$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: Q8h7LPG9xC6kIFcNy2l5f0iVOke1L0nxD5abm80ZOTw= Subject key identifier: 09:46:D3:F5:21:56:32:65:8C:76:B3:18:7C:43:10:25:1C:7F:32:72 Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 01D3 Signing time: Fri 13 Mar 2026 02:43:48 +0000 Manifest this update: Fri 13 Mar 2026 02:43:48 +0000 Manifest next update: Fri 20 Mar 2026 02:43:48 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: 5uA+AECrUAyaYsNEpKwSv+73ad5SUt3KlrJWg7Ipj9c=) 2: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: zqESw+IWbG5U3Oh2cbA+9ioqV8DZZkTNSVndFvkCcIc=) 3: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: 2Pvyl2Pg+rvxhHMBAknVnfhicVn7ercKKujcqDRSopc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 02:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: Mar 13 02:43:48 2026 GMT Not After : Mar 20 02:43:48 2026 GMT Subject: CN=69b379e4-1364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7a:4a:c0:e0:fd:b0:44:e0:0a:93:7f:12:9b: 7e:c5:3d:00:eb:46:0f:d2:b7:b7:46:eb:90:c1:af: 00:2d:76:91:99:2b:45:a9:41:aa:af:15:c7:84:87: a0:00:4e:42:95:f9:ef:3f:c6:2c:a3:b4:a9:16:fd: 48:d8:2e:2d:3a:06:d0:53:ba:f4:2b:1b:79:12:dd: 47:42:c0:b8:95:73:94:8c:bb:07:1d:10:cb:4a:cb: 5f:e7:19:50:be:06:20:c3:0d:39:9f:d0:bf:59:1f: 78:a7:31:5c:cb:4a:f6:66:b5:37:01:50:38:68:40: a7:1d:71:09:21:1d:84:be:fc:66:3f:16:9b:a5:33: 3c:43:87:c8:69:13:30:99:94:5b:a1:c3:be:9c:8d: 75:1c:46:5a:b1:0d:4b:d2:82:44:56:5f:1d:1f:e3: 7b:56:3d:2e:bc:c4:50:2d:b8:35:4d:06:76:9c:a4: f2:25:ec:59:f5:21:e4:96:e5:22:c9:83:25:86:91: 95:08:ed:3e:0c:cb:cc:7c:81:a3:a6:65:16:22:5f: aa:11:55:98:9a:bd:f5:dc:21:6e:ef:3d:b6:d0:65: 32:35:d6:80:e4:fa:65:7b:d9:86:5e:98:e1:45:2a: 8d:c7:55:fa:f1:e7:42:02:e1:48:16:e4:42:31:32: 27:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:46:D3:F5:21:56:32:65:8C:76:B3:18:7C:43:10:25:1C:7F:32:72 X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:53:7e:b7:ed:7a:16:be:b4:05:2c:5e:4d:c5:dd:a3:85:fc: 1f:3a:34:9f:7e:ca:89:94:45:6c:9d:3e:48:4f:6d:fa:dd:b3: a6:58:e5:24:7c:a5:00:2a:34:04:79:d3:d1:48:cc:3a:00:a4: 15:ce:6c:15:93:de:d6:44:fc:25:a5:58:ec:20:76:11:3b:30: a2:59:12:f4:9d:23:f4:f5:65:a9:fc:fe:cd:05:ab:5d:01:5d: 01:fd:b4:c8:6a:32:e6:93:74:42:60:c6:74:74:1a:51:c6:16: f8:3c:69:f3:8b:3c:5c:2a:12:ed:5b:06:61:8d:ab:b5:60:a3: 45:ab:65:fd:c1:06:e8:17:dc:56:fe:6c:d6:e6:b7:04:29:bc: 8a:55:52:c6:cd:fc:60:9b:21:c0:96:d5:91:79:00:97:5e:ae: 59:31:e0:bb:6c:7e:ac:3e:4a:00:c9:c6:e4:ec:7f:6f:9b:71: 11:0d:23:81:15:ad:41:4a:99:a7:bf:23:5f:20:d5:1d:b6:25: 81:93:88:48:68:9f:f0:88:8f:70:6b:b3:33:48:01:e5:62:ca: 67:0b:02:61:22:61:0d:e3:e2:8c:42:1f:87:68:1d:80:5a:33: c7:da:5f:34:c3:d6:79:f7:7d:ae:3e:2c:9e:54:03:9f:05:d7: f1:86:0d:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjYwMzEzMDI0MzQ4WhcNMjYwMzIwMDI0MzQ4WjAYMRYwFAYD VQQDEw02OWIzNzllNC0xMzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnpKwOD9sETgCpN/Ept+xT0A60YP0re3RuuQwa8ALXaRmStFqUGqrxXHhIeg AE5ClfnvP8Yso7SpFv1I2C4tOgbQU7r0Kxt5Et1HQsC4lXOUjLsHHRDLSstf5xlQ vgYgww05n9C/WR94pzFcy0r2ZrU3AVA4aECnHXEJIR2EvvxmPxabpTM8Q4fIaRMw mZRbocO+nI11HEZasQ1L0oJEVl8dH+N7Vj0uvMRQLbg1TQZ2nKTyJexZ9SHkluUi yYMlhpGVCO0+DMvMfIGjpmUWIl+qEVWYmr313CFu7z220GUyNdaA5Pple9mGXpjh RSqNx1X68edCAuFIFuRCMTInqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAlG0/Uh VjJljHazGHxDECUcfzJyMB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxFN+t+16Fr60BSxeTcXdo4X8Hzo0n37KiZRFbJ0+SE9t+t2zpljlJHylACo0 BHnT0UjMOgCkFc5sFZPe1kT8JaVY7CB2ETswolkS9J0j9PVlqfz+zQWrXQFdAf20 yGoy5pN0QmDGdHQaUcYW+Dxp84s8XCoS7VsGYY2rtWCjRatl/cEG6BfcVv5s1ua3 BCm8ilVSxs38YJshwJbVkXkAl16uWTHgu2x+rD5KAMnG5Ox/b5txEQ0jgRWtQUqZ p78jXyDVHbYlgZOISGif8IiPcGuzM0gB5WLKZwsCYSJhDePijEIfh2gdgFozx9pf NMPWefd9rj4snlQDnwXX8YYNVw== -----END CERTIFICATE-----Generated at Fri Mar 13 07:06:54 2026 by rpki-client