$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft File: 4u3kp-qXJminlbJ7qdyH9LkNqJc.mft (raw, json) Hash identifier: GSNUfaLYSiGtt6EwqL9QRe7H9IoG1eEfveMovF3Zo7k= Subject key identifier: C4:DF:C3:CC:84:8A:4F:81:DC:71:1A:3E:7C:BC:77:38:D9:0C:F3:7C Authority key identifier: E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97 Certificate issuer: /CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897 Certificate serial: 1723 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft Manifest number: 16D8 Signing time: Thu 26 Mar 2026 16:39:42 +0000 Manifest this update: Thu 26 Mar 2026 16:39:41 +0000 Manifest next update: Thu 02 Apr 2026 16:39:41 +0000 Files and hashes: 1: 4u3kp-qXJminlbJ7qdyH9LkNqJc.crl (hash: uYh38/8IxhgxgkXFZbWhDGvEpbZDpUDc3UFrcQIE6Qk=) 2: 9C79DBD23E7911EBBFFAC96BC4F9AE02.roa (hash: P+dA4oJXyC6Aq01svto2ZaMLc0OEI7bajKZbfS54AB4=) 3: 56C8FCACE38011EFBF195482C4F9AE02.roa (hash: oSFgPCqeP9MX4SXg+dflVuexvyuqHsHFM2t2SZop3Uk=) 4: 2357FC145F8D11EF94E7303FC4F9AE02.roa (hash: gVapXsxz8qTnLdO52OE1oddtuxrXU7Y55OD5E65Sa4A=) 5: 854D304E0C9B11EC8433FE7AC4F9AE02.roa (hash: lQxeErZo8KSMidBaLZU2uZhEmg+ZApCYBav6XaOd1/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5923 (0x1723) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172D91, serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897 Validity Not Before: Mar 26 16:39:41 2026 GMT Not After : Apr 2 16:39:41 2026 GMT Subject: CN=69c5614d-7357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9f:9d:02:5d:86:34:7f:96:67:f6:38:15:88: b0:b7:80:cb:86:bc:a0:dd:80:8b:01:1e:7e:ed:2c: ac:3f:bf:c1:70:b5:94:8f:b4:ff:f0:c6:3c:27:48: be:3c:78:7b:14:f9:bc:43:9d:50:bf:d6:5b:5a:1c: 79:72:f7:e3:84:5b:37:be:e2:68:de:c5:3e:02:32: 33:df:a7:52:34:b0:3d:8c:fb:86:78:1f:27:75:38: 6c:1a:72:bf:b1:73:45:18:77:0f:34:62:c1:94:4b: 01:e8:ff:11:0f:c3:60:c1:86:a8:49:12:94:94:45: 65:3c:5c:68:1c:7d:5b:2f:bf:e9:f8:19:69:b3:ec: 80:76:2b:10:af:33:ad:b8:c6:6c:2a:8d:b9:0b:89: 7c:01:7f:15:41:16:b1:fe:eb:b5:e3:30:b2:ca:dc: 29:69:57:fb:11:37:31:a3:2c:df:28:0c:4e:58:b9: db:84:41:c1:f5:17:16:02:66:e2:8a:67:27:bb:b3: 2a:bf:c6:3e:4d:3c:05:00:03:67:66:b1:57:a5:91: 4a:a6:48:b8:15:a8:5a:9a:c3:b9:79:c6:51:83:b6: 89:6a:90:dd:6e:44:54:a7:9d:83:60:b8:37:0a:f8: b0:ac:80:14:ac:0d:d8:d2:a3:ae:45:2a:d7:5f:bb: 37:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DF:C3:CC:84:8A:4F:81:DC:71:1A:3E:7C:BC:77:38:D9:0C:F3:7C X509v3 Authority Key Identifier: keyid:E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:28:17:73:24:5a:e7:b4:c1:93:50:6c:3f:f5:d3:b4:6d:e6: 28:c6:a4:bd:d8:a8:55:44:53:0e:9a:e9:90:9d:b0:66:b6:eb: e7:1e:bf:a9:32:1e:89:60:16:fa:83:b6:9e:b5:06:7c:dd:5f: a1:53:66:07:b3:b2:8b:41:3f:b0:7c:63:80:65:87:30:30:e4: 18:c1:6e:cf:ef:1e:2a:58:70:b9:5c:27:c4:18:54:d3:7c:7d: ab:cb:06:44:64:34:39:4c:4b:98:3b:72:02:50:c4:b8:30:eb: 76:c8:dd:41:1a:75:cf:46:86:f4:cc:84:2d:da:24:e3:dd:d8: e2:e1:93:78:67:a1:21:57:eb:d7:8b:c9:d9:e3:e5:2f:86:12: 7d:9d:dd:0d:02:96:cd:d0:6c:b0:87:bd:63:82:07:df:e7:cf: 7b:2b:ed:1b:ff:49:d4:06:79:b1:d1:72:c9:ce:b6:6c:63:1f: 89:88:6a:d4:ab:0e:ce:91:fd:9e:cf:9c:5f:10:41:e5:72:54: 22:a6:ce:b4:ff:de:d2:db:f4:0d:82:da:1c:1c:91:32:44:c4: 7f:a2:02:eb:26:42:1a:3a:ef:9b:1c:66:fd:f4:36:6a:47:11: d3:9e:e9:8a:65:d6:46:db:ba:a5:09:be:3c:34:92:87:4d:82: 3e:44:79:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJEOTExMTAvBgNVBAUTKEUyRURFNEE3RUE5NzI2NjhBNzk1QjI3QkE5REM4N0Y0 QjkwREE4OTcwHhcNMjYwMzI2MTYzOTQxWhcNMjYwNDAyMTYzOTQxWjAYMRYwFAYD VQQDEw02OWM1NjE0ZC03MzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Z+dAl2GNH+WZ/Y4FYiwt4DLhryg3YCLAR5+7SysP7/BcLWUj7T/8MY8J0i+ PHh7FPm8Q51Qv9ZbWhx5cvfjhFs3vuJo3sU+AjIz36dSNLA9jPuGeB8ndThsGnK/ sXNFGHcPNGLBlEsB6P8RD8NgwYaoSRKUlEVlPFxoHH1bL7/p+Blps+yAdisQrzOt uMZsKo25C4l8AX8VQRax/uu14zCyytwpaVf7ETcxoyzfKAxOWLnbhEHB9RcWAmbi imcnu7Mqv8Y+TTwFAANnZrFXpZFKpki4FahamsO5ecZRg7aJapDdbkRUp52DYLg3 CviwrIAUrA3Y0qOuRSrXX7s3dQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMTfw8yE ik+B3HEaPny8dzjZDPN8MB8GA1UdIwQYMBaAFOLt5KfqlyZop5Wye6nch/S5DaiX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ5MS9FQTY3MkE1QzE5 RTcxMUU4QjI0M0Q1N0NDNEY5QUUwMi80dTNrcC1xWEptaW5sYko3cWR5SDlMa05x SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1M2twLXFYSm1pbmxiSjdxZHlIOUxrTnFKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkQ5MS9FQTY3MkE1QzE5RTcxMUU4QjI0M0Q1N0NDNEY5QUUwMi80dTNrcC1xWEpt aW5sYko3cWR5SDlMa05xSmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAISgXcyRa57TBk1BsP/XTtG3mKMakvdioVURTDprpkJ2wZrbr5x6/qTIeiWAW +oO2nrUGfN1foVNmB7Oyi0E/sHxjgGWHMDDkGMFuz+8eKlhwuVwnxBhU03x9q8sG RGQ0OUxLmDtyAlDEuDDrdsjdQRp1z0aG9MyELdok493Y4uGTeGehIVfr14vJ2ePl L4YSfZ3dDQKWzdBssIe9Y4IH3+fPeyvtG/9J1AZ5sdFyyc62bGMfiYhq1KsOzpH9 ns+cXxBB5XJUIqbOtP/e0tv0DYLaHByRMkTEf6IC6yZCGjrvmxxm/fQ2akcR057p imXWRtu6pQm+PDSSh02CPkR5tg== -----END CERTIFICATE-----Generated at Thu Mar 26 21:43:12 2026 by rpki-client