$ rpki-client -vvf rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft File: r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft (raw, json) Hash identifier: EdpLkJU/A1+wiYDOB+KjhYMpspn3TTpoNZGwJInhBlA= Subject key identifier: 07:56:EB:C9:B6:2B:FC:A2:C3:12:7A:55:8E:9C:06:6F:EB:7B:AD:0A Authority key identifier: AF:56:8E:BC:26:B1:4C:12:81:E8:12:83:77:86:B5:A3:8B:C7:8B:87 Certificate issuer: /CN=A9147750/serialNumber=AF568EBC26B14C1281E812837786B5A38BC78B87 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1aOvCaxTBKB6BKDd4a1o4vHi4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft Manifest number: 03 Signing time: Wed 25 Mar 2026 08:26:41 +0000 Manifest this update: Wed 25 Mar 2026 08:26:41 +0000 Manifest next update: Wed 01 Apr 2026 08:26:41 +0000 Files and hashes: 1: r1aOvCaxTBKB6BKDd4a1o4vHi4c.crl (hash: wzr25oGECgwfqveNC4+p1jRK8G66WT1FqMSl/Kf7gGo=) 2: C6185536273011F1A8149F74AC833773.roa (hash: XZNI2I+TEYcAvEVGQBDMHCtqr9clDTEVottNypWj6ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.crl rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1aOvCaxTBKB6BKDd4a1o4vHi4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147750, serialNumber=AF568EBC26B14C1281E812837786B5A38BC78B87 Validity Not Before: Mar 25 08:26:41 2026 GMT Not After : Apr 1 08:26:41 2026 GMT Subject: CN=69c39c41-8832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d5:5b:a6:e4:ca:c8:a3:b7:62:9c:1c:73:db: 2f:06:de:12:ad:de:7f:9f:4f:2f:5f:36:ee:89:d4: 2a:9c:74:2f:89:90:dc:33:b5:3e:a0:84:88:07:87: 00:11:e4:50:17:97:1c:65:35:93:b1:47:7f:ea:1d: 28:1e:90:b0:ee:0c:6a:20:7f:58:05:a4:52:41:f7: ae:9d:9d:36:18:1e:f7:fc:8a:fd:b5:d2:29:57:4f: 39:a5:f0:37:14:70:11:49:4e:d2:e0:6e:13:cd:78: 16:14:d8:b1:bb:b4:d2:d3:8d:2b:0e:96:f0:e4:b4: 6e:a9:0a:ec:0d:cb:31:bb:90:69:a5:6b:b6:36:49: 13:65:58:66:7a:d8:28:4f:e4:3b:01:f1:96:aa:c5: e0:a8:02:47:e8:03:5c:81:35:b5:dd:29:72:e3:66: 2a:51:91:5c:7f:47:57:6a:85:bd:df:f3:0d:bf:43: 3a:08:22:3c:f7:48:cf:1a:2b:3e:f1:17:c4:7f:9a: ca:cd:49:c3:9c:2c:f1:43:c1:45:9b:6a:de:f4:76: 48:2e:8c:db:fd:0d:16:34:6d:71:78:09:b3:b2:96: b1:2f:da:a7:a2:88:20:9d:56:10:19:e4:6d:c8:fa: ac:2b:8a:6b:fe:a8:ab:4a:17:3a:a8:5d:07:ad:13: b1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:56:EB:C9:B6:2B:FC:A2:C3:12:7A:55:8E:9C:06:6F:EB:7B:AD:0A X509v3 Authority Key Identifier: keyid:AF:56:8E:BC:26:B1:4C:12:81:E8:12:83:77:86:B5:A3:8B:C7:8B:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1aOvCaxTBKB6BKDd4a1o4vHi4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:69:fd:55:aa:bf:58:03:88:ab:9e:d2:85:0a:e1:39:fa:38: 3f:1b:9a:06:99:c9:60:be:de:1f:72:22:50:d0:58:bf:df:7e: 42:54:e1:3c:0c:c6:0a:f2:02:fa:7c:f9:17:34:b8:cf:05:c9: 1c:bf:51:cb:45:e6:76:2d:20:3e:e1:f2:b2:8c:60:b8:60:22: 24:eb:4d:91:b0:ef:7e:61:48:e3:28:23:30:f4:56:cb:89:74: c5:3a:69:67:e6:96:a4:aa:34:4a:fd:38:97:cc:e2:e0:b9:f3: ef:f7:af:44:f9:1d:58:fb:64:b4:23:cf:f0:ce:3f:13:11:37: 64:de:58:e0:31:65:26:15:1e:b3:aa:46:35:3d:c3:f6:93:95: 00:29:ff:d2:75:da:c3:c6:f0:00:b7:83:67:e3:20:6d:ea:c5: db:1f:29:21:c7:6e:3a:84:27:af:1b:2c:6f:7b:fc:70:3d:db: 32:84:de:47:84:16:31:f6:44:c9:60:be:b6:cf:1b:a7:0f:a1: 6a:72:bd:e4:50:e0:01:a5:85:72:23:dd:f9:d1:db:24:91:f0: 20:c3:2d:cc:c4:c7:ee:e1:8f:7e:f7:7b:31:0a:87:52:3d:5e: dd:48:1b:3a:93:c3:bb:f8:1e:59:4b:51:cb:40:2c:56:21:f4: ba:4e:df:00 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Nzc1MDExMC8GA1UEBRMoQUY1NjhFQkMyNkIxNEMxMjgxRTgxMjgzNzc4NkI1QTM4 QkM3OEI4NzAeFw0yNjAzMjUwODI2NDFaFw0yNjA0MDEwODI2NDFaMBgxFjAUBgNV BAMTDTY5YzM5YzQxLTg4MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU1Vum5MrIo7dinBxz2y8G3hKt3n+fTy9fNu6J1CqcdC+JkNwztT6ghIgHhwAR 5FAXlxxlNZOxR3/qHSgekLDuDGogf1gFpFJB966dnTYYHvf8iv210ilXTzml8DcU cBFJTtLgbhPNeBYU2LG7tNLTjSsOlvDktG6pCuwNyzG7kGmla7Y2SRNlWGZ62ChP 5DsB8ZaqxeCoAkfoA1yBNbXdKXLjZipRkVx/R1dqhb3f8w2/QzoIIjz3SM8aKz7x F8R/msrNScOcLPFDwUWbat70dkgujNv9DRY0bXF4CbOylrEv2qeiiCCdVhAZ5G3I +qwrimv+qKtKFzqoXQetE7HfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUB1brybYr /KLDEnpVjpwGb+t7rQowHwYDVR0jBBgwFoAUr1aOvCaxTBKB6BKDd4a1o4vHi4cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3NzUwLzRDN0UwRkFBMjcy RjExRjE4NDMyNTJGRUFCODMzNzczL3IxYU92Q2F4VEJLQjZCS0RkNGExbzR2SGk0 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjFhT3ZDYXhUQktCNkJLRGQ0YTFvNHZIaTRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 NzUwLzRDN0UwRkFBMjcyRjExRjE4NDMyNTJGRUFCODMzNzczL3IxYU92Q2F4VEJL QjZCS0RkNGExbzR2SGk0Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCgaf1Vqr9YA4irntKFCuE5+jg/G5oGmclgvt4fciJQ0Fi/335CVOE8DMYK8gL6 fPkXNLjPBckcv1HLReZ2LSA+4fKyjGC4YCIk602RsO9+YUjjKCMw9FbLiXTFOmln 5pakqjRK/TiXzOLgufPv969E+R1Y+2S0I8/wzj8TETdk3ljgMWUmFR6zqkY1PcP2 k5UAKf/SddrDxvAAt4Nn4yBt6sXbHykhx246hCevGyxve/xwPdsyhN5HhBYx9kTJ YL62zxunD6Fqcr3kUOABpYVyI9350dskkfAgwy3MxMfu4Y9+93sxCodSPV7dSBs6 k8O7+B5ZS1HLQCxWIfS6Tt8A -----END CERTIFICATE-----Generated at Thu Mar 26 14:03:08 2026 by rpki-client