$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft File: 4ISfBUORggKxeEROX_IviZ-eMg4.mft (raw, json) Hash identifier: nS6Z+51Cwprdm0xfz82S6D2UrE2dIVEz0RAkW4MBuiE= Subject key identifier: CB:AA:5C:F8:2F:5E:49:0B:3F:1B:9F:5C:56:87:BE:11:5C:3F:FF:89 Authority key identifier: E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E Certificate issuer: /CN=A91F7DBA/serialNumber=E0849F0543918202B178444E5FF22F899F9E320E Certificate serial: 0561 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft Manifest number: 0555 Signing time: Tue 24 Mar 2026 23:05:22 +0000 Manifest this update: Tue 24 Mar 2026 23:05:21 +0000 Manifest next update: Tue 31 Mar 2026 23:05:21 +0000 Files and hashes: 1: 4ISfBUORggKxeEROX_IviZ-eMg4.crl (hash: GoTHfiAGNu8R8TrGdBLd4On6bx7Zf/zvTPl4EUUj6Hw=) 2: 145F8B6434D211EEA9BD8F64C4F9AE02.roa (hash: GjQyrBrtjLGGx1Z0J/WzD76UJKpZKFLKZW1IsmAIl18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1377 (0x561) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7DBA, serialNumber=E0849F0543918202B178444E5FF22F899F9E320E Validity Not Before: Mar 24 23:05:21 2026 GMT Not After : Mar 31 23:05:21 2026 GMT Subject: CN=69c318b1-55ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9f:58:40:f3:77:6b:ec:40:44:ba:78:43:80: 1e:7b:2e:bb:b3:1c:31:a9:95:7e:41:d8:e1:53:17: a7:08:55:29:97:29:94:5e:d8:c1:c3:d8:51:fb:17: dd:ac:21:f3:c6:b8:c1:4d:e6:2a:9f:a3:9c:8b:2d: 56:8a:13:0d:59:e0:b2:3a:82:96:db:5c:a7:52:b4: 54:67:51:4a:71:89:92:d7:b6:1b:ad:df:97:3b:ed: 8b:e0:0d:d2:4c:17:c4:3b:dc:57:c1:d6:f7:9b:5a: f9:7b:9b:00:eb:16:70:03:8c:28:af:72:05:de:56: 27:d5:cb:8b:0b:e5:de:78:87:62:f7:a4:95:15:5b: 7f:47:8b:05:17:17:e9:3b:82:c2:4a:d3:36:5c:fe: e0:56:38:e8:86:dd:84:11:6a:c1:04:6a:b2:27:d4: 07:03:71:77:87:4f:4f:b4:94:9e:eb:37:23:bd:b4: cc:8d:cb:22:ee:7c:07:4c:2a:04:9a:c9:b4:8e:b8: 06:fb:ba:b8:3d:18:1c:14:9c:25:53:3a:5d:24:8c: d2:06:0e:c6:fa:77:60:a4:33:da:e5:3e:27:b7:c6: 2c:49:b9:99:59:9c:16:08:ad:f0:97:ba:38:83:9e: b6:18:6d:a9:30:91:af:81:b8:9e:bc:78:82:73:78: bb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:AA:5C:F8:2F:5E:49:0B:3F:1B:9F:5C:56:87:BE:11:5C:3F:FF:89 X509v3 Authority Key Identifier: keyid:E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:2e:b4:8e:79:78:fa:dc:27:fb:45:a1:16:d4:10:b8:e6:0b: 8f:5b:8d:0c:38:13:20:a0:73:45:97:b9:57:49:fe:6e:f8:22: a2:15:0a:45:ec:a6:56:01:d5:53:1e:8b:1c:cd:24:2d:45:08: 75:1c:36:d5:6b:6f:26:3e:f8:16:e6:03:76:09:16:9d:09:98: 74:12:13:4a:9c:a5:ef:b7:b2:f7:84:46:95:ff:46:c9:71:42: 54:cd:01:3e:ed:83:58:1a:25:65:92:31:5f:e5:fd:e8:d9:ad: 11:bb:12:a3:b2:87:6c:0c:e6:c2:71:eb:37:69:7f:95:49:4e: 4d:f3:47:93:45:b4:3b:8f:fd:fc:61:65:60:9c:cf:6e:07:60: 65:87:fb:aa:a6:3a:78:04:69:c2:be:84:2e:83:1b:9b:c6:65: ce:7c:24:cb:7a:3c:31:70:e3:c1:b6:2d:91:0d:b1:c2:54:dd: 8e:6e:60:4a:78:01:1a:28:8a:19:3e:7e:27:2c:0b:ce:4a:94: 9e:0b:57:3a:88:ee:be:1b:f1:9f:b3:5a:b8:64:48:b2:d8:dd: 53:39:32:be:51:53:7a:c8:d6:a3:1d:7a:e3:7d:e4:dc:fd:a7: 99:bc:f9:90:53:f0:0e:34:e5:50:47:31:cf:98:30:c9:6f:b8: ac:c0:0f:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdEQkExMTAvBgNVBAUTKEUwODQ5RjA1NDM5MTgyMDJCMTc4NDQ0RTVGRjIyRjg5 OUY5RTMyMEUwHhcNMjYwMzI0MjMwNTIxWhcNMjYwMzMxMjMwNTIxWjAYMRYwFAYD VQQDEw02OWMzMThiMS01NWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJ9YQPN3a+xARLp4Q4Aeey67sxwxqZV+QdjhUxenCFUplymUXtjBw9hR+xfd rCHzxrjBTeYqn6Ociy1WihMNWeCyOoKW21ynUrRUZ1FKcYmS17Ybrd+XO+2L4A3S TBfEO9xXwdb3m1r5e5sA6xZwA4wor3IF3lYn1cuLC+XeeIdi96SVFVt/R4sFFxfp O4LCStM2XP7gVjjoht2EEWrBBGqyJ9QHA3F3h09PtJSe6zcjvbTMjcsi7nwHTCoE msm0jrgG+7q4PRgcFJwlUzpdJIzSBg7G+ndgpDPa5T4nt8YsSbmZWZwWCK3wl7o4 g562GG2pMJGvgbievHiCc3i7gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMuqXPgv XkkLPxufXFaHvhFcP/+JMB8GA1UdIwQYMBaAFOCEnwVDkYICsXhETl/yL4mfnjIO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RCQS8yOEVCNzE0NjJC RDQxMUVDQjBCQURFNThDNEY5QUUwMi80SVNmQlVPUmdnS3hlRVJPWF9JdmlaLWVN ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJU2ZCVU9SZ2dLeGVFUk9YX0l2aVotZU1nNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0RCQS8yOEVCNzE0NjJCRDQxMUVDQjBCQURFNThDNEY5QUUwMi80SVNmQlVPUmdn S3hlRVJPWF9JdmlaLWVNZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPS60jnl4+twn+0WhFtQQuOYLj1uNDDgTIKBzRZe5V0n+bvgiohUKReymVgHV Ux6LHM0kLUUIdRw21WtvJj74FuYDdgkWnQmYdBITSpyl77ey94RGlf9GyXFCVM0B Pu2DWBolZZIxX+X96NmtEbsSo7KHbAzmwnHrN2l/lUlOTfNHk0W0O4/9/GFlYJzP bgdgZYf7qqY6eARpwr6ELoMbm8Zlznwky3o8MXDjwbYtkQ2xwlTdjm5gSngBGiiK GT5+JywLzkqUngtXOojuvhvxn7NauGRIstjdUzkyvlFTesjWox16433k3P2nmbz5 kFPwDjTlUEcxz5gwyW+4rMAP5w== -----END CERTIFICATE-----Generated at Thu Mar 26 08:13:47 2026 by rpki-client