$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft File: cx4n4S-z2wtszAsg8YaAm6CNCRU.mft (raw, json) Hash identifier: HXP3tCqFBfUIIaJ+woEK4ySeGfDmjqxMIFBqOncSKWU= Subject key identifier: 30:9D:67:AF:F7:DB:35:95:FC:F4:B5:94:27:35:52:6D:90:5A:FF:5C Authority key identifier: 73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 Certificate issuer: /CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Certificate serial: 0FAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft Manifest number: 0F98 Signing time: Tue 24 Mar 2026 17:25:37 +0000 Manifest this update: Tue 24 Mar 2026 17:25:37 +0000 Manifest next update: Tue 31 Mar 2026 17:25:37 +0000 Files and hashes: 1: cx4n4S-z2wtszAsg8YaAm6CNCRU.crl (hash: dWLL+QfRsQe/txomd96hX9QAjEKaUCR+5xBJxwc5Ivg=) 2: 76C782CC836811E9B8830935C4F9AE02.roa (hash: zCyf9OjZvyQznidGrRLY9YgyvLWdtz4Gp+P2ldxQodg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:25:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4013 (0xfad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58EC, serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Validity Not Before: Mar 24 17:25:37 2026 GMT Not After : Mar 31 17:25:37 2026 GMT Subject: CN=69c2c911-38c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ae:94:83:5f:a7:c7:e4:bc:96:58:69:d1:0a: ad:3a:db:5e:72:d2:87:d6:64:a0:46:65:79:e2:8a: 2b:42:76:7a:fe:85:17:18:b0:07:fa:1d:bc:39:3a: b0:cc:0b:86:f7:e1:cb:f1:28:3c:b0:35:19:86:b8: 5f:36:e0:7e:68:53:a9:19:f7:aa:14:3c:9c:ef:ff: 21:89:52:7b:1a:04:f8:c6:47:e5:bc:c3:d3:d7:c1: e0:88:fa:58:31:69:dd:a2:eb:42:fb:0e:2a:7a:43: 74:a3:b9:b1:3b:b0:ae:55:76:4a:32:a4:26:78:67: d0:27:f9:c0:83:a1:c9:0d:b5:09:9d:9a:8b:fb:1d: 1a:5f:da:a7:ab:3a:30:95:0b:97:9b:5c:48:ce:6b: 49:ec:1a:1e:72:70:6c:35:67:3d:f2:b6:71:06:51: 57:98:7d:dc:c2:41:0e:2c:e4:f5:c3:ea:0d:a7:0b: 90:8e:46:6d:59:62:93:15:0b:3e:d1:30:33:b5:84: 59:50:8a:f1:d6:92:8f:94:ac:b9:95:8a:71:6c:16: 94:14:58:4f:13:a5:e7:c6:04:99:5a:f8:05:d9:74: 9b:ea:ac:0f:97:0e:ba:b9:e5:97:53:c1:ec:00:11: 2f:ec:1e:2b:9e:90:f2:cf:a7:e6:f1:f7:e9:bd:6a: 97:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9D:67:AF:F7:DB:35:95:FC:F4:B5:94:27:35:52:6D:90:5A:FF:5C X509v3 Authority Key Identifier: keyid:73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:37:d6:86:b5:3a:35:d7:19:32:a6:b5:d4:66:20:a3:4d:89: a4:30:85:80:3b:77:6d:80:6e:45:60:aa:c1:52:c7:55:ff:db: 03:d1:1a:e1:85:d7:1e:5b:64:98:f6:8e:a5:9a:c3:20:ed:fe: 6e:06:e3:aa:00:82:90:7c:43:62:05:82:51:44:07:4d:d1:78: a5:f8:b2:9d:f2:6d:19:70:6b:ff:a5:00:e4:4a:e4:74:d0:35: 39:5b:b6:fe:89:26:22:5c:3a:e5:94:f1:36:c2:0e:96:37:d1: ed:57:71:3b:69:02:8f:44:cb:9f:15:69:9c:53:16:6d:65:d8: 33:cd:6a:52:b6:e3:6c:71:de:17:31:b8:42:08:15:66:cf:6b: 11:c9:c6:dd:af:46:97:ea:f6:97:dd:81:dd:65:1b:b5:41:27: 4b:a9:ae:3e:da:c8:ae:48:bc:ca:63:28:40:d2:30:89:de:14: 4f:18:14:ff:8f:b7:b1:e0:08:5e:92:49:0a:62:bb:ce:c2:6e: 0d:28:03:56:aa:86:1c:90:dd:51:53:0e:3c:15:92:f5:30:41: f7:31:3e:12:d7:52:65:66:fc:40:6e:3c:f8:b4:bd:89:ef:87: 59:58:dc:50:d9:06:4d:29:83:55:39:71:9f:82:03:cb:24:fa: 14:af:97:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RUMxMTAvBgNVBAUTKDczMUUyN0UxMkZCM0RCMEI2Q0NDMEIyMEYxODY4MDlC QTA4RDA5MTUwHhcNMjYwMzI0MTcyNTM3WhcNMjYwMzMxMTcyNTM3WjAYMRYwFAYD VQQDEw02OWMyYzkxMS0zOGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvK6Ug1+nx+S8llhp0QqtOttectKH1mSgRmV54oorQnZ6/oUXGLAH+h28OTqw zAuG9+HL8Sg8sDUZhrhfNuB+aFOpGfeqFDyc7/8hiVJ7GgT4xkflvMPT18HgiPpY MWndoutC+w4qekN0o7mxO7CuVXZKMqQmeGfQJ/nAg6HJDbUJnZqL+x0aX9qnqzow lQuXm1xIzmtJ7BoecnBsNWc98rZxBlFXmH3cwkEOLOT1w+oNpwuQjkZtWWKTFQs+ 0TAztYRZUIrx1pKPlKy5lYpxbBaUFFhPE6XnxgSZWvgF2XSb6qwPlw66ueWXU8Hs ABEv7B4rnpDyz6fm8ffpvWqX0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDCdZ6/3 2zWV/PS1lCc1Um2QWv9cMB8GA1UdIwQYMBaAFHMeJ+Evs9sLbMwLIPGGgJugjQkV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThFQy9BRjUwQTBFODgz NjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3dHN6QXNnOFlhQW02Q05D UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4NG40Uy16Mnd0c3pBc2c4WWFBbTZDTkNSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThFQy9BRjUwQTBFODgzNjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3 dHN6QXNnOFlhQW02Q05DUlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWjfWhrU6NdcZMqa11GYgo02JpDCFgDt3bYBuRWCqwVLHVf/bA9Ea4YXXHltk mPaOpZrDIO3+bgbjqgCCkHxDYgWCUUQHTdF4pfiynfJtGXBr/6UA5ErkdNA1OVu2 /okmIlw65ZTxNsIOljfR7VdxO2kCj0TLnxVpnFMWbWXYM81qUrbjbHHeFzG4QggV Zs9rEcnG3a9Gl+r2l92B3WUbtUEnS6muPtrIrki8ymMoQNIwid4UTxgU/4+3seAI XpJJCmK7zsJuDSgDVqqGHJDdUVMOPBWS9TBB9zE+EtdSZWb8QG48+LS9ie+HWVjc UNkGTSmDVTlxn4IDyyT6FK+XeQ== -----END CERTIFICATE-----Generated at Thu Mar 26 15:29:21 2026 by rpki-client