$ rpki-client -vvf rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft File: 4bseYl2967MiD_kjzWoRos4kUZY.mft (raw, json) Hash identifier: YBkRlTdO6hbrY7N+PpHx9SDp/4H2NOyZ2QkXBZluilg= Subject key identifier: 09:D6:1D:E7:DB:10:5F:C2:18:D9:22:C2:36:7C:E5:D7:4F:22:7D:DA Authority key identifier: E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96 Certificate issuer: /CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196 Certificate serial: 18A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft Manifest number: 1863 Signing time: Tue 24 Mar 2026 16:25:37 +0000 Manifest this update: Tue 24 Mar 2026 16:25:37 +0000 Manifest next update: Tue 31 Mar 2026 16:25:37 +0000 Files and hashes: 1: 4bseYl2967MiD_kjzWoRos4kUZY.crl (hash: nL4oFUOaXbYLNVO0AbxWdChvTM0J6BZPV74/Ta0PEiE=) 2: 2A3161763D9F11EEACFF646FC4F9AE02.roa (hash: dgLQAd17tzBsK66kQ0H0dwAp53SX6GdmC4ibG9feFVM=) 3: 2B04CC143D9F11EEACFF646FC4F9AE02.roa (hash: X9rsotZF7CeUjy+uRHBz/MOZBNYjTpkQ13IOleGdKEE=) 4: FA2CCDCCDE6111E88BFD7810C4F9AE02.roa (hash: 7ZAEA0r9lzg48+UEX+NDAtHxRbz47d+Yj5cRgz6OmvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:25:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6310 (0x18a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A31E, serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196 Validity Not Before: Mar 24 16:25:37 2026 GMT Not After : Mar 31 16:25:37 2026 GMT Subject: CN=69c2bb01-eac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:13:79:93:f3:12:a3:64:07:3a:94:c4:9b:52: 54:ae:18:bf:f1:60:0b:0d:a3:6f:33:a6:af:c5:53: d5:98:7b:be:85:f9:df:67:84:0e:e2:65:47:df:eb: e7:9e:da:a0:c9:4c:f3:f4:9d:b3:f7:af:1a:d1:34: c1:aa:34:d4:3b:2e:26:86:f6:b7:c2:5e:02:15:75: f5:5f:f3:09:04:12:5e:c2:72:5c:ae:1e:d9:ca:da: c0:0a:b9:79:e6:4c:f8:d6:ed:84:71:c6:ac:fe:a8: 89:35:16:d7:53:c1:71:10:d0:10:da:c1:6e:72:af: 12:40:73:76:48:70:f8:87:12:b2:3f:c7:7b:a2:43: fe:6d:e4:74:91:34:e4:0d:98:1a:f2:ca:56:ec:c0: 33:fe:8b:46:15:21:69:c0:71:7f:a2:a0:09:a0:3e: b7:dd:11:4e:51:03:56:b5:a2:38:a5:a4:33:c8:1e: 49:f5:61:99:b8:ad:4f:f8:90:df:1c:5c:7e:6c:af: 10:ea:64:4a:86:72:dd:9a:01:5f:6d:f5:41:5e:90: b0:8c:1a:4c:d2:33:ff:d4:af:02:a5:af:9a:f5:ff: 69:3b:6e:e2:49:44:62:98:af:6a:df:4d:4e:f2:df: 7c:8f:95:8f:1d:32:e1:72:3f:84:d8:75:b2:6f:59: cf:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D6:1D:E7:DB:10:5F:C2:18:D9:22:C2:36:7C:E5:D7:4F:22:7D:DA X509v3 Authority Key Identifier: keyid:E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:da:ae:2c:82:e3:fe:d5:08:2f:56:87:03:c8:83:e5:06:fe: 4a:25:fe:50:26:77:c4:32:80:df:7e:15:f5:72:a4:35:56:80: 13:49:a8:3a:6b:c8:02:30:a9:dd:bf:76:95:4d:a4:94:29:d3: a7:06:33:61:33:67:d6:2c:8f:e2:ae:e6:f0:89:43:ee:98:26: a6:61:59:21:bd:81:93:e3:db:b1:ce:57:d1:f5:aa:c9:fd:f1: 8c:05:d8:10:d4:23:9c:69:f5:ad:ad:f9:f3:4b:2f:b8:ea:49: 3c:e9:5c:21:02:9f:9f:77:cd:cf:e3:d4:b6:83:a5:c4:c3:78: 82:55:8e:f6:55:86:08:73:7f:2b:14:7a:a7:8a:75:05:7a:5d: 89:3e:25:82:6c:47:5f:74:da:5c:6c:c5:7e:ed:70:92:83:35: fc:96:88:29:1e:f0:f0:a5:11:6d:54:9b:7c:b2:b5:11:f0:ba: 8d:c2:ba:23:7b:79:dd:b2:97:5a:2b:db:c3:96:ce:b1:40:7c: 2d:38:23:fc:20:0c:9b:7b:60:c1:ec:9e:4c:80:99:db:9f:cd: f0:93:e1:19:1e:d1:24:16:53:24:a9:43:48:8e:e0:61:83:9d: 1c:5b:8e:bf:4a:5c:74:3f:04:f4:d7:58:9f:f9:8a:29:49:57: 0a:cf:7e:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzMUUxMTAvBgNVBAUTKEUxQkIxRTYyNURCREVCQjMyMjBGRjkyM0NENkExMUEy Q0UyNDUxOTYwHhcNMjYwMzI0MTYyNTM3WhcNMjYwMzMxMTYyNTM3WjAYMRYwFAYD VQQDEw02OWMyYmIwMS1lYWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBN5k/MSo2QHOpTEm1JUrhi/8WALDaNvM6avxVPVmHu+hfnfZ4QO4mVH3+vn ntqgyUzz9J2z968a0TTBqjTUOy4mhva3wl4CFXX1X/MJBBJewnJcrh7ZytrACrl5 5kz41u2Eccas/qiJNRbXU8FxENAQ2sFucq8SQHN2SHD4hxKyP8d7okP+beR0kTTk DZga8spW7MAz/otGFSFpwHF/oqAJoD633RFOUQNWtaI4paQzyB5J9WGZuK1P+JDf HFx+bK8Q6mRKhnLdmgFfbfVBXpCwjBpM0jP/1K8Cpa+a9f9pO27iSURimK9q301O 8t98j5WPHTLhcj+E2HWyb1nPeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAnWHefb EF/CGNkiwjZ85ddPIn3aMB8GA1UdIwQYMBaAFOG7HmJdveuzIg/5I81qEaLOJFGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxRS9DMUZBMDgyQ0M4 Q0IxMUU3OTBBODgxMzhDNEY5QUUwMi80YnNlWWwyOTY3TWlEX2tqeldvUm9zNGtV WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRic2VZbDI5NjdNaURfa2p6V29Sb3M0a1VaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTMxRS9DMUZBMDgyQ0M4Q0IxMUU3OTBBODgxMzhDNEY5QUUwMi80YnNlWWwyOTY3 TWlEX2tqeldvUm9zNGtVWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAldquLILj/tUIL1aHA8iD5Qb+SiX+UCZ3xDKA334V9XKkNVaAE0moOmvIAjCp 3b92lU2klCnTpwYzYTNn1iyP4q7m8IlD7pgmpmFZIb2Bk+Pbsc5X0fWqyf3xjAXY ENQjnGn1ra3580svuOpJPOlcIQKfn3fNz+PUtoOlxMN4glWO9lWGCHN/KxR6p4p1 BXpdiT4lgmxHX3TaXGzFfu1wkoM1/JaIKR7w8KURbVSbfLK1EfC6jcK6I3t53bKX Wivbw5bOsUB8LTgj/CAMm3tgweyeTICZ25/N8JPhGR7RJBZTJKlDSI7gYYOdHFuO v0pcdD8E9NdYn/mKKUlXCs9+ww== -----END CERTIFICATE-----Generated at Thu Mar 26 18:56:10 2026 by rpki-client