$ rpki-client -vvf rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft File: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft (raw, json) Hash identifier: G6BsbOwloKXCx70P27SpA4QBromZ9WeWdP0qT1QhgvA= Subject key identifier: 0E:4D:84:F1:17:B2:E5:E8:01:8F:5E:FD:D2:02:96:89:B0:BB:9B:E4 Authority key identifier: E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 Certificate issuer: /CN=A9149B61/serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft Manifest number: 01FC Signing time: Sun 05 Apr 2026 02:39:57 +0000 Manifest this update: Sun 05 Apr 2026 02:39:56 +0000 Manifest next update: Sun 12 Apr 2026 02:39:56 +0000 Files and hashes: 1: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl (hash: zIIiaGQQrAYTzwmPYFl9xlutx94MufZDpt2pw03qDmw=) 2: 10F1A0582B8511EEA7FF697BC4F9AE02.roa (hash: moXXvJLFKkIqyJw20Q1OuyiRN76hq8AL96LMv4bv4WY=) 3: D4FD2A902B8411EEBCDBEF7AC4F9AE02.roa (hash: W6ueRJhH8jQdhiEkMLdiQl56SAAwLpTfKRe8+DuwqEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149B61, serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Validity Not Before: Apr 5 02:39:56 2026 GMT Not After : Apr 12 02:39:56 2026 GMT Subject: CN=69d1cb7d-f567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b2:84:f5:48:80:7c:22:aa:d7:54:16:83:ea: e3:4c:cf:cc:4c:21:66:6b:51:c2:83:65:58:f4:64: 6b:e4:40:f4:83:9b:94:4f:d2:e9:91:31:24:a9:f9: 90:46:ca:aa:14:66:7c:92:65:92:dd:7f:ef:1c:9e: 95:47:3e:b6:bb:68:cf:4a:c4:2c:08:ad:6d:d0:0b: 61:18:4e:6f:a9:f7:d8:f5:f0:cd:2f:cd:4f:c0:27: d4:58:57:f1:9c:25:dd:22:fa:64:48:32:9d:45:6a: 97:76:45:7c:34:7a:23:31:d9:0b:b1:29:ae:88:64: 43:fd:40:f8:31:39:78:03:2d:98:fe:40:75:8a:b1: 6f:9d:a1:bd:1b:b5:b8:77:5a:00:67:43:0c:03:b8: 2c:46:6f:85:13:e4:9e:fa:2d:33:25:d1:8a:80:f6: c1:be:65:a3:96:97:4c:63:8a:7b:ba:aa:0b:ed:7b: f0:38:ae:55:1a:75:e6:60:17:da:87:c7:e5:38:38: 19:83:86:d0:17:85:8f:07:5a:79:30:b3:2f:38:79: fb:eb:bf:62:a8:f2:54:c6:78:15:bd:af:35:7c:53: 6d:ba:fa:d8:e9:55:53:9b:8f:52:15:17:78:ae:bc: 47:b1:45:ff:98:16:32:57:42:76:32:19:8d:8a:6b: 97:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4D:84:F1:17:B2:E5:E8:01:8F:5E:FD:D2:02:96:89:B0:BB:9B:E4 X509v3 Authority Key Identifier: keyid:E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:1d:13:a6:17:1b:e2:85:64:c5:d8:e6:ef:bf:ad:11:aa:e9: 91:e2:26:36:ed:c8:0e:07:cd:fd:91:7e:2f:d1:6e:df:e2:1d: 71:77:ab:f1:a2:87:6d:05:10:01:2a:1c:72:2e:45:61:c8:9f: fe:2f:64:01:5b:4f:62:c2:bd:ab:ad:a2:ab:cb:9b:df:51:f7: 1a:c8:3a:5f:36:ab:a3:da:8e:66:b8:65:fd:6a:99:30:4c:17: d9:ea:b1:e8:ad:4f:98:6f:57:09:05:a4:ba:5b:b3:8e:16:9c: 8e:8a:f2:17:c6:e1:fd:2b:0f:9c:84:28:fd:ef:14:6b:ac:8c: 23:e8:6f:4b:59:23:a1:0d:ea:6c:7d:2c:b0:ce:ac:c8:66:aa: 77:f3:89:98:7c:8e:43:cd:30:d7:44:91:8c:b1:7e:8d:56:ff: 6f:c1:63:5b:51:b3:4e:5e:31:77:df:2b:6c:b3:36:82:48:86: 5e:51:da:eb:e8:74:4a:67:c5:48:9b:1d:67:18:21:24:28:5e: 46:5e:6c:3e:ab:60:cc:0e:29:ed:63:0d:87:21:90:d6:ee:c0: a6:9a:c7:3d:b2:2c:85:53:43:e3:7f:8c:2f:ff:7a:25:5a:6d: e7:11:fd:2a:68:09:98:c3:80:2d:98:e0:b5:d5:43:e8:23:f3: 61:1f:03:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlCNjExMTAvBgNVBAUTKEUzRTEwMEY4MDQwMTNBMDVGOTIyRUUxMUNCNEUwQUJF QTZDMjJCOTgwHhcNMjYwNDA1MDIzOTU2WhcNMjYwNDEyMDIzOTU2WjAYMRYwFAYD VQQDEw02OWQxY2I3ZC1mNTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4rKE9UiAfCKq11QWg+rjTM/MTCFma1HCg2VY9GRr5ED0g5uUT9LpkTEkqfmQ RsqqFGZ8kmWS3X/vHJ6VRz62u2jPSsQsCK1t0AthGE5vqffY9fDNL81PwCfUWFfx nCXdIvpkSDKdRWqXdkV8NHojMdkLsSmuiGRD/UD4MTl4Ay2Y/kB1irFvnaG9G7W4 d1oAZ0MMA7gsRm+FE+Se+i0zJdGKgPbBvmWjlpdMY4p7uqoL7XvwOK5VGnXmYBfa h8flODgZg4bQF4WPB1p5MLMvOHn7679iqPJUxngVva81fFNtuvrY6VVTm49SFRd4 rrxHsUX/mBYyV0J2MhmNimuXLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA5NhPEX suXoAY9e/dIClomwu5vkMB8GA1UdIwQYMBaAFOPhAPgEAToF+SLuEctOCr6mwiuY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUI2MS83NjE2RDRGQzJB Q0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9nWDVJdTRSeTA0S3ZxYkNL NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtRUEtQVFCT2dYNUl1NFJ5MDRLdnFiQ0s1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUI2MS83NjE2RDRGQzJBQ0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9n WDVJdTRSeTA0S3ZxYkNLNWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADB0Tphcb4oVkxdjm77+tEarpkeImNu3IDgfN/ZF+L9Fu3+IdcXer8aKHbQUQ ASocci5FYcif/i9kAVtPYsK9q62iq8ub31H3Gsg6Xzaro9qOZrhl/WqZMEwX2eqx 6K1PmG9XCQWkuluzjhacjoryF8bh/SsPnIQo/e8Ua6yMI+hvS1kjoQ3qbH0ssM6s yGaqd/OJmHyOQ80w10SRjLF+jVb/b8FjW1GzTl4xd98rbLM2gkiGXlHa6+h0SmfF SJsdZxghJCheRl5sPqtgzA4p7WMNhyGQ1u7ApprHPbIshVND43+ML/96JVpt5xH9 KmgJmMOALZjgtdVD6CPzYR8DMA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:50:49 2026 by rpki-client