$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft File: p4emPknujsb5dRFgfxt8Ww3xFk4.mft (raw, json) Hash identifier: rhWjtxZwf+OgXyE3GOTmx2U1TJUZvLfaIet37gJRbP8= Subject key identifier: 61:FE:FE:9E:F0:F7:06:66:75:E4:22:81:C0:72:0B:E9:52:E3:29:A7 Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E Certificate issuer: /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Certificate serial: 0A74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft Manifest number: 0A61 Signing time: Sat 28 Mar 2026 19:32:06 +0000 Manifest this update: Sat 28 Mar 2026 19:32:05 +0000 Manifest next update: Sat 04 Apr 2026 19:32:05 +0000 Files and hashes: 1: p4emPknujsb5dRFgfxt8Ww3xFk4.crl (hash: VGpGr5EkpxMFiEAtqHQdtxi8Tk2VaMIDA8S1Iz0mgKQ=) 2: 305312F67CA011F098F1673CC4F9AE02.roa (hash: oSLf+ALvc0axyKMKORxabRkQ2yd+wi5i1pJe4n2LdQk=) 3: CFDF8B8A5B5D11EE967F161DC4F9AE02.roa (hash: vIQ6ijY/P5ugAhg4/kXnIXxgsJTlmnXdecL34fGC5qg=) 4: B13B2E5A5B5D11EEADF5C61CC4F9AE02.roa (hash: 5dWM1aBFZBre348MozCE9BHGCcZ6AZ6XEKKZComnpY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 19:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2676 (0xa74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Validity Not Before: Mar 28 19:32:05 2026 GMT Not After : Apr 4 19:32:05 2026 GMT Subject: CN=69c82cb6-85e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:63:10:f8:2b:6a:ec:86:cb:cc:20:c2:7d:ea: 33:b6:2f:0a:2e:e4:b6:ca:bc:f9:90:8c:9c:81:83: c1:dc:2d:28:13:12:a4:a9:df:b8:1d:71:31:44:dc: e8:ef:97:1e:db:31:1e:f6:ba:45:f2:10:0f:43:1e: ae:38:62:3d:23:a7:e4:9b:b0:22:55:6b:28:5d:f2: df:3f:6e:3a:d8:ab:1f:73:9b:3f:27:c5:33:a2:06: 3a:62:1a:0d:43:91:70:a9:a4:36:51:28:89:3e:63: 38:38:23:90:25:a0:9c:13:fb:b2:55:32:51:0f:2a: 9d:63:74:97:0f:2f:3a:71:3e:d0:ac:c0:31:8e:4f: c3:ef:17:dc:f6:a1:ce:b1:4e:bf:8c:30:7d:47:8e: f5:c4:90:21:86:15:5a:9b:45:fb:af:16:5b:6a:82: d4:5b:4b:1a:35:4d:1f:fc:16:de:ac:ca:1d:d8:80: 15:ca:e4:31:96:8b:a6:4a:c8:09:f2:f3:1f:41:9f: dd:61:ed:51:0a:20:1a:76:11:b3:e9:c9:19:8d:60: d3:2f:f4:74:09:89:ea:1a:d9:b6:92:dc:2f:a5:87: f9:84:d3:a7:c9:fd:a0:b7:31:f6:69:07:90:dc:c8: 67:c8:50:b0:99:9e:bc:78:7e:08:50:52:52:69:f6: 21:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:FE:FE:9E:F0:F7:06:66:75:E4:22:81:C0:72:0B:E9:52:E3:29:A7 X509v3 Authority Key Identifier: keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:55:c4:ac:64:cb:d4:7c:0d:db:cc:e4:90:b6:2f:f3:d1:52: ab:f8:c2:9f:63:8b:24:ae:2f:b1:c9:0e:84:89:9f:ee:bb:f2: ea:e8:b2:0f:df:f8:bf:d9:68:19:88:8c:d2:89:4b:e0:5a:b4: 66:fd:83:84:e4:59:87:49:91:78:06:00:60:1d:d6:3f:f7:d6: cf:7a:52:92:44:1d:59:28:66:a4:30:ac:28:76:5b:ca:4e:0a: c6:19:b6:41:a9:c4:b1:98:2a:42:44:d2:90:6a:52:52:02:49: 5a:6d:10:4b:2f:76:12:1f:e2:ff:c4:8e:c9:e8:e2:6b:59:0c: 1e:1a:be:93:c6:80:79:ab:51:51:3d:bd:5f:cc:ff:75:0e:62: ae:bd:74:7d:c1:05:6a:80:24:cc:dc:74:92:ae:43:9a:b5:f6: 08:06:32:6e:ec:34:3e:c1:9a:33:ff:28:26:a1:3b:02:e6:d1: 9b:53:c0:84:14:83:de:0f:a8:d8:5e:ee:19:81:36:3b:f1:c0: 77:e1:14:25:9f:9f:6b:f5:10:85:30:76:ff:d2:03:a9:3c:4f: 20:bc:bb:b7:5a:aa:92:ad:b6:ab:e5:b6:c0:e4:11:97:ea:c3: f6:47:cf:3d:71:b4:dd:b4:9a:67:97:63:40:52:95:97:69:5e: c5:71:d3:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBBNkMxMTAvBgNVBAUTKEE3ODdBNjNFNDlFRThFQzZGOTc1MTE2MDdGMUI3QzVC MERGMTE2NEUwHhcNMjYwMzI4MTkzMjA1WhcNMjYwNDA0MTkzMjA1WjAYMRYwFAYD VQQDEw02OWM4MmNiNi04NWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA22MQ+Ctq7IbLzCDCfeozti8KLuS2yrz5kIycgYPB3C0oExKkqd+4HXExRNzo 75ce2zEe9rpF8hAPQx6uOGI9I6fkm7AiVWsoXfLfP2462Ksfc5s/J8UzogY6YhoN Q5FwqaQ2USiJPmM4OCOQJaCcE/uyVTJRDyqdY3SXDy86cT7QrMAxjk/D7xfc9qHO sU6/jDB9R471xJAhhhVam0X7rxZbaoLUW0saNU0f/BberMod2IAVyuQxloumSsgJ 8vMfQZ/dYe1RCiAadhGz6ckZjWDTL/R0CYnqGtm2ktwvpYf5hNOnyf2gtzH2aQeQ 3MhnyFCwmZ68eH4IUFJSafYhNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGH+/p7w 9wZmdeQigcByC+lS4ymnMB8GA1UdIwQYMBaAFKeHpj5J7o7G+XURYH8bfFsN8RZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEE2Qy9COTE2RjM4ODgy QzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpzYjVkUkZnZnh0OFd3M3hG azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A0ZW1Qa251anNiNWRSRmdmeHQ4V3czeEZrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEE2Qy9COTE2RjM4ODgyQzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpz YjVkUkZnZnh0OFd3M3hGazQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKlXErGTL1HwN28zkkLYv89FSq/jCn2OLJK4vsckOhImf7rvy6uiyD9/4v9lo GYiM0olL4Fq0Zv2DhORZh0mReAYAYB3WP/fWz3pSkkQdWShmpDCsKHZbyk4Kxhm2 QanEsZgqQkTSkGpSUgJJWm0QSy92Eh/i/8SOyejia1kMHhq+k8aAeatRUT29X8z/ dQ5irr10fcEFaoAkzNx0kq5DmrX2CAYybuw0PsGaM/8oJqE7AubRm1PAhBSD3g+o 2F7uGYE2O/HAd+EUJZ+fa/UQhTB2/9IDqTxPILy7t1qqkq22q+W2wOQRl+rD9kfP PXG03bSaZ5djQFKVl2lexXHT/Q== -----END CERTIFICATE-----Generated at Sun Mar 29 23:41:52 2026 by rpki-client