$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft File: F4AJbMkKtq6vCNeasYxUx7d6U6A.mft (raw, json) Hash identifier: WDdlgtC2Jmag6U7xPDYSnTJXfvXtAmxAZ2tm5eh7DSk= Subject key identifier: 5E:56:D2:9C:1B:44:B4:65:B5:60:69:EF:00:D6:2D:C8:8A:75:4B:4E Authority key identifier: 17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0 Certificate issuer: /CN=A91A4543/serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft Manifest number: A0 Signing time: Tue 24 Mar 2026 20:16:03 +0000 Manifest this update: Tue 24 Mar 2026 20:16:03 +0000 Manifest next update: Tue 31 Mar 2026 20:16:03 +0000 Files and hashes: 1: F4AJbMkKtq6vCNeasYxUx7d6U6A.crl (hash: M55C+QbABUVwJ6k3FDNAqa54t85q8BgAPhD70a+1IL4=) 2: 458F65E8572511F0BE0E492AC4F9AE02.roa (hash: Rx4vAlWyTLV0daFrUy6DuCo/+UjTzyGK5tVT0zVpxsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4543, serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0 Validity Not Before: Mar 24 20:16:03 2026 GMT Not After : Mar 31 20:16:03 2026 GMT Subject: CN=69c2f103-eaef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a2:04:85:06:3d:c0:63:da:fe:f6:dc:c0:b0: 4b:80:1d:67:6b:87:7b:95:99:0d:c0:9c:32:35:0a: 23:7e:d5:03:6a:98:f5:29:39:44:55:56:f0:07:bd: 8b:d7:5d:22:04:2b:9c:20:25:f6:0b:2a:f4:16:31: 75:27:5c:67:55:64:6b:d5:16:78:63:08:ee:98:77: 6c:b1:db:fc:e7:88:af:b1:a1:7f:6e:9d:79:b8:09: 5c:c7:df:9d:c5:23:d0:66:9e:8a:7f:e8:1a:39:1f: 4f:ca:79:9e:4b:4f:0c:c1:57:59:e1:cd:e9:73:25: eb:57:ed:3e:36:e3:78:5b:d8:bd:33:78:c8:ba:5f: 43:5f:1f:60:5a:05:ee:02:08:18:d1:43:74:42:f6: fd:38:7a:40:31:24:01:dc:d8:00:be:54:23:7c:02: 1d:05:40:e2:63:26:6d:df:94:ae:87:af:f2:c5:24: 2a:29:de:20:88:02:86:ce:d2:1b:33:6c:3e:48:e4: c3:73:49:51:90:ff:b0:48:a1:8c:b6:81:69:da:d3: 79:bf:fb:95:2d:4a:ea:a7:7f:dc:ba:9e:d9:47:49: 84:a9:d1:63:95:ea:03:9a:64:8b:39:6e:3a:94:f7: 66:3a:ef:33:19:53:25:c2:76:f6:d4:1b:89:bd:60: d0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:56:D2:9C:1B:44:B4:65:B5:60:69:EF:00:D6:2D:C8:8A:75:4B:4E X509v3 Authority Key Identifier: keyid:17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f5:90:41:e1:ae:9c:6f:c0:34:1e:4c:4c:09:3e:e7:df:e2: c1:d1:d7:86:53:37:65:aa:08:67:e8:42:4a:d5:cf:64:ed:9d: 2e:d8:a3:1f:8b:c6:c8:30:5a:d8:34:46:11:7b:bc:f5:68:7b: 70:63:47:c0:b6:c9:df:e9:bb:b6:c3:b5:31:82:19:46:85:4f: 69:96:bb:51:c8:8a:d0:d3:e6:82:a7:d4:5f:0d:4b:de:ef:c1: 4c:dc:f5:83:82:cf:a7:11:7c:06:f8:48:2c:e0:48:40:bc:b5: 5f:a0:a5:b4:1f:37:90:5d:89:9e:18:34:29:25:c3:44:74:2c: a8:75:61:7f:2a:d9:a2:07:30:6e:45:82:87:59:c1:08:03:01: 53:a3:e4:86:05:fb:f8:19:b7:8a:d3:48:57:b8:e4:da:2e:7f: fa:d5:23:c7:f7:90:9a:fd:9d:8b:84:21:5c:0a:99:e2:6e:a4: 67:2c:70:99:54:06:20:38:1a:4e:5e:db:f4:d6:07:56:d1:77: 42:79:11:09:e4:94:fe:72:ec:eb:de:9a:ce:86:fc:7f:e6:db: 75:ad:da:b8:73:e5:39:40:c9:0a:7c:b0:18:0a:67:68:8b:db: f7:b6:49:1e:7b:d9:a2:94:0c:e0:89:8a:31:9f:e8:59:e1:77: 59:6c:08:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1NDMxMTAvBgNVBAUTKDE3ODAwOTZDQzkwQUI2QUVBRjA4RDc5QUIxOEM1NEM3 Qjc3QTUzQTAwHhcNMjYwMzI0MjAxNjAzWhcNMjYwMzMxMjAxNjAzWjAYMRYwFAYD VQQDEw02OWMyZjEwMy1lYWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlqIEhQY9wGPa/vbcwLBLgB1na4d7lZkNwJwyNQojftUDapj1KTlEVVbwB72L 110iBCucICX2Cyr0FjF1J1xnVWRr1RZ4YwjumHdssdv854ivsaF/bp15uAlcx9+d xSPQZp6Kf+gaOR9PynmeS08MwVdZ4c3pcyXrV+0+NuN4W9i9M3jIul9DXx9gWgXu AggY0UN0Qvb9OHpAMSQB3NgAvlQjfAIdBUDiYyZt35Suh6/yxSQqKd4giAKGztIb M2w+SOTDc0lRkP+wSKGMtoFp2tN5v/uVLUrqp3/cup7ZR0mEqdFjleoDmmSLOW46 lPdmOu8zGVMlwnb21BuJvWDQTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF5W0pwb RLRltWBp7wDWLciKdUtOMB8GA1UdIwQYMBaAFBeACWzJCraurwjXmrGMVMe3elOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDU0My9BQjcxOUZDRTNC NjUxMUYwODc0MkRBMzlDNEY5QUUwMi9GNEFKYk1rS3RxNnZDTmVhc1l4VXg3ZDZV NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y0QUpiTWtLdHE2dkNOZWFzWXhVeDdkNlU2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDU0My9BQjcxOUZDRTNCNjUxMUYwODc0MkRBMzlDNEY5QUUwMi9GNEFKYk1rS3Rx NnZDTmVhc1l4VXg3ZDZVNkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADvWQQeGunG/ANB5MTAk+59/iwdHXhlM3ZaoIZ+hCStXPZO2dLtijH4vGyDBa 2DRGEXu89Wh7cGNHwLbJ3+m7tsO1MYIZRoVPaZa7UciK0NPmgqfUXw1L3u/BTNz1 g4LPpxF8BvhILOBIQLy1X6CltB83kF2Jnhg0KSXDRHQsqHVhfyrZogcwbkWCh1nB CAMBU6PkhgX7+Bm3itNIV7jk2i5/+tUjx/eQmv2di4QhXAqZ4m6kZyxwmVQGIDga Tl7b9NYHVtF3QnkRCeSU/nLs696azob8f+bbda3auHPlOUDJCnywGApnaIvb97ZJ HnvZopQM4ImKMZ/oWeF3WWwINw== -----END CERTIFICATE-----Generated at Thu Mar 26 06:59:04 2026 by rpki-client