$ rpki-client -vvf rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft File: 4JlhFVCKOtWZFdurzLaW26C0zHI.mft (raw, json) Hash identifier: +wtc/J9atEuQ9xdMbFATl7unhRIT4yaAVdlBD1EbgzY= Subject key identifier: EF:16:3D:C0:17:89:CB:3E:6C:13:E7:47:B8:17:BA:84:8A:42:AE:56 Authority key identifier: E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72 Certificate issuer: /CN=A9153CE9/serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72 Certificate serial: 061A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft Manifest number: 05F4 Signing time: Sat 28 Mar 2026 22:52:11 +0000 Manifest this update: Sat 28 Mar 2026 22:52:11 +0000 Manifest next update: Sat 04 Apr 2026 22:52:11 +0000 Files and hashes: 1: 4JlhFVCKOtWZFdurzLaW26C0zHI.crl (hash: TN0hSs7hsKv4CZGutMtw01/Hccu/YdNR6Q43FJmL+sc=) 2: 6D655B7CAF4F11F0A741B236C4F9AE02.roa (hash: 2NIJ+RBIKW5iZiN3H8lcUO6ml0C3TxyzXOWCEv8U7M8=) 3: F650791EF01411ED9210D060C4F9AE02.roa (hash: AWc+boEStiOUVPv+8IUahYFAvtg7A+MrQdgGzHZN4Yg=) 4: 03C7AA80F01111ED9C345840C4F9AE02.roa (hash: TBXfHIsLBP1r3Og38/Zn+SGz/Jmiive4bvBF8Q5gW6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 22:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1562 (0x61a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153CE9, serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72 Validity Not Before: Mar 28 22:52:11 2026 GMT Not After : Apr 4 22:52:11 2026 GMT Subject: CN=69c85b9b-9347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:03:c6:4d:68:dd:c1:3d:77:92:ed:5e:fe:2e: 73:31:96:6e:c4:b8:39:16:17:26:5b:a4:b2:2c:92: d5:f7:f1:ab:fa:2a:1e:26:83:67:69:26:cb:63:fe: b2:99:16:8b:81:57:fd:6a:e9:94:fd:f2:b1:10:53: 80:e7:5f:3f:3b:42:a9:96:b4:4e:71:e4:07:15:e6: e7:2e:ac:5e:fb:9e:78:fa:86:4a:70:93:76:11:a0: 5e:c4:35:bf:31:7c:a9:3c:b9:de:81:f0:1a:57:a4: b4:16:d6:5d:44:91:54:13:0c:f4:5c:14:50:99:44: e9:57:c5:11:59:bc:39:a9:fc:d2:92:9c:45:15:99: e8:e8:1b:39:0e:83:f6:aa:aa:af:87:05:16:d3:fc: e3:e6:a7:5f:6a:3f:be:34:e6:c7:a0:2a:96:f8:cc: df:3b:9e:33:6d:d9:be:4d:a3:d7:43:df:ca:48:e6: 29:6b:3d:75:34:97:12:78:20:ea:7d:f1:1c:7c:c7: 17:fd:67:1b:40:1c:33:1f:b5:58:3a:ab:12:03:66: 86:7a:3f:fd:2f:39:d2:de:e3:0b:ac:dd:d1:4a:4e: f2:52:a4:a0:37:55:34:13:89:68:54:29:c3:ca:7e: fd:16:7c:22:2f:80:04:08:d8:a8:35:f8:aa:41:6b: c2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:16:3D:C0:17:89:CB:3E:6C:13:E7:47:B8:17:BA:84:8A:42:AE:56 X509v3 Authority Key Identifier: keyid:E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:ff:f4:bc:dd:d8:9f:1f:5e:95:31:82:69:da:73:01:10:5b: 5e:36:81:25:2d:63:07:45:37:31:e6:99:9f:d7:1d:97:a6:19: 4c:f2:11:22:5d:3a:9f:b0:ae:82:61:d4:35:b6:ca:84:4d:99: bb:11:ba:46:e3:78:7d:9d:33:04:e8:31:18:0e:0b:b3:2c:c6: 75:41:52:8a:3c:11:49:94:3c:91:cf:55:13:01:c0:ab:bf:b7: d7:f2:66:28:bd:80:2a:19:b9:0d:99:8c:8f:61:f9:43:7d:c4: b5:df:16:1c:70:c0:6f:71:48:fd:ba:65:7a:f3:df:eb:1d:11: 8d:73:44:09:d9:f7:e7:87:3d:65:e8:3c:b3:47:4a:b0:fd:df: 71:8c:b7:cc:8b:71:08:94:a6:75:70:21:b6:ad:70:2e:0e:15: 62:c0:07:df:46:aa:9a:fc:32:dc:a2:2a:3d:ed:e6:ee:b1:7a: 1d:0b:96:92:e5:60:35:69:60:16:39:6f:87:76:31:3d:60:1c: c7:4a:d1:b1:39:b0:2f:52:cb:5c:53:8e:e4:98:b9:d4:c8:77: ea:65:52:9a:f1:54:78:59:d4:7f:4c:13:ff:db:dc:5a:cc:6d: da:51:f7:52:ba:7e:50:be:1d:54:de:dc:3f:bf:0d:a4:11:00: 70:8f:5c:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDRTkxMTAvBgNVBAUTKEUwOTk2MTE1NTA4QTNBRDU5OTE1REJBQkNDQjY5NkRC QTBCNENDNzIwHhcNMjYwMzI4MjI1MjExWhcNMjYwNDA0MjI1MjExWjAYMRYwFAYD VQQDEw02OWM4NWI5Yi05MzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgPGTWjdwT13ku1e/i5zMZZuxLg5FhcmW6SyLJLV9/Gr+ioeJoNnaSbLY/6y mRaLgVf9aumU/fKxEFOA518/O0KplrROceQHFebnLqxe+554+oZKcJN2EaBexDW/ MXypPLnegfAaV6S0FtZdRJFUEwz0XBRQmUTpV8URWbw5qfzSkpxFFZno6Bs5DoP2 qqqvhwUW0/zj5qdfaj++NObHoCqW+MzfO54zbdm+TaPXQ9/KSOYpaz11NJcSeCDq ffEcfMcX/WcbQBwzH7VYOqsSA2aGej/9LznS3uMLrN3RSk7yUqSgN1U0E4loVCnD yn79FnwiL4AECNioNfiqQWvCVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO8WPcAX ics+bBPnR7gXuoSKQq5WMB8GA1UdIwQYMBaAFOCZYRVQijrVmRXbq8y2ltugtMxy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0NFOS8wQUIxRDM5NkY1 MTUxMUVCOUVGRTA3NTBDNEY5QUUwMi80SmxoRlZDS090V1pGZHVyekxhVzI2QzB6 SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRKbGhGVkNLT3RXWkZkdXJ6TGFXMjZDMHpISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0NFOS8wQUIxRDM5NkY1MTUxMUVCOUVGRTA3NTBDNEY5QUUwMi80SmxoRlZDS090 V1pGZHVyekxhVzI2QzB6SEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB//0vN3Ynx9elTGCadpzARBbXjaBJS1jB0U3MeaZn9cdl6YZTPIRIl06n7Cu gmHUNbbKhE2ZuxG6RuN4fZ0zBOgxGA4LsyzGdUFSijwRSZQ8kc9VEwHAq7+31/Jm KL2AKhm5DZmMj2H5Q33Etd8WHHDAb3FI/bplevPf6x0RjXNECdn354c9Zeg8s0dK sP3fcYy3zItxCJSmdXAhtq1wLg4VYsAH30aqmvwy3KIqPe3m7rF6HQuWkuVgNWlg Fjlvh3YxPWAcx0rRsTmwL1LLXFOO5Ji51Mh36mVSmvFUeFnUf0wT/9vcWsxt2lH3 Urp+UL4dVN7cP78NpBEAcI9cSA== -----END CERTIFICATE-----Generated at Sun Mar 29 23:14:30 2026 by rpki-client