$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json) Hash identifier: nUWfIrhvZeI6FTc2/T3bKGkq73eYmWC6JxUdNN+EL94= Subject key identifier: B4:E2:A2:91:CC:6F:B7:3A:B2:56:22:B3:B2:56:70:E2:CD:E7:F8:00 Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Certificate serial: 0845 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft Manifest number: 0831 Signing time: Tue 24 Mar 2026 20:44:18 +0000 Manifest this update: Tue 24 Mar 2026 20:44:17 +0000 Manifest next update: Tue 31 Mar 2026 20:44:17 +0000 Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: nb1uDvTJdrN30nG9toS/ZMLCm2X2Xq8FohRvAf1e3WQ=) 2: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: 2R/fqixLYXQj2CN0sqD6jpnwoixSqADSrbi58jnvIx8=) 3: B1B8588ADAE511F0B4F8D00379D3641D.roa (hash: g7qg1j/BlXjx4IL6IJ73Vzos8b7yBkmpoG+vbhDXfpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2117 (0x845) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E Validity Not Before: Mar 24 20:44:17 2026 GMT Not After : Mar 31 20:44:17 2026 GMT Subject: CN=69c2f7a1-60c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c6:bc:9a:02:bd:d3:8d:cb:9c:65:99:b1:96: 38:56:78:89:1d:47:14:c9:f8:09:57:ce:7e:6f:de: 20:95:9b:4c:ba:56:b9:b9:fe:04:65:44:06:b1:f7: 81:4a:ba:bd:20:b5:7e:9a:16:0c:ea:f7:ca:14:62: 7d:d8:11:55:52:79:6a:44:6d:4b:06:fd:d5:6b:3f: b8:ab:cb:54:dd:97:b8:4d:d7:40:5f:d3:92:39:af: 6b:4b:28:d2:be:89:ce:a4:d1:5c:1c:26:c4:95:6f: 2f:e8:51:bd:66:01:42:57:8b:c7:12:95:d3:35:6f: 81:4f:63:f6:9a:7c:72:2b:14:1f:4f:39:c0:9e:75: d8:1c:89:c8:ae:c3:fa:a5:fa:f2:f5:34:c7:05:42: 3c:18:3d:6b:e7:0d:f3:19:04:a9:5e:24:7b:d0:32: 65:99:5d:1f:30:25:0c:8d:67:13:3b:2a:b3:df:31: c6:6c:83:d4:58:37:d2:74:07:7a:9a:40:64:88:f4: a3:34:2c:ae:90:52:17:ab:c7:86:03:30:a9:46:5b: dc:16:a0:d6:3c:96:38:a6:51:f9:75:ac:87:00:ec: 5a:90:40:b1:c9:cb:07:ba:5a:f2:af:49:dc:d0:0d: 6e:8e:c1:e9:41:75:fe:f7:c9:dc:d7:c3:29:ee:3c: c5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E2:A2:91:CC:6F:B7:3A:B2:56:22:B3:B2:56:70:E2:CD:E7:F8:00 X509v3 Authority Key Identifier: keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:3f:63:4e:44:47:e8:24:10:35:f8:e2:f2:1e:4f:6c:02:d0: 28:16:6e:21:b0:06:d2:4c:10:85:bf:10:0a:84:cd:0c:a2:cb: 51:3b:7d:a8:96:8c:3c:e9:a1:87:55:de:96:52:f4:b6:99:a9: d9:49:70:51:66:f4:c3:b0:02:44:f1:f2:12:67:a9:f3:e8:79: e2:2b:b6:fa:c7:29:c7:e8:8c:40:bc:97:7b:81:cc:bf:8d:9a: 60:68:a1:e3:92:0a:be:a5:da:93:b6:ca:9f:17:d0:98:d6:22: e7:bc:d3:89:da:60:d6:a7:bf:cc:70:ec:d6:58:96:f6:cf:42: e4:9c:91:be:31:73:ef:9b:85:2a:f5:13:c6:68:60:f0:0e:6b: 06:02:53:d1:cb:6c:4f:90:be:20:e4:79:e7:dd:0c:18:99:a6: a3:20:73:5e:99:6c:bd:3f:1d:a0:66:e2:fa:3d:e1:93:76:0f: e0:e0:8d:ab:74:cc:3a:9f:6a:50:e0:5b:04:22:1a:3e:5e:dd: 48:43:3b:13:cf:cd:7c:d5:07:07:22:f5:d5:36:3c:2e:fe:3d: a3:f8:5f:61:fe:45:92:ec:57:5a:6f:8b:0b:93:7b:0d:5c:74: 4c:0b:b5:38:64:4f:e4:8d:15:fc:dd:65:a4:6f:c0:70:84:3e: b4:bc:67:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw QzAxMzFFMkUwHhcNMjYwMzI0MjA0NDE3WhcNMjYwMzMxMjA0NDE3WjAYMRYwFAYD VQQDEw02OWMyZjdhMS02MGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8a8mgK9043LnGWZsZY4VniJHUcUyfgJV85+b94glZtMula5uf4EZUQGsfeB Srq9ILV+mhYM6vfKFGJ92BFVUnlqRG1LBv3Vaz+4q8tU3Ze4TddAX9OSOa9rSyjS vonOpNFcHCbElW8v6FG9ZgFCV4vHEpXTNW+BT2P2mnxyKxQfTznAnnXYHInIrsP6 pfry9TTHBUI8GD1r5w3zGQSpXiR70DJlmV0fMCUMjWcTOyqz3zHGbIPUWDfSdAd6 mkBkiPSjNCyukFIXq8eGAzCpRlvcFqDWPJY4plH5dayHAOxakECxycsHulryr0nc 0A1ujsHpQXX+98nc18Mp7jzFSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLTiopHM b7c6slYis7JWcOLN5/gAMB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZDQy8yMkNENzlERTBEQ0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVY Q1pGU1oyWnZSSkFNQVRIaTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABD9jTkRH6CQQNfji8h5PbALQKBZuIbAG0kwQhb8QCoTNDKLLUTt9qJaMPOmh h1XellL0tpmp2UlwUWb0w7ACRPHyEmep8+h54iu2+scpx+iMQLyXe4HMv42aYGih 45IKvqXak7bKnxfQmNYi57zTidpg1qe/zHDs1liW9s9C5JyRvjFz75uFKvUTxmhg 8A5rBgJT0ctsT5C+IOR5590MGJmmoyBzXplsvT8doGbi+j3hk3YP4OCNq3TMOp9q UOBbBCIaPl7dSEM7E8/NfNUHByL11TY8Lv49o/hfYf5FkuxXWm+LC5N7DVx0TAu1 OGRP5I0V/N1lpG/AcIQ+tLxnmw== -----END CERTIFICATE-----Generated at Thu Mar 26 08:20:36 2026 by rpki-client