$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft File: 4YMttqUeSiWekP7IHkfFRpxSpok.mft (raw, json) Hash identifier: tXmaphv97iEfCQvvX78bJT7VEsTmYCVPh8TULZt5GA4= Subject key identifier: 3E:C6:47:A1:CC:D8:32:C5:5F:20:94:6E:10:AD:72:10:85:32:10:4C Authority key identifier: E1:83:2D:B6:A5:1E:4A:25:9E:90:FE:C8:1E:47:C5:46:9C:52:A6:89 Certificate issuer: /CN=A916814B/serialNumber=E1832DB6A51E4A259E90FEC81E47C5469C52A689 Certificate serial: 16C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft Manifest number: 16AF Signing time: Sat 04 Apr 2026 16:34:19 +0000 Manifest this update: Sat 04 Apr 2026 16:34:18 +0000 Manifest next update: Sat 11 Apr 2026 16:34:18 +0000 Files and hashes: 1: 4YMttqUeSiWekP7IHkfFRpxSpok.crl (hash: jj8+f/kWg3OmJSLhH6fswHPeHU+Oc08+ETa/mA5jEVc=) 2: F6EC99AE26A111F1A6B92646BF833773.roa (hash: F3guSpGm8GcV6RFX5BxyucYNTiqMtw8fTbZ/W0lp6OM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.crl rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5824 (0x16c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916814B, serialNumber=E1832DB6A51E4A259E90FEC81E47C5469C52A689 Validity Not Before: Apr 4 16:34:18 2026 GMT Not After : Apr 11 16:34:18 2026 GMT Subject: CN=69d13d8b-8d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f9:d7:00:2e:cf:b5:e9:b8:8b:58:cd:90:92: 9e:25:ad:bf:1f:28:6c:de:59:3d:cf:50:f1:fa:e1: d4:86:cc:03:30:d5:f7:75:6c:43:33:35:3a:bb:9f: a0:be:e5:8f:3e:3b:5c:36:3a:69:20:3e:c1:93:9f: 24:f5:ef:4f:e8:23:e0:5a:3a:f2:e1:a2:f4:a2:fc: 64:c1:3c:24:40:28:cf:64:26:f0:f1:fa:7b:8d:bf: e1:53:3a:3b:18:13:03:4a:8c:04:bf:3e:7f:07:14: e3:b5:d5:8a:6c:ea:d7:5e:c4:b5:bc:06:97:32:6e: 18:08:90:bd:a7:ae:41:42:a4:5a:c3:c2:d1:85:ca: ee:70:fc:73:7f:93:fb:76:45:3e:9b:d6:dd:ad:12: 35:bb:6f:9c:f9:a9:1e:62:c2:10:c8:93:78:e2:7e: 4d:c0:aa:84:45:14:9e:bb:3a:0a:a6:88:f3:ea:8f: 75:56:f5:63:45:31:5b:1d:87:49:c5:74:4d:4c:cf: 76:d0:c4:12:3d:a2:70:39:62:d2:f3:a8:4d:f0:4d: 1a:22:e7:6b:50:7a:8f:c6:ba:7f:3c:20:74:c6:6e: 40:bf:8e:e7:7a:0e:27:4e:52:46:21:c7:c7:5b:31: 7f:de:4a:c7:b9:99:44:b2:a8:ab:fe:88:09:16:90: 1b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C6:47:A1:CC:D8:32:C5:5F:20:94:6E:10:AD:72:10:85:32:10:4C X509v3 Authority Key Identifier: keyid:E1:83:2D:B6:A5:1E:4A:25:9E:90:FE:C8:1E:47:C5:46:9C:52:A6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:2c:e7:ca:5b:cc:46:5e:59:37:69:d6:8b:57:81:40:7e:db: 28:9d:59:2d:01:03:c8:6c:60:3a:80:19:6f:ad:fa:ec:28:7f: 61:eb:3f:4c:d1:d1:ae:4e:30:3f:15:62:35:3a:60:1c:d1:69: 83:bf:75:d9:bd:5d:d7:87:66:72:ec:d1:9d:4e:e1:31:87:08: c5:45:43:1c:24:30:a2:ff:c6:3c:c3:c7:58:c4:c7:75:51:a4: da:71:cb:fb:57:e6:b9:dc:0e:de:9a:be:82:12:9e:bf:c0:22: c0:04:37:46:51:c5:c5:65:f4:b0:18:88:22:be:eb:80:f9:98: 7f:84:55:f1:67:73:7c:93:8a:22:5e:e3:ee:8b:93:e5:d7:eb: da:40:8a:e8:f6:4b:51:fb:c7:f2:c3:15:e2:68:8a:f7:35:e7: 78:e1:1b:5c:bd:5d:b1:86:ed:e9:f5:dd:6a:97:10:57:d8:fd: 15:c6:74:4b:56:76:57:c0:d4:ca:84:a8:67:b1:4f:c7:13:1f: 3c:69:f4:e7:4a:95:e0:98:62:b3:1a:65:da:cb:fb:c5:da:7a: 30:01:88:52:5d:7c:2b:f3:d5:26:2d:dd:04:52:94:25:f7:d6: 7d:3b:e3:44:68:3d:44:ed:8e:27:06:68:f7:45:d8:81:b5:1c: 57:fa:cc:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxNEIxMTAvBgNVBAUTKEUxODMyREI2QTUxRTRBMjU5RTkwRkVDODFFNDdDNTQ2 OUM1MkE2ODkwHhcNMjYwNDA0MTYzNDE4WhcNMjYwNDExMTYzNDE4WjAYMRYwFAYD VQQDEw02OWQxM2Q4Yi04ZDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfnXAC7Ptem4i1jNkJKeJa2/Hyhs3lk9z1Dx+uHUhswDMNX3dWxDMzU6u5+g vuWPPjtcNjppID7Bk58k9e9P6CPgWjry4aL0ovxkwTwkQCjPZCbw8fp7jb/hUzo7 GBMDSowEvz5/BxTjtdWKbOrXXsS1vAaXMm4YCJC9p65BQqRaw8LRhcrucPxzf5P7 dkU+m9bdrRI1u2+c+akeYsIQyJN44n5NwKqERRSeuzoKpojz6o91VvVjRTFbHYdJ xXRNTM920MQSPaJwOWLS86hN8E0aIudrUHqPxrp/PCB0xm5Av47neg4nTlJGIcfH WzF/3krHuZlEsqir/ogJFpAbDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD7GR6HM 2DLFXyCUbhCtchCFMhBMMB8GA1UdIwQYMBaAFOGDLbalHkolnpD+yB5HxUacUqaJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE0Qi8wMkEyRDk3MDE2 MkYxMUU4QjhERTI2NjlDNEY5QUUwMi80WU10dHFVZVNpV2VrUDdJSGtmRlJweFNw b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRZTXR0cVVlU2lXZWtQN0lIa2ZGUnB4U3Bvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODE0Qi8wMkEyRDk3MDE2MkYxMUU4QjhERTI2NjlDNEY5QUUwMi80WU10dHFVZVNp V2VrUDdJSGtmRlJweFNwb2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtCznylvMRl5ZN2nWi1eBQH7bKJ1ZLQEDyGxgOoAZb6367Ch/Yes/TNHRrk4w PxViNTpgHNFpg7912b1d14dmcuzRnU7hMYcIxUVDHCQwov/GPMPHWMTHdVGk2nHL +1fmudwO3pq+ghKev8AiwAQ3RlHFxWX0sBiIIr7rgPmYf4RV8WdzfJOKIl7j7ouT 5dfr2kCK6PZLUfvH8sMV4miK9zXneOEbXL1dsYbt6fXdapcQV9j9FcZ0S1Z2V8DU yoSoZ7FPxxMfPGn050qV4Jhisxpl2sv7xdp6MAGIUl18K/PVJi3dBFKUJffWfTvj RGg9RO2OJwZo90XYgbUcV/rMhg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:30:52 2026 by rpki-client