeEzCgJ4IrnKH7k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:7a:57:50:c9:a5:a1:7c:2e:00:05:33:0c:9d:7b:9e:6f:34: 97:1c:0d:02:d7:3a:6f:51:18:29:e8:5e:4b:1a:54:12:ca:72: 7b:c9:39:76:53:1a:cc:0f:19:f8:52:d1:86:59:9a:29:eb:e1: 7d:18:8e:53:93:fd:5b:d9:85:91:e1:ed:19:49:10:86:c5:e5: 43:4e:aa:64:2f:28:65:d4:ba:40:eb:be:9e:0c:0e:a3:a5:e7: 4e:53:cc:ef:16:22:b3:4d:39:c1:6b:78:d4:9d:81:94:11:3a: 99:91:3d:f7:5f:4d:16:06:a7:49:b1:e1:e9:2b:d2:13:c9:84: 5e:ca:31:48:5f:99:ae:29:64:fc:cb:b7:c4:5e:a6:01:1f:7b: 85:41:3c:0b:e4:52:27:04:db:c2:0a:dc:74:99:56:d5:57:2b: f3:d2:8a:d5:4f:d1:75:30:de:0d:6b:ad:8e:81:fd:02:bd:c5: 84:3c:23:6b:c2:ce:89:99:31:0a:9d:82:d9:8d:6b:3e:01:2a: 26:8a:b1:5d:c7:3e:30:53:20:c9:0c:c0:59:7e:6b:17:c4:3a: 2a:b7:c2:b2:6b:24:68:31:a1:fd:d1:4c:53:75:5c:50:1b:f2: 66:de:33:f4:1e:bc:85:0b:02:3e:33:1a:ab:c1:ea:25:86:fb: 16:a1:55:12 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MjlERjExMC8GA1UEBRMoOUU2Q0ZBQUI5NEI0MkIyMTc2MDFFMTMzMEEwMjc4MjJC OUNBMUZCOTAeFw0yNjAzMDMwODMyMTRaFw0yNjAzMTAwODMyMTRaMBgxFjAUBgNV BAMTDTY5YTY5YzhlLWY0ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA15c1wW3/YsErRixFpixZITSUqomHmLg+d//PmOoBpoZQ+Fqnsx6UQIXfJi+y vqI92qcvsBoV3uJJ3gxE2Vr+ugt+P8H+VEb5m5vvk1gB0JjRcsNBmcej/beVCikX tT8ZoHUut97uJgbsgw15zx8KQmrTzbNRP/v7CPAih2tQCO3nnNCOqSqQefMWNr/n 3CFR3d4eUCl78j76bLdZUY7pdAAJsLUlo5Jvm2ir9kAfeRUB6LxQLHKjAMWiuThf unIg4VZhfKeronaTBfog+Bq2RFVo20mdrImaDFmEZTIJ5V7fa5a+6+7uspuQDd05 6KCNc7QMie4J8YTtMqLk3L0pAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0FYXAvLj QbRPXAJxN+sec9MB0zswHwYDVR0jBBgwFoAUnmz6q5S0KyF2AeEzCgJ4IrnKH7kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyOURGL0UyN0M5M0FFRUQy RTExRjA4MEM0NjAzMjQ3NkY1NkJDL25tejZxNVMwS3lGMkFlRXpDZ0o0SXJuS0g3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbm16NnE1UzBLeUYyQWVFekNnSjRJcm5LSDdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy OURGL0UyN0M5M0FFRUQyRTExRjA4MEM0NjAzMjQ3NkY1NkJDL25tejZxNVMwS3lG MkFlRXpDZ0o0SXJuS0g3ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCJeldQyaWhfC4ABTMMnXuebzSXHA0C1zpvURgp6F5LGlQSynJ7yTl2UxrMDxn4 UtGGWZop6+F9GI5Tk/1b2YWR4e0ZSRCGxeVDTqpkLyhl1LpA676eDA6jpedOU8zv FiKzTTnBa3jUnYGUETqZkT33X00WBqdJseHpK9ITyYReyjFIX5muKWT8y7fEXqYB H3uFQTwL5FInBNvCCtx0mVbVVyvz0orVT9F1MN4Na62Ogf0CvcWEPCNrws6JmTEK nYLZjWs+ASomirFdxz4wUyDJDMBZfmsXxDoqt8KyayRoMaH90UxTdVxQG/Jm3jP0 HryFCwI+MxqrweolhvsWoVUS -----END CERTIFICATE-----Generated at Wed Mar 4 08:36:06 2026 by rpki-client