$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft File: r4P0CG-0oWWIvizFUNW42dRCOYU.mft (raw, json) Hash identifier: jxOcyG01jvFCngtviBIBaYE/4m/9nKFHR1yjCMnruzg= Subject key identifier: 65:73:B8:E9:6D:37:A6:EE:06:25:E5:9F:43:6C:25:CB:96:7A:36:17 Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 Certificate issuer: /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Certificate serial: 0850 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft Manifest number: 0842 Signing time: Sun 22 Mar 2026 20:31:40 +0000 Manifest this update: Sun 22 Mar 2026 20:31:40 +0000 Manifest next update: Sun 29 Mar 2026 20:31:40 +0000 Files and hashes: 1: r4P0CG-0oWWIvizFUNW42dRCOYU.crl (hash: t5QBEuQfVGrUo6YcGoGusgGAut8B7zQOA0tQHyfUvKk=) 2: 6AB65D92AD1811EB84E05F5BC4F9AE02.roa (hash: mcE/kCUcZ9XtkapXLq0nvxx/GVcFi46zNxigdP3tLvc=) 3: BF529990959F11EC844CAD64C4F9AE02.roa (hash: 8slOQpxcJ7i4Fqpb2U0NO9KtNpjmpZLi6X29SuRjdfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 20:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2128 (0x850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BEA2, serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Validity Not Before: Mar 22 20:31:40 2026 GMT Not After : Mar 29 20:31:40 2026 GMT Subject: CN=69c051ac-64ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7c:a7:34:de:f3:ab:d5:03:72:2e:46:ae:b2: bb:82:f7:f2:16:aa:2c:17:1c:6a:ef:7d:ae:ac:32: 20:09:7a:33:87:18:19:14:03:84:0b:7e:06:f3:80: a2:c1:ed:b1:17:51:25:6b:0f:71:08:98:21:1c:8a: e3:91:28:05:3a:dd:68:42:f7:3c:77:22:1f:12:11: 96:62:f6:64:b4:c0:84:d3:cf:7d:78:4c:c5:18:25: 47:59:4b:a2:2a:f4:7c:e3:d2:65:5c:d2:25:7d:8b: 39:28:3c:6c:1f:30:d3:1e:8a:ab:d7:60:9e:53:81: 3b:12:a7:2d:8d:a1:e1:1f:10:6c:a6:25:52:b4:30: 67:41:96:2b:11:cf:8a:2b:a6:2d:13:d7:ee:c3:12: c9:7c:51:5a:df:0a:d5:f1:f4:9a:ea:81:4d:17:5d: 25:b5:52:82:cf:95:bf:66:a3:3e:56:1a:33:6d:14: f1:52:ee:1a:fa:d4:b3:97:03:c9:95:5e:92:9f:bc: dc:0a:9c:46:4f:d5:05:50:28:cd:77:74:b2:47:e9: 43:58:6f:74:4e:9c:3b:eb:7d:c3:14:69:90:a4:83: f6:b8:9c:2d:50:5a:99:a7:bd:75:cc:6a:24:b4:1b: 83:1a:aa:f1:ce:e7:a5:b5:3f:c4:98:8e:69:42:f4: 95:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:73:B8:E9:6D:37:A6:EE:06:25:E5:9F:43:6C:25:CB:96:7A:36:17 X509v3 Authority Key Identifier: keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:f5:3c:b9:99:34:31:97:e8:60:cf:ab:14:f0:e3:c2:ca:08: ab:34:0e:8a:4b:fb:be:97:62:cd:ad:b8:6a:dc:c2:4a:28:37: 8a:3d:15:b8:2e:0d:fa:58:b5:61:bd:69:d5:60:43:2c:de:8b: a5:6f:af:c9:67:c7:d0:18:6f:b9:10:0f:4c:f5:ee:4a:3e:72: f2:f5:b1:38:26:2f:74:73:2f:71:bd:49:4f:73:7f:bd:f2:96: 8e:82:c5:c8:40:2e:b7:aa:77:54:65:8a:04:1d:49:9a:f1:14: 0c:29:83:fe:ee:6a:d2:15:95:68:b1:c4:89:78:51:91:77:4c: be:74:1b:e3:b1:20:a2:82:92:6a:37:0b:f2:ee:28:64:44:e8: ac:70:bb:f7:58:ec:b7:f3:de:8a:41:12:7e:30:4b:db:cd:1b: 63:1d:80:1b:9c:f3:d2:11:fc:e0:68:ec:56:9a:25:54:3c:46: fb:7e:eb:6d:41:01:a9:70:f5:46:da:bb:60:d4:d3:ff:77:2f: b1:98:54:9b:a2:bb:6e:d0:0d:df:a9:83:07:52:f0:26:51:fa: 0c:7d:8b:23:1b:59:49:7d:8e:f7:65:5d:08:49:c4:a1:83:fb: e1:c0:90:ae:73:c3:b6:c9:95:6d:e0:ee:91:a4:c5:20:a5:44: f2:ce:29:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JFQTIxMTAvBgNVBAUTKEFGODNGNDA4NkZCNEExNjU4OEJFMkNDNTUwRDVCOEQ5 RDQ0MjM5ODUwHhcNMjYwMzIyMjAzMTQwWhcNMjYwMzI5MjAzMTQwWjAYMRYwFAYD VQQDEw02OWMwNTFhYy02NGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApnynNN7zq9UDci5GrrK7gvfyFqosFxxq732urDIgCXozhxgZFAOEC34G84Ci we2xF1Elaw9xCJghHIrjkSgFOt1oQvc8dyIfEhGWYvZktMCE0899eEzFGCVHWUui KvR849JlXNIlfYs5KDxsHzDTHoqr12CeU4E7EqctjaHhHxBspiVStDBnQZYrEc+K K6YtE9fuwxLJfFFa3wrV8fSa6oFNF10ltVKCz5W/ZqM+VhozbRTxUu4a+tSzlwPJ lV6Sn7zcCpxGT9UFUCjNd3SyR+lDWG90Tpw7633DFGmQpIP2uJwtUFqZp711zGok tBuDGqrxzueltT/EmI5pQvSV5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGVzuOlt N6buBiXln0NsJcuWejYXMB8GA1UdIwQYMBaAFK+D9AhvtKFliL4sxVDVuNnUQjmF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkVBMi8xOUZFQTQ1ODAz MzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9XV0l2aXpGVU5XNDJkUkNP WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0UDBDRy0wb1dXSXZpekZVTlc0MmRSQ09ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkVBMi8xOUZFQTQ1ODAzMzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9X V0l2aXpGVU5XNDJkUkNPWVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIPU8uZk0MZfoYM+rFPDjwsoIqzQOikv7vpdiza24atzCSig3ij0VuC4N+li1 Yb1p1WBDLN6LpW+vyWfH0BhvuRAPTPXuSj5y8vWxOCYvdHMvcb1JT3N/vfKWjoLF yEAut6p3VGWKBB1JmvEUDCmD/u5q0hWVaLHEiXhRkXdMvnQb47EgooKSajcL8u4o ZETorHC791jst/PeikESfjBL280bYx2AG5zz0hH84GjsVpolVDxG+37rbUEBqXD1 Rtq7YNTT/3cvsZhUm6K7btAN36mDB1LwJlH6DH2LIxtZSX2O92VdCEnEoYP74cCQ rnPDtsmVbeDukaTFIKVE8s4pmg== -----END CERTIFICATE-----Generated at Mon Mar 23 11:46:29 2026 by rpki-client