$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json) Hash identifier: IQh5D3WH0Zp/kGGKDeH9IGKTfd3mHPLx/8I55lfNOTs= Subject key identifier: 04:93:EA:C1:F1:0C:18:98:00:AE:09:C2:23:67:13:D8:48:F4:B3:2E Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0D19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft Manifest number: 0CB2 Signing time: Mon 16 Mar 2026 18:23:05 +0000 Manifest this update: Mon 16 Mar 2026 18:23:05 +0000 Manifest next update: Mon 23 Mar 2026 18:23:05 +0000 Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: 6ibYVWYo373Ddg1HwDPAY4eIoj3/H71bpch/sE3KGYU=) 2: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: tJiGkk0/I6jcYohqc9sLwtoZJKOPtOv1Bddr8Eqli4s=) 3: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: Jt3VRF7pIPibDQxsqo2vMT73+WNWdhXQx0TVNAZBgDA=) 4: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: NSiN19F9DGVfcYUbFN/rQVIydHg095Sn7LaHiUWQ8m4=) 5: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: 9owh/O/tGJDIk5lQcAlTvjD+T9HqmZLf8Xh2KI3DLZs=) 6: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: 9f5XGAb7npHah5QNhw1Gl77fcKOudhG1ilY/HYVSLo4=) 7: 0592D90E02E111F0BFF53A15C4F9AE02.roa (hash: bBNacOlkJrztuklEe6dKf7tGaUKKWEJYfG7pacbaVNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 18:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3353 (0xd19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Mar 16 18:23:05 2026 GMT Not After : Mar 23 18:23:05 2026 GMT Subject: CN=69b84a89-4b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:26:9d:0b:15:2b:30:89:f9:66:74:b5:20:36: 30:6f:8e:28:14:2a:b2:ec:5d:1f:e8:14:93:fa:2e: 9e:ed:26:90:b4:e3:6e:7b:5f:44:6a:2c:9f:9a:25: 1f:17:00:5f:dc:b2:a9:3a:4f:a4:4c:a8:fb:69:62: 0f:55:28:a3:74:af:4d:25:8a:46:3c:49:b4:5c:ef: a9:83:22:6e:14:d7:b2:1c:7a:af:6e:57:df:5d:25: 46:69:e9:31:d4:85:6e:eb:20:ee:d6:59:6e:81:9c: 8f:4f:34:66:56:56:a5:77:06:28:3f:c8:96:fb:b6: 2a:0e:d7:21:5f:4a:09:cc:c2:e4:83:dc:1f:ae:67: 2e:6a:76:dd:38:d6:3b:60:0a:ce:a0:f7:5c:03:3b: 13:ee:ea:6e:5e:9a:fe:1a:38:3e:28:03:80:1a:04: c2:00:50:12:8d:f8:3d:57:6d:39:b9:97:93:22:28: aa:e2:10:b5:50:9f:8c:16:2e:3d:db:c5:bc:55:96: 68:5b:04:bd:64:3c:e1:8d:f6:62:0c:87:d4:73:35: 12:42:bd:7a:18:a0:4c:d3:3e:31:46:90:52:8e:b6: c3:e6:01:38:b9:13:7f:53:79:e2:f6:cb:a1:94:40: 0c:c2:84:a3:90:9a:59:cb:45:03:9b:6a:08:02:e5: c5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:93:EA:C1:F1:0C:18:98:00:AE:09:C2:23:67:13:D8:48:F4:B3:2E X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:38:64:7a:26:04:c5:20:40:0e:ca:e4:b0:0d:7a:d9:11:4b: ed:a4:57:c1:c9:a2:7b:91:73:2b:77:01:57:43:06:f3:4a:16: a7:18:9c:41:ba:b0:bf:45:9f:ee:9e:c0:66:17:cf:95:a7:80: 3d:67:6a:39:23:ec:18:9f:84:09:3b:3e:63:e9:26:e8:62:03: a8:b5:11:bf:98:94:cb:b5:f5:18:3e:3c:3e:86:d7:df:86:a9: 5e:ab:4d:33:83:5f:96:ea:6b:17:c9:57:0a:5b:e3:d4:a9:a7: 4b:1c:12:ca:66:19:be:a3:b6:a2:b1:1e:a9:e8:c5:78:70:5c: 7f:e9:1b:ee:5a:7e:06:53:12:75:0b:d9:a5:f1:97:2e:5c:b8: bf:f3:e8:13:7d:4f:78:de:42:fe:15:d7:2e:ec:62:5f:59:8a: b3:6b:5e:0a:e6:a6:2b:3d:39:17:5e:74:14:fa:be:a7:fa:bd: ee:4d:1f:81:91:10:69:9c:a4:29:de:d1:3d:21:be:89:b5:f3: 09:0f:25:07:f8:ab:0b:9f:54:7d:32:f8:db:12:25:48:5b:ac: b0:13:fd:4a:60:d1:5e:67:80:30:0a:75:d9:bb:0f:45:53:af: 18:e5:36:9d:99:91:0b:cc:be:91:ae:4d:61:6a:8e:4e:a8:61: 3d:3c:a8:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjYwMzE2MTgyMzA1WhcNMjYwMzIzMTgyMzA1WjAYMRYwFAYD VQQDEw02OWI4NGE4OS00YjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yadCxUrMIn5ZnS1IDYwb44oFCqy7F0f6BST+i6e7SaQtONue19EaiyfmiUf FwBf3LKpOk+kTKj7aWIPVSijdK9NJYpGPEm0XO+pgyJuFNeyHHqvblffXSVGaekx 1IVu6yDu1llugZyPTzRmVlaldwYoP8iW+7YqDtchX0oJzMLkg9wfrmcuanbdONY7 YArOoPdcAzsT7upuXpr+Gjg+KAOAGgTCAFASjfg9V205uZeTIiiq4hC1UJ+MFi49 28W8VZZoWwS9ZDzhjfZiDIfUczUSQr16GKBM0z4xRpBSjrbD5gE4uRN/U3ni9suh lEAMwoSjkJpZy0UDm2oIAuXF8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAST6sHx DBiYAK4JwiNnE9hI9LMuMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQwOC9GOUMzMzM5MjFEODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIw R255aTJaeWIwLWZtQXp5NGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjThkeiYExSBADsrksA162RFL7aRXwcmie5FzK3cBV0MG80oWpxicQbqwv0Wf 7p7AZhfPlaeAPWdqOSPsGJ+ECTs+Y+km6GIDqLURv5iUy7X1GD48PobX34apXqtN M4NfluprF8lXClvj1KmnSxwSymYZvqO2orEeqejFeHBcf+kb7lp+BlMSdQvZpfGX Lly4v/PoE31PeN5C/hXXLuxiX1mKs2teCuamKz05F150FPq+p/q97k0fgZEQaZyk Kd7RPSG+ibXzCQ8lB/irC59UfTL42xIlSFussBP9SmDRXmeAMAp12bsPRVOvGOU2 nZmRC8y+ka5NYWqOTqhhPTyoFQ== -----END CERTIFICATE-----Generated at Tue Mar 17 23:15:40 2026 by rpki-client