$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft File: 4cWfpaa8h2985KRsqq5gYE8FGGY.mft (raw, json) Hash identifier: na9oBmWMxj7F63O9fBLrKSLY9+ACAPKqlZdeicwLpro= Subject key identifier: C8:60:83:E6:F4:C2:73:09:11:6A:74:B8:38:32:B9:80:9F:79:D0:54 Authority key identifier: E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 Certificate issuer: /CN=A91FEDE7/serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft Manifest number: 3A Signing time: Sun 29 Mar 2026 08:12:31 +0000 Manifest this update: Sun 29 Mar 2026 08:12:30 +0000 Manifest next update: Sun 05 Apr 2026 08:12:30 +0000 Files and hashes: 1: 4cWfpaa8h2985KRsqq5gYE8FGGY.crl (hash: EEXbOq0bmxBJk84vd/FzGhu3cDpM5gqOt5CUd0nFhPU=) 2: 63C2AF74D99E11F0A31734B566D3641D.roa (hash: XqsHjVz2/3IOIuZJsTXT+P8IFg2LCZpsTf20ES1Rkms=) 3: C48E03F21D1A11F1AE90847F103D8C67.roa (hash: YqhCEr3kKDJmGDX75Nq9SUE9drBA93p8LP3gb+77yio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 08:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEDE7, serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866 Validity Not Before: Mar 29 08:12:30 2026 GMT Not After : Apr 5 08:12:30 2026 GMT Subject: CN=69c8deef-ac25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4a:7a:85:ab:25:73:60:f6:14:1e:fa:5d:0b: 89:a2:6f:ec:02:6b:7f:2c:49:7e:de:39:42:bc:d7: f0:57:46:ba:39:f2:b2:b5:3a:53:aa:39:af:7c:09: 4d:bb:66:cb:3a:fd:7c:ee:16:63:8c:fc:99:ea:14: 84:1e:cf:13:fa:c9:d4:3d:05:b8:0b:48:ca:12:93: 3b:7b:3a:49:fe:ba:24:4f:68:63:6b:ca:a9:8a:d5: 40:b9:8b:f5:b5:2b:3d:11:5c:70:6d:63:e3:bf:d6: 17:7e:12:ff:43:c4:da:4b:83:3e:51:90:be:82:0f: df:ae:c7:a4:ba:02:a3:ef:69:60:51:64:20:e8:04: 52:23:58:20:48:df:2c:2f:c0:dc:a4:c2:d6:01:80: b3:dc:a8:31:57:71:68:8f:9f:70:c3:32:19:91:a6: e8:97:a0:f5:ca:b8:ae:d4:19:49:dd:f0:46:6d:08: c5:98:e8:31:64:88:2e:cb:08:c3:1d:7c:57:de:f8: 41:45:8f:c2:52:92:49:e9:09:67:e9:f3:e7:8e:48: 88:7b:7f:70:d2:3a:52:ac:49:7d:3d:d3:45:60:35: 79:72:87:b8:99:3a:ed:4f:11:e2:5c:d3:fc:62:82: 34:71:ea:60:67:7a:fc:9e:dd:4b:a9:82:f1:65:ab: a2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:60:83:E6:F4:C2:73:09:11:6A:74:B8:38:32:B9:80:9F:79:D0:54 X509v3 Authority Key Identifier: keyid:E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:50:88:59:b5:54:91:95:77:73:35:0b:91:a2:b2:af:be:2f: 4e:b3:92:47:77:f2:41:53:c4:c6:19:1f:8c:3a:94:15:7f:0e: 2d:69:30:5e:c0:43:bf:03:62:fa:28:ec:61:a2:cc:df:03:4a: 07:ff:69:6f:ea:4e:a7:6a:b3:4d:5a:7e:e6:1c:9d:0b:77:5c: dd:31:d1:2f:ce:e2:50:c2:88:76:e5:69:1f:66:0b:e1:23:44: 44:dc:c0:46:b8:20:49:23:59:7a:d8:67:4c:bc:df:5e:f4:07: 32:76:9f:3c:1e:da:4c:df:65:8e:08:17:50:e4:c8:35:ee:3c: d1:02:99:3f:f2:c7:3e:46:f6:93:89:d7:16:27:3b:f6:82:c7: cb:9e:54:ba:6c:d9:8a:79:37:5e:af:c7:37:53:a5:23:86:65: 74:9c:9d:f2:1f:e5:10:53:95:b0:89:b8:93:a4:3f:93:3d:57: b3:84:17:62:f9:2d:e1:ad:3e:17:c3:c3:30:c0:42:28:f5:8c: ec:2d:92:41:35:95:6a:13:f4:e2:40:fb:a0:7b:59:56:f1:6a: b3:a4:2e:76:35:bf:35:31:a2:c6:4b:14:e8:93:04:ba:7d:42: 94:86:29:59:eb:e6:0c:0a:e0:02:b6:0a:00:75:c0:e0:0f:6e: f3:21:b3:c1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RURFNzExMC8GA1UEBRMoRTFDNTlGQTVBNkJDODc2RjdDRTRBNDZDQUFBRTYwNjA0 RjA1MTg2NjAeFw0yNjAzMjkwODEyMzBaFw0yNjA0MDUwODEyMzBaMBgxFjAUBgNV BAMTDTY5YzhkZWVmLWFjMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVSnqFqyVzYPYUHvpdC4mib+wCa38sSX7eOUK81/BXRro58rK1OlOqOa98CU27 Zss6/XzuFmOM/JnqFIQezxP6ydQ9BbgLSMoSkzt7Okn+uiRPaGNryqmK1UC5i/W1 Kz0RXHBtY+O/1hd+Ev9DxNpLgz5RkL6CD9+ux6S6AqPvaWBRZCDoBFIjWCBI3ywv wNykwtYBgLPcqDFXcWiPn3DDMhmRpuiXoPXKuK7UGUnd8EZtCMWY6DFkiC7LCMMd fFfe+EFFj8JSkknpCWfp8+eOSIh7f3DSOlKsSX0900VgNXlyh7iZOu1PEeJc0/xi gjRx6mBnevye3UupgvFlq6IzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyGCD5vTC cwkRanS4ODK5gJ950FQwHwYDVR0jBBgwFoAU4cWfpaa8h2985KRsqq5gYE8FGGYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFREU3L0U3RkQzMDU4RDk5 RDExRjBCQkU3ODM5OTY2RDM2NDFELzRjV2ZwYWE4aDI5ODVLUnNxcTVnWUU4RkdH WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGNXZnBhYThoMjk4NUtSc3FxNWdZRThGR0dZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF REU3L0U3RkQzMDU4RDk5RDExRjBCQkU3ODM5OTY2RDM2NDFELzRjV2ZwYWE4aDI5 ODVLUnNxcTVnWUU4RkdHWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB0UIhZtVSRlXdzNQuRorKvvi9Os5JHd/JBU8TGGR+MOpQVfw4taTBewEO/A2L6 KOxhoszfA0oH/2lv6k6narNNWn7mHJ0Ld1zdMdEvzuJQwoh25WkfZgvhI0RE3MBG uCBJI1l62GdMvN9e9Acydp88HtpM32WOCBdQ5Mg17jzRApk/8sc+RvaTidcWJzv2 gsfLnlS6bNmKeTder8c3U6UjhmV0nJ3yH+UQU5WwibiTpD+TPVezhBdi+S3hrT4X w8MwwEIo9YzsLZJBNZVqE/TiQPuge1lW8WqzpC52Nb81MaLGSxTokwS6fUKUhilZ 6+YMCuACtgoAdcDgD27zIbPB -----END CERTIFICATE-----Generated at Mon Mar 30 15:46:53 2026 by rpki-client