$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft File: c4TcZntNSaWs1QpYtIkWoVrCYWs.mft (raw, json) Hash identifier: o2ikBXP+uNIaAJHk+S1JD552NvxEJiXEmHebT39VAl8= Subject key identifier: 21:84:D4:83:78:8A:2A:BB:E5:99:DC:A4:77:8D:2C:AE:29:6D:2D:64 Authority key identifier: 73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B Certificate issuer: /CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft Manifest number: 01CF Signing time: Sun 05 Apr 2026 03:10:12 +0000 Manifest this update: Sun 05 Apr 2026 03:10:11 +0000 Manifest next update: Sun 12 Apr 2026 03:10:11 +0000 Files and hashes: 1: c4TcZntNSaWs1QpYtIkWoVrCYWs.crl (hash: /FE+7jVIMmbZNAwok14tWYVH3hZoZcJkheDi0LfFiIE=) 2: F1E9B236718E11EEAF67DB48C4F9AE02.roa (hash: CKnFh68MZ6vWZLs6HZZnzt3hxWfZ7SKFfyFAeNeD5aI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D07, serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Validity Not Before: Apr 5 03:10:11 2026 GMT Not After : Apr 12 03:10:11 2026 GMT Subject: CN=69d1d294-0301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4a:cf:01:9f:e3:1d:ac:5c:22:3f:91:ea:c2: c1:9c:9a:8f:d1:90:cc:0c:8f:6d:e3:76:a8:60:28: 6a:b9:45:e7:f8:c7:f8:b9:4c:5b:05:1d:56:3b:7c: c3:d8:9d:9c:b7:36:40:b1:30:72:21:81:ba:4c:61: aa:00:ca:cf:78:61:45:95:e4:ac:b5:f7:ac:11:cf: 43:c8:cc:bb:2a:53:70:5c:8c:37:11:e5:88:b6:e0: d9:38:fa:2b:ba:23:3f:21:dc:62:3b:73:75:76:53: e8:ae:1d:69:0c:b1:70:4f:49:db:a3:9f:48:a8:7e: f2:2d:fd:df:cb:33:09:03:0b:f9:e0:ac:02:07:87: f7:24:29:9d:b0:6e:b5:a3:02:ef:a0:42:33:35:bc: 09:cc:d5:d4:9e:25:f7:b7:01:a6:3c:df:e0:67:98: b3:f1:bb:4f:61:b3:f9:91:7c:d1:75:53:27:cd:b3: a7:84:53:aa:75:66:7f:bd:cc:9d:10:cf:9c:f6:76: 9e:3b:83:82:41:fe:49:cd:ca:80:b6:4f:df:65:2f: c9:c2:b5:33:c8:3f:4f:bd:bc:ae:ee:0a:fa:60:2b: 0f:84:a2:e8:57:39:55:5c:78:20:b0:a9:79:02:d1: 89:40:81:04:4c:1e:c0:6e:5b:2a:46:ed:d4:62:2b: 0d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:84:D4:83:78:8A:2A:BB:E5:99:DC:A4:77:8D:2C:AE:29:6D:2D:64 X509v3 Authority Key Identifier: keyid:73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:72:9c:5d:41:40:cc:3f:1b:83:05:09:49:98:20:40:82:de: fe:e1:52:ed:4a:98:57:c6:a3:0e:99:20:39:ca:74:c5:8a:6a: 3a:11:cf:9a:39:82:03:7d:32:51:81:be:de:03:ac:95:74:57: ba:bb:ab:4f:aa:42:b5:99:68:f7:ee:de:59:37:b6:d2:e4:18: 4f:3f:e8:81:fe:88:57:11:2e:f7:14:f2:94:84:4d:9f:29:a8: 4f:30:22:a0:10:04:65:fb:80:b3:d9:11:3f:8f:e7:1c:e2:ce: 21:c2:4c:4e:ff:9b:2b:39:97:1b:91:5d:47:12:eb:5a:43:be: dc:1a:2d:04:47:2b:dd:ae:c8:29:7b:36:19:10:d5:72:bc:41: d7:2f:05:e5:f4:9d:eb:c4:90:43:35:f5:78:9b:be:d7:d4:48: 2c:67:01:db:48:54:3d:68:1d:12:c8:5c:e5:91:ca:f1:21:1a: 41:62:0f:c6:d3:a6:0c:7a:ee:76:3f:7b:62:27:40:76:14:11: c7:f6:22:4f:0b:8c:26:64:c9:ca:3b:9b:a0:4e:43:7d:82:ea: dd:91:0b:9e:c4:42:c6:7f:5d:29:19:02:da:f2:fe:0f:d3:69: ff:4c:d9:61:d0:06:85:4e:0a:88:92:4d:b0:d5:83:51:ec:88: e9:3d:c4:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThEMDcxMTAvBgNVBAUTKDczODREQzY2N0I0RDQ5QTVBQ0Q1MEE1OEI0ODkxNkEx NUFDMjYxNkIwHhcNMjYwNDA1MDMxMDExWhcNMjYwNDEyMDMxMDExWjAYMRYwFAYD VQQDEw02OWQxZDI5NC0wMzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkrPAZ/jHaxcIj+R6sLBnJqP0ZDMDI9t43aoYChquUXn+Mf4uUxbBR1WO3zD 2J2ctzZAsTByIYG6TGGqAMrPeGFFleSstfesEc9DyMy7KlNwXIw3EeWItuDZOPor uiM/IdxiO3N1dlPorh1pDLFwT0nbo59IqH7yLf3fyzMJAwv54KwCB4f3JCmdsG61 owLvoEIzNbwJzNXUniX3twGmPN/gZ5iz8btPYbP5kXzRdVMnzbOnhFOqdWZ/vcyd EM+c9naeO4OCQf5JzcqAtk/fZS/JwrUzyD9Pvbyu7gr6YCsPhKLoVzlVXHggsKl5 AtGJQIEETB7AblsqRu3UYisNJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCGE1IN4 iiq75ZncpHeNLK4pbS1kMB8GA1UdIwQYMBaAFHOE3GZ7TUmlrNUKWLSJFqFawmFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQwNy81MDU1NjBCNjZF N0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNhV3MxUXBZdElrV29WckNZ V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0VGNabnROU2FXczFRcFl0SWtXb1ZyQ1lXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEQwNy81MDU1NjBCNjZFN0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNh V3MxUXBZdElrV29WckNZV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd3KcXUFAzD8bgwUJSZggQILe/uFS7UqYV8ajDpkgOcp0xYpqOhHPmjmCA30y UYG+3gOslXRXururT6pCtZlo9+7eWTe20uQYTz/ogf6IVxEu9xTylIRNnymoTzAi oBAEZfuAs9kRP4/nHOLOIcJMTv+bKzmXG5FdRxLrWkO+3BotBEcr3a7IKXs2GRDV crxB1y8F5fSd68SQQzX1eJu+19RILGcB20hUPWgdEshc5ZHK8SEaQWIPxtOmDHru dj97YidAdhQRx/YiTwuMJmTJyjuboE5DfYLq3ZELnsRCxn9dKRkC2vL+D9Np/0zZ YdAGhU4KiJJNsNWDUeyI6T3EXg== -----END CERTIFICATE-----Generated at Mon Apr 6 13:58:46 2026 by rpki-client