$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft File: g4-9CzleqQcGxsKJrCaw1zigQkE.mft (raw, json) Hash identifier: dGfvOWHXrsSuD3S5LNaeCIDDgmZiv2qc1MoYf1XBooo= Subject key identifier: 43:F3:93:D0:00:84:6D:22:E1:62:32:02:68:75:EE:0A:7D:9D:30:BE Authority key identifier: 83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41 Certificate issuer: /CN=A917BB9A/serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241 Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft Manifest number: EE Signing time: Wed 25 Mar 2026 05:42:51 +0000 Manifest this update: Wed 25 Mar 2026 05:42:51 +0000 Manifest next update: Wed 01 Apr 2026 05:42:51 +0000 Files and hashes: 1: g4-9CzleqQcGxsKJrCaw1zigQkE.crl (hash: 3Q5UUzuvaND/4Paz0ESmVyiSqola+unfHUTaJLQqk10=) 2: 0CBF3110D59011EFB76D6824C4F9AE02.roa (hash: HUtXLhQ2zyP4LJGfZauEnR2MPzei0tQ4qoL8B66B5TY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB9A, serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241 Validity Not Before: Mar 25 05:42:51 2026 GMT Not After : Apr 1 05:42:51 2026 GMT Subject: CN=69c375db-b878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b8:53:cc:9c:2a:6c:bd:b6:71:98:48:be:a5: 0e:b2:1a:4b:cc:4a:6a:59:a1:c0:c1:49:1a:b4:76: 62:52:83:e5:6b:e8:3d:f6:06:bd:e3:89:08:5c:28: 5b:59:7b:fc:65:03:0f:a2:dc:65:e8:e5:fa:07:d7: 4e:83:42:6e:af:5a:bc:89:49:ff:6f:ed:28:bc:61: 6f:f1:48:33:6d:06:2e:c3:97:30:19:2c:e1:52:76: 95:1d:60:67:79:e7:9a:1c:55:9d:44:15:e3:e5:3f: b3:25:39:ef:c2:bc:0b:40:10:16:5f:3d:43:f9:b3: 7e:cc:99:c3:b8:28:e5:e0:a0:4f:0e:ad:6c:7a:63: ff:25:8c:34:69:96:4f:63:df:ab:b0:9b:55:92:b4: c2:39:be:fb:02:4e:70:a0:19:c2:8f:01:6b:48:3e: 33:cf:e0:94:17:3b:10:6c:2e:92:fe:73:85:bd:58: 85:28:25:e2:db:7a:08:5b:49:43:eb:ee:80:34:46: bd:49:67:3b:1a:be:b2:d1:d4:8c:81:b2:66:6d:9a: 6a:67:b4:d3:b6:44:a8:07:f6:04:ec:02:93:03:65: 4c:13:82:a8:2c:d4:01:de:4b:a4:da:d2:b7:ae:45: 21:91:33:9a:0d:dc:84:6d:bd:14:b7:ea:89:fd:10: 5a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F3:93:D0:00:84:6D:22:E1:62:32:02:68:75:EE:0A:7D:9D:30:BE X509v3 Authority Key Identifier: keyid:83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:eb:c1:b0:a6:95:c5:81:9a:e3:6c:2e:55:2f:51:7f:55:13: ff:88:16:f8:18:4e:f5:13:65:29:c4:b5:21:86:ca:8f:87:4e: 6a:62:fd:47:a8:aa:cb:13:68:3e:f9:4d:d7:10:b5:09:b2:64: 74:df:51:13:c0:2d:dd:45:c2:51:61:1d:33:02:1b:28:7a:80: e7:67:84:1f:e2:80:2f:b7:c9:fd:3c:5b:4c:78:5d:93:c1:d9: fb:f5:ba:62:56:b2:c9:ef:53:28:f6:08:75:96:76:08:6e:ff: a4:81:4b:76:2f:a6:b2:86:9f:ff:65:43:a3:6e:84:a7:ea:dd: 33:68:8a:33:30:f2:97:0c:24:4d:7e:d8:7c:6f:11:c2:ae:fd: 1b:5b:6f:97:9b:9e:b3:66:bc:ab:65:78:8d:dd:fc:5f:9a:39: e2:30:58:43:f0:dd:38:ad:6c:f4:7c:75:6d:f9:b6:be:dd:0a: 78:5f:7b:a1:0e:a5:e2:20:cd:2f:12:f8:1a:db:68:a4:ab:24: 0f:01:fe:d5:7f:3e:2c:ac:63:79:d2:a1:3c:63:1c:3c:b2:5b: ce:a6:64:25:87:c8:3d:37:bd:1e:cf:e1:a8:9f:e8:50:d7:cc: 44:ef:33:fc:75:e3:c9:f0:b3:03:c8:98:d8:d7:3d:df:ed:7e: b8:23:51:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCOUExMTAvBgNVBAUTKDgzOEZCRDBCMzk1RUE5MDcwNkM2QzI4OUFDMjZCMEQ3 MzhBMDQyNDEwHhcNMjYwMzI1MDU0MjUxWhcNMjYwNDAxMDU0MjUxWjAYMRYwFAYD VQQDEw02OWMzNzVkYi1iODc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprhTzJwqbL22cZhIvqUOshpLzEpqWaHAwUkatHZiUoPla+g99ga944kIXChb WXv8ZQMPotxl6OX6B9dOg0Jur1q8iUn/b+0ovGFv8UgzbQYuw5cwGSzhUnaVHWBn eeeaHFWdRBXj5T+zJTnvwrwLQBAWXz1D+bN+zJnDuCjl4KBPDq1semP/JYw0aZZP Y9+rsJtVkrTCOb77Ak5woBnCjwFrSD4zz+CUFzsQbC6S/nOFvViFKCXi23oIW0lD 6+6ANEa9SWc7Gr6y0dSMgbJmbZpqZ7TTtkSoB/YE7AKTA2VME4KoLNQB3kuk2tK3 rkUhkTOaDdyEbb0Ut+qJ/RBavwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEPzk9AA hG0i4WIyAmh17gp9nTC+MB8GA1UdIwQYMBaAFIOPvQs5XqkHBsbCiawmsNc4oEJB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI5QS80MTM5MEJDQUNG RjMxMUVGOTA2MkU1MjFDNEY5QUUwMi9nNC05Q3psZXFRY0d4c0tKckNhdzF6aWdR a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2c0LTlDemxlcVFjR3hzS0pyQ2F3MXppZ1FrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkI5QS80MTM5MEJDQUNGRjMxMUVGOTA2MkU1MjFDNEY5QUUwMi9nNC05Q3psZXFR Y0d4c0tKckNhdzF6aWdRa0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD+vBsKaVxYGa42wuVS9Rf1UT/4gW+BhO9RNlKcS1IYbKj4dOamL9R6iqyxNo PvlN1xC1CbJkdN9RE8At3UXCUWEdMwIbKHqA52eEH+KAL7fJ/TxbTHhdk8HZ+/W6 Ylayye9TKPYIdZZ2CG7/pIFLdi+msoaf/2VDo26Ep+rdM2iKMzDylwwkTX7YfG8R wq79G1tvl5ues2a8q2V4jd38X5o54jBYQ/DdOK1s9Hx1bfm2vt0KeF97oQ6l4iDN LxL4GttopKskDwH+1X8+LKxjedKhPGMcPLJbzqZkJYfIPTe9Hs/hqJ/oUNfMRO8z /HXjyfCzA8iY2Nc93+1+uCNRTA== -----END CERTIFICATE-----Generated at Thu Mar 26 16:11:27 2026 by rpki-client