$ rpki-client -vvf rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft File: 4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft (raw, json) Hash identifier: mCfuNC9hNmAcMQXtlbk0VSAm83oUllckqL2UQ/goQtA= Subject key identifier: DC:C6:82:DC:98:F4:3F:5D:0B:2C:9A:85:55:88:A8:73:93:36:53:BC Authority key identifier: E2:33:9A:AB:48:62:BF:6B:47:55:CD:96:A7:0B:64:DB:79:3D:3A:E1 Certificate issuer: /CN=A914882C/serialNumber=E2339AAB4862BF6B4755CD96A70B64DB793D3AE1 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft Manifest number: 0BF7 Signing time: Tue 24 Mar 2026 18:42:55 +0000 Manifest this update: Tue 24 Mar 2026 18:42:55 +0000 Manifest next update: Tue 31 Mar 2026 18:42:55 +0000 Files and hashes: 1: 4jOaq0hiv2tHVc2Wpwtk23k9OuE.crl (hash: s0xPk7CYLeHGsA8Fr+VfC/30OtcJ8zITyYiYOyzZr/A=) 2: 2872362213AC11F18E65BA7479EE528E.roa (hash: Xw3QSa9Ss4iD8QxehrY8joIWifoDq7UToDva9Bu+pZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.crl rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914882C, serialNumber=E2339AAB4862BF6B4755CD96A70B64DB793D3AE1 Validity Not Before: Mar 24 18:42:55 2026 GMT Not After : Mar 31 18:42:55 2026 GMT Subject: CN=69c2db2f-c004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:cb:03:f6:3d:1d:b1:4c:a9:4e:05:fa:91:ec: 1c:d2:cf:a3:83:7f:f1:a7:f0:de:09:f4:63:ec:76: 54:00:f1:59:5e:79:a5:61:2a:88:e7:e6:73:32:e5: d5:26:fa:1c:da:e1:d7:af:80:65:c7:44:22:f9:ff: 7f:a1:51:ba:77:c7:b0:da:5e:a5:52:d6:b5:c3:b1: e2:0a:a6:4e:ce:c5:f7:e9:ae:6e:e4:f3:09:a9:aa: 12:1f:b7:5e:fd:4f:51:f4:20:1b:c9:25:f4:7f:11: 36:2d:a3:34:c6:fb:0f:72:51:2d:0e:ff:72:70:c9: bb:c0:7c:2e:9c:fb:e9:bb:d4:7c:d8:72:0a:30:84: e8:63:12:bb:0b:20:cc:1c:12:8c:ab:1f:e1:0d:74: aa:a5:71:39:96:ef:5c:30:17:3b:73:bc:c2:a1:97: 0a:95:fa:fe:2e:ad:07:b5:0e:ed:ae:cf:b0:6f:08: 34:e2:66:bc:d8:bf:3b:73:66:16:fb:20:d4:4b:12: 1c:4f:bd:16:09:f1:d6:fe:c8:39:89:39:1c:59:f8: 36:6a:33:13:91:f8:29:41:3e:00:c7:45:46:e7:ab: ff:9e:76:7b:59:fa:9b:58:80:af:aa:ce:d5:be:aa: 8c:4c:7d:e4:1d:43:5c:eb:3e:9c:48:eb:8f:fc:2e: f2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C6:82:DC:98:F4:3F:5D:0B:2C:9A:85:55:88:A8:73:93:36:53:BC X509v3 Authority Key Identifier: keyid:E2:33:9A:AB:48:62:BF:6B:47:55:CD:96:A7:0B:64:DB:79:3D:3A:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:73:da:0a:8e:d9:5e:bd:3a:fd:d4:e1:6b:28:e9:cf:38:14: 1c:39:e4:58:71:81:5f:2f:57:71:28:59:f6:47:8d:57:53:b8: 2e:05:cf:e9:7d:28:c8:a5:12:cd:66:a9:e8:06:14:d6:07:fd: e7:b1:64:c3:a6:87:31:7d:06:5b:8b:1a:bd:99:3d:26:37:b1: 8f:07:1f:b6:13:11:1d:32:05:b7:34:ec:07:bd:20:02:a5:19: ed:6e:a5:06:90:d5:5a:f7:4a:fc:bc:9c:bf:84:e1:d6:c3:11: 85:3e:09:f4:f8:cb:d2:55:37:8d:3c:8d:53:df:e8:24:f7:3a: eb:07:4e:ea:44:c8:6a:8f:6d:8a:98:41:07:94:2b:8a:fc:8e: 1c:b8:40:9d:7d:57:c5:5c:da:7e:43:7f:3a:b7:5d:9b:37:f4: 27:a7:0e:24:11:72:08:1f:1d:23:e2:5f:fa:71:25:58:28:fb: 8c:24:81:ee:d1:90:a4:3f:5f:3f:41:87:74:43:ad:f9:46:7f: a5:ab:1e:50:43:17:5b:4b:91:e0:f5:88:61:64:9b:89:9f:a5: cc:cd:0f:a2:59:f6:0e:66:d9:5a:74:ae:db:3f:7c:aa:c5:d7: 01:63:ea:9d:a8:46:af:46:c9:da:e4:14:f5:b6:3a:8f:aa:8d: e1:50:d5:97 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 ODgyQzExMC8GA1UEBRMoRTIzMzlBQUI0ODYyQkY2QjQ3NTVDRDk2QTcwQjY0REI3 OTNEM0FFMTAeFw0yNjAzMjQxODQyNTVaFw0yNjAzMzExODQyNTVaMBgxFjAUBgNV BAMTDTY5YzJkYjJmLWMwMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuywP2PR2xTKlOBfqR7BzSz6ODf/Gn8N4J9GPsdlQA8VleeaVhKojn5nMy5dUm +hza4devgGXHRCL5/3+hUbp3x7DaXqVS1rXDseIKpk7Oxffprm7k8wmpqhIft179 T1H0IBvJJfR/ETYtozTG+w9yUS0O/3JwybvAfC6c++m71HzYcgowhOhjErsLIMwc EoyrH+ENdKqlcTmW71wwFztzvMKhlwqV+v4urQe1Du2uz7BvCDTiZrzYvztzZhb7 INRLEhxPvRYJ8db+yDmJORxZ+DZqMxOR+ClBPgDHRUbnq/+edntZ+ptYgK+qztW+ qoxMfeQdQ1zrPpxI64/8LvKnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3MaC3Jj0 P10LLJqFVYioc5M2U7wwHwYDVR0jBBgwFoAU4jOaq0hiv2tHVc2Wpwtk23k9OuEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4ODJDL0M2NUQwNUM4MzZE QzExRUE4NjE5OEM3M0M0RjlBRTAyLzRqT2FxMGhpdjJ0SFZjMldwd3RrMjNrOU91 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGpPYXEwaGl2MnRIVmMyV3B3dGsyM2s5T3VFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4 ODJDL0M2NUQwNUM4MzZEQzExRUE4NjE5OEM3M0M0RjlBRTAyLzRqT2FxMGhpdjJ0 SFZjMldwd3RrMjNrOU91RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCBc9oKjtlevTr91OFrKOnPOBQcOeRYcYFfL1dxKFn2R41XU7guBc/pfSjIpRLN ZqnoBhTWB/3nsWTDpocxfQZbixq9mT0mN7GPBx+2ExEdMgW3NOwHvSACpRntbqUG kNVa90r8vJy/hOHWwxGFPgn0+MvSVTeNPI1T3+gk9zrrB07qRMhqj22KmEEHlCuK /I4cuECdfVfFXNp+Q386t12bN/Qnpw4kEXIIHx0j4l/6cSVYKPuMJIHu0ZCkP18/ QYd0Q635Rn+lqx5QQxdbS5Hg9YhhZJuJn6XMzQ+iWfYOZtladK7bP3yqxdcBY+qd qEavRsna5BT1tjqPqo3hUNWX -----END CERTIFICATE-----Generated at Thu Mar 26 05:03:21 2026 by rpki-client