$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft File: 4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json) Hash identifier: tfHfzgRVY+TmQQC++xSyHptHuK/vl49aFhRoDMlrI6E= Subject key identifier: 40:3B:FC:BD:7F:AC:86:81:DA:E6:11:85:89:3C:02:69:6C:F6:57:8C Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Certificate serial: 0204 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft Manifest number: 01F4 Signing time: Wed 25 Mar 2026 02:37:37 +0000 Manifest this update: Wed 25 Mar 2026 02:37:36 +0000 Manifest next update: Wed 01 Apr 2026 02:37:36 +0000 Files and hashes: 1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: NNrP2KA6J/vI+teIyaARfIAtEOwlhZBF1AXI9duhPiI=) 2: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: iIoPhVJj7Ein/zE76pSKLmE+AYXPB7k8gN5o8EtAAc8=) 3: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: PMCoxJN0Mw3UihPrQUCzoPvyQ9Kv2AExrUeTP8CdAPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Validity Not Before: Mar 25 02:37:36 2026 GMT Not After : Apr 1 02:37:36 2026 GMT Subject: CN=69c34a71-9680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9f:8d:ac:7a:14:4a:1e:4f:90:06:c7:c0:c1: 97:21:e6:8d:a7:f6:38:1b:23:e3:72:e2:72:a1:c8: e6:d3:e2:c6:4c:c6:f7:7a:e9:8d:83:0a:ce:48:76: 52:90:f0:86:61:b3:11:0a:52:9a:19:2e:5b:60:c3: 88:fc:c9:92:6a:75:e8:d6:56:ee:6d:81:0a:03:5b: 02:3d:1f:75:ad:fe:07:e7:5c:b8:f0:f4:34:d1:09: 26:ac:fc:cc:81:5b:d2:ed:54:b8:56:e6:08:26:23: 70:d5:be:ff:66:77:df:db:73:13:6e:a1:9d:e4:08: e9:d9:57:b3:7a:01:47:fb:49:5b:61:1f:7f:2c:39: 97:d1:a0:e5:64:1c:9e:57:68:01:bf:cc:9f:90:1e: 94:fa:cc:3a:c8:ba:c6:35:01:05:b4:26:52:12:1f: 89:bc:a0:c3:a2:86:19:1e:8f:86:1c:e5:cb:c8:c0: fc:9e:56:7f:fe:1b:87:f4:a2:e1:3c:1d:42:03:ed: ac:52:21:49:e6:9f:29:f7:21:b4:b0:91:f7:2c:6d: 71:bd:b2:fd:87:28:3e:70:76:6a:24:eb:8b:5f:c2: 2d:b7:ac:16:4c:ad:56:1e:94:33:d4:3c:8d:70:fa: ac:95:53:8e:9a:fa:9c:4a:e9:02:56:05:7b:5f:df: 59:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3B:FC:BD:7F:AC:86:81:DA:E6:11:85:89:3C:02:69:6C:F6:57:8C X509v3 Authority Key Identifier: keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:12:2f:16:a1:33:11:11:f5:58:8c:6a:40:7a:65:6f:02:18: 38:b8:d8:e7:cf:10:19:cb:73:36:59:2f:69:38:ff:1c:00:2a: f2:1b:7d:4c:3e:cd:75:a2:d0:87:ed:fe:e3:5f:2e:c2:e6:48: 95:8c:38:af:17:2c:31:c5:3d:e0:73:e9:f0:e7:49:84:63:1f: 03:21:6f:9e:34:7d:14:e0:b9:93:91:1c:1e:63:f6:ae:b0:8b: 0a:4a:49:d2:c7:b2:32:dd:21:ee:21:7f:cf:c0:cc:36:c8:3c: 0a:3f:1e:4e:03:e4:c4:f0:b0:33:c4:47:cb:cf:f6:00:b4:45: 59:3d:7c:5c:a3:58:d4:cc:0f:ff:9f:3f:35:21:68:82:2c:20: e4:2c:c5:10:91:cd:c7:26:6d:9d:97:61:da:82:19:c8:e3:ca: 30:a7:80:66:fd:4e:19:55:0d:45:24:e6:a7:e9:ff:98:91:1f: a7:95:f4:1d:cf:b7:68:8c:22:64:c0:ad:8f:b0:f8:67:a7:c0: 82:56:a2:6f:2d:4f:6f:42:e9:cb:f9:fd:02:34:77:26:a2:8c: e0:8c:31:fa:1c:28:53:9b:de:ad:40:c0:53:03:6b:72:50:0d: 81:90:97:3e:85:c0:e7:48:af:21:54:6f:2f:6c:a7:85:d9:52: 87:8b:b3:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3MzcxMTAvBgNVBAUTKEUxRTc3OUNCMzFGRkU3NzMxQTMzQjVFQjdFQUZDNkIy QUJEQjQ0RTMwHhcNMjYwMzI1MDIzNzM2WhcNMjYwNDAxMDIzNzM2WjAYMRYwFAYD VQQDEw02OWMzNGE3MS05NjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsp+NrHoUSh5PkAbHwMGXIeaNp/Y4GyPjcuJyocjm0+LGTMb3eumNgwrOSHZS kPCGYbMRClKaGS5bYMOI/MmSanXo1lbubYEKA1sCPR91rf4H51y48PQ00QkmrPzM gVvS7VS4VuYIJiNw1b7/Znff23MTbqGd5Ajp2VezegFH+0lbYR9/LDmX0aDlZBye V2gBv8yfkB6U+sw6yLrGNQEFtCZSEh+JvKDDooYZHo+GHOXLyMD8nlZ//huH9KLh PB1CA+2sUiFJ5p8p9yG0sJH3LG1xvbL9hyg+cHZqJOuLX8Itt6wWTK1WHpQz1DyN cPqslVOOmvqcSukCVgV7X99ZkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEA7/L1/ rIaB2uYRhYk8Amls9leMMB8GA1UdIwQYMBaAFOHnecsx/+dzGjO1636vxrKr20Tj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzczNy84Mjk0MzYzRTMz NTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUzTWFNN1hyZnFfR3NxdmJS T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlZDV5ekhfNTNNYU03WHJmcV9Hc3F2YlJPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzczNy84Mjk0MzYzRTMzNTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUz TWFNN1hyZnFfR3NxdmJST00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUhIvFqEzERH1WIxqQHplbwIYOLjY588QGctzNlkvaTj/HAAq8ht9TD7NdaLQ h+3+418uwuZIlYw4rxcsMcU94HPp8OdJhGMfAyFvnjR9FOC5k5EcHmP2rrCLCkpJ 0seyMt0h7iF/z8DMNsg8Cj8eTgPkxPCwM8RHy8/2ALRFWT18XKNY1MwP/58/NSFo giwg5CzFEJHNxyZtnZdh2oIZyOPKMKeAZv1OGVUNRSTmp+n/mJEfp5X0Hc+3aIwi ZMCtj7D4Z6fAglaiby1Pb0Lpy/n9AjR3JqKM4Iwx+hwoU5verUDAUwNrclANgZCX PoXA50ivIVRvL2ynhdlSh4uzQQ== -----END CERTIFICATE-----Generated at Thu Mar 26 05:01:26 2026 by rpki-client