$ rpki-client -vvf rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft File: 4bseYl2967MiD_kjzWoRos4kUZY.mft (raw, json) Hash identifier: 6fR9MP+QrT+WhQ68Lh2wqumCT0zJ9DMh8/JbVq6ZHQY= Subject key identifier: 41:5E:A5:4D:13:19:3B:DD:72:5B:1C:B2:79:51:C8:3E:68:AE:43:81 Authority key identifier: E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96 Certificate issuer: /CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196 Certificate serial: 18A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft Manifest number: 1864 Signing time: Thu 26 Mar 2026 16:29:15 +0000 Manifest this update: Thu 26 Mar 2026 16:29:14 +0000 Manifest next update: Thu 02 Apr 2026 16:29:14 +0000 Files and hashes: 1: 4bseYl2967MiD_kjzWoRos4kUZY.crl (hash: a0EHy2lyJZcgQun9+1U2urHeEWE06v5u7pEuyZkl9zU=) 2: 2A3161763D9F11EEACFF646FC4F9AE02.roa (hash: dgLQAd17tzBsK66kQ0H0dwAp53SX6GdmC4ibG9feFVM=) 3: 2B04CC143D9F11EEACFF646FC4F9AE02.roa (hash: X9rsotZF7CeUjy+uRHBz/MOZBNYjTpkQ13IOleGdKEE=) 4: FA2CCDCCDE6111E88BFD7810C4F9AE02.roa (hash: 7ZAEA0r9lzg48+UEX+NDAtHxRbz47d+Yj5cRgz6OmvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6311 (0x18a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A31E, serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196 Validity Not Before: Mar 26 16:29:14 2026 GMT Not After : Apr 2 16:29:14 2026 GMT Subject: CN=69c55eda-36d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3d:86:86:ef:92:e2:35:ec:56:6e:08:53:7a: 4c:69:d8:c2:54:f5:4b:92:16:b8:ac:9a:3e:07:e0: 00:21:fe:b8:3f:fb:d9:13:3f:61:20:e9:65:3f:d4: 13:cb:c7:c1:d7:e6:8a:c6:ed:6c:aa:15:e9:18:5c: 8d:06:08:85:f1:3c:23:b6:9d:be:17:99:f1:af:e2: a1:88:89:0b:bd:b8:38:b9:ab:e4:32:a5:c7:7c:7c: 46:2d:09:e0:af:21:a4:b9:fc:b4:c1:02:63:eb:7c: 67:c5:0e:3b:e6:8b:eb:21:99:15:a9:f8:6c:dd:1f: cf:cb:02:5c:b3:8e:3a:88:85:48:b8:d4:80:61:a3: 0e:46:c8:c5:1f:df:2f:00:25:a8:84:bd:b0:67:7d: c8:11:60:cd:10:5b:e6:45:57:3c:00:a4:51:e2:f8: 89:ad:a1:a4:c5:6e:c6:41:e5:f0:c6:03:0a:17:0e: 2e:b2:34:ee:1a:ab:01:b1:84:20:6b:3e:3d:dd:9f: 0e:33:02:f9:42:38:1f:6f:0e:dc:66:61:0f:6b:a9: ed:20:81:61:6f:59:8e:80:cd:1c:fb:67:33:c8:fa: 94:26:dc:e2:19:3b:22:ac:b0:7b:27:88:2d:30:ff: 6f:5e:f9:ae:1d:f3:f4:ea:c1:ec:1b:59:2b:af:a7: d6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5E:A5:4D:13:19:3B:DD:72:5B:1C:B2:79:51:C8:3E:68:AE:43:81 X509v3 Authority Key Identifier: keyid:E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:03:f4:a6:46:f6:40:9b:ea:7c:33:78:ee:1f:b9:9c:2e:d0: 88:2b:63:2a:62:e0:d2:e9:4e:51:52:0d:33:73:22:f2:5a:6d: fa:bf:ab:1f:1a:eb:cf:e3:ba:80:65:a0:e5:58:fe:79:34:06: 6e:12:dc:81:b8:f8:d6:12:a1:a6:63:ae:59:dc:81:07:b6:7b: fa:cb:f3:01:ac:a9:cf:a5:45:73:0e:77:40:52:54:0f:fb:ab: 84:d6:d1:06:08:b9:bf:f4:f0:33:7e:02:a6:44:ac:3f:1a:c4: 7b:95:5c:29:7e:e0:21:d0:c0:fc:51:96:f9:e7:2e:62:22:d1: fc:75:83:b8:32:97:5f:45:b6:4b:71:0d:02:5d:4f:0c:8a:7c: 80:6c:82:fe:b0:55:59:65:a2:e7:01:63:e0:6d:78:13:66:49: fb:c2:8b:91:1e:21:fe:5c:49:16:47:05:00:ff:4b:75:06:fd: 49:da:55:fe:d2:23:85:eb:d2:8c:31:31:10:07:a6:0a:28:f9: 52:cf:92:a4:2b:8c:3e:d3:e1:fd:31:e8:19:7a:9d:00:94:34: 36:03:ba:e6:f2:87:54:bf:52:ae:ea:8b:b5:91:2c:db:d6:23: c5:68:4c:e6:ca:53:87:72:95:a5:96:34:4b:53:f2:c5:79:4d: 32:d5:c3:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzMUUxMTAvBgNVBAUTKEUxQkIxRTYyNURCREVCQjMyMjBGRjkyM0NENkExMUEy Q0UyNDUxOTYwHhcNMjYwMzI2MTYyOTE0WhcNMjYwNDAyMTYyOTE0WjAYMRYwFAYD VQQDEw02OWM1NWVkYS0zNmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzz2Ghu+S4jXsVm4IU3pMadjCVPVLkha4rJo+B+AAIf64P/vZEz9hIOllP9QT y8fB1+aKxu1sqhXpGFyNBgiF8Twjtp2+F5nxr+KhiIkLvbg4uavkMqXHfHxGLQng ryGkufy0wQJj63xnxQ475ovrIZkVqfhs3R/PywJcs446iIVIuNSAYaMORsjFH98v ACWohL2wZ33IEWDNEFvmRVc8AKRR4viJraGkxW7GQeXwxgMKFw4usjTuGqsBsYQg az493Z8OMwL5Qjgfbw7cZmEPa6ntIIFhb1mOgM0c+2czyPqUJtziGTsirLB7J4gt MP9vXvmuHfP06sHsG1krr6fWlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEFepU0T GTvdclscsnlRyD5orkOBMB8GA1UdIwQYMBaAFOG7HmJdveuzIg/5I81qEaLOJFGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxRS9DMUZBMDgyQ0M4 Q0IxMUU3OTBBODgxMzhDNEY5QUUwMi80YnNlWWwyOTY3TWlEX2tqeldvUm9zNGtV WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRic2VZbDI5NjdNaURfa2p6V29Sb3M0a1VaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTMxRS9DMUZBMDgyQ0M4Q0IxMUU3OTBBODgxMzhDNEY5QUUwMi80YnNlWWwyOTY3 TWlEX2tqeldvUm9zNGtVWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkQP0pkb2QJvqfDN47h+5nC7QiCtjKmLg0ulOUVINM3Mi8lpt+r+rHxrrz+O6 gGWg5Vj+eTQGbhLcgbj41hKhpmOuWdyBB7Z7+svzAaypz6VFcw53QFJUD/urhNbR Bgi5v/TwM34CpkSsPxrEe5VcKX7gIdDA/FGW+ecuYiLR/HWDuDKXX0W2S3ENAl1P DIp8gGyC/rBVWWWi5wFj4G14E2ZJ+8KLkR4h/lxJFkcFAP9LdQb9SdpV/tIjhevS jDExEAemCij5Us+SpCuMPtPh/THoGXqdAJQ0NgO65vKHVL9SruqLtZEs29YjxWhM 5spTh3KVpZY0S1PyxXlNMtXDYA== -----END CERTIFICATE-----Generated at Thu Mar 26 21:04:10 2026 by rpki-client