$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft File: r4P0CG-0oWWIvizFUNW42dRCOYU.mft (raw, json) Hash identifier: kM2nH0f3nySZssdNnF6OdWQo9pF3pduh3uwpPwrQjCo= Subject key identifier: AC:2B:F3:CA:3D:00:8A:8A:65:57:BB:BB:51:FA:26:C0:D0:EA:FF:B5 Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 Certificate issuer: /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Certificate serial: 0867 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft Manifest number: 0859 Signing time: Wed 06 May 2026 20:45:33 +0000 Manifest this update: Wed 06 May 2026 20:45:33 +0000 Manifest next update: Wed 13 May 2026 20:45:33 +0000 Files and hashes: 1: r4P0CG-0oWWIvizFUNW42dRCOYU.crl (hash: zuNv/MzbGQ/y2x1XpiV55T2YHajdHVFjNrjVzi2kieY=) 2: 6AB65D92AD1811EB84E05F5BC4F9AE02.roa (hash: mcE/kCUcZ9XtkapXLq0nvxx/GVcFi46zNxigdP3tLvc=) 3: BF529990959F11EC844CAD64C4F9AE02.roa (hash: 8slOQpxcJ7i4Fqpb2U0NO9KtNpjmpZLi6X29SuRjdfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:45:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2151 (0x867) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BEA2, serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Validity Not Before: May 6 20:45:33 2026 GMT Not After : May 13 20:45:33 2026 GMT Subject: CN=69fba86d-9fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:18:09:5d:48:df:c4:9f:35:9a:19:7f:ba:d2: 65:c4:ff:d5:0b:fa:65:de:74:84:49:fa:3a:bd:57: 68:cf:c3:76:e3:86:64:2e:40:ff:82:21:41:e4:19: b3:6b:b2:b5:d5:9c:0a:18:b8:08:14:fd:a8:e2:06: f7:ba:f8:24:92:92:87:ea:31:bb:2a:03:62:8a:b7: 91:a0:c0:eb:0f:35:74:67:6b:19:47:6c:72:53:0e: e1:f5:07:cc:4c:6b:d2:a0:ed:a2:17:1f:5d:60:1d: 2d:86:a7:3c:93:ec:18:0c:5a:a7:b2:bd:ad:e3:b1: d3:e8:e0:0b:cd:e8:41:51:97:fe:43:3f:8d:0e:43: 3a:db:b8:da:64:28:b4:72:f8:08:ce:ac:83:c7:60: d0:e2:7b:64:b8:ee:06:e6:5a:d4:bd:32:9a:71:e5: 3f:1f:30:56:c8:8e:e2:8f:05:bd:98:a5:49:ea:12: 25:59:27:c0:aa:3f:b8:dd:a6:a4:a6:02:5a:70:6f: a9:3b:16:15:6d:92:de:25:a8:3f:94:58:9f:17:1e: af:98:65:e9:86:d6:8a:58:e1:1a:80:12:fb:8e:85: 66:ef:ee:db:ab:5a:b6:a7:8d:13:31:1a:0a:5c:78: c1:2d:cd:f2:43:ee:0c:8d:79:14:56:87:df:d3:81: 06:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2B:F3:CA:3D:00:8A:8A:65:57:BB:BB:51:FA:26:C0:D0:EA:FF:B5 X509v3 Authority Key Identifier: keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b9:4e:aa:cc:8f:14:15:54:ef:4c:fd:30:0b:94:3b:f4:1b: 42:11:d5:d6:a7:d3:f4:fa:06:be:d7:ed:cd:07:dc:b3:bc:a7: e4:08:74:18:8d:7c:29:46:28:54:96:2a:6c:1f:e5:a1:76:76: e1:0a:2e:3f:e7:c0:44:b3:d4:40:3a:b5:9d:64:93:d4:bc:bc: 7a:8d:58:d2:c4:d6:8a:b2:f1:ad:f5:fe:e3:a0:69:b2:d5:91: 60:5a:53:ae:bb:fb:8b:ac:48:d7:9f:7e:14:0a:a0:73:63:05: 49:04:01:dc:39:2c:29:cc:12:cc:e1:90:18:f1:8b:37:c6:e5: a8:f3:1f:87:5c:d8:76:dc:b6:17:7c:72:74:1e:f9:8f:de:11: 11:50:83:b1:e0:40:36:1a:df:a3:a8:73:94:25:5d:00:68:57: 5a:c4:e3:f6:0a:2d:92:d6:a4:98:77:ca:7a:c3:46:10:49:60: 78:0c:42:12:53:d8:33:e2:1b:b4:49:ac:64:1f:86:2f:6d:1e: 28:97:bd:a8:bc:a5:66:d6:04:7a:0c:95:ce:ba:6c:48:f7:47: 65:ab:88:f0:dc:4b:84:55:6b:4e:60:c7:50:15:cd:91:6c:6f: ef:30:be:ac:4d:22:03:81:3b:50:d1:1d:3e:c4:40:e0:23:55: 72:35:60:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JFQTIxMTAvBgNVBAUTKEFGODNGNDA4NkZCNEExNjU4OEJFMkNDNTUwRDVCOEQ5 RDQ0MjM5ODUwHhcNMjYwNTA2MjA0NTMzWhcNMjYwNTEzMjA0NTMzWjAYMRYwFAYD VQQDEw02OWZiYTg2ZC05ZmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+hgJXUjfxJ81mhl/utJlxP/VC/pl3nSESfo6vVdoz8N244ZkLkD/giFB5Bmz a7K11ZwKGLgIFP2o4gb3uvgkkpKH6jG7KgNiireRoMDrDzV0Z2sZR2xyUw7h9QfM TGvSoO2iFx9dYB0thqc8k+wYDFqnsr2t47HT6OALzehBUZf+Qz+NDkM627jaZCi0 cvgIzqyDx2DQ4ntkuO4G5lrUvTKaceU/HzBWyI7ijwW9mKVJ6hIlWSfAqj+43aak pgJacG+pOxYVbZLeJag/lFifFx6vmGXphtaKWOEagBL7joVm7+7bq1q2p40TMRoK XHjBLc3yQ+4MjXkUVoff04EGWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKwr88o9 AIqKZVe7u1H6JsDQ6v+1MB8GA1UdIwQYMBaAFK+D9AhvtKFliL4sxVDVuNnUQjmF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkVBMi8xOUZFQTQ1ODAz MzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9XV0l2aXpGVU5XNDJkUkNP WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0UDBDRy0wb1dXSXZpekZVTlc0MmRSQ09ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkVBMi8xOUZFQTQ1ODAzMzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9X V0l2aXpGVU5XNDJkUkNPWVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfLlOqsyPFBVU70z9MAuUO/QbQhHV1qfT9PoGvtftzQfcs7yn5Ah0GI18KUYo VJYqbB/loXZ24QouP+fARLPUQDq1nWST1Ly8eo1Y0sTWirLxrfX+46BpstWRYFpT rrv7i6xI159+FAqgc2MFSQQB3DksKcwSzOGQGPGLN8blqPMfh1zYdty2F3xydB75 j94REVCDseBANhrfo6hzlCVdAGhXWsTj9gotktakmHfKesNGEElgeAxCElPYM+Ib tEmsZB+GL20eKJe9qLylZtYEegyVzrpsSPdHZauI8NxLhFVrTmDHUBXNkWxv7zC+ rE0iA4E7UNEdPsRA4CNVcjVgzA== -----END CERTIFICATE-----Generated at Thu May 7 15:24:09 2026 by rpki-client