$ rpki-client -vvf rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft File: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft (raw, json) Hash identifier: 97EX5+uEv9IGx40bl5itjwH8qltQuyGiMcPnsrhwPlQ= Subject key identifier: 9E:4D:F5:AA:1E:3D:00:2F:23:B6:58:9D:08:6E:9A:77:3A:8A:B3:8B Authority key identifier: E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 Certificate issuer: /CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Certificate serial: 0D02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft Manifest number: 0CC3 Signing time: Sun 26 Apr 2026 18:24:42 +0000 Manifest this update: Sun 26 Apr 2026 18:24:42 +0000 Manifest next update: Sun 03 May 2026 18:24:42 +0000 Files and hashes: 1: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl (hash: qzhOBFIrM4qppZ2BHntXdfwOHBmNB+ITCnALA5Sgjz0=) 2: 89EA369C2A7411F09A757F45C4F9AE02.roa (hash: 2VeVxpw4IPzgEibTNEjoXK/Qy1fd2SwF+0DbU+sMNRg=) 3: B688C61E2A7411F09C50DF45C4F9AE02.roa (hash: HqADfJ6PQAnaMYUSVaYaC1tzBINlqpUjolFi7987BYY=) 4: B32668C4D98C11EB905D7281C4F9AE02.roa (hash: ApbUgdUH10Pdfa6lJVrc4XPCGZcLshELo3PIV/SWLXw=) 5: 183DE570057A11EC822F230EC4F9AE02.roa (hash: KDCY6i/WJ6l1BoCfZqKbKmaeWQcqDHXYwIFR4N1iXXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 18:24:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3330 (0xd02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CBF3, serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Validity Not Before: Apr 26 18:24:42 2026 GMT Not After : May 3 18:24:42 2026 GMT Subject: CN=69ee586a-d249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:12:ee:4d:0e:00:bd:17:c2:03:13:0d:41:cd: 1a:da:34:54:65:0c:cd:2d:5a:ec:70:d8:8c:2f:45: 24:f8:4e:90:27:84:04:65:19:a9:35:21:bf:f8:91: 1e:0b:10:4f:df:d9:94:9d:71:1c:ad:cd:c0:cb:90: ab:b3:1a:f7:50:97:18:78:a0:d8:5e:96:02:5f:db: 80:12:3b:42:1f:e7:cb:31:f2:78:d0:73:33:81:58: 57:c8:81:37:f7:37:7b:f6:e7:76:fe:4d:c3:38:77: c4:76:7b:68:59:48:56:1e:21:7f:6b:94:4b:dd:3e: 3f:42:b7:f0:93:9b:48:32:29:87:bc:06:8a:44:fc: 7f:cd:a5:de:55:49:65:ee:3f:05:34:07:be:fa:03: fc:72:16:24:89:ff:8e:fe:cd:2d:0c:f7:e2:2e:89: c3:96:37:00:58:d8:8f:02:7b:c2:81:e4:fc:56:81: c8:27:be:20:10:2e:d4:de:15:25:6b:3b:6c:4d:1b: 74:6f:15:e3:8a:db:96:30:60:61:28:4f:45:47:73: 8c:32:2f:96:8c:9a:21:b5:7e:27:f0:83:86:74:73: a1:74:2e:b5:84:0c:23:d9:9a:c4:70:15:eb:6e:35: 76:20:17:6b:a5:22:f0:17:b2:38:4e:f3:a8:d8:3d: d5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4D:F5:AA:1E:3D:00:2F:23:B6:58:9D:08:6E:9A:77:3A:8A:B3:8B X509v3 Authority Key Identifier: keyid:E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ef:ee:97:72:df:5a:de:13:18:d9:e2:4c:1f:1c:64:55:ea: 9c:91:25:76:c4:7e:2c:77:b7:f2:11:30:80:f5:63:88:24:fd: be:89:36:29:df:1d:c7:03:2c:2e:91:2e:ca:a2:53:35:cf:1b: a1:c3:1e:14:d1:1d:3d:b2:70:d0:25:43:de:20:d0:3a:ce:7c: 03:70:68:68:25:f0:e8:77:a7:23:2d:ff:9e:d5:5e:6c:a8:3a: da:5e:ce:3d:0f:f4:64:1c:9b:dd:89:22:30:1f:88:00:2b:70: 34:5e:2b:0b:a8:ef:c6:d7:0a:48:4e:e9:a1:3f:34:89:3a:e5: aa:2d:82:91:a7:ea:72:bf:a7:40:70:fa:d6:49:8e:06:96:8f: e5:f0:67:35:c6:97:9f:6f:51:47:e0:af:01:a0:fc:14:d0:17: 05:2a:e5:7e:c0:9d:20:87:5e:b0:aa:f5:3b:8a:b9:e6:96:35: aa:e5:ea:00:b4:8b:96:23:86:58:62:d9:26:0b:5d:7c:22:28: c4:35:32:74:09:dd:5b:e4:1f:4d:9b:28:0b:71:59:71:84:f9: 2a:48:b8:8e:b7:32:df:59:05:26:40:14:af:3e:8b:43:06:67: 64:00:cc:b9:90:6f:49:73:cf:a3:7d:f7:f5:fd:d4:74:85:b3: 85:ef:e3:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCRjMxMTAvBgNVBAUTKEUyNDQ5RTMxMjIyMDEzMUUyRTc2QzQyQzdDQ0M2REQx OTM1MTA3MDcwHhcNMjYwNDI2MTgyNDQyWhcNMjYwNTAzMTgyNDQyWjAYMRYwFAYD VQQDEw02OWVlNTg2YS1kMjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRLuTQ4AvRfCAxMNQc0a2jRUZQzNLVrscNiML0Uk+E6QJ4QEZRmpNSG/+JEe CxBP39mUnXEcrc3Ay5Crsxr3UJcYeKDYXpYCX9uAEjtCH+fLMfJ40HMzgVhXyIE3 9zd79ud2/k3DOHfEdntoWUhWHiF/a5RL3T4/Qrfwk5tIMimHvAaKRPx/zaXeVUll 7j8FNAe++gP8chYkif+O/s0tDPfiLonDljcAWNiPAnvCgeT8VoHIJ74gEC7U3hUl aztsTRt0bxXjituWMGBhKE9FR3OMMi+WjJohtX4n8IOGdHOhdC61hAwj2ZrEcBXr bjV2IBdrpSLwF7I4TvOo2D3VMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ5N9aoe PQAvI7ZYnQhumnc6irOLMB8GA1UdIwQYMBaAFOJEnjEiIBMeLnbELHzMbdGTUQcH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0JGMy8xQkM2RUIyMDEx RTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4NHVkc1FzZk14dDBaTlJC d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrU2VNU0lnRXg0dWRzUXNmTXh0MFpOUkJ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0JGMy8xQkM2RUIyMDExRTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4 NHVkc1FzZk14dDBaTlJCd2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiu/ul3LfWt4TGNniTB8cZFXqnJEldsR+LHe38hEwgPVjiCT9vok2Kd8dxwMs LpEuyqJTNc8bocMeFNEdPbJw0CVD3iDQOs58A3BoaCXw6HenIy3/ntVebKg62l7O PQ/0ZByb3YkiMB+IACtwNF4rC6jvxtcKSE7poT80iTrlqi2Ckafqcr+nQHD61kmO BpaP5fBnNcaXn29RR+CvAaD8FNAXBSrlfsCdIIdesKr1O4q55pY1quXqALSLliOG WGLZJgtdfCIoxDUydAndW+QfTZsoC3FZcYT5Kki4jrcy31kFJkAUrz6LQwZnZADM uZBvSXPPo3339f3UdIWzhe/j4A== -----END CERTIFICATE-----Generated at Tue Apr 28 17:27:47 2026 by rpki-client