$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft File: nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json) Hash identifier: iy3vHPL3C5c97/cBOvL2qxvAIN77aJ/2Iv4EoxWnxV4= Subject key identifier: 29:9C:E0:36:58:9B:8D:5D:68:37:E0:A2:93:52:1B:A1:80:96:B8:08 Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E Certificate issuer: /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E Certificate serial: 0648 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft Manifest number: 0624 Signing time: Thu 12 Mar 2026 22:28:36 +0000 Manifest this update: Thu 12 Mar 2026 22:28:36 +0000 Manifest next update: Thu 19 Mar 2026 22:28:36 +0000 Files and hashes: 1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: fw6WTWwDrcrp+WpLW1/zP33pz4z9A1JCvBYWuToEByE=) 2: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: 9L/8rIC6SRhqg6qSd6LFBimcV8KPIkKPiXaPwT3ytbY=) 3: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: KV24/bEBcylNLG4cs1n5VfE+kOmO6T6A1cs3Vw5jHfo=) 4: 729F253CAB7611F0BCB28743C4F9AE02.roa (hash: cgiDC2IeZyxnx0YTTuxfu//CGtgQm8yJluwva/OgfKI=) 5: A7EBD74EAB7611F0A4F18663C4F9AE02.roa (hash: LeLRqsxMpp4Ky8wD6G3jj2qk2RePehhwztN5Ryshg7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 21:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1608 (0x648) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E Validity Not Before: Mar 12 22:28:36 2026 GMT Not After : Mar 19 22:28:36 2026 GMT Subject: CN=69b33e14-a71a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4d:ae:1a:68:da:b7:e2:79:d1:44:ad:d7:5e: fd:ff:86:69:7f:c6:cd:ad:93:8d:22:d5:bf:f7:dd: 5b:e5:07:9d:cc:bd:fd:ee:00:11:71:0c:61:bd:1c: 08:31:2c:f3:d8:91:a1:40:70:3d:20:76:28:f8:47: 16:4f:47:3a:89:41:6f:c3:52:b3:68:55:ce:c9:4e: fc:8b:fa:1b:64:48:09:a1:8f:06:1a:62:f0:ee:7b: cb:fa:b4:de:c9:16:ca:11:a8:8d:cf:d5:d1:1b:53: f8:0d:1e:4b:aa:36:a4:e1:c5:d9:b6:7f:04:bc:cf: 3b:3c:eb:a8:50:12:7c:3c:a7:ac:af:df:8f:41:af: 0f:49:15:56:1e:f0:f5:85:ec:10:98:66:f6:b9:e3: a5:ef:99:a9:81:5b:fb:b4:17:9f:dd:e1:64:39:d5: 78:b9:45:69:92:e1:d7:82:4c:2d:9f:56:8f:93:b3: 0b:6b:26:6e:08:ed:9f:1e:fe:b4:4b:a6:8c:d9:6f: fb:1c:64:95:23:9b:2a:49:ee:54:29:d0:56:e2:19: a2:45:45:21:ed:9a:09:12:25:f2:fe:54:a7:b1:a2: 8b:6d:d7:72:63:1c:14:57:41:ab:85:dd:85:a5:21: 0e:80:bf:1a:04:15:64:d5:dc:13:9d:33:a7:2a:4b: ee:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9C:E0:36:58:9B:8D:5D:68:37:E0:A2:93:52:1B:A1:80:96:B8:08 X509v3 Authority Key Identifier: keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:1e:fd:c3:14:f5:93:22:4c:c4:05:00:a8:b6:62:ef:f3:63: 49:be:8f:e1:7c:b5:d5:52:f8:ed:c7:0c:30:3a:9f:c9:f8:b4: 81:ef:33:ad:bf:f6:f0:cb:5a:23:9e:c3:a6:4f:ce:a0:85:34: 92:5f:3e:3a:57:72:ef:cc:bf:cb:43:80:83:84:53:9e:c9:bf: aa:39:ec:bf:60:a5:cb:19:cd:0c:e7:14:c6:89:57:b6:5a:b6: 1f:5f:d5:bf:e8:c8:57:7a:c0:42:59:35:1b:2c:14:98:d9:23: 01:a8:c4:08:2b:7c:1d:0a:53:e0:6e:bb:91:37:ae:d7:76:32: 4a:74:10:4c:21:a5:67:ca:a5:21:ef:3e:01:ab:28:e9:3e:0c: cd:fa:f2:bb:e0:29:2d:d8:f7:9c:43:8d:b4:fc:af:09:be:5f: f0:ae:3e:3e:41:04:b0:5d:cc:f0:76:b5:1a:e6:f7:96:3f:77: 04:6a:e7:13:91:a3:a2:58:55:12:12:2a:50:5c:06:c3:25:10: 68:80:6a:9f:59:a5:41:1a:7b:69:de:d5:79:0f:70:d2:4e:7d: 68:96:d9:69:31:b6:ea:3a:aa:f2:8f:b5:50:2c:52:2c:a5:8a: 99:2c:5a:17:34:32:4a:69:23:18:38:dd:a4:ca:56:8d:2a:5b: 84:c3:c8:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzODMxMTAvBgNVBAUTKDlDMjM1MUQ0NUE5N0Q3MUQwM0Q2QkMzODVCMzdERDlC RkI4MENGNUUwHhcNMjYwMzEyMjIyODM2WhcNMjYwMzE5MjIyODM2WjAYMRYwFAYD VQQDEw02OWIzM2UxNC1hNzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuk2uGmjat+J50USt1179/4Zpf8bNrZONItW/991b5QedzL397gARcQxhvRwI MSzz2JGhQHA9IHYo+EcWT0c6iUFvw1KzaFXOyU78i/obZEgJoY8GGmLw7nvL+rTe yRbKEaiNz9XRG1P4DR5Lqjak4cXZtn8EvM87POuoUBJ8PKesr9+PQa8PSRVWHvD1 hewQmGb2ueOl75mpgVv7tBef3eFkOdV4uUVpkuHXgkwtn1aPk7MLayZuCO2fHv60 S6aM2W/7HGSVI5sqSe5UKdBW4hmiRUUh7ZoJEiXy/lSnsaKLbddyYxwUV0Grhd2F pSEOgL8aBBVk1dwTnTOnKkvu7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCmc4DZY m41daDfgopNSG6GAlrgIMB8GA1UdIwQYMBaAFJwjUdRal9cdA9a8OFs33Zv7gM9e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4My84Q0MyQTlBQURF NzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4MEQxcnc0V3pmZG1fdUF6 MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25DTlIxRnFYMXgwRDFydzRXemZkbV91QXoxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM4My84Q0MyQTlBQURFNzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4 MEQxcnc0V3pmZG1fdUF6MTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASR79wxT1kyJMxAUAqLZi7/NjSb6P4Xy11VL47ccMMDqfyfi0ge8zrb/28Mta I57Dpk/OoIU0kl8+Oldy78y/y0OAg4RTnsm/qjnsv2ClyxnNDOcUxolXtlq2H1/V v+jIV3rAQlk1GywUmNkjAajECCt8HQpT4G67kTeu13YySnQQTCGlZ8qlIe8+Aaso 6T4Mzfryu+ApLdj3nEONtPyvCb5f8K4+PkEEsF3M8Ha1Gub3lj93BGrnE5GjolhV EhIqUFwGwyUQaIBqn1mlQRp7ad7VeQ9w0k59aJbZaTG26jqq8o+1UCxSLKWKmSxa FzQySmkjGDjdpMpWjSpbhMPIMg== -----END CERTIFICATE-----Generated at Fri Mar 13 00:14:32 2026 by rpki-client