$ rpki-client -vvf rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft File: 4VZP2lztXK5pQVMJftGUJVEgkiM.mft (raw, json) Hash identifier: xuxoXhhQm0wXRzcUft59tPDajlK1CAmIp+lSS6J7mUY= Subject key identifier: 32:AA:24:D9:EE:EC:B5:00:0B:01:65:55:9A:1B:66:EA:96:FA:4D:09 Authority key identifier: E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23 Certificate issuer: /CN=A915A300/serialNumber=E1564FDA5CED5CAE694153097ED1942551209223 Certificate serial: 3658 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft Manifest number: 35D0 Signing time: Tue 24 Mar 2026 14:30:27 +0000 Manifest this update: Tue 24 Mar 2026 14:30:26 +0000 Manifest next update: Tue 31 Mar 2026 14:30:26 +0000 Files and hashes: 1: 4VZP2lztXK5pQVMJftGUJVEgkiM.crl (hash: 3OdNdr+wTzZK6T5FLXQfePWW3Rpljbsjj12tM2emTWk=) 2: 524236EE6B5711F09CFE4572C4F9AE02.roa (hash: YixDUXuSIn+Hh+G5kFeWAZb1NF/MvO4aijdY29fevto=) 3: 165CEF66E60911EB950D930DC4F9AE02.roa (hash: hG8g9R9N6g9xsHSn0imR+1vWSozb3fa3uL51Vy8mhic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13912 (0x3658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A300, serialNumber=E1564FDA5CED5CAE694153097ED1942551209223 Validity Not Before: Mar 24 14:30:26 2026 GMT Not After : Mar 31 14:30:26 2026 GMT Subject: CN=69c2a003-d9a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0d:e8:26:6d:ca:9e:67:67:63:f3:9e:b4:4b: 0c:d2:3b:00:b6:73:c9:eb:1e:ed:7d:1d:f2:8c:b0: 00:c6:a5:f8:7a:2a:a2:bd:80:48:6b:7b:83:1b:b4: 8f:d4:d5:22:9d:95:5a:44:0e:7d:31:a5:10:35:97: 39:65:86:cd:42:60:a2:9c:63:8a:e8:94:b4:77:e5: 74:4e:27:0e:f4:3b:5e:3f:17:18:d6:d2:13:2c:6d: 47:63:4b:fc:ad:80:b3:a7:36:3e:16:73:8f:ac:8c: 83:fa:f4:cf:16:0c:25:57:ca:78:86:53:cc:cc:9c: 11:bd:e6:e0:e3:da:c3:cd:e7:ba:a8:00:c4:16:02: 59:07:ea:0a:c9:40:ca:20:86:03:e6:65:53:3f:74: d2:f3:9c:79:24:a5:e6:f8:47:fd:f0:47:10:c1:c3: 00:1c:85:54:14:69:17:67:2b:52:8d:36:d3:95:4b: 7c:2b:85:b5:a0:21:09:fc:8b:05:9f:93:de:ef:4b: ba:33:52:d5:6e:b1:5b:d7:43:d1:b5:53:a8:86:de: 32:39:0c:f1:33:83:8d:66:b3:96:e9:d7:f6:5f:9d: 02:9e:23:f1:19:05:6a:b4:4e:5f:12:f3:40:4d:ef: d8:15:75:a3:cb:04:9d:49:a5:6f:d8:67:d4:06:4e: 64:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AA:24:D9:EE:EC:B5:00:0B:01:65:55:9A:1B:66:EA:96:FA:4D:09 X509v3 Authority Key Identifier: keyid:E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:67:8b:58:b3:fa:3b:ba:37:2b:e8:1a:bd:55:5b:50:37:87: c4:a3:c4:e9:28:9e:91:87:07:b3:e0:e8:e4:c5:2d:f9:49:6f: 65:b5:c0:9e:71:f1:3c:47:95:df:62:84:b7:c1:4a:f9:e2:b1: b2:b7:b9:ab:2a:c1:cc:fd:cf:5e:f7:00:07:52:f2:1e:eb:27: 2c:f3:a9:b1:f1:48:44:98:14:37:56:d7:4a:b8:d1:ce:e3:1f: 1f:c9:32:2b:94:a0:a0:bf:fa:dc:89:09:7e:00:0f:86:1f:77: 9b:d5:45:e0:87:79:44:d6:8b:03:97:ee:aa:b5:24:c0:4c:d1: af:3d:88:e5:ff:7e:c8:6f:3b:44:1f:7f:69:b3:4d:9c:77:d2: f0:67:84:56:f0:f1:b8:12:0f:6e:79:6f:68:44:49:d9:90:bd: 89:f0:b3:96:02:e4:87:ca:35:36:48:ce:35:6f:6b:bb:24:fc: 97:87:a2:dc:ce:34:69:ce:f0:0e:a4:33:03:59:3c:37:54:50: 28:36:fe:5b:54:21:a9:7b:77:6e:7b:57:15:3c:75:ff:37:45: b9:b0:40:35:ac:7e:c3:70:0a:e7:13:6f:e1:f0:f5:8e:3a:2d: 0b:ca:e8:39:02:10:a5:33:d2:dd:c2:48:7f:ac:58:1c:de:db: 6c:2c:86:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEzMDAxMTAvBgNVBAUTKEUxNTY0RkRBNUNFRDVDQUU2OTQxNTMwOTdFRDE5NDI1 NTEyMDkyMjMwHhcNMjYwMzI0MTQzMDI2WhcNMjYwMzMxMTQzMDI2WjAYMRYwFAYD VQQDEw02OWMyYTAwMy1kOWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApA3oJm3KnmdnY/OetEsM0jsAtnPJ6x7tfR3yjLAAxqX4eiqivYBIa3uDG7SP 1NUinZVaRA59MaUQNZc5ZYbNQmCinGOK6JS0d+V0TicO9DtePxcY1tITLG1HY0v8 rYCzpzY+FnOPrIyD+vTPFgwlV8p4hlPMzJwRvebg49rDzee6qADEFgJZB+oKyUDK IIYD5mVTP3TS85x5JKXm+Ef98EcQwcMAHIVUFGkXZytSjTbTlUt8K4W1oCEJ/IsF n5Pe70u6M1LVbrFb10PRtVOoht4yOQzxM4ONZrOW6df2X50CniPxGQVqtE5fEvNA Te/YFXWjywSdSaVv2GfUBk5k6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDKqJNnu 7LUACwFlVZobZuqW+k0JMB8GA1UdIwQYMBaAFOFWT9pc7VyuaUFTCX7RlCVRIJIj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTMwMC9DRDIwMzdFMjFE ODgxMUUyOEExMUEwRTEwOEIwMkNEMi80VlpQMmx6dFhLNXBRVk1KZnRHVUpWRWdr aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWWlAybHp0WEs1cFFWTUpmdEdVSlZFZ2tpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTMwMC9DRDIwMzdFMjFEODgxMUUyOEExMUEwRTEwOEIwMkNEMi80VlpQMmx6dFhL NXBRVk1KZnRHVUpWRWdraU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASGeLWLP6O7o3K+gavVVbUDeHxKPE6SiekYcHs+Do5MUt+UlvZbXAnnHxPEeV 32KEt8FK+eKxsre5qyrBzP3PXvcAB1LyHusnLPOpsfFIRJgUN1bXSrjRzuMfH8ky K5SgoL/63IkJfgAPhh93m9VF4Id5RNaLA5fuqrUkwEzRrz2I5f9+yG87RB9/abNN nHfS8GeEVvDxuBIPbnlvaERJ2ZC9ifCzlgLkh8o1NkjONW9ruyT8l4ei3M40ac7w DqQzA1k8N1RQKDb+W1QhqXt3bntXFTx1/zdFubBANax+w3AK5xNv4fD1jjotC8ro OQIQpTPS3cJIf6xYHN7bbCyGAw== -----END CERTIFICATE-----Generated at Thu Mar 26 17:50:50 2026 by rpki-client