$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft File: c4wjqkznVV7qL8jCvtj0akiNyT0.mft (raw, json) Hash identifier: +PPcgIpmxt7funAYx6iTw0tWOkG/ddLijC3qNJMBuvQ= Subject key identifier: 79:3D:10:5B:E2:DF:BA:FF:BB:D0:E9:EE:5C:75:83:C7:49:DD:6A:89 Authority key identifier: 73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D Certificate issuer: /CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Certificate serial: 24C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft Manifest number: 484E Signing time: Tue 24 Mar 2026 15:43:01 +0000 Manifest this update: Tue 24 Mar 2026 15:43:01 +0000 Manifest next update: Tue 31 Mar 2026 15:43:01 +0000 Files and hashes: 1: c4wjqkznVV7qL8jCvtj0akiNyT0.crl (hash: r8yiFqYcG5pFdD0bYNUQfGDIHztAnmo4/fPpHBKtr+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9408 (0x24c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29, serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Validity Not Before: Mar 24 15:43:01 2026 GMT Not After : Mar 31 15:43:01 2026 GMT Subject: CN=69c2b105-6714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0e:f9:3d:64:3b:6f:0f:9b:ce:fe:a0:ae:c1: 23:2a:7f:9f:6e:00:a4:62:4c:fe:77:40:55:e7:a2: 05:bc:63:31:e2:1f:86:65:a0:bf:62:ab:75:cd:d5: 41:54:c9:40:7d:23:6d:a3:7e:8f:e3:80:aa:e9:4b: 47:95:b8:41:eb:9b:a3:2c:e9:ed:23:32:c4:cf:53: 88:43:80:58:f8:12:0a:65:e1:1c:a6:3a:7c:ab:0c: 0e:db:ab:e1:40:81:0d:bf:3d:22:15:bf:10:78:63: 25:86:3a:89:f1:03:58:3b:08:df:93:d0:23:fb:85: 10:a4:02:4f:df:36:64:4b:db:7e:15:e5:4c:64:dd: ac:e7:03:9e:8c:0d:f6:bb:99:16:10:ae:b8:97:b2: 59:bf:49:22:88:d9:a5:5e:20:4f:7d:42:7f:3d:ff: 58:41:39:97:17:28:55:7d:69:33:11:b1:b5:c0:2d: 73:39:82:76:56:19:cd:f9:d9:05:ed:ee:72:eb:6e: 96:fc:2f:32:d9:ba:0f:45:15:39:6a:1d:5e:6d:79: a3:20:6c:2d:3b:7d:5c:2e:b1:9d:43:65:73:5a:19: 4d:21:1c:8c:e6:85:f1:84:ab:38:46:5a:ab:d8:a2: fc:c3:cc:7d:93:03:c8:47:2e:7b:a0:97:26:24:0a: 19:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3D:10:5B:E2:DF:BA:FF:BB:D0:E9:EE:5C:75:83:C7:49:DD:6A:89 X509v3 Authority Key Identifier: keyid:73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:6a:12:8d:e8:c6:0e:9a:b3:ba:40:fb:01:39:b5:b1:fd:b5: bd:75:89:98:df:c9:43:fa:4d:db:9b:bb:21:4f:50:bb:5e:11: df:bd:58:bb:c4:29:7f:5a:3d:0c:67:f1:cd:35:6b:40:46:18: e4:14:95:72:56:31:ae:9d:d5:7c:28:f8:6e:f4:4e:46:b3:d3: 1f:29:19:d6:b3:ab:a5:5b:ef:6d:a7:99:dc:64:68:1b:b8:68: 5d:79:1c:f9:31:cc:9c:ad:72:2a:7a:72:f3:a1:98:4f:c7:c4: c0:2a:4a:61:2e:3d:c9:0b:44:7a:ef:4a:f5:b9:67:99:68:3b: 06:9a:85:6c:cc:e8:77:d4:ae:01:d2:82:22:94:21:b2:34:e7: 59:3c:04:ac:a6:b7:26:75:fe:7c:0d:24:ef:cd:c4:53:77:99: ca:7f:7c:6c:36:ff:b1:9c:e4:b5:ae:46:e6:14:6d:1e:cb:1a: f9:f6:1a:b0:7c:33:f0:df:f5:2b:18:a2:b1:11:eb:12:b3:55: 49:16:48:03:ba:1f:21:bd:cd:47:3d:0a:53:6e:20:9b:44:4b: b1:b6:86:04:ea:22:4c:40:83:f3:12:38:df:48:f2:a3:92:48: d3:ef:7f:0a:c6:00:fe:a1:a7:d3:79:4b:45:bf:1e:82:39:ab: d7:76:c7:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKDczOEMyM0FBNENFNzU1NUVFQTJGQzhDMkJFRDhGNDZB NDg4REM5M0QwHhcNMjYwMzI0MTU0MzAxWhcNMjYwMzMxMTU0MzAxWjAYMRYwFAYD VQQDEw02OWMyYjEwNS02NzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQ75PWQ7bw+bzv6grsEjKn+fbgCkYkz+d0BV56IFvGMx4h+GZaC/Yqt1zdVB VMlAfSNto36P44Cq6UtHlbhB65ujLOntIzLEz1OIQ4BY+BIKZeEcpjp8qwwO26vh QIENvz0iFb8QeGMlhjqJ8QNYOwjfk9Aj+4UQpAJP3zZkS9t+FeVMZN2s5wOejA32 u5kWEK64l7JZv0kiiNmlXiBPfUJ/Pf9YQTmXFyhVfWkzEbG1wC1zOYJ2VhnN+dkF 7e5y626W/C8y2boPRRU5ah1ebXmjIGwtO31cLrGdQ2VzWhlNIRyM5oXxhKs4Rlqr 2KL8w8x9kwPIRy57oJcmJAoZkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHk9EFvi 37r/u9Dp7lx1g8dJ3WqJMB8GA1UdIwQYMBaAFHOMI6pM51Ve6i/Iwr7Y9GpIjck9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZWN3FMOGpDdnRqMGFraU55 VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0d2pxa3puVlY3cUw4akN2dGowYWtpTnlUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZW N3FMOGpDdnRqMGFraU55VDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGmoSjejGDpqzukD7ATm1sf21vXWJmN/JQ/pN25u7IU9Qu14R371Yu8Qpf1o9 DGfxzTVrQEYY5BSVclYxrp3VfCj4bvRORrPTHykZ1rOrpVvvbaeZ3GRoG7hoXXkc +THMnK1yKnpy86GYT8fEwCpKYS49yQtEeu9K9blnmWg7BpqFbMzod9SuAdKCIpQh sjTnWTwErKa3JnX+fA0k783EU3eZyn98bDb/sZzkta5G5hRtHssa+fYasHwz8N/1 KxiisRHrErNVSRZIA7ofIb3NRz0KU24gm0RLsbaGBOoiTECD8xI430jyo5JI0+9/ CsYA/qGn03lLRb8egjmr13bHhg== -----END CERTIFICATE-----Generated at Thu Mar 26 06:08:55 2026 by rpki-client