$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft File: 4cWfpaa8h2985KRsqq5gYE8FGGY.mft (raw, json) Hash identifier: T3cGA5irKvVb70+v9PTEr62xmRDB3bwKJBkoKt4RHLc= Subject key identifier: 87:0A:ED:9D:C7:BC:D2:42:18:76:25:1F:1F:71:D6:6E:92:95:28:78 Authority key identifier: E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 Certificate issuer: /CN=A91FEDE7/serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft Manifest number: 38 Signing time: Wed 25 Mar 2026 07:46:24 +0000 Manifest this update: Wed 25 Mar 2026 07:46:23 +0000 Manifest next update: Wed 01 Apr 2026 07:46:23 +0000 Files and hashes: 1: 4cWfpaa8h2985KRsqq5gYE8FGGY.crl (hash: 8GKi2voTzi+1TcZmm5TvL6byeSNngrObtSGzKhKQtXY=) 2: 63C2AF74D99E11F0A31734B566D3641D.roa (hash: XqsHjVz2/3IOIuZJsTXT+P8IFg2LCZpsTf20ES1Rkms=) 3: C48E03F21D1A11F1AE90847F103D8C67.roa (hash: YqhCEr3kKDJmGDX75Nq9SUE9drBA93p8LP3gb+77yio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEDE7, serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866 Validity Not Before: Mar 25 07:46:23 2026 GMT Not After : Apr 1 07:46:23 2026 GMT Subject: CN=69c392d0-da2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e3:1a:72:3d:74:bd:24:05:17:ab:b2:92:05: ef:17:57:35:7d:79:cb:76:38:44:cb:85:ee:5c:00: d9:d2:ef:8b:ac:e6:80:ed:fe:fa:f9:7e:9b:e4:f2: 7c:1a:ca:e2:7a:a5:ee:16:7b:b5:60:52:6d:64:34: 4b:92:56:32:25:ba:69:48:e5:5e:da:45:6b:bc:b6: 86:6f:cc:82:e0:72:cf:1b:48:9b:90:b3:63:08:9c: 61:c4:8e:cf:37:3d:8f:ff:b9:22:48:ef:2f:11:62: e0:31:25:dc:f5:6c:5e:57:3b:e6:36:ed:b3:5c:66: a6:61:02:9a:a0:68:a2:d1:7e:3c:5c:f3:53:93:e4: ed:8e:40:89:81:98:79:ee:6c:40:b9:7e:0f:4c:c4: b3:18:f9:bc:db:38:56:23:61:9d:58:66:5d:e5:18: a7:4c:dd:a8:10:b5:4d:0d:54:3b:b5:ed:36:e0:e0: 25:9a:17:c6:e8:39:ee:52:45:24:99:83:e0:91:3b: 3c:26:ab:9f:75:fc:be:4c:c7:d9:9a:81:d4:2b:4d: cd:a1:0a:f5:5c:5d:c7:54:c1:76:3f:3c:da:24:5f: 0e:93:02:8e:0b:93:bb:d7:00:a8:d6:5c:a2:66:38: e6:64:df:36:4a:1b:50:f1:18:31:5f:9f:83:3c:81: 9b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0A:ED:9D:C7:BC:D2:42:18:76:25:1F:1F:71:D6:6E:92:95:28:78 X509v3 Authority Key Identifier: keyid:E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:46:a2:de:b4:63:dd:e2:24:70:86:0e:06:83:77:53:4f:d2: d7:b6:5b:69:cc:7f:da:19:f3:50:8a:50:a6:0d:bc:48:c8:fc: f8:32:8c:09:45:87:c2:68:15:5b:13:18:c0:7c:49:c3:52:f1: 8a:e0:aa:10:f2:aa:83:f6:98:7a:2c:de:e5:40:aa:d4:47:24: e5:0e:bf:07:31:4f:b9:f7:0f:1e:13:37:3d:82:f6:e8:eb:50: 36:d0:f2:82:af:81:b9:ae:af:1a:76:fe:8e:39:60:24:00:ea: 9d:40:9d:41:83:82:7b:8e:d0:69:88:a7:b9:e8:fc:dd:f4:0a: 2d:03:bd:6b:50:00:9c:50:f1:1f:63:01:d0:a9:08:ac:75:57: c6:43:7a:51:a7:2d:8b:ee:5b:3b:e1:cf:6d:3b:0d:d3:6d:ba: 1d:8e:77:0e:8d:fb:48:95:58:ae:c8:2a:66:5f:13:40:2b:c7: c7:c7:4b:33:1c:67:e5:84:42:85:32:91:b3:87:e6:63:bd:cb: ca:f5:57:39:ac:e9:64:67:ae:89:58:b2:be:0e:3b:87:43:dd: 0e:28:1e:57:79:c0:7b:1a:aa:e4:51:2f:94:a3:be:c5:5a:04: 2f:0c:de:53:bb:79:9f:20:59:2d:a0:ee:54:83:43:10:12:2a: e2:79:a8:f9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RURFNzExMC8GA1UEBRMoRTFDNTlGQTVBNkJDODc2RjdDRTRBNDZDQUFBRTYwNjA0 RjA1MTg2NjAeFw0yNjAzMjUwNzQ2MjNaFw0yNjA0MDEwNzQ2MjNaMBgxFjAUBgNV BAMTDTY5YzM5MmQwLWRhMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD4xpyPXS9JAUXq7KSBe8XVzV9ect2OETLhe5cANnS74us5oDt/vr5fpvk8nwa yuJ6pe4We7VgUm1kNEuSVjIlumlI5V7aRWu8toZvzILgcs8bSJuQs2MInGHEjs83 PY//uSJI7y8RYuAxJdz1bF5XO+Y27bNcZqZhApqgaKLRfjxc81OT5O2OQImBmHnu bEC5fg9MxLMY+bzbOFYjYZ1YZl3lGKdM3agQtU0NVDu17Tbg4CWaF8boOe5SRSSZ g+CROzwmq591/L5Mx9magdQrTc2hCvVcXcdUwXY/PNokXw6TAo4Lk7vXAKjWXKJm OOZk3zZKG1DxGDFfn4M8gZvDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhwrtnce8 0kIYdiUfH3HWbpKVKHgwHwYDVR0jBBgwFoAU4cWfpaa8h2985KRsqq5gYE8FGGYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFREU3L0U3RkQzMDU4RDk5 RDExRjBCQkU3ODM5OTY2RDM2NDFELzRjV2ZwYWE4aDI5ODVLUnNxcTVnWUU4RkdH WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGNXZnBhYThoMjk4NUtSc3FxNWdZRThGR0dZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF REU3L0U3RkQzMDU4RDk5RDExRjBCQkU3ODM5OTY2RDM2NDFELzRjV2ZwYWE4aDI5 ODVLUnNxcTVnWUU4RkdHWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAaRqLetGPd4iRwhg4Gg3dTT9LXtltpzH/aGfNQilCmDbxIyPz4MowJRYfCaBVb ExjAfEnDUvGK4KoQ8qqD9ph6LN7lQKrURyTlDr8HMU+59w8eEzc9gvbo61A20PKC r4G5rq8adv6OOWAkAOqdQJ1Bg4J7jtBpiKe56Pzd9AotA71rUACcUPEfYwHQqQis dVfGQ3pRpy2L7ls74c9tOw3TbbodjncOjftIlViuyCpmXxNAK8fHx0szHGflhEKF MpGzh+ZjvcvK9Vc5rOlkZ66JWLK+DjuHQ90OKB5XecB7GqrkUS+Uo77FWgQvDN5T u3mfIFktoO5Ug0MQEirieaj5 -----END CERTIFICATE-----Generated at Thu Mar 26 00:56:40 2026 by rpki-client