$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft File: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft (raw, json) Hash identifier: HBP0m85zh8DihksPgPsdAIRC0V+czgEZpPtc3UtO9Ys= Subject key identifier: 95:AF:32:FF:15:8C:D5:56:4B:56:68:81:94:6F:D7:D8:3F:59:11:3A Authority key identifier: E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 Certificate issuer: /CN=A9174FD4/serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Certificate serial: 09C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft Manifest number: 09C4 Signing time: Tue 24 Mar 2026 19:41:30 +0000 Manifest this update: Tue 24 Mar 2026 19:41:29 +0000 Manifest next update: Tue 31 Mar 2026 19:41:29 +0000 Files and hashes: 1: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl (hash: 1MZQ3XeZQ2RR6W1io7mesPRJCkDrmUawG+hLGw/18cY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2500 (0x9c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174FD4, serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Validity Not Before: Mar 24 19:41:29 2026 GMT Not After : Mar 31 19:41:29 2026 GMT Subject: CN=69c2e8ea-c47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:24:71:04:01:da:d1:6b:05:e3:c7:aa:b5:65: db:35:44:34:b9:9c:a7:b7:b5:51:20:dd:fa:1a:13: 59:33:4a:00:df:98:88:eb:20:4f:b7:fd:e7:7a:f5: 38:f7:04:fa:44:6c:73:43:84:03:21:a1:d2:31:32: 8c:ed:ba:d4:c0:ec:4e:6a:58:f5:82:aa:96:42:52: a5:e0:67:4b:d7:38:13:6b:83:37:3d:be:f7:d7:7b: 23:77:e2:0d:9c:da:7a:0c:1e:ed:7f:b2:45:12:2d: e5:7d:2c:bc:5d:68:f7:f9:2d:ff:e3:b9:63:50:ed: b4:7f:e7:6b:ea:dd:fb:00:e4:58:05:a8:eb:9c:22: c9:fc:76:c7:c5:b0:e9:50:88:39:d9:8e:dc:19:32: 8b:d3:bb:29:7f:cd:0f:a6:74:d2:c9:6c:35:6a:20: 29:1b:e3:ee:07:b8:8f:53:49:bf:0f:ae:30:ce:3d: 5a:7e:1a:e2:08:a3:88:cc:5a:8e:63:a1:e2:bd:ee: 20:61:05:03:22:29:62:6c:86:25:e2:92:6c:0c:63: 36:57:ab:22:e9:e7:bb:e8:b8:e2:94:32:32:c7:9c: f6:08:26:51:c4:af:c8:1c:a6:5e:35:45:79:0d:99: 4a:28:29:09:93:8b:48:cf:e1:d3:a4:a9:e5:33:90: 4c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AF:32:FF:15:8C:D5:56:4B:56:68:81:94:6F:D7:D8:3F:59:11:3A X509v3 Authority Key Identifier: keyid:E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d0:00:2e:6b:10:50:6d:3b:9c:c7:9c:ff:5e:f0:28:aa:9e: fb:6d:53:5d:93:2f:4b:25:00:2d:da:b1:3f:79:f1:72:6c:84: ca:75:e6:77:8b:e1:b8:b5:29:ca:02:d1:fd:bb:b2:bd:f9:fc: bc:bf:ed:4f:f9:bb:d4:08:6f:0e:1b:ce:5c:0d:98:e5:dd:2a: ca:c6:31:44:00:65:d2:84:7c:42:d1:8d:23:b3:77:e5:f8:d5: 72:fc:80:b0:cc:36:29:23:a8:33:5c:85:9a:e4:19:aa:b5:da: a1:bf:dc:7a:07:fc:e8:c4:12:ec:0a:c7:cb:cb:25:27:26:42: 83:90:6e:24:ba:04:66:de:3b:4c:b7:c4:3a:a0:84:bf:ff:f9: 1d:66:3d:e4:a0:06:6d:2d:60:06:16:c4:46:b8:16:5e:7e:04: 9a:18:fc:a8:80:a9:82:56:14:47:3f:da:08:ac:fc:dd:86:1a: 4b:56:49:08:11:e0:0f:69:41:53:0c:3a:09:b5:4e:5c:cc:45: 26:9d:49:3a:0e:e6:3d:f2:53:37:a2:40:29:69:ab:fe:f4:39: ed:60:cf:42:18:e8:a6:3b:85:d7:f6:16:eb:57:e7:66:b1:62: ab:66:b5:f8:e7:5b:3c:76:6c:9f:88:8a:5c:f2:29:1a:b5:1a: 29:72:9f:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRGRDQxMTAvBgNVBAUTKEUxQzgyN0MzNDg5NzQ1RTM1NkU5MEU4QjYxQTNGNDQ3 RDFEMTUzMTEwHhcNMjYwMzI0MTk0MTI5WhcNMjYwMzMxMTk0MTI5WjAYMRYwFAYD VQQDEw02OWMyZThlYS1jNDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyRxBAHa0WsF48eqtWXbNUQ0uZynt7VRIN36GhNZM0oA35iI6yBPt/3nevU4 9wT6RGxzQ4QDIaHSMTKM7brUwOxOalj1gqqWQlKl4GdL1zgTa4M3Pb7313sjd+IN nNp6DB7tf7JFEi3lfSy8XWj3+S3/47ljUO20f+dr6t37AORYBajrnCLJ/HbHxbDp UIg52Y7cGTKL07spf80PpnTSyWw1aiApG+PuB7iPU0m/D64wzj1afhriCKOIzFqO Y6Hive4gYQUDIilibIYl4pJsDGM2V6si6ee76LjilDIyx5z2CCZRxK/IHKZeNUV5 DZlKKCkJk4tIz+HTpKnlM5BMbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJWvMv8V jNVWS1ZogZRv19g/WRE6MB8GA1UdIwQYMBaAFOHIJ8NIl0XjVukOi2Gj9EfR0VMR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEZENC80MEMwMTNGODlG MTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJlTlc2UTZMWWFQMFI5SFJV eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjZ253MGlYUmVOVzZRNkxZYVAwUjlIUlV4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEZENC80MEMwMTNGODlGMTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJl Tlc2UTZMWWFQMFI5SFJVeEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACtAALmsQUG07nMec/17wKKqe+21TXZMvSyUALdqxP3nxcmyEynXmd4vhuLUp ygLR/buyvfn8vL/tT/m71AhvDhvOXA2Y5d0qysYxRABl0oR8QtGNI7N35fjVcvyA sMw2KSOoM1yFmuQZqrXaob/cegf86MQS7ArHy8slJyZCg5BuJLoEZt47TLfEOqCE v//5HWY95KAGbS1gBhbERrgWXn4Emhj8qICpglYURz/aCKz83YYaS1ZJCBHgD2lB Uww6CbVOXMxFJp1JOg7mPfJTN6JAKWmr/vQ57WDPQhjopjuF1/YW61fnZrFiq2a1 +OdbPHZsn4iKXPIpGrUaKXKf6w== -----END CERTIFICATE-----Generated at Thu Mar 26 02:38:29 2026 by rpki-client