$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft File: 4G_oQca7SYofv2fuOqjIqcU4fQ8.mft (raw, json) Hash identifier: 5VA5DyrmvL0kisM1sJACLLAaC+cU3c0EPTx1XfIbeCc= Subject key identifier: 7A:53:43:82:BE:2E:97:A0:BB:64:C8:00:28:CF:AE:F5:82:D1:B2:08 Authority key identifier: E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F Certificate issuer: /CN=A91D34D0/serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft Manifest number: 0145 Signing time: Sun 05 Apr 2026 04:44:07 +0000 Manifest this update: Sun 05 Apr 2026 04:44:06 +0000 Manifest next update: Sun 12 Apr 2026 04:44:06 +0000 Files and hashes: 1: 4G_oQca7SYofv2fuOqjIqcU4fQ8.crl (hash: 6GLrOl09vjEhAQ74oGQE4XqVpckmT8TOU7ffsLSJgxc=) 2: 47C532D045B911EF93633071C4F9AE02.roa (hash: Hl209KOZgglZ4+SCqzKmdcJ+m6OFPPd68T8PhDnGZH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D34D0, serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F Validity Not Before: Apr 5 04:44:06 2026 GMT Not After : Apr 12 04:44:06 2026 GMT Subject: CN=69d1e897-1d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:38:50:3e:f0:c8:43:c6:d4:0b:d1:cd:ca:db: 12:10:7f:78:90:9e:70:46:d7:70:f3:29:8b:d2:1c: 7c:03:22:44:58:f2:d1:f8:ce:fe:0f:e1:ad:f6:61: ff:b8:c2:31:2a:e8:fe:80:8a:8a:1e:ca:5a:8c:fe: 0c:09:6d:8b:17:7d:fd:59:db:9f:d7:11:59:a7:c7: e4:96:44:21:36:da:53:bb:15:4b:c5:13:32:1d:60: 2a:31:99:fb:8c:da:2c:71:d0:15:0a:1c:4b:30:78: 02:da:6b:7f:29:63:22:0b:39:87:15:a4:85:64:e3: 10:eb:14:a3:9c:b0:4a:0d:a0:6b:d2:0d:b0:97:a8: b0:32:ee:7e:8d:c7:b4:84:e0:63:21:a2:51:d9:65: 67:a1:1b:b3:e1:e6:28:52:be:af:99:43:e0:e4:79: bb:f1:59:78:d7:de:eb:ff:e9:ac:13:41:f6:0c:80: 6a:15:47:b2:65:34:4c:4d:b1:d4:59:45:af:eb:0e: 16:5d:01:42:dc:38:63:9c:c9:8b:99:21:bb:0c:eb: 18:e5:90:0a:22:1c:fd:0c:8b:7f:97:d6:f7:7d:4a: eb:f1:d5:f2:af:21:61:3f:7a:b3:e1:c6:cb:27:06: 1b:bb:ea:46:85:83:2d:38:8b:2f:b2:f0:92:07:1b: e1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:53:43:82:BE:2E:97:A0:BB:64:C8:00:28:CF:AE:F5:82:D1:B2:08 X509v3 Authority Key Identifier: keyid:E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:db:bd:58:7f:19:cc:fe:a1:0b:0a:2f:cb:a0:ae:01:e1:31: a1:6b:5f:14:3d:03:fe:ac:d5:c9:72:c0:88:2b:50:c8:5c:40: 89:31:e4:c5:c9:b8:3f:71:96:47:8f:e0:3c:4e:07:8e:ff:a6: 12:3d:69:6b:dd:b2:eb:79:6a:31:00:c6:b7:03:c6:c4:09:8c: d5:39:9b:10:f2:db:3b:52:2f:36:1f:35:d2:48:7c:63:2b:ff: 99:d7:08:c9:f9:49:5e:2b:cd:7a:78:31:33:ea:00:a6:2f:3e: 1e:93:d1:e1:b7:5b:9c:63:e6:1e:74:21:f0:32:8a:9b:67:83: e0:1a:e2:ca:72:09:78:c7:2a:ce:ae:39:73:7b:14:0b:5e:3e: 13:d3:97:fb:24:0b:3f:92:b8:6e:c9:95:82:0f:70:04:92:8c: 8f:ee:b4:b0:f1:cf:fc:1b:56:37:9e:d2:1d:f3:49:fb:01:86: 62:fd:2a:29:e8:a2:11:fd:c3:08:84:1e:3b:97:ec:71:16:1a: 08:28:40:03:b4:cf:6a:28:de:fb:35:a0:7b:51:18:cf:ef:6d: 12:a1:36:00:b8:47:f7:b4:35:2a:6f:dc:e2:15:99:a7:0f:e4: 54:b3:38:da:86:78:ee:ae:27:8a:3d:18:8d:bd:22:70:0f:dd: 10:63:d0:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM0RDAxMTAvBgNVBAUTKEUwNkZFODQxQzZCQjQ5OEExRkJGNjdFRTNBQThDOEE5 QzUzODdEMEYwHhcNMjYwNDA1MDQ0NDA2WhcNMjYwNDEyMDQ0NDA2WjAYMRYwFAYD VQQDEw02OWQxZTg5Ny0xZDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5DhQPvDIQ8bUC9HNytsSEH94kJ5wRtdw8ymL0hx8AyJEWPLR+M7+D+Gt9mH/ uMIxKuj+gIqKHspajP4MCW2LF339Wduf1xFZp8fklkQhNtpTuxVLxRMyHWAqMZn7 jNoscdAVChxLMHgC2mt/KWMiCzmHFaSFZOMQ6xSjnLBKDaBr0g2wl6iwMu5+jce0 hOBjIaJR2WVnoRuz4eYoUr6vmUPg5Hm78Vl4197r/+msE0H2DIBqFUeyZTRMTbHU WUWv6w4WXQFC3DhjnMmLmSG7DOsY5ZAKIhz9DIt/l9b3fUrr8dXyryFhP3qz4cbL JwYbu+pGhYMtOIsvsvCSBxvhMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHpTQ4K+ Lpegu2TIACjPrvWC0bIIMB8GA1UdIwQYMBaAFOBv6EHGu0mKH79n7jqoyKnFOH0P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzREMC9FQ0Y4MEY4NjQ1 QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi80R19vUWNhN1NZb2Z2MmZ1T3FqSXFjVTRm UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRHX29RY2E3U1lvZnYyZnVPcWpJcWNVNGZROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzREMC9FQ0Y4MEY4NjQ1QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi80R19vUWNhN1NZ b2Z2MmZ1T3FqSXFjVTRmUTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPNu9WH8ZzP6hCwovy6CuAeExoWtfFD0D/qzVyXLAiCtQyFxAiTHkxcm4P3GW R4/gPE4Hjv+mEj1pa92y63lqMQDGtwPGxAmM1TmbEPLbO1IvNh810kh8Yyv/mdcI yflJXivNengxM+oApi8+HpPR4bdbnGPmHnQh8DKKm2eD4BriynIJeMcqzq45c3sU C14+E9OX+yQLP5K4bsmVgg9wBJKMj+60sPHP/BtWN57SHfNJ+wGGYv0qKeiiEf3D CIQeO5fscRYaCChAA7TPaije+zWge1EYz+9tEqE2ALhH97Q1Km/c4hWZpw/kVLM4 2oZ47q4nij0Yjb0icA/dEGPQ9g== -----END CERTIFICATE-----Generated at Mon Apr 6 16:36:54 2026 by rpki-client