$ rpki-client -vvf rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft File: 4dsvyCXsO7vnKFenPsCGoIIeIP0.mft (raw, json) Hash identifier: lSgW4SRAcAVHJZVyoVhiV9nqNLLlX1a6TrC65E6SKw8= Subject key identifier: 3B:55:15:B7:51:53:6E:2A:E9:D1:F4:24:8D:4D:7C:1A:9F:8C:34:A3 Authority key identifier: E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD Certificate issuer: /CN=A9131589/serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Certificate serial: 0315 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft Manifest number: 030E Signing time: Mon 09 Mar 2026 00:36:02 +0000 Manifest this update: Mon 09 Mar 2026 00:36:02 +0000 Manifest next update: Mon 16 Mar 2026 00:36:02 +0000 Files and hashes: 1: 4dsvyCXsO7vnKFenPsCGoIIeIP0.crl (hash: k+BjaJmA9SZC9DUFQ4EjUqlIOHLyLh0YkuPAdtvYap4=) 2: 82759C100CCE11ED97C94316C4F9AE02.roa (hash: r5uKcofx90HTHUTbqd06vEskUT1MLjmemfMajVokYGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Mar 2026 00:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 789 (0x315) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131589, serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Validity Not Before: Mar 9 00:36:02 2026 GMT Not After : Mar 16 00:36:02 2026 GMT Subject: CN=69ae15f2-c235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8e:b2:7a:70:d7:56:48:66:37:39:ea:f2:76: f9:2b:d3:29:34:71:01:19:7d:29:75:dd:4c:0e:e6: 5e:09:96:3e:19:6a:61:15:a1:31:98:f0:2e:ba:ac: d4:57:96:01:2f:98:1e:2d:b7:31:46:c0:94:4f:e6: b8:76:24:02:af:48:59:93:42:1a:e2:36:a6:e1:b2: 47:3e:08:34:35:1c:f7:53:c0:ee:00:8a:db:af:04: b4:33:86:8c:5d:ec:7c:a8:43:40:00:0c:c1:3a:a8: 9e:5d:4c:10:19:f3:c2:d9:a3:ec:bf:4b:8b:76:bf: 53:c7:d0:50:79:0b:ba:8c:f8:3a:86:39:0c:ab:3f: b3:41:51:00:77:90:01:95:36:2e:ec:28:d0:ff:ce: be:e0:6f:fa:f9:a0:ad:0f:a4:a7:ff:be:3a:4a:15: 30:dc:ce:62:8e:92:de:86:6f:ed:26:30:b1:7d:ea: fa:84:31:c2:23:a9:5e:94:c4:e8:c7:a2:d7:98:f7: 12:2a:3d:80:d6:9a:7e:fa:58:89:fe:52:42:30:26: 2c:4f:28:81:41:82:07:06:56:6e:8f:05:f7:ec:2a: 6c:a1:5b:64:4a:2e:8c:37:16:62:8e:85:d7:52:2b: 65:5b:1f:40:4f:af:98:36:6a:83:c0:23:84:1d:d2: d1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:55:15:B7:51:53:6E:2A:E9:D1:F4:24:8D:4D:7C:1A:9F:8C:34:A3 X509v3 Authority Key Identifier: keyid:E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:02:77:3f:f2:e0:42:47:67:07:8d:10:11:da:9c:2e:0b:ba: 4c:bb:58:e6:fb:62:6c:57:c5:c8:a4:5b:fa:37:21:78:7d:e0: 12:b1:d6:e8:ac:ff:a6:4c:8b:d8:50:65:c1:b4:ea:ab:f7:8f: 43:9a:5c:47:f4:4b:1e:20:d2:f6:0f:5b:06:00:a5:49:99:0c: 3f:b7:a0:09:39:e6:a5:a9:66:03:31:ce:4f:f6:e2:95:f3:68: 37:14:e7:d7:1e:46:be:23:e5:64:59:73:8f:5e:f4:10:f7:4c: e0:5b:8c:e0:9b:68:9c:11:ac:5b:cb:df:19:b0:17:3e:16:5a: 13:d8:40:72:0f:c4:39:d9:db:2f:90:8e:37:9d:e4:cc:33:7d: c1:75:6f:f3:83:92:51:d9:71:e1:cf:4a:2f:0b:53:42:b4:8c: 13:88:70:2d:dd:0b:28:d5:12:e4:65:18:87:c5:86:a5:d8:da: 26:01:b0:d4:c8:74:20:59:8a:e7:43:ef:b3:02:6d:0e:02:f3: 55:64:f8:a1:12:e5:d8:67:19:7e:25:49:47:bd:22:10:a3:ea: 05:c6:96:3d:dd:fa:1d:b5:36:12:3a:d1:31:45:99:b3:25:e5: eb:5a:bf:5d:59:25:6f:05:7a:77:1e:cf:07:da:dd:9b:5f:9e: 37:03:42:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1ODkxMTAvBgNVBAUTKEUxREIyRkM4MjVFQzNCQkJFNzI4NTdBNzNFQzA4NkEw ODIxRTIwRkQwHhcNMjYwMzA5MDAzNjAyWhcNMjYwMzE2MDAzNjAyWjAYMRYwFAYD VQQDEw02OWFlMTVmMi1jMjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA246yenDXVkhmNznq8nb5K9MpNHEBGX0pdd1MDuZeCZY+GWphFaExmPAuuqzU V5YBL5geLbcxRsCUT+a4diQCr0hZk0Ia4jam4bJHPgg0NRz3U8DuAIrbrwS0M4aM Xex8qENAAAzBOqieXUwQGfPC2aPsv0uLdr9Tx9BQeQu6jPg6hjkMqz+zQVEAd5AB lTYu7CjQ/86+4G/6+aCtD6Sn/746ShUw3M5ijpLehm/tJjCxfer6hDHCI6lelMTo x6LXmPcSKj2A1pp++liJ/lJCMCYsTyiBQYIHBlZujwX37CpsoVtkSi6MNxZijoXX UitlWx9AT6+YNmqDwCOEHdLRiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDtVFbdR U24q6dH0JI1NfBqfjDSjMB8GA1UdIwQYMBaAFOHbL8gl7Du75yhXpz7AhqCCHiD9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU4OS8zN0UzOTBBMDBD Q0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083dm5LRmVuUHNDR29JSWVJ UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRkc3Z5Q1hzTzd2bktGZW5Qc0NHb0lJZUlQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU4OS8zN0UzOTBBMDBDQ0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083 dm5LRmVuUHNDR29JSWVJUDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWQJ3P/LgQkdnB40QEdqcLgu6TLtY5vtibFfFyKRb+jcheH3gErHW6Kz/pkyL 2FBlwbTqq/ePQ5pcR/RLHiDS9g9bBgClSZkMP7egCTnmpalmAzHOT/bilfNoNxTn 1x5GviPlZFlzj170EPdM4FuM4JtonBGsW8vfGbAXPhZaE9hAcg/EOdnbL5CON53k zDN9wXVv84OSUdlx4c9KLwtTQrSME4hwLd0LKNUS5GUYh8WGpdjaJgGw1Mh0IFmK 50PvswJtDgLzVWT4oRLl2GcZfiVJR70iEKPqBcaWPd36HbU2EjrRMUWZsyXl61q/ XVklbwV6dx7PB9rdm1+eNwNCag== -----END CERTIFICATE-----Generated at Mon Mar 9 05:46:48 2026 by rpki-client