$ rpki-client -vvf rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft File: 4xZnlgSAzwfjwi15DeTiAe9wQNs.mft (raw, json) Hash identifier: /+tojueitKXjsMkzNiMlEhjdHgdn+GhG3wR+3TKW/A8= Subject key identifier: 39:36:64:C3:2E:6C:68:26:CC:62:57:0E:C1:0D:0A:2A:E8:19:75:69 Authority key identifier: E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB Certificate issuer: /CN=A911B310/serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB Certificate serial: 025F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft Manifest number: 024F Signing time: Wed 25 Mar 2026 01:47:22 +0000 Manifest this update: Wed 25 Mar 2026 01:47:21 +0000 Manifest next update: Wed 01 Apr 2026 01:47:21 +0000 Files and hashes: 1: 4xZnlgSAzwfjwi15DeTiAe9wQNs.crl (hash: 8u3BNGJ2L5PAxHgHR6Ka0BTfLzZ6zMbrQaJ5boXt8tQ=) 2: 0ADA583C5DB911F0A54D4C6FC4F9AE02.roa (hash: vtHqwtSvpKd0UZw+IVp/WFTlhLrYLk265RmDqE6z7KQ=) 3: 0BBC997C5DB911F0A54D4C6FC4F9AE02.roa (hash: wtwpRqnqeYQSTF5tuYeTMKBYPSpu+aJ0HfsSDYw4/oQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 607 (0x25f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B310, serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB Validity Not Before: Mar 25 01:47:21 2026 GMT Not After : Apr 1 01:47:21 2026 GMT Subject: CN=69c33eaa-076b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:95:bf:c7:4f:16:59:4f:e5:86:c4:eb:55:7e: a8:d6:54:e8:12:cc:cf:17:68:71:1f:e7:b8:c7:7a: d7:24:6b:9a:00:0d:3a:a2:30:88:eb:69:06:c2:2d: 0a:d4:ae:de:80:1b:b4:42:1b:be:23:83:3a:72:fb: 63:0a:4a:7a:cd:65:1e:2c:be:d1:d0:8c:a6:ff:89: 77:f2:f2:07:ea:ea:f7:49:65:ab:2d:4e:ac:44:a9: 7c:27:9c:3f:fd:43:ab:b9:34:a9:99:95:ee:2c:b6: cf:c4:58:a3:6a:c8:83:31:e7:4e:4d:4b:b5:0b:3d: 4d:b6:ce:e4:8c:75:f6:20:f4:18:b7:be:ba:6e:25: 61:0a:df:2b:22:32:e5:e9:69:6f:3b:4a:ef:80:3f: 54:a6:35:94:d5:c6:dc:8c:0f:52:13:5b:f2:b5:53: 1a:46:ad:20:57:5b:04:42:4c:2f:e3:be:fa:46:c4: e5:cf:97:ee:26:65:59:29:bc:e9:9e:08:34:99:d6: 05:10:51:25:b3:8b:d3:51:45:82:af:fb:e1:a9:bb: ce:25:36:cf:d5:67:f9:f8:32:2e:a4:90:07:b5:3a: 57:05:58:f3:07:8d:38:54:0e:60:f3:4d:85:91:5c: 69:5b:45:65:96:0b:c2:45:70:a7:ee:ac:f3:9b:2f: b9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:36:64:C3:2E:6C:68:26:CC:62:57:0E:C1:0D:0A:2A:E8:19:75:69 X509v3 Authority Key Identifier: keyid:E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:2b:a3:07:4a:13:e5:2f:2e:33:5b:27:6f:49:cd:6d:3e:62: 65:83:5c:e8:5d:00:eb:72:7b:1a:e0:b8:3b:cb:09:35:50:1e: 85:b5:f9:86:dc:ff:65:aa:06:c3:5b:55:74:f4:33:67:30:ca: 7b:4f:ad:6f:63:aa:25:e4:b4:66:ab:7f:c4:89:a6:ff:ef:5d: ec:87:86:55:0b:a6:7d:78:2f:7d:da:83:e0:48:fc:07:84:9b: c9:e1:52:c1:43:02:83:64:95:2d:b3:e1:d7:6f:73:ef:a3:40: de:ca:7f:77:66:a8:00:ff:9b:f0:b6:ab:53:cf:15:16:10:10: a0:28:c3:8e:cf:67:81:af:be:6f:64:23:00:59:c1:e4:cc:f9: 80:b3:ed:af:f4:2b:0a:45:16:74:e2:cc:dd:77:34:98:69:ae: c0:27:7e:37:28:35:89:0f:51:36:79:80:0d:7d:f9:a8:f5:52: 27:e4:d7:ee:02:ac:83:fa:fb:7b:e7:9e:da:4d:40:8e:7e:b7: 19:54:64:cc:af:b5:bb:ae:f7:70:b4:82:20:5a:bc:ca:78:b7: e8:24:da:7a:66:79:5b:48:33:38:83:8d:24:0c:59:75:bf:ca: 75:85:35:e8:d0:5d:5c:5a:6d:1f:7c:22:69:e1:24:a8:f7:3a: 24:e1:8e:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIzMTAxMTAvBgNVBAUTKEUzMTY2Nzk2MDQ4MENGMDdFM0MyMkQ3OTBERTRFMjAx RUY3MDQwREIwHhcNMjYwMzI1MDE0NzIxWhcNMjYwNDAxMDE0NzIxWjAYMRYwFAYD VQQDEw02OWMzM2VhYS0wNzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZW/x08WWU/lhsTrVX6o1lToEszPF2hxH+e4x3rXJGuaAA06ojCI62kGwi0K 1K7egBu0Qhu+I4M6cvtjCkp6zWUeLL7R0Iym/4l38vIH6ur3SWWrLU6sRKl8J5w/ /UOruTSpmZXuLLbPxFijasiDMedOTUu1Cz1Nts7kjHX2IPQYt766biVhCt8rIjLl 6WlvO0rvgD9UpjWU1cbcjA9SE1vytVMaRq0gV1sEQkwv4776RsTlz5fuJmVZKbzp ngg0mdYFEFEls4vTUUWCr/vhqbvOJTbP1Wf5+DIupJAHtTpXBVjzB404VA5g802F kVxpW0VllgvCRXCn7qzzmy+5rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDk2ZMMu bGgmzGJXDsENCiroGXVpMB8GA1UdIwQYMBaAFOMWZ5YEgM8H48IteQ3k4gHvcEDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjMxMC8zRUJEMTdDMkFE MTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3Zmp3aTE1RGVUaUFlOXdR TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR4Wm5sZ1NBendmandpMTVEZVRpQWU5d1FOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjMxMC8zRUJEMTdDMkFEMTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3 Zmp3aTE1RGVUaUFlOXdRTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdyujB0oT5S8uM1snb0nNbT5iZYNc6F0A63J7GuC4O8sJNVAehbX5htz/ZaoG w1tVdPQzZzDKe0+tb2OqJeS0Zqt/xImm/+9d7IeGVQumfXgvfdqD4Ej8B4SbyeFS wUMCg2SVLbPh129z76NA3sp/d2aoAP+b8LarU88VFhAQoCjDjs9nga++b2QjAFnB 5Mz5gLPtr/QrCkUWdOLM3Xc0mGmuwCd+Nyg1iQ9RNnmADX35qPVSJ+TX7gKsg/r7 e+ee2k1Ajn63GVRkzK+1u673cLSCIFq8yni36CTaemZ5W0gzOIONJAxZdb/KdYU1 6NBdXFptH3wiaeEkqPc6JOGOeg== -----END CERTIFICATE-----Generated at Thu Mar 26 05:40:39 2026 by rpki-client