$ rpki-client -vvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft File: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft (raw, json) Hash identifier: CaKLyWAQTFdPw06+qgsN5NbmLXjhEHgi8aVPDK/yatY= Subject key identifier: 21:AF:19:BD:CC:F9:64:21:AE:BD:EA:04:C2:41:03:96:18:8A:AD:F1 Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21 Certificate issuer: /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21 Certificate serial: 0851 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft Manifest number: 0838 Signing time: Sat 04 Apr 2026 20:44:53 +0000 Manifest this update: Sat 04 Apr 2026 20:44:53 +0000 Manifest next update: Sat 11 Apr 2026 20:44:53 +0000 Files and hashes: 1: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl (hash: rF45zdFfOJfve+gtvYwRTaG/o5u72RTguElLFc46gq0=) 2: 7BAB9AF01B3D11EE903BB536C4F9AE02.roa (hash: 1jBi7AFnVCtlT74K0SmC0UKxzEEwhVrbK9WIUjseLKs=) 3: B811CFA2BF7811EE80314533C4F9AE02.roa (hash: uB1ptL86TUYIpYIuNSpFFg8ZR5mh0LibkD3yr4cunXE=) 4: CD284E600CEE11EB88376B5BC4F9AE02.roa (hash: WVnMtC67sqQYeTgYbTZ4xUIDg4NnFA5/AGE6r2DSlK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:44:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2129 (0x851) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EE77, serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21 Validity Not Before: Apr 4 20:44:53 2026 GMT Not After : Apr 11 20:44:53 2026 GMT Subject: CN=69d17845-4d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:95:29:34:cd:40:08:2d:36:55:9d:bd:46:72: d2:63:77:d1:f4:dc:cf:f0:db:79:29:fc:70:47:cc: 75:3a:16:d8:32:34:3b:fe:b3:35:88:49:50:60:72: 13:f2:b2:6d:fc:ce:12:2d:e5:2b:bf:a7:4b:3c:38: 5b:d7:1b:d2:74:4c:c4:51:06:4b:9a:08:e4:bc:5f: e1:3f:39:40:e0:a2:e9:0d:ef:a7:fb:f2:f9:d2:3b: 35:a3:46:92:cc:05:74:e3:f1:a8:fd:2a:6f:33:83: 6e:de:23:74:44:6f:99:9b:f6:61:51:f2:bd:a4:5d: 80:b8:80:d6:9d:65:ce:65:30:0e:86:f2:e7:92:b7: 42:ce:12:d2:84:b9:de:db:89:75:28:f3:84:15:25: cf:c3:01:b2:49:9a:b0:6b:bd:05:0f:13:1d:b0:4a: 75:9d:cc:9c:77:6e:91:3a:e8:26:4e:66:c8:19:0c: 79:1b:54:54:fb:18:d3:96:ce:95:5e:37:f6:1d:b6: 0b:90:9e:bf:b6:e2:b1:52:a7:85:dd:c1:db:33:f9: 75:11:c0:db:b2:ed:8a:6f:cc:98:02:5d:57:5a:fb: b7:b1:ae:b1:5b:4d:79:85:ab:48:f8:2a:be:ca:26: 22:22:eb:ed:58:c5:9b:03:4e:8a:8b:c1:bb:47:23: ee:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:AF:19:BD:CC:F9:64:21:AE:BD:EA:04:C2:41:03:96:18:8A:AD:F1 X509v3 Authority Key Identifier: keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c1:a3:fe:0f:05:86:9b:ec:f2:65:34:a6:02:3c:7b:d0:18: 05:22:1f:09:7f:27:ee:c4:3d:2a:ae:3c:97:b5:db:b5:e3:85: 5d:d9:ad:69:d4:df:3a:52:1d:24:e0:81:ac:fa:3e:61:7c:99: 58:7d:a4:80:0f:b4:bc:cd:96:2a:93:ac:08:84:19:ac:15:d5: 82:56:08:8e:b4:c2:be:2f:c7:32:f5:05:30:bd:1e:8c:1f:8c: e8:d8:91:41:f1:ac:34:63:55:7b:60:d5:33:87:ec:b7:a5:af: 9b:9d:82:4e:a8:b5:de:e3:6a:c0:d9:6a:a0:a4:71:51:f0:9f: 26:cd:1b:62:06:32:27:e0:b1:f2:b3:2d:b0:ef:29:4b:79:71: fa:f1:90:b7:cf:c7:30:bb:35:6e:bb:15:41:26:18:34:04:42: 88:07:2a:29:6b:ae:f7:a2:12:20:84:04:ac:d5:62:da:48:9d: 32:61:5a:e1:75:03:32:81:9c:e2:40:c0:d5:70:51:bc:c4:85: 11:41:16:6e:2a:bc:8d:6a:77:3d:23:55:f5:8b:95:02:2b:27: 19:09:5f:95:f2:fd:4d:88:a5:55:b7:b1:e2:8e:c3:bd:0d:1b: bb:37:41:b2:6b:c4:60:87:c0:ab:fc:f1:fe:b8:47:5f:88:1c: c5:e4:68:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVFNzcxMTAvBgNVBAUTKEI3ODFBMkU3RDkxRURDQThCMDMwREUzRUE4OUZBNEZB RjE3OTFGMjEwHhcNMjYwNDA0MjA0NDUzWhcNMjYwNDExMjA0NDUzWjAYMRYwFAYD VQQDEw02OWQxNzg0NS00ZDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZUpNM1ACC02VZ29RnLSY3fR9NzP8Nt5KfxwR8x1OhbYMjQ7/rM1iElQYHIT 8rJt/M4SLeUrv6dLPDhb1xvSdEzEUQZLmgjkvF/hPzlA4KLpDe+n+/L50js1o0aS zAV04/Go/SpvM4Nu3iN0RG+Zm/ZhUfK9pF2AuIDWnWXOZTAOhvLnkrdCzhLShLne 24l1KPOEFSXPwwGySZqwa70FDxMdsEp1ncycd26ROugmTmbIGQx5G1RU+xjTls6V Xjf2HbYLkJ6/tuKxUqeF3cHbM/l1EcDbsu2Kb8yYAl1XWvu3sa6xW015hatI+Cq+ yiYiIuvtWMWbA06Ki8G7RyPuKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCGvGb3M +WQhrr3qBMJBA5YYiq3xMB8GA1UdIwQYMBaAFLeBoufZHtyosDDePqifpPrxeR8h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUU3Ny9EOUJFMDdCQTBD RUQxMUVCQTdGMTExNUJDNEY5QUUwMi90NEdpNTlrZTNLaXdNTjQtcUotay12RjVI eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q0R2k1OWtlM0tpd01ONC1xSi1rLXZGNUh5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUU3Ny9EOUJFMDdCQTBDRUQxMUVCQTdGMTExNUJDNEY5QUUwMi90NEdpNTlrZTNL aXdNTjQtcUotay12RjVIeUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmsGj/g8Fhpvs8mU0pgI8e9AYBSIfCX8n7sQ9Kq48l7XbteOFXdmtadTfOlId JOCBrPo+YXyZWH2kgA+0vM2WKpOsCIQZrBXVglYIjrTCvi/HMvUFML0ejB+M6NiR QfGsNGNVe2DVM4fst6Wvm52CTqi13uNqwNlqoKRxUfCfJs0bYgYyJ+Cx8rMtsO8p S3lx+vGQt8/HMLs1brsVQSYYNARCiAcqKWuu96ISIIQErNVi2kidMmFa4XUDMoGc 4kDA1XBRvMSFEUEWbiq8jWp3PSNV9YuVAisnGQlflfL9TYilVbex4o7DvQ0buzdB smvEYIfAq/zx/rhHX4gcxeRoMg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:50:48 2026 by rpki-client