$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft File: r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft (raw, json) Hash identifier: wXkrvZpEmBkbGxd1IvGX7KcF7xi3q8lyOEucTjVruUE= Subject key identifier: D4:AA:6F:73:A8:29:FB:31:02:9D:6C:2D:6B:5A:ED:F8:9D:01:AE:88 Authority key identifier: AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6 Certificate issuer: /CN=A912F1CA/serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft Manifest number: 50 Signing time: Tue 03 Mar 2026 07:56:54 +0000 Manifest this update: Tue 03 Mar 2026 07:56:53 +0000 Manifest next update: Tue 10 Mar 2026 07:56:53 +0000 Files and hashes: 1: r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl (hash: WUIh3x6ngPx2HSOTtWh8TuynYKSKz4N2XsE2+6GDDqM=) 2: 3DA866FACE8E11F0B0195B54C4F9AE02.roa (hash: LaDSP0AuIcyunEBlwxJd5PmOZKzoI39LoY5pqockQJQ=) 3: 2DC89280AB5E11F087B3A63DC4F9AE02.roa (hash: OWRTx8KpVw3aAexIAQhAzl19KW5AxihgsszlMUbzCIw=) 4: 2E4F17E2AB5E11F087B3A63DC4F9AE02.roa (hash: Cn7vfzmjy06xdvrZ5nmmboVajIyo3gJm1O3bt7lM1ik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 07:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F1CA, serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6 Validity Not Before: Mar 3 07:56:53 2026 GMT Not After : Mar 10 07:56:53 2026 GMT Subject: CN=69a69446-02d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:10:ff:c9:08:0b:2d:ce:a5:98:fb:eb:61:08: 6d:0e:ce:2e:97:70:88:7e:46:67:f4:31:79:62:2a: 8b:fa:37:59:3f:c0:c3:c2:b3:01:16:8e:a6:81:d3: 7f:45:33:fe:90:f7:bf:85:69:fa:74:f5:29:fe:45: 87:0d:13:46:f4:58:14:76:8d:b2:36:93:a4:be:91: 34:8a:6a:e8:13:bf:50:da:18:66:92:a0:f5:75:9e: 36:39:53:a6:7f:f1:68:5f:a9:da:ba:1b:a0:39:a1: f2:37:d9:99:07:3f:00:5b:dd:74:07:6c:36:af:8e: e3:a8:b6:0f:e6:2b:70:3e:a0:b3:80:b6:6f:38:49: a5:97:df:33:15:ff:f9:04:1d:28:27:41:a3:c5:6e: 15:dd:37:35:2c:27:6c:ac:b4:66:34:5a:d1:04:4e: a4:97:4b:ab:0d:f0:03:4e:f8:04:83:80:78:b7:34: 17:70:f5:5a:21:76:03:ca:61:af:80:c1:2a:8c:ae: a9:de:dc:94:c3:fe:c8:5c:2d:52:5d:9b:b5:54:e7: 8f:47:1f:f9:83:57:0d:f9:e1:ee:92:bb:f0:c4:27: c7:b3:1d:8c:7d:14:c4:2e:cc:de:23:ec:57:50:ce: 9e:5e:0b:d1:cc:1f:92:ad:30:12:ba:5c:7f:58:28: 9a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AA:6F:73:A8:29:FB:31:02:9D:6C:2D:6B:5A:ED:F8:9D:01:AE:88 X509v3 Authority Key Identifier: keyid:AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:6e:a7:5b:2f:7b:8b:13:e9:3b:68:2b:fd:b5:7f:00:a4:19: 8c:9a:8f:a7:71:de:b7:73:9b:06:36:ca:f5:f8:98:69:59:e0: e2:3e:20:df:49:58:e2:7a:d9:87:6e:5e:6f:d1:77:44:97:1e: 86:f9:8a:e9:a4:d6:28:77:f4:df:fa:41:52:26:56:dc:42:87: 3e:e2:6b:57:a0:c1:6c:21:08:16:b6:7b:88:fa:ca:cc:72:ac: e9:a0:fb:03:a2:2c:40:61:7e:5b:6a:1d:2a:a0:1c:bd:4f:e7: 87:6e:ed:4b:fb:c9:81:49:12:4e:80:70:e9:ff:23:71:e6:22: eb:27:e6:0d:32:69:5b:e1:62:e9:30:e0:85:c8:ea:57:7f:50: 3b:f7:af:47:09:ad:8c:3e:13:38:0d:de:8d:21:a7:6a:2f:a8: e8:ed:67:e7:bd:43:57:96:7b:18:32:d2:3c:6a:1b:f8:57:9f: 63:73:6b:61:d0:ee:d0:e9:f6:fd:72:95:2c:29:4a:ba:ea:c6: 59:8f:58:33:32:66:dd:5a:ab:9a:d1:66:c1:9a:3d:67:d1:4f: 2d:1f:c5:24:6a:9a:82:c7:48:39:4c:75:19:48:7c:2e:87:0a: 85:14:cb:5e:0c:c6:02:45:4f:74:9f:5a:26:a3:60:95:f2:3d: 91:71:d4:a0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjFDQTExMC8GA1UEBRMoQUY4Q0RDRTZFRDQyNzdFQ0ZCMEZEQTg4MkFENDc0OTJE RTg1OEZCNjAeFw0yNjAzMDMwNzU2NTNaFw0yNjAzMTAwNzU2NTNaMBgxFjAUBgNV BAMTDTY5YTY5NDQ2LTAyZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/EP/JCAstzqWY++thCG0Ozi6XcIh+Rmf0MXliKov6N1k/wMPCswEWjqaB039F M/6Q97+Fafp09Sn+RYcNE0b0WBR2jbI2k6S+kTSKaugTv1DaGGaSoPV1njY5U6Z/ 8Whfqdq6G6A5ofI32ZkHPwBb3XQHbDavjuOotg/mK3A+oLOAtm84SaWX3zMV//kE HSgnQaPFbhXdNzUsJ2ystGY0WtEETqSXS6sN8ANO+ASDgHi3NBdw9VohdgPKYa+A wSqMrqne3JTD/shcLVJdm7VU549HH/mDVw354e6Su/DEJ8ezHYx9FMQuzN4j7FdQ zp5eC9HMH5KtMBK6XH9YKJqZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1Kpvc6gp +zECnWwta1rt+J0BrogwHwYDVR0jBBgwFoAUr4zc5u1Cd+z7D9qIKtR0kt6Fj7Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMUNBLzJERjVCQjgwQUIz MDExRjA4RkMwQzk0OEM0RjlBRTAyL3I0emM1dTFDZC16N0Q5cUlLdFIwa3Q2Rmo3 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjR6YzV1MUNkLXo3RDlxSUt0UjBrdDZGajdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG MUNBLzJERjVCQjgwQUIzMDExRjA4RkMwQzk0OEM0RjlBRTAyL3I0emM1dTFDZC16 N0Q5cUlLdFIwa3Q2Rmo3WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBYbqdbL3uLE+k7aCv9tX8ApBmMmo+ncd63c5sGNsr1+JhpWeDiPiDfSVjietmH bl5v0XdElx6G+YrppNYod/Tf+kFSJlbcQoc+4mtXoMFsIQgWtnuI+srMcqzpoPsD oixAYX5bah0qoBy9T+eHbu1L+8mBSRJOgHDp/yNx5iLrJ+YNMmlb4WLpMOCFyOpX f1A7969HCa2MPhM4Dd6NIadqL6jo7WfnvUNXlnsYMtI8ahv4V59jc2th0O7Q6fb9 cpUsKUq66sZZj1gzMmbdWqua0WbBmj1n0U8tH8UkapqCx0g5THUZSHwuhwqFFMte DMYCRU90n1omo2CV8j2RcdSg -----END CERTIFICATE-----Generated at Wed Mar 4 15:42:32 2026 by rpki-client