$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft File: E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json) Hash identifier: 8havHhZq/63LVRw5VMOAWdxuo+pd3Xtb2+PV1TQ9fUY= Subject key identifier: BE:07:5B:24:78:96:A1:FC:AA:80:92:13:C6:3D:54:90:E5:45:7B:84 Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Certificate serial: 0D51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft Manifest number: 0D30 Signing time: Tue 24 Mar 2026 17:56:44 +0000 Manifest this update: Tue 24 Mar 2026 17:56:44 +0000 Manifest next update: Tue 31 Mar 2026 17:56:44 +0000 Files and hashes: 1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: NER72puWOmSEQxpg7c0Nbmdh1ulUIlNnRd4n6iGkQ98=) 2: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: Un5EoRL9PQC9xIW5CX3zoZdwpivD2GxDkHynm1gEUVk=) 3: 0827E4147F7911EC86DE4B56C4F9AE02.roa (hash: HpflIZHPJw/jzbgP6VSoBVTn6YCT3C7WFMC80MZUPak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3409 (0xd51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Validity Not Before: Mar 24 17:56:44 2026 GMT Not After : Mar 31 17:56:44 2026 GMT Subject: CN=69c2d05c-1652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fb:f5:d1:7e:f2:8d:b2:66:87:6a:d5:dd:48: f6:02:c2:03:38:85:0c:63:1b:c9:49:39:ad:17:de: 04:77:f9:b6:f6:08:aa:02:0d:70:22:81:a3:35:27: 72:80:74:8e:be:f0:2e:06:54:3e:df:bf:8a:25:29: f8:b9:a8:4d:b0:b7:17:5b:4b:59:02:62:65:25:51: c5:f6:ff:ce:84:ff:20:c1:14:b7:bf:47:a0:90:ff: a3:7d:91:bf:be:68:88:91:af:2f:e7:e5:18:03:1c: 1c:9c:ee:91:a3:51:a1:39:0a:9b:31:f7:02:5c:8a: dd:af:f6:43:fa:cb:6c:f5:de:c1:ef:81:cf:92:1d: d6:3a:bb:95:92:b9:78:08:21:f2:20:7c:4e:7c:5c: f3:33:3f:16:40:ba:09:2c:c7:fb:53:26:42:fe:42: 7f:43:c4:87:71:7d:6d:2e:cb:58:b1:d6:d9:3e:b3: 6d:db:f0:51:68:63:22:a0:05:ee:e0:c7:06:d7:68: f1:62:e0:8a:18:75:77:6c:f2:c3:4c:13:e1:33:46: 67:90:3e:0e:bc:81:4f:8d:cd:2e:64:d2:34:73:a7: 92:0d:ca:33:6b:34:59:e9:a4:2d:f5:a6:e0:ab:83: 52:dc:d2:c7:43:ba:05:9b:d8:4a:d6:c5:82:af:58: 47:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:07:5B:24:78:96:A1:FC:AA:80:92:13:C6:3D:54:90:E5:45:7B:84 X509v3 Authority Key Identifier: keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:d3:53:b1:e4:2e:bd:5d:90:c8:5d:d7:1d:69:e5:e8:a7:cf: 8c:7b:a7:4b:de:c8:8a:b9:33:53:1d:ff:6b:ed:36:d8:1f:66: c4:1d:d4:61:f8:07:38:6a:e8:de:a7:c3:3a:2f:40:fc:57:76: 2a:52:a7:85:51:25:6c:33:9e:e3:25:71:75:cc:96:2e:4f:62: 5c:4c:b0:25:55:b3:fe:7b:7b:3f:cb:43:e1:86:7f:72:49:b4: 41:62:7c:59:ad:67:b6:d1:07:9a:b1:36:e6:86:0f:65:2c:7b: 4c:6c:80:60:07:0c:6e:6e:bc:1a:79:91:84:5c:00:7a:01:91: f4:c5:eb:f8:8d:76:24:36:a3:20:91:88:e9:e7:e3:fc:ba:0c: bc:9b:41:b1:90:7b:f4:c9:82:00:35:f3:7e:d1:43:43:d7:bb: 3c:68:4e:b8:be:d7:a6:4b:ad:d7:1e:32:62:36:1b:03:2a:eb: e8:1a:89:7a:29:9f:cf:1b:63:7b:41:f9:1a:e0:12:89:1b:05: da:68:bb:3a:72:a3:79:fc:a8:0d:e3:47:a4:46:8f:a2:3e:df: 5f:ab:69:73:bb:ef:b2:25:6c:d6:50:d7:f5:f7:86:1e:1e:e5: a2:46:75:e1:d5:ee:f9:11:7f:8b:ae:54:4d:b0:d5:d3:30:2c: f3:6f:5c:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGOUMxMTAvBgNVBAUTKDEzOENEMTBBNDc3OERFMEUzNTkxMUU5QzlDOTQ0RjRC MjFDNERCMDkwHhcNMjYwMzI0MTc1NjQ0WhcNMjYwMzMxMTc1NjQ0WjAYMRYwFAYD VQQDEw02OWMyZDA1Yy0xNjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkPv10X7yjbJmh2rV3Uj2AsIDOIUMYxvJSTmtF94Ed/m29giqAg1wIoGjNSdy gHSOvvAuBlQ+37+KJSn4uahNsLcXW0tZAmJlJVHF9v/OhP8gwRS3v0egkP+jfZG/ vmiIka8v5+UYAxwcnO6Ro1GhOQqbMfcCXIrdr/ZD+sts9d7B74HPkh3WOruVkrl4 CCHyIHxOfFzzMz8WQLoJLMf7UyZC/kJ/Q8SHcX1tLstYsdbZPrNt2/BRaGMioAXu 4McG12jxYuCKGHV3bPLDTBPhM0ZnkD4OvIFPjc0uZNI0c6eSDcozazRZ6aQt9abg q4NS3NLHQ7oFm9hK1sWCr1hH8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL4HWyR4 lqH8qoCSE8Y9VJDlRXuEMB8GA1UdIwQYMBaAFBOM0QpHeN4ONZEenJyUT0shxNsJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY5Qy8yOUNCMDIwRUZB MEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNnNDFrUjZjbkpSUFN5SEUy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0elJDa2Q0M2c0MWtSNmNuSlJQU3lIRTJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEY5Qy8yOUNCMDIwRUZBMEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNn NDFrUjZjbkpSUFN5SEUyd2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAktNTseQuvV2QyF3XHWnl6KfPjHunS97IirkzUx3/a+022B9mxB3UYfgHOGro 3qfDOi9A/Fd2KlKnhVElbDOe4yVxdcyWLk9iXEywJVWz/nt7P8tD4YZ/ckm0QWJ8 Wa1nttEHmrE25oYPZSx7TGyAYAcMbm68GnmRhFwAegGR9MXr+I12JDajIJGI6efj /LoMvJtBsZB79MmCADXzftFDQ9e7PGhOuL7Xpkut1x4yYjYbAyrr6BqJeimfzxtj e0H5GuASiRsF2mi7OnKjefyoDeNHpEaPoj7fX6tpc7vvsiVs1lDX9feGHh7lokZ1 4dXu+RF/i65UTbDV0zAs829cBQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:50:59 2026 by rpki-client