$ rpki-client -vvf rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft File: 4bseYl2967MiD_kjzWoRos4kUZY.mft (raw, json) Hash identifier: FAM2xhPqUln0SIs0UEz6HZjA03CwxIidhsInvbBSnXQ= Subject key identifier: 5C:77:7E:77:13:6C:9B:E9:CB:CA:51:F8:DB:7B:47:FA:07:98:4A:6B Authority key identifier: E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96 Certificate issuer: /CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196 Certificate serial: 18A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft Manifest number: 1865 Signing time: Sat 28 Mar 2026 16:27:47 +0000 Manifest this update: Sat 28 Mar 2026 16:27:46 +0000 Manifest next update: Sat 04 Apr 2026 16:27:46 +0000 Files and hashes: 1: 4bseYl2967MiD_kjzWoRos4kUZY.crl (hash: 0uOMH429ryAewE5Q1M8FX796gX2OjFu6SpORcXUXXw8=) 2: 2A3161763D9F11EEACFF646FC4F9AE02.roa (hash: dgLQAd17tzBsK66kQ0H0dwAp53SX6GdmC4ibG9feFVM=) 3: 2B04CC143D9F11EEACFF646FC4F9AE02.roa (hash: X9rsotZF7CeUjy+uRHBz/MOZBNYjTpkQ13IOleGdKEE=) 4: FA2CCDCCDE6111E88BFD7810C4F9AE02.roa (hash: 7ZAEA0r9lzg48+UEX+NDAtHxRbz47d+Yj5cRgz6OmvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 16:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6312 (0x18a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A31E, serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196 Validity Not Before: Mar 28 16:27:46 2026 GMT Not After : Apr 4 16:27:46 2026 GMT Subject: CN=69c80183-0da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bb:94:52:a4:3c:4f:a7:be:cf:7c:8e:5c:c3: 98:22:80:0c:54:03:8b:4c:a7:31:6e:33:75:2d:a8: dc:e2:d1:5b:3a:1f:81:4f:4f:1e:76:9c:08:b1:be: 85:59:aa:62:9a:c4:9a:3d:b1:89:2d:d9:61:97:0c: 3b:af:70:ca:3a:5f:1d:ef:14:ef:92:66:4a:08:fb: 8c:bb:56:81:41:eb:80:7e:75:52:6c:43:7d:a9:68: 5f:4a:6f:45:39:a8:11:39:e7:17:6d:2a:ae:82:ea: 0c:5e:5a:86:d5:89:54:6a:fa:1b:91:52:ff:f7:2e: 4c:70:8a:1b:f3:5e:fd:93:db:38:89:af:e0:c3:a1: 4a:8b:64:d3:78:b9:97:0f:04:82:05:e8:b6:4d:93: e1:b2:52:ce:84:b9:81:3a:0a:53:15:84:8c:3a:47: 85:dd:08:2c:e9:e5:b2:cb:ee:d1:b3:f5:56:f1:78: f8:cd:b6:73:45:6d:34:91:86:68:1b:ab:38:89:0d: 07:63:e1:db:c9:b5:a5:d1:9d:47:45:90:fd:f6:8b: 36:b6:54:e8:83:c9:49:a7:53:30:a6:aa:7d:ce:f6: 87:d8:e0:1e:a9:b9:ef:ef:24:68:d0:3a:f6:ed:f2: d8:75:d5:e7:77:9b:dd:6b:ab:e3:26:d5:f0:12:c4: 47:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:77:7E:77:13:6C:9B:E9:CB:CA:51:F8:DB:7B:47:FA:07:98:4A:6B X509v3 Authority Key Identifier: keyid:E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:41:bf:04:fe:7f:14:2c:b0:ae:ec:1a:05:69:d0:a5:0f:9a: 57:83:d8:b7:61:59:c9:c6:19:68:b7:81:f9:4b:98:5f:25:3c: cb:e7:59:3e:90:7a:74:1d:49:de:b1:30:34:48:c3:d7:cc:9f: 53:95:23:ef:f5:11:54:8e:73:1a:c1:bf:f5:27:06:27:ba:26: 11:e2:26:98:5c:1e:82:a0:bc:45:e9:c5:c5:8f:4f:ae:a9:ce: 6f:fd:47:3a:8f:1d:16:57:c7:4c:0c:5a:89:f3:e7:48:54:2b: da:ee:17:74:a2:e0:8b:bf:63:a6:db:08:55:5e:0b:62:82:37: e3:32:c3:1d:c0:2e:2b:5e:c2:8c:3f:32:8e:fb:98:87:56:e4: b1:66:21:3d:cc:76:c1:db:31:fe:3f:7f:7c:fd:a9:04:03:eb: cb:b1:84:dc:4a:25:e9:0c:32:da:d0:d2:f7:fe:02:62:80:8d: 50:98:50:dd:a4:ec:63:20:4d:44:c4:d1:b2:bd:23:61:57:d2: 48:68:ca:58:6b:4e:09:6c:3c:a8:86:65:d1:0a:2d:77:33:b2: 83:01:6e:75:c0:ee:d0:b8:16:28:6d:19:80:30:69:cb:6b:49: 50:1e:9b:b7:01:83:10:65:8c:b7:33:02:59:f7:f5:5a:b6:d1: 3f:ad:67:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzMUUxMTAvBgNVBAUTKEUxQkIxRTYyNURCREVCQjMyMjBGRjkyM0NENkExMUEy Q0UyNDUxOTYwHhcNMjYwMzI4MTYyNzQ2WhcNMjYwNDA0MTYyNzQ2WjAYMRYwFAYD VQQDEw02OWM4MDE4My0wZGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvruUUqQ8T6e+z3yOXMOYIoAMVAOLTKcxbjN1Lajc4tFbOh+BT08edpwIsb6F WapimsSaPbGJLdlhlww7r3DKOl8d7xTvkmZKCPuMu1aBQeuAfnVSbEN9qWhfSm9F OagROecXbSquguoMXlqG1YlUavobkVL/9y5McIob8179k9s4ia/gw6FKi2TTeLmX DwSCBei2TZPhslLOhLmBOgpTFYSMOkeF3Qgs6eWyy+7Rs/VW8Xj4zbZzRW00kYZo G6s4iQ0HY+HbybWl0Z1HRZD99os2tlTog8lJp1Mwpqp9zvaH2OAeqbnv7yRo0Dr2 7fLYddXnd5vda6vjJtXwEsRHtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFx3fncT bJvpy8pR+Nt7R/oHmEprMB8GA1UdIwQYMBaAFOG7HmJdveuzIg/5I81qEaLOJFGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxRS9DMUZBMDgyQ0M4 Q0IxMUU3OTBBODgxMzhDNEY5QUUwMi80YnNlWWwyOTY3TWlEX2tqeldvUm9zNGtV WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRic2VZbDI5NjdNaURfa2p6V29Sb3M0a1VaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTMxRS9DMUZBMDgyQ0M4Q0IxMUU3OTBBODgxMzhDNEY5QUUwMi80YnNlWWwyOTY3 TWlEX2tqeldvUm9zNGtVWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ0G/BP5/FCywruwaBWnQpQ+aV4PYt2FZycYZaLeB+UuYXyU8y+dZPpB6dB1J 3rEwNEjD18yfU5Uj7/URVI5zGsG/9ScGJ7omEeImmFwegqC8RenFxY9PrqnOb/1H Oo8dFlfHTAxaifPnSFQr2u4XdKLgi79jptsIVV4LYoI34zLDHcAuK17CjD8yjvuY h1bksWYhPcx2wdsx/j9/fP2pBAPry7GE3Eol6Qwy2tDS9/4CYoCNUJhQ3aTsYyBN RMTRsr0jYVfSSGjKWGtOCWw8qIZl0QotdzOygwFudcDu0LgWKG0ZgDBpy2tJUB6b twGDEGWMtzMCWff1WrbRP61nSw== -----END CERTIFICATE-----Generated at Sun Mar 29 18:38:16 2026 by rpki-client