$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft File: 4OynvFsloMo3TZqDzEz5DdbPIgk.mft (raw, json) Hash identifier: 5+QLOcU+uW0YD+6o/xDErcZRjnuobmAh1QzDhkiZ7DM= Subject key identifier: 97:19:93:19:BB:8F:F8:A9:6A:AF:1B:F6:08:D4:DF:77:CE:B0:34:0C Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Certificate serial: 020E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft Manifest number: 01F4 Signing time: Wed 25 Mar 2026 02:37:57 +0000 Manifest this update: Wed 25 Mar 2026 02:37:57 +0000 Manifest next update: Wed 01 Apr 2026 02:37:57 +0000 Files and hashes: 1: 4OynvFsloMo3TZqDzEz5DdbPIgk.crl (hash: rGPRAX1fO1Ipsh5AcS9o1eWWpI8YJ9pKMqYvLjMVxmM=) 2: FE53F0DE34AA11EE85FF0735C4F9AE02.roa (hash: /Ca02zsxpAL8gcjil39VFFafzNLGZS+o8ZdBBpzgYJE=) 3: 23E0203034AF11EE90E6263DC4F9AE02.roa (hash: kQlooTOYF7DNmDZKuzweY7EEd5/y9UZLGCRSSGQFlGE=) 4: 2343647034AF11EE90E6263DC4F9AE02.roa (hash: +ktnd6zho24yZwUVIDb8JpM0wNDX8OLmDRgr8JefA9c=) 5: FBCA5E628A4E11EE8EFFA44BC4F9AE02.roa (hash: G4c9qIHjh7jRuzT8uRtPVyKbehGwTJD3pzh2RMSA5FQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 526 (0x20e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C74B5, serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Validity Not Before: Mar 25 02:37:57 2026 GMT Not After : Apr 1 02:37:57 2026 GMT Subject: CN=69c34a85-a773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7a:a2:08:ac:0f:6d:a9:be:e8:96:39:72:3e: f9:76:d6:4a:6a:48:f3:fd:d8:85:46:b6:d9:a2:0c: 57:66:fb:ea:d3:3a:2d:6e:58:16:ce:ca:31:08:ca: 7a:c9:6a:e9:e5:c6:01:3f:e9:28:63:0b:44:3b:b9: cf:23:8c:e6:86:c1:0d:2a:7d:23:af:aa:af:64:59: 74:db:f9:79:e6:7e:ac:50:7b:b1:8d:ee:33:35:c3: 7b:20:33:34:47:33:70:8e:31:95:a7:56:6f:f3:7c: 8c:6b:bf:20:4c:9e:6f:f4:e9:c3:d4:56:54:26:b9: f9:b5:e5:9a:38:db:c7:c4:1e:e6:13:37:bf:e9:87: 86:76:bd:ee:e6:5a:02:07:e6:36:da:de:6d:40:cf: 15:74:6c:79:7d:34:39:04:ee:9a:e4:e1:79:68:db: e1:3d:18:3d:c9:5d:b3:44:67:26:1d:1a:6e:58:14: 20:fb:40:3f:46:e2:75:82:ae:85:c0:49:a2:b1:1a: d2:85:fe:17:6c:f2:d8:cd:6a:e2:73:46:10:63:86: 35:cc:85:1a:2c:d4:f5:99:7e:14:b0:16:65:79:18: 32:bc:e3:fd:e8:35:a9:d7:c8:d0:45:21:c4:f7:20: 88:a0:6f:14:27:bf:30:63:5f:2d:90:9a:cf:df:84: 17:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:19:93:19:BB:8F:F8:A9:6A:AF:1B:F6:08:D4:DF:77:CE:B0:34:0C X509v3 Authority Key Identifier: keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5c:0f:10:c5:1a:5d:b7:c1:cc:66:69:42:4c:b2:d7:cc:fd: 66:f0:28:0f:b6:94:93:2f:35:fd:17:9d:72:03:91:98:83:0e: 28:fe:fd:19:2b:dd:0a:05:a0:35:b7:84:0d:e0:0e:e5:93:58: 09:d4:0c:b7:0b:d3:ea:3e:5b:20:eb:50:d2:77:15:87:e6:97: 1f:c3:8e:7b:63:53:56:29:04:79:71:63:02:92:49:bb:27:05: 61:97:d0:e7:a5:38:36:9a:e6:52:7c:22:d5:16:e5:61:f2:1d: 5e:5b:bd:60:c2:0c:05:97:5d:79:53:89:22:e1:42:6f:94:b7: 19:a2:f3:e6:e2:4f:6f:a2:aa:4f:1d:5d:99:7f:44:2a:6b:bb: ad:35:e2:ed:59:21:04:c4:c3:f9:50:5c:35:21:0e:47:f8:3b: 9f:03:c5:d1:cc:ac:77:6e:1d:1c:c1:ac:b1:3c:d6:2b:b5:83: c0:f4:c6:52:50:8f:84:70:e3:18:38:4d:37:4b:4e:3f:6a:ae: 6d:be:47:ad:80:3d:2a:81:ff:a2:3c:e8:d6:c9:5c:75:c0:8d: 50:ea:b3:98:ac:27:f4:79:f7:f6:dc:3e:64:7e:7e:7d:01:20: 51:7f:47:e2:5d:ad:fc:34:68:9c:47:1b:72:e7:74:11:ed:be: 64:bd:c3:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0QjUxMTAvBgNVBAUTKEUwRUNBN0JDNUIyNUEwQ0EzNzREOUE4M0NDNENGOTBE RDZDRjIyMDkwHhcNMjYwMzI1MDIzNzU3WhcNMjYwNDAxMDIzNzU3WjAYMRYwFAYD VQQDEw02OWMzNGE4NS1hNzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunqiCKwPbam+6JY5cj75dtZKakjz/diFRrbZogxXZvvq0zotblgWzsoxCMp6 yWrp5cYBP+koYwtEO7nPI4zmhsENKn0jr6qvZFl02/l55n6sUHuxje4zNcN7IDM0 RzNwjjGVp1Zv83yMa78gTJ5v9OnD1FZUJrn5teWaONvHxB7mEze/6YeGdr3u5loC B+Y22t5tQM8VdGx5fTQ5BO6a5OF5aNvhPRg9yV2zRGcmHRpuWBQg+0A/RuJ1gq6F wEmisRrShf4XbPLYzWric0YQY4Y1zIUaLNT1mX4UsBZleRgyvOP96DWp18jQRSHE 9yCIoG8UJ78wY18tkJrP34QXdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJcZkxm7 j/ipaq8b9gjU33fOsDQMMB8GA1UdIwQYMBaAFODsp7xbJaDKN02ag8xM+Q3WzyIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzRCNS85ODA0MzU2RTM0 QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9NbzNUWnFEekV6NURkYlBJ Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRPeW52RnNsb01vM1RacUR6RXo1RGRiUElnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzRCNS85ODA0MzU2RTM0QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9N bzNUWnFEekV6NURkYlBJZ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALlwPEMUaXbfBzGZpQkyy18z9ZvAoD7aUky81/RedcgORmIMOKP79GSvdCgWg NbeEDeAO5ZNYCdQMtwvT6j5bIOtQ0ncVh+aXH8OOe2NTVikEeXFjApJJuycFYZfQ 56U4NprmUnwi1RblYfIdXlu9YMIMBZddeVOJIuFCb5S3GaLz5uJPb6KqTx1dmX9E Kmu7rTXi7VkhBMTD+VBcNSEOR/g7nwPF0cysd24dHMGssTzWK7WDwPTGUlCPhHDj GDhNN0tOP2qubb5HrYA9KoH/ojzo1slcdcCNUOqzmKwn9Hn39tw+ZH5+fQEgUX9H 4l2t/DRonEcbcud0Ee2+ZL3DNw== -----END CERTIFICATE-----Generated at Thu Mar 26 18:47:55 2026 by rpki-client