$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft File: 4CEd1HfFtNoX56IChgOs2OcWZrU.mft (raw, json) Hash identifier: a+110Ktd4tYmqy6oN2HkXFAnWodFcBSr7ttdjySqiCw= Subject key identifier: B9:48:57:B2:D8:7C:8A:D6:3B:CC:00:34:65:D5:92:0E:D2:DF:08:9F Authority key identifier: E0:21:1D:D4:77:C5:B4:DA:17:E7:A2:02:86:03:AC:D8:E7:16:66:B5 Certificate issuer: /CN=A91EB1BE/serialNumber=E0211DD477C5B4DA17E7A2028603ACD8E71666B5 Certificate serial: 1376 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft Manifest number: 1362 Signing time: Thu 26 Mar 2026 16:57:18 +0000 Manifest this update: Thu 26 Mar 2026 16:57:18 +0000 Manifest next update: Thu 02 Apr 2026 16:57:18 +0000 Files and hashes: 1: 4CEd1HfFtNoX56IChgOs2OcWZrU.crl (hash: fTpLJ0fd8YdQJB1s5Zqcud9vYtBV/7PKpLp0Ts+RJSo=) 2: 31E1DE72B04B11EE9F3B384BC4F9AE02.roa (hash: O9w5ukmDcrFDcEjD6HiwQa6Y82NCxJ277Oe6QTyQjzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.crl rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 16:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4982 (0x1376) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB1BE, serialNumber=E0211DD477C5B4DA17E7A2028603ACD8E71666B5 Validity Not Before: Mar 26 16:57:18 2026 GMT Not After : Apr 2 16:57:18 2026 GMT Subject: CN=69c5656e-5cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:82:81:98:6e:56:ad:ce:15:de:68:3c:9c:d7: 64:10:38:53:22:4f:89:c3:c7:0d:7c:5a:a0:eb:92: 0d:61:07:5d:76:99:5c:79:a6:9b:95:6f:f6:3f:3c: ed:5b:b9:bb:67:03:a5:a4:4f:19:7e:dc:5b:1d:dc: 67:04:60:38:1e:c4:8a:c5:e6:c0:a9:be:5d:6a:e5: 3e:25:11:6d:01:fd:87:6b:f0:44:60:36:0d:fb:90: 5e:92:71:da:c6:a9:8b:52:69:f3:af:c4:83:86:25: 17:bb:00:06:39:98:2c:a2:c2:f9:c0:f6:b9:43:78: f8:54:e0:f9:20:ef:bb:a1:e3:b5:56:09:e9:68:1f: a6:bd:b4:29:65:5f:78:dc:62:5f:1c:2a:7a:2a:6f: 87:0d:4f:74:47:11:b9:3d:04:f9:04:6c:54:20:32: e7:36:a3:50:cc:8d:b4:b5:f6:d2:ba:73:b6:3a:a8: 79:5b:a9:cf:bb:2d:1f:36:58:ed:ff:8e:82:af:2f: 29:bf:c3:b9:41:3f:b0:74:29:df:e5:36:de:15:66: 37:0d:1e:3f:87:a9:0c:72:91:06:04:18:61:59:01: cd:16:ac:a6:ec:24:4f:b9:c0:a6:10:4e:85:2f:f9: 22:7c:18:a2:b0:52:5b:f3:f6:00:bc:0d:f1:cb:ac: 51:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:48:57:B2:D8:7C:8A:D6:3B:CC:00:34:65:D5:92:0E:D2:DF:08:9F X509v3 Authority Key Identifier: keyid:E0:21:1D:D4:77:C5:B4:DA:17:E7:A2:02:86:03:AC:D8:E7:16:66:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:bb:1a:00:44:8d:c6:6f:b7:52:d3:60:48:4c:3e:d5:20:dd: 0c:3f:35:37:e1:75:12:f6:26:d8:1d:95:3a:ba:29:56:f0:61: fd:4b:a5:25:a7:03:d0:4f:4a:75:a4:29:08:9a:83:a9:af:78: 3a:15:6b:a7:d1:1b:97:2f:be:9a:40:a8:d3:8d:76:f2:73:81: 7e:74:6f:aa:ed:09:c0:1b:bc:e4:64:f5:23:ae:e2:1b:36:b3: 7c:b9:26:a2:25:28:49:74:89:d9:6d:95:4e:15:21:e9:54:72: 06:78:cf:ad:95:9d:2c:59:3d:dd:ad:73:72:52:4a:b6:3c:41: b1:0a:76:c3:96:eb:90:a2:b3:27:29:f0:ca:ff:2b:07:03:af: 1f:d8:d1:59:49:dc:9c:56:85:9f:01:62:f3:24:6a:ea:3a:7f: 98:ec:cc:9b:0a:35:65:ed:ca:16:10:30:f4:9d:e5:09:d5:b4: e3:85:27:c2:5b:3b:a8:e2:49:e3:5b:bf:5c:b2:d9:3b:34:dd: af:27:72:7d:17:f2:b6:2b:c0:a2:db:96:9c:ac:47:fc:50:94: 2e:fe:1c:45:8d:21:cf:a7:b8:53:af:b6:6d:d6:48:4e:96:60: ff:75:04:02:8e:bc:6b:07:bc:33:2e:0c:00:f5:b3:f3:90:ea: 0d:d1:3c:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIxQkUxMTAvBgNVBAUTKEUwMjExREQ0NzdDNUI0REExN0U3QTIwMjg2MDNBQ0Q4 RTcxNjY2QjUwHhcNMjYwMzI2MTY1NzE4WhcNMjYwNDAyMTY1NzE4WjAYMRYwFAYD VQQDEw02OWM1NjU2ZS01Y2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYKBmG5Wrc4V3mg8nNdkEDhTIk+Jw8cNfFqg65INYQdddplceaablW/2Pzzt W7m7ZwOlpE8ZftxbHdxnBGA4HsSKxebAqb5dauU+JRFtAf2Ha/BEYDYN+5BeknHa xqmLUmnzr8SDhiUXuwAGOZgsosL5wPa5Q3j4VOD5IO+7oeO1VgnpaB+mvbQpZV94 3GJfHCp6Km+HDU90RxG5PQT5BGxUIDLnNqNQzI20tfbSunO2Oqh5W6nPuy0fNljt /46Cry8pv8O5QT+wdCnf5TbeFWY3DR4/h6kMcpEGBBhhWQHNFqym7CRPucCmEE6F L/kifBiisFJb8/YAvA3xy6xRnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLlIV7LY fIrWO8wANGXVkg7S3wifMB8GA1UdIwQYMBaAFOAhHdR3xbTaF+eiAoYDrNjnFma1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjFCRS81QTU3Nzg2Q0Mw QzgxMUU4QUU4MDUzMzRDNEY5QUUwMi80Q0VkMUhmRnROb1g1NklDaGdPczJPY1da clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDRWQxSGZGdE5vWDU2SUNoZ09zMk9jV1pyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjFCRS81QTU3Nzg2Q0MwQzgxMUU4QUU4MDUzMzRDNEY5QUUwMi80Q0VkMUhmRnRO b1g1NklDaGdPczJPY1daclUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKLsaAESNxm+3UtNgSEw+1SDdDD81N+F1EvYm2B2VOropVvBh/UulJacD0E9K daQpCJqDqa94OhVrp9Ebly++mkCo04128nOBfnRvqu0JwBu85GT1I67iGzazfLkm oiUoSXSJ2W2VThUh6VRyBnjPrZWdLFk93a1zclJKtjxBsQp2w5brkKKzJynwyv8r BwOvH9jRWUncnFaFnwFi8yRq6jp/mOzMmwo1Ze3KFhAw9J3lCdW044Unwls7qOJJ 41u/XLLZOzTdrydyfRfytivAotuWnKxH/FCULv4cRY0hz6e4U6+2bdZITpZg/3UE Ao68awe8My4MAPWz85DqDdE8Xg== -----END CERTIFICATE-----Generated at Sat Mar 28 10:06:22 2026 by rpki-client