$ rpki-client -vvf rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft File: 4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft (raw, json) Hash identifier: IcaS4ny+pNOkhBFIWmrjwIdZxtz0/0GrWK1lRP3hwA0= Subject key identifier: 43:49:AD:D3:C4:91:F8:D6:6B:CB:CB:02:8B:2D:91:8C:C1:22:EF:13 Authority key identifier: E0:24:35:D5:13:49:3C:3D:41:3D:31:ED:1F:8E:0D:CA:30:AE:0C:9E Certificate issuer: /CN=A9190059/serialNumber=E02435D513493C3D413D31ED1F8E0DCA30AE0C9E Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft Manifest number: 34 Signing time: Tue 03 Mar 2026 08:17:24 +0000 Manifest this update: Tue 03 Mar 2026 08:17:23 +0000 Manifest next update: Tue 10 Mar 2026 08:17:23 +0000 Files and hashes: 1: 4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl (hash: qKLGkzP9J8GhN0FPL4DhtNBafJSceWx/jhUNowgFZmI=) 2: 0DA28718CE5E11F084703925C4F9AE02.roa (hash: aNAGDtc4oo9p4iSroAq26pCHqmBV0FiomHYHA3EdekQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190059, serialNumber=E02435D513493C3D413D31ED1F8E0DCA30AE0C9E Validity Not Before: Mar 3 08:17:23 2026 GMT Not After : Mar 10 08:17:23 2026 GMT Subject: CN=69a69914-faa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:77:83:06:2f:98:5c:ef:54:1c:bb:c5:db:e8: ea:f1:03:cd:40:46:87:44:69:41:9e:45:c4:48:f7: fb:7e:8b:90:10:c2:d6:47:64:93:3e:9b:dc:b8:cd: 8d:7d:43:ac:00:15:82:c9:ac:17:89:78:98:fe:72: 43:db:bd:48:e1:c6:f0:4d:70:eb:3e:75:c7:88:bf: 01:90:b9:05:a3:4c:82:95:3d:20:e6:56:fa:dd:88: a5:75:40:58:22:8c:24:2a:82:57:78:c5:09:29:31: 46:2a:39:3d:27:4f:fb:c9:b1:1d:11:bc:e5:28:b6: b7:44:06:b5:6e:64:55:73:7b:6a:fe:9b:aa:61:57: f2:45:8b:1c:9f:6a:c3:71:bf:1b:87:15:bb:ad:8f: bc:fc:27:8c:76:2a:9f:00:a0:c7:e8:7e:a6:ee:17: 74:c0:b5:d5:6c:09:89:e4:4d:9f:6f:53:73:15:df: 5d:e0:6f:e9:99:98:e1:c8:20:67:d3:e5:cb:11:5d: 11:c2:b4:61:0d:83:dd:53:51:5e:df:8d:a6:d3:4d: 94:e6:b8:29:3b:46:ae:39:b7:ee:3b:f4:72:3e:09: 4d:20:4f:d6:ea:76:c7:c5:2b:02:48:b5:6b:87:5f: 2c:34:29:c0:38:0b:2f:5c:f9:d1:aa:75:38:b3:7d: 7f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:49:AD:D3:C4:91:F8:D6:6B:CB:CB:02:8B:2D:91:8C:C1:22:EF:13 X509v3 Authority Key Identifier: keyid:E0:24:35:D5:13:49:3C:3D:41:3D:31:ED:1F:8E:0D:CA:30:AE:0C:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:36:5f:b9:8c:f6:9f:fd:93:0c:a1:a1:56:c4:fc:b0:da:52: e4:50:f0:4b:87:0b:19:a3:07:5e:11:8c:01:fd:67:50:c7:29: 9c:10:f4:c3:37:6d:1b:2d:93:a4:13:dd:cb:b4:34:60:a8:2f: 38:9d:0c:2d:bb:6a:90:fd:70:97:75:96:49:38:86:5c:63:71: 3a:ca:b0:31:0b:8d:57:01:50:bc:94:c4:49:c3:0e:f9:3d:ca: 82:55:f9:8f:e9:5b:28:e6:bd:47:4b:20:43:dd:27:a2:bd:53: bb:70:c6:d0:ff:3d:32:c5:55:4c:dd:d8:b6:10:d2:ad:68:f1: 94:c7:51:06:de:98:b1:ef:5e:16:26:19:8a:66:ba:6c:3e:67: c2:25:cb:82:d6:a4:d7:d1:41:51:f0:f6:f0:bf:f2:21:40:38: 3f:38:b4:10:9f:d9:51:a8:13:5e:8c:e4:46:79:1c:bd:c7:1d: 66:e7:80:cc:db:9c:f7:1e:a5:48:6a:f7:a5:ee:b8:3a:a1:ef: 0c:75:30:cd:11:87:fc:4c:f5:f5:be:eb:d4:c1:7f:e2:73:d3: 2e:7c:9d:a3:16:3b:5f:42:b3:84:65:9f:11:fd:f8:47:48:30: 41:c2:07:4b:f7:57:b7:3b:30:1d:c8:07:8a:2d:ff:98:3b:9f: 30:bb:89:77 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDA1OTExMC8GA1UEBRMoRTAyNDM1RDUxMzQ5M0MzRDQxM0QzMUVEMUY4RTBEQ0Ez MEFFMEM5RTAeFw0yNjAzMDMwODE3MjNaFw0yNjAzMTAwODE3MjNaMBgxFjAUBgNV BAMTDTY5YTY5OTE0LWZhYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7d4MGL5hc71Qcu8Xb6OrxA81ARodEaUGeRcRI9/t+i5AQwtZHZJM+m9y4zY19 Q6wAFYLJrBeJeJj+ckPbvUjhxvBNcOs+dceIvwGQuQWjTIKVPSDmVvrdiKV1QFgi jCQqgld4xQkpMUYqOT0nT/vJsR0RvOUotrdEBrVuZFVze2r+m6phV/JFixyfasNx vxuHFbutj7z8J4x2Kp8AoMfofqbuF3TAtdVsCYnkTZ9vU3MV313gb+mZmOHIIGfT 5csRXRHCtGENg91TUV7fjabTTZTmuCk7Rq45t+479HI+CU0gT9bqdsfFKwJItWuH Xyw0KcA4Cy9c+dGqdTizfX/TAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQ0mt08SR +NZry8sCiy2RjMEi7xMwHwYDVR0jBBgwFoAU4CQ11RNJPD1BPTHtH44NyjCuDJ4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwMDU5LzQ3OTk5NDlFQ0U1 RDExRjBBMzM0Q0U3NEM0RjlBRTAyLzRDUTExUk5KUEQxQlBUSHRINDROeWpDdURK NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNENRMTFSTkpQRDFCUFRIdEg0NE55akN1REo0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw MDU5LzQ3OTk5NDlFQ0U1RDExRjBBMzM0Q0U3NEM0RjlBRTAyLzRDUTExUk5KUEQx QlBUSHRINDROeWpDdURKNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAGNl+5jPaf/ZMMoaFWxPyw2lLkUPBLhwsZowdeEYwB/WdQxymcEPTDN20bLZOk E93LtDRgqC84nQwtu2qQ/XCXdZZJOIZcY3E6yrAxC41XAVC8lMRJww75PcqCVfmP 6Vso5r1HSyBD3SeivVO7cMbQ/z0yxVVM3di2ENKtaPGUx1EG3pix714WJhmKZrps PmfCJcuC1qTX0UFR8Pbwv/IhQDg/OLQQn9lRqBNejORGeRy9xx1m54DM25z3HqVI avel7rg6oe8MdTDNEYf8TPX1vuvUwX/ic9MufJ2jFjtfQrOEZZ8R/fhHSDBBwgdL 91e3OzAdyAeKLf+YO58wu4l3 -----END CERTIFICATE-----Generated at Wed Mar 4 08:40:10 2026 by rpki-client