$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft File: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft (raw, json) Hash identifier: vSLnIteyNKMCMqr/mO9tulil8fQcltDJExu8WSIS9Z8= Subject key identifier: 0D:3C:CE:DE:9B:2F:CC:17:B3:B3:B1:0A:01:6A:97:2B:B7:27:B1:AD Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 Certificate issuer: /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft Manifest number: 0170 Signing time: Fri 13 Mar 2026 04:03:37 +0000 Manifest this update: Fri 13 Mar 2026 04:03:36 +0000 Manifest next update: Fri 20 Mar 2026 04:03:36 +0000 Files and hashes: 1: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl (hash: 4ey3X5Fzn0ZowDu3HFmpucBcpY4iTufdDJjuzPqFr0E=) 2: 77E54B78C45111EF9D399128C4F9AE02.roa (hash: oaVwq+HIN/wyAwR1kQHa3lIBPfZxf93jHy5Nhtjvz8o=) 3: FF233C70E62111EFACA87766C4F9AE02.roa (hash: PYR4UuGGlmCuzo5xccvj2ykJA4EkKftCUqk3OqLHMtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAE0, serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Validity Not Before: Mar 13 04:03:36 2026 GMT Not After : Mar 20 04:03:36 2026 GMT Subject: CN=69b38c98-a50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ca:0a:67:bd:a2:44:5e:a1:01:ae:17:ae:3f: f6:1f:17:93:d7:2a:33:26:19:5c:a7:66:ee:0a:1b: d7:a8:05:eb:72:8d:9b:83:82:96:f1:bf:67:17:6b: 08:c4:7d:b3:bc:d0:6a:f7:08:ce:45:0b:c5:7b:d8: 07:fb:c5:ab:94:ab:7c:8f:64:41:9f:e3:19:64:0a: 6c:2f:f9:14:1d:d7:cd:01:fd:b1:e3:77:f8:2a:35: 9b:2b:00:c7:81:9c:e1:a8:69:e6:83:d6:89:2b:6d: 9b:80:2d:96:63:87:52:23:37:ce:d4:87:9e:67:85: 1f:37:56:ac:f1:ab:60:ea:b7:01:74:99:64:bc:c5: b9:6f:18:ce:6f:eb:32:aa:7b:0a:7c:8d:f7:16:73: 34:2b:84:50:81:3f:55:e7:19:71:7d:23:89:4c:00: 54:ee:d7:87:58:c5:2e:b3:04:48:b8:54:49:f8:b9: 3a:de:95:f1:8f:2d:18:34:cd:12:01:6d:0a:bf:1b: 34:5d:e4:4a:55:5b:23:3b:18:20:63:4e:dd:5f:d9: 23:76:f9:ce:b5:85:d2:06:30:88:78:65:70:13:25: 79:8e:1d:77:88:10:49:2e:1a:69:72:eb:e4:77:ab: 24:0a:7d:55:b1:92:d6:28:49:09:34:08:23:9b:94: ae:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3C:CE:DE:9B:2F:CC:17:B3:B3:B1:0A:01:6A:97:2B:B7:27:B1:AD X509v3 Authority Key Identifier: keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9b:cb:8f:1f:02:1c:85:32:fb:5e:6d:f7:15:25:a8:51:a5: 3a:4a:16:b5:9c:33:eb:80:98:ed:d3:bb:8f:72:1c:9f:0b:19: 3d:fb:98:46:5e:82:92:c8:a9:5d:9a:95:79:24:d7:89:21:6b: 52:9d:ea:76:80:27:4e:cd:84:03:c8:05:22:22:d5:da:42:0b: 52:c5:c5:15:a9:35:e0:0a:c7:46:3f:ae:85:74:bd:cd:ea:b2: 2b:f8:02:14:05:16:f0:e3:56:e7:60:e2:63:81:0c:90:f7:d0: 34:f6:c3:df:d5:06:80:ef:96:40:0c:72:74:ae:b3:51:21:05: 26:06:d7:5a:29:ff:99:39:de:36:3e:2e:1c:a1:45:0b:c4:b7: 97:36:28:4f:1d:a5:75:6d:63:a5:1a:7a:e2:55:e1:9c:13:16: 70:be:bd:da:51:c0:07:2a:16:fe:45:70:ba:3b:69:20:8a:53: 10:38:c6:37:2d:1e:08:c8:e4:c1:f8:2a:38:29:54:92:5d:fc: cd:d1:a5:67:19:8e:3a:d7:1a:e1:1d:ed:b4:c7:94:c7:1a:d2: 4f:9e:c4:73:73:af:cf:e3:04:d4:95:45:cc:7b:fe:39:f5:fd: b7:14:8f:e4:c4:2f:ab:99:0b:cf:a3:e6:dc:72:0b:84:3e:af: aa:cc:5a:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBRTAxMTAvBgNVBAUTKDlERjRGRURGRjkyQTlFN0Y2RTAyQkZDMDU0QUQzMzk4 NTNEOUREMzIwHhcNMjYwMzEzMDQwMzM2WhcNMjYwMzIwMDQwMzM2WjAYMRYwFAYD VQQDEw02OWIzOGM5OC1hNTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMoKZ72iRF6hAa4Xrj/2HxeT1yozJhlcp2buChvXqAXrco2bg4KW8b9nF2sI xH2zvNBq9wjORQvFe9gH+8WrlKt8j2RBn+MZZApsL/kUHdfNAf2x43f4KjWbKwDH gZzhqGnmg9aJK22bgC2WY4dSIzfO1IeeZ4UfN1as8atg6rcBdJlkvMW5bxjOb+sy qnsKfI33FnM0K4RQgT9V5xlxfSOJTABU7teHWMUuswRIuFRJ+Lk63pXxjy0YNM0S AW0Kvxs0XeRKVVsjOxggY07dX9kjdvnOtYXSBjCIeGVwEyV5jh13iBBJLhppcuvk d6skCn1VsZLWKEkJNAgjm5SutwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA08zt6b L8wXs7OxCgFqlyu3J7GtMB8GA1UdIwQYMBaAFJ30/t/5Kp5/bgK/wFStM5hT2d0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFFMC9BRUY2Mzc2MDE5 NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5uOXVBcl9BVkswem1GUFoz VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25mVC0zX2txbm45dUFyX0FWSzB6bUZQWjNUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFFMC9BRUY2Mzc2MDE5NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5u OXVBcl9BVkswem1GUFozVEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX5vLjx8CHIUy+15t9xUlqFGlOkoWtZwz64CY7dO7j3IcnwsZPfuYRl6Cksip XZqVeSTXiSFrUp3qdoAnTs2EA8gFIiLV2kILUsXFFak14ArHRj+uhXS9zeqyK/gC FAUW8ONW52DiY4EMkPfQNPbD39UGgO+WQAxydK6zUSEFJgbXWin/mTneNj4uHKFF C8S3lzYoTx2ldW1jpRp64lXhnBMWcL692lHAByoW/kVwujtpIIpTEDjGNy0eCMjk wfgqOClUkl38zdGlZxmOOtca4R3ttMeUxxrST57Ec3Ovz+ME1JVFzHv+OfX9txSP 5MQvq5kLz6Pm3HILhD6vqsxaJQ== -----END CERTIFICATE-----Generated at Fri Mar 13 09:56:30 2026 by rpki-client