$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft File: r4P0CG-0oWWIvizFUNW42dRCOYU.mft (raw, json) Hash identifier: b655Eqw1fhjCVqRQONOb7BS2aWFSH9zj0NcvjROKNJI= Subject key identifier: 11:73:D4:95:34:A8:38:38:5B:24:DF:CC:FF:65:6C:C0:1B:83:66:E5 Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 Certificate issuer: /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Certificate serial: 0851 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft Manifest number: 0843 Signing time: Tue 24 Mar 2026 20:36:36 +0000 Manifest this update: Tue 24 Mar 2026 20:36:36 +0000 Manifest next update: Tue 31 Mar 2026 20:36:36 +0000 Files and hashes: 1: r4P0CG-0oWWIvizFUNW42dRCOYU.crl (hash: flv0iRd3aVqSnKrX3DL557TEBhcEtzLg8rCUDP2r6qI=) 2: BF529990959F11EC844CAD64C4F9AE02.roa (hash: 8slOQpxcJ7i4Fqpb2U0NO9KtNpjmpZLi6X29SuRjdfI=) 3: 6AB65D92AD1811EB84E05F5BC4F9AE02.roa (hash: mcE/kCUcZ9XtkapXLq0nvxx/GVcFi46zNxigdP3tLvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2129 (0x851) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BEA2, serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Validity Not Before: Mar 24 20:36:36 2026 GMT Not After : Mar 31 20:36:36 2026 GMT Subject: CN=69c2f5d4-813b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1c:3d:0f:d0:01:50:14:5a:19:38:ed:47:a9: 7f:3e:7d:9c:31:6d:51:4e:28:b9:8d:2e:d9:17:81: 0a:e5:83:98:59:20:a7:d6:8d:5f:ff:a4:c2:a8:01: 0f:ad:78:54:d6:54:a3:49:8d:55:de:10:a4:0c:e6: f9:be:45:67:d2:dc:fa:c9:48:6c:c4:6e:0f:84:a1: ed:3d:22:f3:e7:c3:b7:99:b3:a9:31:45:0e:a6:dc: c0:65:8b:ce:66:96:aa:8f:df:50:64:1e:76:81:28: ce:a7:6a:7d:6e:7f:d8:d2:49:99:6e:61:51:75:6a: 67:e7:b0:07:f8:f8:6e:95:98:9f:37:e1:e3:26:4c: bc:e6:d0:54:ae:05:ea:6b:25:fd:4a:93:2a:ff:a0: 3e:74:81:3d:34:d6:3c:47:a8:10:b0:17:7d:91:48: 4d:4f:f3:9a:a2:63:c5:24:8a:ce:31:27:b0:c5:98: 7a:83:5c:d1:a9:c2:d6:03:d5:da:9f:4c:bb:62:dc: e4:82:76:b7:9d:51:22:01:61:b8:42:65:31:34:ea: e5:71:79:d9:8a:9e:f5:55:b5:1a:58:4a:57:f9:d1: fe:04:82:6c:26:2f:43:ca:15:6b:0a:26:70:58:23: 46:4a:d8:47:f6:af:31:18:c4:06:e3:14:e1:5e:61: fb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:73:D4:95:34:A8:38:38:5B:24:DF:CC:FF:65:6C:C0:1B:83:66:E5 X509v3 Authority Key Identifier: keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:90:bf:2b:af:7a:27:56:26:87:c3:ee:90:8f:bb:75:77:df: 6f:33:c0:36:b7:3d:28:d9:09:70:af:d1:77:92:af:5f:fd:b5: 7c:9c:8c:f2:05:49:54:40:01:69:0c:87:43:ce:95:76:9c:8d: ea:06:ad:0d:d5:91:90:83:72:a5:d8:57:7a:a7:f9:84:a7:6d: fe:04:4b:fd:d6:6e:39:df:dc:18:74:38:94:96:9d:d5:ef:24: 36:fa:4c:01:d7:4f:2a:ca:12:68:1a:d2:c9:09:94:33:a6:44: 30:24:c9:0e:4b:4f:5b:2a:d2:f6:64:57:5c:61:d4:a3:3b:41: 79:37:56:71:18:a1:cc:5b:b4:8d:b0:68:c3:9f:15:20:8f:9a: 89:6c:e0:c6:49:54:68:29:92:93:c2:61:b3:88:e4:99:73:fa: a3:76:79:8a:dc:69:4c:77:e6:2c:a0:c0:4b:aa:8f:8f:30:7a: 43:8b:0d:3c:0a:ed:4b:5b:61:40:41:99:14:05:49:94:1f:5d: da:47:64:8c:b2:27:10:a1:31:55:12:03:b1:1c:97:47:ea:9d: fb:f0:31:40:13:af:bb:57:d3:1e:a0:d1:56:75:6e:26:88:19: 1d:ac:40:35:19:20:79:63:84:60:0f:c4:fa:cc:16:0f:d7:df: 91:44:42:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JFQTIxMTAvBgNVBAUTKEFGODNGNDA4NkZCNEExNjU4OEJFMkNDNTUwRDVCOEQ5 RDQ0MjM5ODUwHhcNMjYwMzI0MjAzNjM2WhcNMjYwMzMxMjAzNjM2WjAYMRYwFAYD VQQDEw02OWMyZjVkNC04MTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApBw9D9ABUBRaGTjtR6l/Pn2cMW1RTii5jS7ZF4EK5YOYWSCn1o1f/6TCqAEP rXhU1lSjSY1V3hCkDOb5vkVn0tz6yUhsxG4PhKHtPSLz58O3mbOpMUUOptzAZYvO Zpaqj99QZB52gSjOp2p9bn/Y0kmZbmFRdWpn57AH+PhulZifN+HjJky85tBUrgXq ayX9SpMq/6A+dIE9NNY8R6gQsBd9kUhNT/OaomPFJIrOMSewxZh6g1zRqcLWA9Xa n0y7Ytzkgna3nVEiAWG4QmUxNOrlcXnZip71VbUaWEpX+dH+BIJsJi9DyhVrCiZw WCNGSthH9q8xGMQG4xThXmH7UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBFz1JU0 qDg4WyTfzP9lbMAbg2blMB8GA1UdIwQYMBaAFK+D9AhvtKFliL4sxVDVuNnUQjmF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkVBMi8xOUZFQTQ1ODAz MzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9XV0l2aXpGVU5XNDJkUkNP WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0UDBDRy0wb1dXSXZpekZVTlc0MmRSQ09ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkVBMi8xOUZFQTQ1ODAzMzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9X V0l2aXpGVU5XNDJkUkNPWVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHZC/K696J1Ymh8PukI+7dXffbzPANrc9KNkJcK/Rd5KvX/21fJyM8gVJVEAB aQyHQ86VdpyN6gatDdWRkINypdhXeqf5hKdt/gRL/dZuOd/cGHQ4lJad1e8kNvpM AddPKsoSaBrSyQmUM6ZEMCTJDktPWyrS9mRXXGHUoztBeTdWcRihzFu0jbBow58V II+aiWzgxklUaCmSk8Jhs4jkmXP6o3Z5itxpTHfmLKDAS6qPjzB6Q4sNPArtS1th QEGZFAVJlB9d2kdkjLInEKExVRIDsRyXR+qd+/AxQBOvu1fTHqDRVnVuJogZHaxA NRkgeWOEYA/E+swWD9ffkURCJA== -----END CERTIFICATE-----Generated at Thu Mar 26 06:57:49 2026 by rpki-client