$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft File: 4rutOTFYoGdMaUnsO4oLc_hgKaI.mft (raw, json) Hash identifier: AcEdetxVjVChrTA024QNJKmZdnLInNPw7Vy7NeJBDuE= Subject key identifier: 72:1A:77:27:A0:3F:96:53:A8:39:E8:A2:23:53:EF:2F:D1:F8:3F:29 Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2 Certificate issuer: /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2 Certificate serial: 0353 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft Manifest number: 031C Signing time: Thu 21 May 2026 01:16:14 +0000 Manifest this update: Thu 21 May 2026 01:16:13 +0000 Manifest next update: Thu 28 May 2026 01:16:13 +0000 Files and hashes: 1: 4rutOTFYoGdMaUnsO4oLc_hgKaI.crl (hash: DpgjnUQpMkV0YIAfg+Jxw6i09ilS5g/TaD3UwcBopVs=) 2: BBF0DD5216CD11EDBB046C79C4F9AE02.roa (hash: pXbpkuqiutX+PAfcE6/HkNxLhVyYjefCmA1YJyvlDKU=) 3: 4EEAF1DAE96211ED9A14B935C4F9AE02.roa (hash: AInTRm364fWSsEgGDzFSbiLVDp6l9PBB3u+vGg6CfFw=) 4: EC75126616CA11ED8E290A59C4F9AE02.roa (hash: qxr1xAZVPVy5IH5flTFbZouBg69ZSR0F1Rre519E1ps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 851 (0x353) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2 Validity Not Before: May 21 01:16:13 2026 GMT Not After : May 28 01:16:13 2026 GMT Subject: CN=6a0e5cde-c9b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:62:8d:f3:64:a2:8f:7c:d4:56:6b:a7:7e:92: 32:30:d8:47:79:73:19:25:27:8a:4b:b9:0a:d4:d1: 05:26:a5:52:c5:16:c1:5f:59:c8:cd:de:7b:74:91: 87:62:d4:24:1a:38:89:78:a8:25:ef:92:34:22:21: db:1f:6c:db:b0:56:fc:b5:16:c4:1b:69:83:f8:d8: 99:d4:67:64:8e:a4:b1:d2:dd:47:bb:6d:42:d5:84: e0:ac:5b:1f:31:8b:0e:90:d5:1b:47:5a:23:12:de: 05:74:67:69:8c:1e:ca:cb:24:b4:3b:ed:2f:62:38: 44:48:bd:6d:de:47:a5:a5:ad:87:37:47:6b:e2:36: da:ba:86:e2:4a:e1:95:1a:8e:d5:6b:fd:63:6d:d4: 55:af:25:a8:69:e7:94:53:03:8f:12:8e:2d:da:63: b8:a7:e9:5f:ea:fd:54:60:d8:94:53:63:3a:de:f7: 1c:ba:4f:37:b5:77:ef:b5:75:9d:9c:a2:76:d6:b2: ba:27:91:a0:e5:1b:72:a7:2a:8a:5b:f8:b7:8a:ad: 0d:4f:5c:81:c9:06:41:ea:31:27:29:62:0b:38:5d: 2c:c0:3d:cd:6b:33:f2:14:e7:fb:21:11:22:f1:2f: e4:0b:0a:62:21:89:e9:f9:f9:7f:f0:47:a3:10:45: 44:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1A:77:27:A0:3F:96:53:A8:39:E8:A2:23:53:EF:2F:D1:F8:3F:29 X509v3 Authority Key Identifier: keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:3f:f6:c5:13:97:77:70:50:e2:4a:2d:78:94:fb:60:9f:6d: 84:76:00:96:e2:2c:ef:80:e7:b8:e9:40:be:37:f0:c3:46:1b: 3e:7e:75:00:1b:b7:6a:9c:14:75:a9:03:a3:28:dc:5d:da:1b: 36:98:b2:09:d1:b7:8b:81:8a:1c:6e:dc:9c:69:70:1b:e5:6d: 3f:c7:7a:7e:f8:36:e1:72:1c:fd:5e:98:fc:a6:52:9a:5f:f4: 0b:bc:3f:44:fa:09:cd:f3:d8:d5:0b:3b:03:f9:39:a8:4f:85: ab:8d:bd:1a:42:f1:81:57:49:ed:f8:9e:94:87:60:03:d8:54: 35:95:83:d3:6c:5a:d4:5d:64:56:e3:da:eb:5f:fc:2a:a2:52: 17:a1:fa:35:aa:d9:97:a1:9e:67:f9:9f:a4:b5:ab:1a:22:ca: af:56:ea:74:53:f2:53:91:5e:21:67:49:87:8b:c6:cc:96:a6: 3e:f7:15:33:cc:a7:02:7b:b8:52:ff:76:77:38:f6:e2:af:ca: 5b:57:06:9f:26:22:64:9e:d6:71:e4:ae:8a:cf:e7:fc:43:a4: 16:30:2c:40:94:f7:6d:75:c9:4d:2d:77:0f:42:71:7e:0d:a8: e9:cd:3a:a5:55:55:a9:bd:08:b9:a5:84:f5:20:61:61:dd:50: 15:2c:d4:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3NDAxMTAvBgNVBAUTKEUyQkJBRDM5MzE1OEEwNjc0QzY5NDlFQzNCOEEwQjcz Rjg2MDI5QTIwHhcNMjYwNTIxMDExNjEzWhcNMjYwNTI4MDExNjEzWjAYMRYwFAYD VQQDEw02YTBlNWNkZS1jOWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4GKN82Sij3zUVmunfpIyMNhHeXMZJSeKS7kK1NEFJqVSxRbBX1nIzd57dJGH YtQkGjiJeKgl75I0IiHbH2zbsFb8tRbEG2mD+NiZ1GdkjqSx0t1Hu21C1YTgrFsf MYsOkNUbR1ojEt4FdGdpjB7KyyS0O+0vYjhESL1t3kelpa2HN0dr4jbauobiSuGV Go7Va/1jbdRVryWoaeeUUwOPEo4t2mO4p+lf6v1UYNiUU2M63vccuk83tXfvtXWd nKJ21rK6J5Gg5RtypyqKW/i3iq0NT1yByQZB6jEnKWILOF0swD3NazPyFOf7IREi 8S/kCwpiIYnp+fl/8EejEEVE5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHIadyeg P5ZTqDnooiNT7y/R+D8pMB8GA1UdIwQYMBaAFOK7rTkxWKBnTGlJ7DuKC3P4YCmi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc0MC8zNTI4QjBDQzE2 QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9HZE1hVW5zTzRvTGNfaGdL YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRydXRPVEZZb0dkTWFVbnNPNG9MY19oZ0thSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njc0MC8zNTI4QjBDQzE2QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9H ZE1hVW5zTzRvTGNfaGdLYUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKD/2xROXd3BQ4koteJT7YJ9thHYAluIs74DnuOlAvjfww0YbPn51ABu3apwU dakDoyjcXdobNpiyCdG3i4GKHG7cnGlwG+VtP8d6fvg24XIc/V6Y/KZSml/0C7w/ RPoJzfPY1Qs7A/k5qE+Fq429GkLxgVdJ7fielIdgA9hUNZWD02xa1F1kVuPa61/8 KqJSF6H6NarZl6GeZ/mfpLWrGiLKr1bqdFPyU5FeIWdJh4vGzJamPvcVM8ynAnu4 Uv92dzj24q/KW1cGnyYiZJ7WceSuis/n/EOkFjAsQJT3bXXJTS13D0Jxfg2o6c06 pVVVqb0IuaWE9SBhYd1QFSzU4A== -----END CERTIFICATE-----Generated at Thu May 21 12:25:55 2026 by rpki-client