$ rpki-client -vvf rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft File: 4xZnlgSAzwfjwi15DeTiAe9wQNs.mft (raw, json) Hash identifier: PFvTfmOkthDVYR9DZANs7CoMrzql5ARI7WnsalhoKrk= Subject key identifier: F3:39:0E:6A:C0:2A:0D:9F:2E:04:16:D8:6D:FC:ED:7D:05:2E:FB:B6 Authority key identifier: E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB Certificate issuer: /CN=A911B310/serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB Certificate serial: 0261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft Manifest number: 0251 Signing time: Sun 29 Mar 2026 02:04:57 +0000 Manifest this update: Sun 29 Mar 2026 02:04:56 +0000 Manifest next update: Sun 05 Apr 2026 02:04:56 +0000 Files and hashes: 1: 4xZnlgSAzwfjwi15DeTiAe9wQNs.crl (hash: YZTeoYWRi8zubDrk4+u1N//Nag2Hi4VpXmZ06IAJyko=) 2: 0ADA583C5DB911F0A54D4C6FC4F9AE02.roa (hash: vtHqwtSvpKd0UZw+IVp/WFTlhLrYLk265RmDqE6z7KQ=) 3: 0BBC997C5DB911F0A54D4C6FC4F9AE02.roa (hash: wtwpRqnqeYQSTF5tuYeTMKBYPSpu+aJ0HfsSDYw4/oQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 02:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B310, serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB Validity Not Before: Mar 29 02:04:56 2026 GMT Not After : Apr 5 02:04:56 2026 GMT Subject: CN=69c888c8-7164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2a:71:a9:ee:a1:65:bf:83:85:02:a3:0e:6e: a4:c2:29:c3:e2:6b:c8:1b:b3:c3:de:79:a4:05:4d: fd:fb:9a:91:b3:72:79:10:05:ad:0e:e8:e3:ca:cd: 88:27:a2:fb:94:33:da:34:e7:e0:b5:05:27:da:76: a5:ee:e0:8f:86:19:f7:fe:99:0a:bf:79:5f:b4:2c: a2:b9:f4:07:31:e1:b1:1b:38:b6:54:ae:3b:e7:ae: 66:b4:c3:4e:f4:7c:33:b7:0d:4c:18:1d:1f:aa:12: 85:4b:8b:01:8c:1d:f9:47:85:6e:ec:e8:2f:f8:25: 93:e0:bc:23:db:3e:44:d3:f5:f3:2f:c7:24:6e:23: 48:83:f9:33:b4:dd:75:a8:ca:6a:4a:61:ed:cd:3e: d6:3e:28:be:6a:17:4f:f9:12:80:bc:44:f4:26:34: ec:a2:cc:50:94:26:be:57:28:05:04:04:96:ca:9e: 77:1d:cd:20:fa:dd:7d:72:22:ca:d1:6b:de:ec:de: 7d:73:37:94:a6:46:37:c7:3e:a5:49:ba:80:91:d5: 54:5f:f4:2d:ad:09:5c:98:8d:37:d4:49:f6:ff:a7: 81:2d:a9:ff:d3:d3:f7:4b:44:c3:a4:ee:6a:78:99: 59:c7:f8:ab:9c:37:cc:b1:bf:64:db:94:1f:0a:79: 4b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:39:0E:6A:C0:2A:0D:9F:2E:04:16:D8:6D:FC:ED:7D:05:2E:FB:B6 X509v3 Authority Key Identifier: keyid:E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:9d:c7:5e:e7:8d:55:ee:4f:d4:fb:6b:30:d2:fe:1b:4a:07: 34:da:a7:ad:8c:71:4a:cf:cf:c0:a7:a5:e7:18:8a:22:57:6a: 4b:b4:84:50:1e:e7:e2:b1:b0:53:ed:14:ca:d5:83:28:77:92: 38:87:4c:a3:98:58:a9:53:56:df:58:a0:a7:a5:3b:ee:7f:2b: 39:19:c4:fc:cd:96:a5:b7:18:18:0d:fa:0a:3a:85:d7:e9:2f: 13:18:8f:6b:40:af:42:cf:22:07:18:70:67:13:d2:fe:dd:ca: 3b:12:63:00:26:3e:d1:37:bc:1c:43:7b:f8:79:9d:70:16:98: e9:2a:5f:70:e9:e7:07:c9:91:2b:75:3b:e1:e7:93:2f:01:17: bb:b7:b1:f0:5a:48:12:68:db:5c:3a:68:27:07:47:d4:32:9e: e1:a7:46:4a:4d:fe:4f:7c:8b:25:9c:59:9a:18:c7:1b:c3:a2: cf:0b:e5:c5:41:c6:06:f5:09:a9:e4:62:e6:6d:3d:f8:02:67: e2:c5:8f:b1:31:05:39:98:6b:f5:71:2b:8a:13:2c:8a:07:ac: 44:88:a9:30:05:13:cd:66:1b:01:34:ea:2e:32:ff:b3:48:ef: 44:41:33:61:05:38:84:e7:55:87:25:4e:c8:00:62:ce:8b:a9: 88:18:50:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIzMTAxMTAvBgNVBAUTKEUzMTY2Nzk2MDQ4MENGMDdFM0MyMkQ3OTBERTRFMjAx RUY3MDQwREIwHhcNMjYwMzI5MDIwNDU2WhcNMjYwNDA1MDIwNDU2WjAYMRYwFAYD VQQDEw02OWM4ODhjOC03MTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ipxqe6hZb+DhQKjDm6kwinD4mvIG7PD3nmkBU39+5qRs3J5EAWtDujjys2I J6L7lDPaNOfgtQUn2nal7uCPhhn3/pkKv3lftCyiufQHMeGxGzi2VK47565mtMNO 9Hwztw1MGB0fqhKFS4sBjB35R4Vu7Ogv+CWT4Lwj2z5E0/XzL8ckbiNIg/kztN11 qMpqSmHtzT7WPii+ahdP+RKAvET0JjTsosxQlCa+VygFBASWyp53Hc0g+t19ciLK 0Wve7N59czeUpkY3xz6lSbqAkdVUX/QtrQlcmI031En2/6eBLan/09P3S0TDpO5q eJlZx/irnDfMsb9k25QfCnlL/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPM5DmrA Kg2fLgQW2G387X0FLvu2MB8GA1UdIwQYMBaAFOMWZ5YEgM8H48IteQ3k4gHvcEDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjMxMC8zRUJEMTdDMkFE MTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3Zmp3aTE1RGVUaUFlOXdR TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR4Wm5sZ1NBendmandpMTVEZVRpQWU5d1FOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjMxMC8zRUJEMTdDMkFEMTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3 Zmp3aTE1RGVUaUFlOXdRTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXJ3HXueNVe5P1PtrMNL+G0oHNNqnrYxxSs/PwKel5xiKIldqS7SEUB7n4rGw U+0UytWDKHeSOIdMo5hYqVNW31igp6U77n8rORnE/M2WpbcYGA36CjqF1+kvExiP a0CvQs8iBxhwZxPS/t3KOxJjACY+0Te8HEN7+HmdcBaY6SpfcOnnB8mRK3U74eeT LwEXu7ex8FpIEmjbXDpoJwdH1DKe4adGSk3+T3yLJZxZmhjHG8OizwvlxUHGBvUJ qeRi5m09+AJn4sWPsTEFOZhr9XErihMsigesRIipMAUTzWYbATTqLjL/s0jvREEz YQU4hOdVhyVOyABizoupiBhQcA== -----END CERTIFICATE-----Generated at Mon Mar 30 22:41:39 2026 by rpki-client