$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft File: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft (raw, json) Hash identifier: BBEHFF21cgdCXpKeXuOmkVbOp/OWBhMeS9DAjUOykMU= Subject key identifier: 2C:7E:C7:1B:EE:A7:94:E7:EC:5E:25:F5:FC:BD:61:2D:A3:F1:81:F9 Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F Certificate issuer: /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F Certificate serial: 028C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft Manifest number: 027A Signing time: Fri 27 Mar 2026 01:36:22 +0000 Manifest this update: Fri 27 Mar 2026 01:36:22 +0000 Manifest next update: Fri 03 Apr 2026 01:36:22 +0000 Files and hashes: 1: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl (hash: fA3EipAfl8LmzknSRaP3K49Yr9dbVumw4z6tpFuFUpg=) 2: E8F2B1C224E911F0B5C26715C4F9AE02.roa (hash: XvLu9Lco+z3v8UzXTRCenPQt8JmuU1Ozm34u8QKc+Iw=) 3: 13BC244C61A311F0A6E3910CC4F9AE02.roa (hash: L4XqfcnZ4gHSW4QTEz3ONJ/g1x9XTw6MU5/Gf30dDq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 01:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 652 (0x28c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDDF, serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F Validity Not Before: Mar 27 01:36:22 2026 GMT Not After : Apr 3 01:36:22 2026 GMT Subject: CN=69c5df16-f696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ac:a6:3f:ca:77:0f:3a:82:26:1c:94:73:26: 2e:c9:bf:c6:17:f9:c2:0a:e8:c5:8a:ed:fd:f8:bd: 57:df:f1:7b:48:52:f1:d3:f4:df:a3:23:60:29:28: 84:8e:95:8d:32:81:20:da:36:84:84:46:e0:67:67: 6b:23:38:96:84:62:5a:6b:8c:56:97:19:0f:25:dd: a4:fa:3f:c9:ba:48:3a:9a:db:3a:2c:1b:25:15:24: d1:15:f0:96:a5:25:33:7f:3f:7a:43:9a:79:45:85: 3d:4c:c4:46:49:ee:83:2f:67:c7:c5:df:e2:64:0d: 3d:0d:18:27:4d:e7:1b:db:fb:d9:a7:34:4b:c7:c8: db:87:6c:80:f8:7f:90:35:24:5e:de:54:57:d7:23: 85:6e:23:9c:c9:1d:7e:54:7a:e4:97:d3:eb:8b:62: 9f:e4:db:f8:5b:4c:42:25:56:31:a7:29:fa:bf:47: 7c:fc:59:4a:25:4d:e5:b0:0f:44:20:29:a2:73:2d: d2:04:49:0a:16:65:3a:87:03:d6:2e:41:8c:08:4e: 9d:5f:36:ea:20:74:08:55:fd:b8:36:09:cb:1b:92: cc:63:59:9e:a0:59:28:53:ff:32:97:dd:3b:5e:88: 65:c2:3b:56:51:b7:21:66:d9:24:28:31:7c:77:ec: 2f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7E:C7:1B:EE:A7:94:E7:EC:5E:25:F5:FC:BD:61:2D:A3:F1:81:F9 X509v3 Authority Key Identifier: keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d4:12:2a:08:b8:fe:36:ea:fe:be:68:2a:13:3b:45:e9:9f: 4d:45:bc:4a:27:0c:89:4a:6b:63:36:53:e4:6b:1a:0f:15:a6: 80:ec:4d:f4:52:f2:0c:87:cd:0e:6b:6d:ae:2b:6f:3a:48:02: 3c:4c:6d:77:43:4a:ab:ba:48:3a:3f:c7:d3:ac:6b:09:f2:91: 18:e5:97:82:92:2b:dc:66:49:9b:81:ad:4f:a0:b5:57:70:2c: 25:0a:ce:64:f1:21:77:9b:cc:19:e1:df:80:19:47:3a:7a:35: 03:f4:b4:a9:b3:ec:ac:48:7e:59:f3:25:de:64:4e:ce:39:ec: 5f:78:1e:a6:66:86:6d:4b:f8:88:32:94:0a:b3:ec:85:a5:9e: 5a:ec:e5:f7:2b:ba:b6:04:f2:41:fd:0d:c6:90:c0:1a:98:9e: 68:ff:0d:00:7e:b6:1b:7c:5a:54:9b:f4:a4:d6:18:61:53:61: 9f:62:7c:76:2f:f4:a8:cf:7d:20:18:af:36:73:ee:5a:9d:21: 93:6e:91:49:5c:0c:ec:7b:17:b3:b4:85:6e:c1:69:4e:51:4c: 7c:67:2c:30:9c:4d:49:88:47:f4:45:30:cc:3c:91:09:73:d3: 88:ce:06:73:e6:4f:6c:cc:8a:95:e7:91:2b:88:39:60:1a:3b: 08:94:6c:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEREYxMTAvBgNVBAUTKEUzRTFDQ0NGODNENTJDQjhBM0M5ODdBODExRTFGODA3 RjMzOTNFN0YwHhcNMjYwMzI3MDEzNjIyWhcNMjYwNDAzMDEzNjIyWjAYMRYwFAYD VQQDEw02OWM1ZGYxNi1mNjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmqymP8p3DzqCJhyUcyYuyb/GF/nCCujFiu39+L1X3/F7SFLx0/TfoyNgKSiE jpWNMoEg2jaEhEbgZ2drIziWhGJaa4xWlxkPJd2k+j/Jukg6mts6LBslFSTRFfCW pSUzfz96Q5p5RYU9TMRGSe6DL2fHxd/iZA09DRgnTecb2/vZpzRLx8jbh2yA+H+Q NSRe3lRX1yOFbiOcyR1+VHrkl9Pri2Kf5Nv4W0xCJVYxpyn6v0d8/FlKJU3lsA9E ICmicy3SBEkKFmU6hwPWLkGMCE6dXzbqIHQIVf24NgnLG5LMY1meoFkoU/8yl907 XohlwjtWUbchZtkkKDF8d+wvwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCx+xxvu p5Tn7F4l9fy9YS2j8YH5MB8GA1UdIwQYMBaAFOPhzM+D1Sy4o8mHqBHh+AfzOT5/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRERi9BMjEyNzY4Qzc2 MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxMaWp5WWVvRWVINEJfTTVQ bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtSE16NFBWTExpanlZZW9FZUg0Ql9NNVBuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRERi9BMjEyNzY4Qzc2MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxM aWp5WWVvRWVINEJfTTVQbjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATtQSKgi4/jbq/r5oKhM7RemfTUW8SicMiUprYzZT5GsaDxWmgOxN9FLyDIfN DmttritvOkgCPExtd0NKq7pIOj/H06xrCfKRGOWXgpIr3GZJm4GtT6C1V3AsJQrO ZPEhd5vMGeHfgBlHOno1A/S0qbPsrEh+WfMl3mROzjnsX3gepmaGbUv4iDKUCrPs haWeWuzl9yu6tgTyQf0NxpDAGpieaP8NAH62G3xaVJv0pNYYYVNhn2J8di/0qM99 IBivNnPuWp0hk26RSVwM7HsXs7SFbsFpTlFMfGcsMJxNSYhH9EUwzDyRCXPTiM4G c+ZPbMyKleeRK4g5YBo7CJRsag== -----END CERTIFICATE-----Generated at Sat Mar 28 10:45:44 2026 by rpki-client