$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft File: 4QiBh_ZAlCY92mdJqV9zqmwasGM.mft (raw, json) Hash identifier: 5HhleBptyah5JiJ5WeB7Gas4CXhAbH6HlJzxsj7yeA4= Subject key identifier: CF:C5:0B:9C:47:F0:8C:8A:2A:61:B8:67:72:A0:6C:DB:41:8F:65:22 Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Certificate serial: 03BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft Manifest number: 0320 Signing time: Wed 11 Mar 2026 00:43:26 +0000 Manifest this update: Wed 11 Mar 2026 00:43:26 +0000 Manifest next update: Wed 18 Mar 2026 00:43:26 +0000 Files and hashes: 1: 4QiBh_ZAlCY92mdJqV9zqmwasGM.crl (hash: nD0/pdSjD1XuU2SCc/i8X3p1RwbwavRHNjGQUTBuTDE=) 2: 3D34A750A88111ED80831318C4F9AE02.roa (hash: bfzeYGUzhmju4UBpRVlco+BnDmJ+eLaB1Aqj15egdaw=) 3: 9DC49A2449A011EEB3DFDD0DC4F9AE02.roa (hash: LjbP/nLFrw9roK+062Qwn6m9oqXfGtb3IoQOgK+dP48=) 4: CCEE4F76CAC711EF80553A61C4F9AE02.roa (hash: b8yYo+lj+yL+d9+ynU+UPW4NogScvGdrJp9Cr5Z0WP0=) 5: 4C7C3EA8E8F511EDBC11CF6BC4F9AE02.roa (hash: qKOdCAVWFADz493wTDf641lI0abU4p/Itg/wcgS+l0o=) 6: CC647BDECAC711EF80553A61C4F9AE02.roa (hash: 6py7+bxGSuMtBsOOS74wMtrFxOuNUNxvgY9dbOF/Dhk=) 7: 78BC7D28A87E11ED9AE70779C4F9AE02.roa (hash: wQpbqelrmj4lybIs+25sHCQuHoXsqTv8dn2kB+Eex/w=) 8: 780136B63D1211EEBB0A0C5AC4F9AE02.roa (hash: RVftrvoH41xQlyHc3BQPzPH5X6Qw+/kOv2Gdp8k6+jY=) 9: 3632957E441311EE8A03A472C4F9AE02.roa (hash: 9ag6UcsfwmbTKN69vAxeZlrGHPmOD+4Nc24cq2hGYEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Mar 2026 00:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 959 (0x3bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Validity Not Before: Mar 11 00:43:26 2026 GMT Not After : Mar 18 00:43:26 2026 GMT Subject: CN=69b0baae-4ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ff:4d:56:c1:07:68:bf:12:b4:d6:2b:40:2b: e3:59:67:f4:97:f1:12:02:5c:7a:58:be:cb:4e:23: d0:a0:4b:8d:2e:c5:bf:38:b8:7d:d7:04:56:fd:e8: fc:19:fc:79:f5:06:d4:0f:69:81:6f:cb:2d:25:01: 37:9b:ac:32:01:e3:26:5c:68:96:30:a0:2c:9f:05: 4c:f4:8a:19:82:2d:92:0c:f2:9e:c4:05:cb:96:75: 86:5f:7b:ec:18:34:fe:3a:fc:fa:fb:a8:57:75:1d: 3a:50:eb:a4:fb:89:80:03:d8:d4:5c:8e:38:7b:3f: 89:ff:bc:34:ee:8a:de:ec:93:ce:36:18:08:5b:5f: d6:8d:fe:26:d2:cd:e8:76:19:57:c4:50:44:b6:48: 04:17:48:e4:32:23:d9:6c:52:e3:f5:45:5f:8f:0b: 6f:89:da:22:76:f9:8c:c7:b0:cc:17:98:73:03:a0: 27:aa:ce:17:f6:df:66:62:75:ff:bd:56:49:22:13: e6:66:8c:1a:32:d0:0d:fc:6b:71:fc:5d:2e:a0:53: 1c:55:33:a2:1b:03:53:2d:b3:84:a9:69:94:63:5d: e1:c0:91:ea:f4:b2:b4:96:cf:aa:b2:8e:a5:4c:60: 30:53:5f:56:ed:82:02:18:41:80:76:89:5e:f5:98: fa:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C5:0B:9C:47:F0:8C:8A:2A:61:B8:67:72:A0:6C:DB:41:8F:65:22 X509v3 Authority Key Identifier: keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:a8:fe:ba:92:f1:15:ac:a9:90:ab:c7:c7:3f:c4:17:3c:50: c3:97:d8:21:9f:14:c9:7f:2a:f0:d9:0e:f2:b9:79:18:7d:0d: 0c:38:0b:49:13:05:ac:4b:27:09:57:47:a6:2a:4d:7a:c1:d9: 4f:de:30:71:bb:24:7d:8f:8f:a1:14:92:ec:18:92:85:25:4b: 7d:ce:01:dc:e1:53:d4:dc:f7:a7:3f:d2:2c:b3:b1:1e:f1:17: 2e:d0:b5:e8:b1:3f:81:85:96:91:d7:22:ba:ce:8c:af:7b:32: e1:b8:ca:bf:a7:86:a6:2f:c4:8a:e8:8c:c2:5b:ea:f4:36:19: dc:4d:11:d7:8c:2d:64:33:d9:a3:32:16:a9:ff:a7:05:ff:56: 05:1e:51:8f:89:87:3b:29:ef:39:a0:ac:c3:c5:66:eb:3f:6d: 89:a6:82:58:34:fc:0c:a7:26:8c:42:b1:66:9e:a0:a8:1b:ee: 49:ae:08:3d:e8:97:8d:0e:9f:ac:ee:ef:a6:5a:ad:27:c0:24: 38:26:38:50:ee:08:a9:a4:aa:0e:c2:b0:6e:50:54:89:41:fc: 16:57:90:64:d3:7f:5a:f3:50:52:27:16:db:2f:02:39:75:87: f0:a8:83:bd:5d:5d:16:cd:4e:10:49:f6:43:c2:66:e6:39:d2: 7f:a1:f6:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB NkMxQUIwNjMwHhcNMjYwMzExMDA0MzI2WhcNMjYwMzE4MDA0MzI2WjAYMRYwFAYD VQQDEw02OWIwYmFhZS00YWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyf9NVsEHaL8StNYrQCvjWWf0l/ESAlx6WL7LTiPQoEuNLsW/OLh91wRW/ej8 Gfx59QbUD2mBb8stJQE3m6wyAeMmXGiWMKAsnwVM9IoZgi2SDPKexAXLlnWGX3vs GDT+Ovz6+6hXdR06UOuk+4mAA9jUXI44ez+J/7w07ore7JPONhgIW1/Wjf4m0s3o dhlXxFBEtkgEF0jkMiPZbFLj9UVfjwtvidoidvmMx7DMF5hzA6Anqs4X9t9mYnX/ vVZJIhPmZowaMtAN/Gtx/F0uoFMcVTOiGwNTLbOEqWmUY13hwJHq9LK0ls+qso6l TGAwU19W7YICGEGAdole9Zj6GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM/FC5xH 8IyKKmG4Z3KgbNtBj2UiMB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1 MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkFDNS80NzBBNjIwNDE1MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxD WTkybWRKcVY5enFtd2FzR00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOaj+upLxFaypkKvHxz/EFzxQw5fYIZ8UyX8q8NkO8rl5GH0NDDgLSRMFrEsn CVdHpipNesHZT94wcbskfY+PoRSS7BiShSVLfc4B3OFT1Nz3pz/SLLOxHvEXLtC1 6LE/gYWWkdcius6Mr3sy4bjKv6eGpi/EiuiMwlvq9DYZ3E0R14wtZDPZozIWqf+n Bf9WBR5Rj4mHOynvOaCsw8Vm6z9tiaaCWDT8DKcmjEKxZp6gqBvuSa4IPeiXjQ6f rO7vplqtJ8AkOCY4UO4IqaSqDsKwblBUiUH8FleQZNN/WvNQUicW2y8COXWH8KiD vV1dFs1OEEn2Q8Jm5jnSf6H2aQ== -----END CERTIFICATE-----Generated at Thu Mar 12 16:44:32 2026 by rpki-client