$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft File: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft (raw, json) Hash identifier: iK8JWPUCdkuLQ6HIzfyBpw+J50qAXdfQEX7HY08bny8= Subject key identifier: 7B:CE:44:6C:A5:50:98:4A:8E:59:F5:04:55:DF:F5:F5:A7:5A:9C:16 Authority key identifier: 9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 Certificate issuer: /CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Certificate serial: 08A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft Manifest number: 0892 Signing time: Sat 28 Mar 2026 20:26:17 +0000 Manifest this update: Sat 28 Mar 2026 20:26:17 +0000 Manifest next update: Sat 04 Apr 2026 20:26:17 +0000 Files and hashes: 1: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl (hash: LOyG9Sa2/jdldG6CY7N6EfgxMrr4VsqL+qUqFHoDLSA=) 2: 0BC9660CE3AC11EAAAC85761C4F9AE02.roa (hash: 6N8L0/wOzazXZSPR1fOLRJTlX3kPwlL/sXD3aJXqTts=) 3: 0C5564C2E3AC11EAAAC85761C4F9AE02.roa (hash: fMBT8TBi/iV+GqMKiOn023vwnmaVeX5X3SPin3cqYSg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 20:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2208 (0x8a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9702, serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Validity Not Before: Mar 28 20:26:17 2026 GMT Not After : Apr 4 20:26:17 2026 GMT Subject: CN=69c83969-f5d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:80:f4:37:52:54:4f:1e:d5:c1:67:3b:39:02: ef:d7:96:31:d3:4a:c3:b4:fb:10:9c:8b:7a:be:a0: 06:78:bb:60:83:c9:36:12:31:f2:b8:b2:c1:d7:2d: 3f:d5:0b:e2:da:ca:f7:a5:59:74:59:48:b4:03:9f: 6c:7c:4f:05:87:9d:a2:0b:1a:ca:78:86:7a:28:99: 31:ed:53:fb:86:3e:af:77:e6:ee:d9:b9:ce:14:56: e9:7d:0d:17:4e:af:69:80:bf:2d:67:8f:cd:7b:90: 0b:4e:b3:5e:66:29:b0:81:fb:a9:fd:57:d4:5a:38: 24:3e:dd:fc:33:e5:45:0e:05:ff:34:3d:3f:1a:f4: 9a:45:2e:fa:5b:18:93:a3:c9:61:26:99:6f:2e:2c: 2e:69:be:b6:bd:8d:90:34:b3:c6:d3:02:e5:9a:d5: e5:0d:e9:cb:dd:d0:84:a7:23:0a:ba:59:28:94:f8: 11:45:79:d8:cf:e7:6b:7a:5e:9e:f8:1d:f8:35:ee: 70:ac:ac:b8:43:87:c4:d9:eb:b4:b1:dd:00:07:0c: c7:e8:52:e6:7d:66:92:8e:5a:78:7a:22:38:f6:be: 42:4e:a7:ba:c0:a9:be:2e:96:73:51:27:11:37:b1: 16:a0:d9:ec:16:38:bd:3c:e1:bf:03:3c:03:94:49: 6a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:CE:44:6C:A5:50:98:4A:8E:59:F5:04:55:DF:F5:F5:A7:5A:9C:16 X509v3 Authority Key Identifier: keyid:9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f2:d5:7a:22:71:1b:45:8d:30:40:02:57:ac:8e:f3:c8:a1: fb:31:99:02:dc:a9:8e:e3:ba:51:17:b3:12:2a:05:b1:9c:f1: fd:75:c5:3d:ce:ec:6e:af:52:b1:eb:ed:da:be:79:dc:63:9b: aa:e4:a5:fe:34:ea:78:4f:d2:46:78:b7:ac:e8:61:d0:27:c8: eb:9e:95:cb:99:2a:a2:0a:91:77:c7:28:9c:b4:6f:0b:cd:e1: 1a:39:cf:df:ce:2e:a5:44:c3:7e:7b:72:ac:c6:d2:3b:58:b5: 9a:27:14:d7:73:19:02:95:dd:48:00:f2:47:c5:7f:16:25:a5: a8:02:74:4c:90:fc:b2:55:ab:9f:c6:bd:f5:3a:6a:c1:a7:e5: b1:a0:7c:0b:ae:0a:c3:60:64:59:0c:87:50:13:b8:3c:2b:9b: 47:e7:bd:88:30:38:d1:1d:4f:bf:79:6d:49:1a:ef:8f:d8:f7: de:ce:5f:fa:24:bb:2e:40:64:eb:f8:54:e8:91:67:7f:41:7e: 4f:17:a8:ad:f0:3e:86:fc:ed:07:83:54:a1:16:de:c4:ef:49: 95:7f:90:89:bb:75:91:cd:b9:70:19:af:54:61:75:aa:f5:26: b2:40:e1:b5:f7:c9:67:21:be:2b:67:2e:49:03:77:5e:fd:dd: a5:7c:19:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk3MDIxMTAvBgNVBAUTKDlFNjM3NkE1RjJBQTNFMkM3RkY1NTJBRkI4QUY1MERB QzEzRDQ5QjcwHhcNMjYwMzI4MjAyNjE3WhcNMjYwNDA0MjAyNjE3WjAYMRYwFAYD VQQDEw02OWM4Mzk2OS1mNWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYD0N1JUTx7VwWc7OQLv15Yx00rDtPsQnIt6vqAGeLtgg8k2EjHyuLLB1y0/ 1Qvi2sr3pVl0WUi0A59sfE8Fh52iCxrKeIZ6KJkx7VP7hj6vd+bu2bnOFFbpfQ0X Tq9pgL8tZ4/Ne5ALTrNeZimwgfup/VfUWjgkPt38M+VFDgX/ND0/GvSaRS76WxiT o8lhJplvLiwuab62vY2QNLPG0wLlmtXlDenL3dCEpyMKulkolPgRRXnYz+drel6e +B34Ne5wrKy4Q4fE2eu0sd0ABwzH6FLmfWaSjlp4eiI49r5CTqe6wKm+LpZzUScR N7EWoNnsFji9POG/AzwDlElqCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHvORGyl UJhKjln1BFXf9fWnWpwWMB8GA1UdIwQYMBaAFJ5jdqXyqj4sf/VSr7ivUNrBPUm3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTcwMi9FRjkxM0QyNkUz QUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBpeF85Vkt2dUs5UTJzRTlT YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tTjJwZktxUGl4XzlWS3Z1SzlRMnNFOVNiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTcwMi9FRjkxM0QyNkUzQUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBp eF85Vkt2dUs5UTJzRTlTYmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjfLVeiJxG0WNMEACV6yO88ih+zGZAtypjuO6URezEioFsZzx/XXFPc7sbq9S sevt2r553GObquSl/jTqeE/SRni3rOhh0CfI656Vy5kqogqRd8conLRvC83hGjnP 384upUTDfntyrMbSO1i1micU13MZApXdSADyR8V/FiWlqAJ0TJD8slWrn8a99Tpq waflsaB8C64Kw2BkWQyHUBO4PCubR+e9iDA40R1Pv3ltSRrvj9j33s5f+iS7LkBk 6/hU6JFnf0F+TxeorfA+hvztB4NUoRbexO9JlX+Qibt1kc25cBmvVGF1qvUmskDh tffJZyG+K2cuSQN3Xv3dpXwZBw== -----END CERTIFICATE-----Generated at Sun Mar 29 22:56:24 2026 by rpki-client