$ rpki-client -vvf rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft File: 4FxkVUXZ74a0UeUhnYMnYPQFyug.mft (raw, json) Hash identifier: ita6uoBooH0EPcpPja1UU95zpGhaMaKotuyvuxUfQng= Subject key identifier: 59:E5:4E:4E:4B:43:B3:61:02:EF:F9:B4:4A:39:AC:B3:B5:5C:EE:F4 Authority key identifier: E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8 Certificate issuer: /CN=A911E09E/serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft Manifest number: 86 Signing time: Wed 25 Mar 2026 06:53:03 +0000 Manifest this update: Wed 25 Mar 2026 06:53:02 +0000 Manifest next update: Wed 01 Apr 2026 06:53:02 +0000 Files and hashes: 1: 4FxkVUXZ74a0UeUhnYMnYPQFyug.crl (hash: D225ynMmzMd+ZkVxkg1bZs11T+FQhojeTv5N1wc2ND8=) 2: E1A91004624811F098E5B95AC4F9AE02.roa (hash: DfP6HXkk7ZkiBK57u8/8M6u5qiXHtYdjtBByCV+JXf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E09E, serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8 Validity Not Before: Mar 25 06:53:02 2026 GMT Not After : Apr 1 06:53:02 2026 GMT Subject: CN=69c3864f-f3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a3:d8:3f:bd:77:f3:8f:72:7f:79:b0:75:3b: 67:0c:23:2c:94:cb:e2:ae:a2:28:23:08:51:4d:cc: 15:e4:86:f9:de:17:f1:53:0c:4a:a9:62:0a:d1:76: 1c:a2:e7:07:bc:55:b8:b7:cf:4b:e6:23:2e:1c:38: ed:3d:4c:03:a7:8f:4a:29:09:a0:f1:f4:e7:13:34: 9f:61:d0:b2:10:19:15:63:9f:0e:0a:a0:47:5a:b9: 97:c0:14:d1:cb:3a:e2:96:96:63:3f:34:44:fd:e2: e7:95:f3:d8:aa:28:35:fb:2f:a3:f5:fd:0a:fc:62: 09:2d:10:70:ab:9d:de:01:97:45:a2:ca:63:92:fa: ee:04:96:3f:9f:a5:53:28:d2:31:d4:7d:9d:46:45: 1b:2c:75:5e:99:0d:01:95:3f:3b:2f:80:ca:31:ce: b8:da:eb:11:02:81:be:d2:34:8a:c9:3c:33:1e:34: f8:07:32:31:06:70:bc:57:e0:4b:0d:ef:0d:90:07: 53:23:47:9b:dc:c4:e2:ea:1c:80:91:e7:d1:3b:45: 10:59:ae:93:d1:8a:72:c6:a1:f2:3e:85:5b:c8:29: 9b:a9:31:e9:bf:66:1d:55:27:e1:77:9a:ea:e5:cf: 1c:98:09:6c:cb:b4:66:27:65:f4:88:81:b5:26:99: 92:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E5:4E:4E:4B:43:B3:61:02:EF:F9:B4:4A:39:AC:B3:B5:5C:EE:F4 X509v3 Authority Key Identifier: keyid:E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:a5:2a:59:3b:50:d9:9c:21:e6:fe:bb:c1:e7:e2:3b:6b:fd: bf:6b:77:cb:37:2c:a8:21:18:dd:53:65:1d:ae:c1:57:fa:58: 4a:c5:77:27:f5:a5:a1:2b:60:d1:97:f1:8a:6c:29:8d:a7:0c: 2b:fe:38:ac:5f:e2:16:5b:96:b7:07:a3:29:56:85:13:69:10: 4d:47:46:f9:0d:45:fa:43:1b:d1:f2:f1:ec:6a:90:ec:e7:0d: 9c:71:be:eb:40:11:c6:8f:63:8e:4b:47:95:d7:3d:95:83:ff: ef:70:e0:71:ee:6f:2d:e5:61:1b:8f:85:c8:c0:4b:6c:14:d7: 8b:88:86:d4:38:40:ac:47:0a:c0:ef:f1:90:e5:a3:7d:5a:ab: ba:c7:4c:ec:67:37:8e:17:e6:2f:31:a9:1c:37:bf:f8:9c:bf: 6a:72:b2:60:70:e0:a8:08:85:45:03:d5:4a:a7:5c:e2:74:74: 9d:94:25:25:e3:65:46:13:f1:be:85:95:81:a6:fe:a6:a3:93: 1b:f4:6a:f4:25:10:eb:8a:ed:eb:4b:5e:79:ca:c1:f5:8e:0a: 18:51:7a:6e:ca:19:eb:d9:86:da:99:18:ba:87:c3:48:6b:a3: 22:70:cb:94:77:f8:f0:a5:2b:fe:80:10:69:f9:db:21:34:51: 84:4b:00:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUwOUUxMTAvBgNVBAUTKEUwNUM2NDU1NDVEOUVGODZCNDUxRTUyMTlEODMyNzYw RjQwNUNBRTgwHhcNMjYwMzI1MDY1MzAyWhcNMjYwNDAxMDY1MzAyWjAYMRYwFAYD VQQDEw02OWMzODY0Zi1mM2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06PYP713849yf3mwdTtnDCMslMvirqIoIwhRTcwV5Ib53hfxUwxKqWIK0XYc oucHvFW4t89L5iMuHDjtPUwDp49KKQmg8fTnEzSfYdCyEBkVY58OCqBHWrmXwBTR yzrilpZjPzRE/eLnlfPYqig1+y+j9f0K/GIJLRBwq53eAZdFospjkvruBJY/n6VT KNIx1H2dRkUbLHVemQ0BlT87L4DKMc642usRAoG+0jSKyTwzHjT4BzIxBnC8V+BL De8NkAdTI0eb3MTi6hyAkefRO0UQWa6T0YpyxqHyPoVbyCmbqTHpv2YdVSfhd5rq 5c8cmAlsy7RmJ2X0iIG1JpmSnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFnlTk5L Q7NhAu/5tEo5rLO1XO70MB8GA1UdIwQYMBaAFOBcZFVF2e+GtFHlIZ2DJ2D0Bcro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTA5RS9EOEJCMEYzNjYx RkExMUYwQkQ0RjYwNkVDNEY5QUUwMi80RnhrVlVYWjc0YTBVZVVobllNbllQUUZ5 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRGeGtWVVhaNzRhMFVlVWhuWU1uWVBRRnl1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTA5RS9EOEJCMEYzNjYxRkExMUYwQkQ0RjYwNkVDNEY5QUUwMi80RnhrVlVYWjc0 YTBVZVVobllNbllQUUZ5dWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEaUqWTtQ2Zwh5v67wefiO2v9v2t3yzcsqCEY3VNlHa7BV/pYSsV3J/WloStg 0ZfximwpjacMK/44rF/iFluWtwejKVaFE2kQTUdG+Q1F+kMb0fLx7GqQ7OcNnHG+ 60ARxo9jjktHldc9lYP/73Dgce5vLeVhG4+FyMBLbBTXi4iG1DhArEcKwO/xkOWj fVqrusdM7Gc3jhfmLzGpHDe/+Jy/anKyYHDgqAiFRQPVSqdc4nR0nZQlJeNlRhPx voWVgab+pqOTG/Rq9CUQ64rt60teecrB9Y4KGFF6bsoZ69mG2pkYuofDSGujInDL lHf48KUr/oAQafnbITRRhEsArA== -----END CERTIFICATE-----Generated at Thu Mar 26 00:53:14 2026 by rpki-client