$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft File: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft (raw, json) Hash identifier: dr5BxDyoKKTqJsU/owJD65UgW/izzGUGk+qA6Xq8veg= Subject key identifier: 69:AE:9F:06:FF:0A:0B:56:29:6C:28:BE:9A:98:29:70:CD:DC:25:F8 Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4 Certificate issuer: /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4 Certificate serial: 0E40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft Manifest number: 0E1D Signing time: Mon 30 Mar 2026 17:49:58 +0000 Manifest this update: Mon 30 Mar 2026 17:49:58 +0000 Manifest next update: Mon 06 Apr 2026 17:49:58 +0000 Files and hashes: 1: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl (hash: DdILuC+azm1fC41SZ7sIipZkigVz0V1Tjr9yU3esALA=) 2: 3E174B92CF8311F0BE74A724C4F9AE02.roa (hash: GBvJaOYF1545b8b+gOGrGQUjqqr8+5hiMjlmvxSFrPM=) 3: A791AF14CF8211F0AAF9A481C4F9AE02.roa (hash: qBZYKamMj/oDU4E6eK9pTMccppq/DCgF8vxu2spcuiw=) 4: 8B41351885EB11F0B665685EC4F9AE02.roa (hash: nJEq5dcjdbygkdzbWZ20NZb/kFcLm8+8wcWhp21gyU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3648 (0xe40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7F47, serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4 Validity Not Before: Mar 30 17:49:58 2026 GMT Not After : Apr 6 17:49:58 2026 GMT Subject: CN=69cab7c6-0a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e1:bd:7c:b3:9c:62:23:25:12:44:a9:73:6a: a0:ee:4a:2b:9e:83:b8:cb:84:94:ae:ee:5b:a2:73: 8e:74:9d:11:55:a0:6e:6f:76:90:6a:a3:8a:77:2f: a4:52:82:e0:4a:9d:a6:6d:e4:0e:17:da:85:ba:c5: dd:48:58:48:8c:b7:03:69:6e:3b:fc:38:d8:84:e2: ab:a4:e0:90:66:aa:b0:a8:8b:bf:c5:09:7d:70:97: b2:f1:f5:24:5f:75:ed:c8:9f:8d:0e:56:61:b2:e3: 3b:3d:b3:37:9c:dc:4a:46:fa:1c:b8:26:46:e4:fe: 14:9d:cd:87:2f:3f:93:75:c8:4c:7c:30:62:d7:48: 6b:7e:b4:18:61:9a:f9:8a:40:20:65:83:ea:b4:2a: 92:4c:de:1e:91:dc:98:63:d8:64:13:e1:34:1b:80: 71:8a:ab:cf:3e:67:39:62:60:b1:eb:00:d0:52:5b: dc:19:54:56:f3:ff:da:53:2d:f2:56:46:b3:05:e4: c0:45:6e:d0:8d:2c:2a:11:d4:b9:aa:97:95:ed:36: 49:f1:e8:b9:fc:3e:8a:1d:71:69:b1:43:27:3e:e2: 48:9e:e5:dd:68:b3:6a:8d:9e:c7:8d:ee:28:49:fd: 17:2c:05:2c:f4:c3:16:ef:e1:01:b0:21:b6:d0:9e: d7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AE:9F:06:FF:0A:0B:56:29:6C:28:BE:9A:98:29:70:CD:DC:25:F8 X509v3 Authority Key Identifier: keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:2f:9b:c9:e6:cf:0e:bc:ae:f2:5e:25:bd:73:57:3f:6b:73: 14:c3:22:89:95:9b:f1:5d:f3:1d:88:09:2a:d3:1a:44:d5:c4: 25:fb:ee:ca:7c:03:ef:38:ce:c4:8f:5b:cd:be:8a:e2:53:dc: cf:cc:9e:e7:f0:70:de:2a:75:cd:66:0a:85:1e:5d:22:c8:93: 95:8d:d3:d6:68:d4:6c:44:40:ab:b8:b6:9a:84:6c:08:cd:8b: e3:c4:98:02:32:61:fd:c9:b0:f1:64:3d:e0:22:2b:60:01:11: 40:9d:ed:73:e9:7c:b7:77:80:3c:e2:ba:d6:41:da:f2:3d:e5: e3:4a:1b:23:b3:01:40:a5:25:1b:52:b5:c7:8c:9a:d0:c1:87: 81:1e:37:33:ed:ec:12:36:03:ac:08:6a:c3:49:64:ad:80:9b: 37:1b:5b:47:94:9f:e2:6f:79:02:f7:3f:2a:3a:f4:08:e2:fa: c6:60:a7:ce:95:65:ce:a1:6a:aa:cd:9b:91:2b:fe:ef:6d:25: cb:6d:8c:4c:3c:55:10:a4:02:1c:10:05:18:db:cf:d7:0e:86: 3b:ce:1f:a0:fa:39:a2:6f:5d:92:d8:6c:7c:be:1e:50:57:b9: 06:08:59:a1:28:e1:0b:55:a3:45:37:35:33:67:09:21:9f:f6: 44:32:ca:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdGNDcxMTAvBgNVBAUTKEUzMEE0Q0RERjZDMjY5QUNCQTM5Q0E1OEFBOTU5MkQ4 OTg2NDAxRjQwHhcNMjYwMzMwMTc0OTU4WhcNMjYwNDA2MTc0OTU4WjAYMRYwFAYD VQQDEw02OWNhYjdjNi0wYTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOG9fLOcYiMlEkSpc2qg7kornoO4y4SUru5bonOOdJ0RVaBub3aQaqOKdy+k UoLgSp2mbeQOF9qFusXdSFhIjLcDaW47/DjYhOKrpOCQZqqwqIu/xQl9cJey8fUk X3XtyJ+NDlZhsuM7PbM3nNxKRvocuCZG5P4Unc2HLz+TdchMfDBi10hrfrQYYZr5 ikAgZYPqtCqSTN4ekdyYY9hkE+E0G4BxiqvPPmc5YmCx6wDQUlvcGVRW8//aUy3y VkazBeTARW7QjSwqEdS5qpeV7TZJ8ei5/D6KHXFpsUMnPuJInuXdaLNqjZ7Hje4o Sf0XLAUs9MMW7+EBsCG20J7XmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGmunwb/ CgtWKWwovpqYKXDN3CX4MB8GA1UdIwQYMBaAFOMKTN32wmmsujnKWKqVktiYZAH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0Y0Ny8zMzBBMDA4Q0NF NTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2FheTZPY3BZcXBXUzJKaGtB ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR3cE0zZmJDYWF5Nk9jcFlxcFdTMkpoa0FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0Y0Ny8zMzBBMDA4Q0NFNTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2Fh eTZPY3BZcXBXUzJKaGtBZlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOS+byebPDryu8l4lvXNXP2tzFMMiiZWb8V3zHYgJKtMaRNXEJfvuynwD7zjO xI9bzb6K4lPcz8ye5/Bw3ip1zWYKhR5dIsiTlY3T1mjUbERAq7i2moRsCM2L48SY AjJh/cmw8WQ94CIrYAERQJ3tc+l8t3eAPOK61kHa8j3l40obI7MBQKUlG1K1x4ya 0MGHgR43M+3sEjYDrAhqw0lkrYCbNxtbR5Sf4m95Avc/Kjr0COL6xmCnzpVlzqFq qs2bkSv+720ly22MTDxVEKQCHBAFGNvP1w6GO84foPo5om9dkthsfL4eUFe5BghZ oSjhC1WjRTc1M2cJIZ/2RDLKHQ== -----END CERTIFICATE-----Generated at Mon Mar 30 22:42:56 2026 by rpki-client