$ rpki-client -vvf rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft File: 4dsvyCXsO7vnKFenPsCGoIIeIP0.mft (raw, json) Hash identifier: XAkkFirlTmGHfxwileoPkphaNPIUgDO5QGWPIWyc/As= Subject key identifier: 54:63:8C:FB:ED:24:93:E2:CE:95:6B:5E:7E:45:5B:1E:E5:E8:EC:4D Authority key identifier: E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD Certificate issuer: /CN=A9131589/serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Certificate serial: 031D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft Manifest number: 0316 Signing time: Wed 25 Mar 2026 00:49:14 +0000 Manifest this update: Wed 25 Mar 2026 00:49:13 +0000 Manifest next update: Wed 01 Apr 2026 00:49:13 +0000 Files and hashes: 1: 4dsvyCXsO7vnKFenPsCGoIIeIP0.crl (hash: gl6lM0SBbrCylCxo1SN2G7QPayDJ1bEY6/5Nb69OvD8=) 2: 82759C100CCE11ED97C94316C4F9AE02.roa (hash: r5uKcofx90HTHUTbqd06vEskUT1MLjmemfMajVokYGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 797 (0x31d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131589, serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Validity Not Before: Mar 25 00:49:13 2026 GMT Not After : Apr 1 00:49:13 2026 GMT Subject: CN=69c3310a-ff02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:30:57:a5:94:9e:d6:40:2e:11:1d:10:3f:4d: 62:58:a3:5e:05:a6:e9:5d:4a:5f:d5:0a:61:fd:dd: 80:88:6e:a6:eb:7d:1f:62:6b:20:c6:e3:4c:b2:5c: 40:d6:78:00:8c:a4:fb:5c:48:03:46:62:e8:31:48: c5:4f:6b:9f:8c:2a:24:0d:fa:9d:5e:83:8f:5b:d3: 56:a3:a9:1e:1b:61:1d:24:86:f8:3f:1d:7b:57:e2: 9d:44:29:83:81:27:ee:2b:06:0c:e2:b3:f7:1c:b5: 82:d4:62:48:ca:43:81:06:92:d6:a8:91:6c:9b:2f: 97:25:97:74:f8:88:5c:1a:69:a8:83:a3:5e:36:6f: 73:8d:fe:a8:b7:f5:94:8b:0d:75:1c:01:79:00:a0: 21:93:7d:dd:99:7f:17:70:dc:dd:f9:cb:77:82:82: 28:ef:9f:3e:db:0a:28:fe:6f:c8:7a:f2:6a:74:c6: 07:31:72:95:18:dc:37:32:ab:de:4a:d3:6e:2f:09: ae:b7:19:6e:9f:3f:5f:4f:f3:06:4f:ef:52:ce:08: 75:de:70:65:a0:ea:ea:45:57:a1:94:9e:fa:80:af: 0d:21:91:97:ad:52:30:53:3a:9c:d1:e1:75:44:43: 4f:f3:b6:3d:06:42:b1:91:aa:6d:90:e1:98:0e:95: b0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:63:8C:FB:ED:24:93:E2:CE:95:6B:5E:7E:45:5B:1E:E5:E8:EC:4D X509v3 Authority Key Identifier: keyid:E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:02:47:c9:55:26:9a:cd:b5:38:8c:e3:6d:d7:f2:cf:f6:b0: ee:15:fe:c1:73:84:51:ba:97:12:51:20:26:de:7b:b4:1b:bf: 3e:6a:08:3c:6a:4e:0f:d5:b3:e7:9f:7f:ab:b0:5e:79:c3:bc: 4b:6e:d7:1e:d1:71:fc:06:93:04:1f:09:6f:26:08:83:79:d4: 14:5a:2b:f5:6d:c6:50:7b:32:a6:aa:63:e2:c3:0c:d0:23:8a: 01:33:6e:fc:79:00:fe:a8:7c:87:8c:ab:e6:18:86:07:96:67: e8:b2:16:75:f7:9e:c8:ad:6f:53:f6:d2:17:9a:38:66:cf:30: 5e:b2:4c:c2:f4:1c:29:1a:79:a3:04:0f:ea:6d:d6:5e:94:6b: 35:ed:70:6f:2f:98:64:b9:75:a5:21:8d:0d:40:ad:5e:ba:22: e0:dc:9e:27:50:97:0e:9c:4c:7f:26:34:b9:cf:35:f4:15:31: 53:72:7f:78:cc:b3:ba:7f:02:1e:25:2d:43:90:82:58:0c:a9: 8d:4e:0f:32:4b:33:a0:3a:10:67:f5:c2:59:ba:20:bb:26:fc: 1b:8a:64:1a:e4:5f:de:ea:f6:dc:30:4b:1a:8e:af:11:ba:fc: 52:03:d2:5b:b1:17:d0:83:6f:b3:34:fb:bb:85:c1:87:af:a1: f9:a6:a8:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1ODkxMTAvBgNVBAUTKEUxREIyRkM4MjVFQzNCQkJFNzI4NTdBNzNFQzA4NkEw ODIxRTIwRkQwHhcNMjYwMzI1MDA0OTEzWhcNMjYwNDAxMDA0OTEzWjAYMRYwFAYD VQQDEw02OWMzMzEwYS1mZjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjBXpZSe1kAuER0QP01iWKNeBabpXUpf1Qph/d2AiG6m630fYmsgxuNMslxA 1ngAjKT7XEgDRmLoMUjFT2ufjCokDfqdXoOPW9NWo6keG2EdJIb4Px17V+KdRCmD gSfuKwYM4rP3HLWC1GJIykOBBpLWqJFsmy+XJZd0+IhcGmmog6NeNm9zjf6ot/WU iw11HAF5AKAhk33dmX8XcNzd+ct3goIo758+2woo/m/IevJqdMYHMXKVGNw3Mqve StNuLwmutxlunz9fT/MGT+9Szgh13nBloOrqRVehlJ76gK8NIZGXrVIwUzqc0eF1 RENP87Y9BkKxkaptkOGYDpWw7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFRjjPvt JJPizpVrXn5FWx7l6OxNMB8GA1UdIwQYMBaAFOHbL8gl7Du75yhXpz7AhqCCHiD9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU4OS8zN0UzOTBBMDBD Q0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083dm5LRmVuUHNDR29JSWVJ UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRkc3Z5Q1hzTzd2bktGZW5Qc0NHb0lJZUlQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU4OS8zN0UzOTBBMDBDQ0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083 dm5LRmVuUHNDR29JSWVJUDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwQJHyVUmms21OIzjbdfyz/aw7hX+wXOEUbqXElEgJt57tBu/PmoIPGpOD9Wz 559/q7BeecO8S27XHtFx/AaTBB8JbyYIg3nUFFor9W3GUHsypqpj4sMM0COKATNu /HkA/qh8h4yr5hiGB5Zn6LIWdfeeyK1vU/bSF5o4Zs8wXrJMwvQcKRp5owQP6m3W XpRrNe1wby+YZLl1pSGNDUCtXroi4NyeJ1CXDpxMfyY0uc819BUxU3J/eMyzun8C HiUtQ5CCWAypjU4PMkszoDoQZ/XCWboguyb8G4pkGuRf3ur23DBLGo6vEbr8UgPS W7EX0INvszT7u4XBh6+h+aaodw== -----END CERTIFICATE-----Generated at Thu Mar 26 12:36:44 2026 by rpki-client