$ rpki-client -vvf rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft File: 4mcctGrTmxwXJOxjzVOymz5IHpk.mft (raw, json) Hash identifier: Bj+hK3Jy7+qgHy8EI8pRMACIOZuERv6Yux1Qwsls/FE= Subject key identifier: F9:EA:4F:22:BA:4B:B3:9D:88:0E:06:B9:C2:51:78:3C:4F:8D:E3:B0 Authority key identifier: E2:67:1C:B4:6A:D3:9B:1C:17:24:EC:63:CD:53:B2:9B:3E:48:1E:99 Certificate issuer: /CN=A914145F/serialNumber=E2671CB46AD39B1C1724EC63CD53B29B3E481E99 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4mcctGrTmxwXJOxjzVOymz5IHpk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft Manifest number: 0D Signing time: Wed 25 Mar 2026 08:16:09 +0000 Manifest this update: Wed 25 Mar 2026 08:16:09 +0000 Manifest next update: Wed 01 Apr 2026 08:16:09 +0000 Files and hashes: 1: 4mcctGrTmxwXJOxjzVOymz5IHpk.crl (hash: MiocuFQfcPKQov63TKEPtgCb519ov3WpuDLCJ+CpQ7s=) 2: 2C8A1D2C16BA11F18FA4AADE273D8C67.roa (hash: twoRF5oqlZ7HCh1Oa3drRkDKu566LB667OHWRh/w7Jg=) 3: 2D0F8E9E16BA11F18FA4AADE273D8C67.roa (hash: yWwtKIoGzkza5ajepsaaRnUFxlesI9AwU+G4CnGMim4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.crl rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4mcctGrTmxwXJOxjzVOymz5IHpk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914145F, serialNumber=E2671CB46AD39B1C1724EC63CD53B29B3E481E99 Validity Not Before: Mar 25 08:16:09 2026 GMT Not After : Apr 1 08:16:09 2026 GMT Subject: CN=69c399c9-54d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:40:a9:71:69:72:34:74:64:34:1a:b0:b4:ae: 25:ed:66:45:54:4e:57:9f:89:91:07:ea:b3:41:7a: 6f:3d:d7:8d:f7:67:44:3b:05:a6:e3:bb:19:b1:b8: f1:31:e1:e5:f9:37:be:2a:5b:3d:45:59:6f:47:a0: 58:1a:6e:ca:cf:c1:90:22:91:7e:02:70:ba:f7:9e: 30:12:03:3e:c7:c2:44:d9:8e:00:62:47:3e:aa:f8: c8:1b:91:06:84:f9:22:d8:9b:c2:66:9b:81:4b:70: d5:97:98:ed:90:ab:79:2b:b0:ca:06:7c:34:7a:73: 3b:79:83:e0:ca:d1:b6:62:70:5b:4b:98:72:5a:3d: 3d:4f:f0:99:c1:eb:6a:e9:7e:f7:ac:80:89:a9:f3: 67:21:42:a4:78:b1:e7:42:8b:f6:83:4c:3f:76:39: 6e:9a:5b:f2:05:c7:ca:bf:b2:9e:47:fd:0b:4a:5c: 14:44:ae:2f:6b:14:4f:a3:b6:5e:aa:b8:23:41:75: 58:87:d4:63:6c:8b:71:9d:a4:52:e9:6e:f6:de:9e: 99:e1:67:b7:33:e6:a8:02:47:18:78:00:18:b4:bf: e6:96:84:03:4e:1b:66:03:04:19:1e:90:e4:22:7c: 8a:18:75:69:06:f8:19:b5:c6:de:da:f1:cd:ef:47: c1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EA:4F:22:BA:4B:B3:9D:88:0E:06:B9:C2:51:78:3C:4F:8D:E3:B0 X509v3 Authority Key Identifier: keyid:E2:67:1C:B4:6A:D3:9B:1C:17:24:EC:63:CD:53:B2:9B:3E:48:1E:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4mcctGrTmxwXJOxjzVOymz5IHpk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:92:6e:d1:fc:f8:a0:f8:60:c2:46:cb:91:7d:e0:1a:1c:5a: 29:6b:b2:87:d1:8f:eb:d3:1f:b0:85:71:07:c3:a5:fa:90:8b: 79:3e:6b:80:59:71:7e:e1:65:d3:ed:cf:e8:7c:a0:0d:ee:ec: 70:82:0b:84:88:a0:cd:fb:44:a6:89:8a:2a:e2:8c:d5:db:6c: 65:19:a7:ea:9d:d9:37:f3:31:26:73:d7:90:c4:45:ca:b4:29: fc:27:d7:c9:62:26:e8:1e:4a:37:dc:b9:40:ac:e9:59:eb:1f: db:98:f7:f4:5f:9a:84:03:36:90:f1:95:35:c6:03:61:80:46: 91:71:d0:51:cd:2f:af:ee:37:8a:0b:90:c0:6a:a9:c2:2e:7c: 3e:da:53:80:2f:0a:a8:99:f7:e6:6d:13:b0:10:1d:cd:7a:79: be:0b:dd:af:eb:d0:07:1c:22:ef:62:3e:34:4c:f9:b8:be:a2: 43:66:22:8d:a8:e6:34:7a:a5:a7:c6:0c:cd:b9:a7:61:08:e8: 9c:0a:4d:b6:62:20:0d:b4:6e:5d:34:aa:4d:66:4a:0d:2f:57: 30:fb:eb:1d:71:0d:84:89:57:be:c5:fc:73:f7:1b:b1:2e:40: 78:b4:77:4d:08:82:d0:94:14:b4:95:07:8d:82:5a:63:6c:8a: 5d:da:a9:88 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTQ1RjExMC8GA1UEBRMoRTI2NzFDQjQ2QUQzOUIxQzE3MjRFQzYzQ0Q1M0IyOUIz RTQ4MUU5OTAeFw0yNjAzMjUwODE2MDlaFw0yNjA0MDEwODE2MDlaMBgxFjAUBgNV BAMTDTY5YzM5OWM5LTU0ZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvQKlxaXI0dGQ0GrC0riXtZkVUTlefiZEH6rNBem891433Z0Q7BabjuxmxuPEx 4eX5N74qWz1FWW9HoFgabsrPwZAikX4CcLr3njASAz7HwkTZjgBiRz6q+MgbkQaE +SLYm8Jmm4FLcNWXmO2Qq3krsMoGfDR6czt5g+DK0bZicFtLmHJaPT1P8JnB62rp fvesgImp82chQqR4sedCi/aDTD92OW6aW/IFx8q/sp5H/QtKXBREri9rFE+jtl6q uCNBdViH1GNsi3GdpFLpbvbenpnhZ7cz5qgCRxh4ABi0v+aWhANOG2YDBBkekOQi fIoYdWkG+Bm1xt7a8c3vR8FJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+epPIrpL s52IDga5wlF4PE+N47AwHwYDVR0jBBgwFoAU4mcctGrTmxwXJOxjzVOymz5IHpkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxNDVGL0I0NzJGMDVDMTZC OTExRjE4QjI5MEI0ODI3M0Q4QzY3LzRtY2N0R3JUbXh3WEpPeGp6Vk95bXo1SUhw ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvNG1jY3RHclRteHdYSk94anpWT3ltejVJSHBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx NDVGL0I0NzJGMDVDMTZCOTExRjE4QjI5MEI0ODI3M0Q4QzY3LzRtY2N0R3JUbXh3 WEpPeGp6Vk95bXo1SUhway5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAqkm7R/Pig+GDCRsuRfeAaHFopa7KH0Y/r0x+whXEHw6X6kIt5PmuAWXF+4WXT 7c/ofKAN7uxwgguEiKDN+0SmiYoq4ozV22xlGafqndk38zEmc9eQxEXKtCn8J9fJ YiboHko33LlArOlZ6x/bmPf0X5qEAzaQ8ZU1xgNhgEaRcdBRzS+v7jeKC5DAaqnC Lnw+2lOALwqomffmbROwEB3Nenm+C92v69AHHCLvYj40TPm4vqJDZiKNqOY0eqWn xgzNuadhCOicCk22YiANtG5dNKpNZkoNL1cw++sdcQ2EiVe+xfxz9xuxLkB4tHdN CILQlBS0lQeNglpjbIpd2qmI -----END CERTIFICATE-----Generated at Thu Mar 26 00:28:31 2026 by rpki-client