$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft File: nNdxObeuQMY2CS0SiGlE3j8a_-I.mft (raw, json) Hash identifier: eXH+BjppVe7VfBbgULYoC6yXxE/GS0lOSHrb5RDllcA= Subject key identifier: 23:C1:69:C8:1F:A5:BD:15:68:AF:0A:F9:D8:01:BC:5A:84:C5:06:FC Authority key identifier: 9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2 Certificate issuer: /CN=A91F3BDE/serialNumber=9CD77139B7AE40C636092D12886944DE3F1AFFE2 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft Manifest number: 20 Signing time: Mon 02 Mar 2026 18:17:33 +0000 Manifest this update: Mon 02 Mar 2026 18:17:33 +0000 Manifest next update: Mon 09 Mar 2026 18:17:33 +0000 Files and hashes: 1: nNdxObeuQMY2CS0SiGlE3j8a_-I.crl (hash: M7ZEm4EH9Oijk2YJWV3pcLHgRw1gYzjxLjNmGs1T2e0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.crl rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 18:17:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3BDE, serialNumber=9CD77139B7AE40C636092D12886944DE3F1AFFE2 Validity Not Before: Mar 2 18:17:33 2026 GMT Not After : Mar 9 18:17:33 2026 GMT Subject: CN=69a5d43d-6722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:41:9c:54:99:a8:72:28:0e:f5:01:e8:95:97: 46:31:c3:e1:27:9f:64:9a:1b:54:ff:77:49:13:13: a5:9c:2a:26:fe:ef:20:04:ea:69:9e:73:a0:8b:27: fc:40:73:6a:ca:f9:eb:8c:bd:3e:dc:9f:7b:c4:c7: 15:d8:be:19:72:cb:13:7a:08:bf:3c:8c:ee:b8:98: 0d:e9:98:42:19:fe:20:cf:15:4e:47:8a:f2:a9:b2: 00:6f:d1:62:26:f6:d8:fd:b7:05:95:de:af:f5:ec: 27:6c:9a:5b:d3:09:05:cc:78:c4:0f:31:26:41:9c: 50:61:83:41:de:32:69:ce:2a:12:09:a0:76:0d:9a: c5:26:ea:3c:69:25:dc:50:11:90:11:1e:fe:da:a5: b8:89:df:f6:3f:5e:a6:db:bb:c2:d2:46:ff:0a:2e: c4:86:46:22:f2:df:5f:7c:93:b1:c0:36:74:d7:13: 67:e3:c4:61:83:dc:34:16:53:66:89:b0:2a:69:35: 92:e0:72:cf:9a:26:56:24:5b:1e:d8:dd:05:a6:ec: 3d:1e:8a:e2:d1:2b:db:57:8f:c1:1b:51:7d:25:ea: 82:c0:5c:86:18:0b:ef:72:aa:90:6f:98:21:0c:5b: 9c:94:02:f4:c5:d2:1f:13:58:78:93:4c:f4:7c:ba: 27:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C1:69:C8:1F:A5:BD:15:68:AF:0A:F9:D8:01:BC:5A:84:C5:06:FC X509v3 Authority Key Identifier: keyid:9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:00:48:a8:21:62:51:a3:92:56:e2:3b:4a:f3:c8:24:08:9e: 7e:e8:0a:62:f9:57:bc:5e:08:93:b8:e0:52:50:2c:24:8c:32: f6:f2:e2:c3:78:2c:30:49:e9:88:bd:4d:98:7a:2e:8f:cb:e9: 2c:31:ac:d8:f5:29:74:b5:49:8c:a1:91:89:4b:c8:11:c9:ff: 82:2d:c7:15:a0:96:bf:70:39:2c:9f:da:13:2b:7d:f3:c8:d9: 1d:59:6c:49:cd:4e:6a:9a:b0:e0:b2:66:8c:17:1f:5a:79:4f: 23:c3:93:c8:aa:41:3d:ea:74:64:e0:a2:b5:b7:0c:65:57:c5: 67:57:e7:de:f2:e8:c0:5f:02:27:80:2e:af:45:aa:9b:98:67: 44:48:77:ff:68:91:6d:5f:26:a6:d4:82:2f:52:74:44:7e:5c: ab:43:0c:c3:6d:00:71:a4:5a:20:85:91:7f:ec:1b:88:86:b7: 63:00:eb:69:55:7f:d1:58:6f:fb:62:2b:57:38:e4:20:7f:2d: d6:e5:93:2a:33:57:1c:47:f2:53:28:8b:65:78:fb:ed:c9:b7: 20:41:ee:e0:c4:e6:be:5f:69:f3:57:fb:bb:69:a6:c4:ff:33: 08:a4:6b:06:c7:24:4e:53:96:41:99:ba:5c:22:72:ea:f1:c9: 9e:46:23:39 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG M0JERTExMC8GA1UEBRMoOUNENzcxMzlCN0FFNDBDNjM2MDkyRDEyODg2OTQ0REUz RjFBRkZFMjAeFw0yNjAzMDIxODE3MzNaFw0yNjAzMDkxODE3MzNaMBgxFjAUBgNV BAMTDTY5YTVkNDNkLTY3MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9QZxUmahyKA71AeiVl0Yxw+Enn2SaG1T/d0kTE6WcKib+7yAE6mmec6CLJ/xA c2rK+euMvT7cn3vExxXYvhlyyxN6CL88jO64mA3pmEIZ/iDPFU5HivKpsgBv0WIm 9tj9twWV3q/17CdsmlvTCQXMeMQPMSZBnFBhg0HeMmnOKhIJoHYNmsUm6jxpJdxQ EZARHv7apbiJ3/Y/Xqbbu8LSRv8KLsSGRiLy3198k7HANnTXE2fjxGGD3DQWU2aJ sCppNZLgcs+aJlYkWx7Y3QWm7D0eiuLRK9tXj8EbUX0l6oLAXIYYC+9yqpBvmCEM W5yUAvTF0h8TWHiTTPR8uif3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUI8FpyB+l vRVorwr52AG8WoTFBvwwHwYDVR0jBBgwFoAUnNdxObeuQMY2CS0SiGlE3j8a/+Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzQkRFLzZGRjIzQjkwRjAx NzExRjA4NTU0MUYyNDQ3NkY1NkJDL25OZHhPYmV1UU1ZMkNTMFNpR2xFM2o4YV8t SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbk5keE9iZXVRTVkyQ1MwU2lHbEUzajhhXy1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz QkRFLzZGRjIzQjkwRjAxNzExRjA4NTU0MUYyNDQ3NkY1NkJDL25OZHhPYmV1UU1Z MkNTMFNpR2xFM2o4YV8tSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBQAEioIWJRo5JW4jtK88gkCJ5+6Api+Ve8XgiTuOBSUCwkjDL28uLDeCwwSemI vU2Yei6Py+ksMazY9Sl0tUmMoZGJS8gRyf+CLccVoJa/cDksn9oTK33zyNkdWWxJ zU5qmrDgsmaMFx9aeU8jw5PIqkE96nRk4KK1twxlV8VnV+fe8ujAXwIngC6vRaqb mGdESHf/aJFtXyam1IIvUnREflyrQwzDbQBxpFoghZF/7BuIhrdjAOtpVX/RWG/7 YitXOOQgfy3W5ZMqM1ccR/JTKItlePvtybcgQe7gxOa+X2nzV/u7aabE/zMIpGsG xyROU5ZBmbpcInLq8cmeRiM5 -----END CERTIFICATE-----Generated at Wed Mar 4 08:38:29 2026 by rpki-client