$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft File: r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft (raw, json) Hash identifier: K+NH4eabgBicaj4EUECvKx0RvTIKEXx+LEuCzXj46vM= Subject key identifier: 8A:88:23:77:B2:BD:49:69:2E:1E:6E:16:9D:EC:E5:EC:5A:55:AC:FE Authority key identifier: AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6 Certificate issuer: /CN=A912F1CA/serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft Manifest number: 4F Signing time: Sun 01 Mar 2026 09:44:11 +0000 Manifest this update: Sun 01 Mar 2026 09:44:10 +0000 Manifest next update: Sun 08 Mar 2026 09:44:10 +0000 Files and hashes: 1: r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl (hash: mGBNu3pKlZE8wDNjb5Kef0J5Ei6C6vp01bGjtX5lL1E=) 2: 2DC89280AB5E11F087B3A63DC4F9AE02.roa (hash: OWRTx8KpVw3aAexIAQhAzl19KW5AxihgsszlMUbzCIw=) 3: 2E4F17E2AB5E11F087B3A63DC4F9AE02.roa (hash: Cn7vfzmjy06xdvrZ5nmmboVajIyo3gJm1O3bt7lM1ik=) 4: 3DA866FACE8E11F0B0195B54C4F9AE02.roa (hash: LaDSP0AuIcyunEBlwxJd5PmOZKzoI39LoY5pqockQJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F1CA, serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6 Validity Not Before: Mar 1 09:44:10 2026 GMT Not After : Mar 8 09:44:10 2026 GMT Subject: CN=69a40a6a-5b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f2:2f:64:cf:df:c6:3d:39:44:62:f0:ee:49: c1:c6:44:4f:73:da:18:ac:b4:95:c5:c4:60:dd:39: c0:9b:e8:c3:e0:60:a2:43:2a:0c:36:80:bc:ae:23: a8:c1:24:b3:8d:53:b9:72:4c:45:1e:0c:2c:eb:cc: 17:70:a3:11:e8:a4:14:88:b8:e9:be:03:a3:7c:1c: ff:13:09:9c:7a:28:be:c0:84:82:1b:13:0e:b3:e4: 79:e6:5e:e0:03:d5:f4:f7:fb:fd:de:06:7f:3c:d6: d6:78:4a:f7:c8:65:9c:81:11:90:5b:5d:8f:c7:c0: 4a:66:3d:9f:cc:88:54:49:fa:af:64:33:39:52:4b: 89:e6:ef:64:87:f3:8a:81:eb:07:b1:18:6e:a6:2c: 94:23:2a:80:a8:01:16:70:b7:22:97:78:b9:30:4c: 67:9a:a5:ef:06:dc:08:8f:83:7b:5a:59:e9:f9:60: e6:02:a7:7b:df:c2:65:92:4a:e9:f5:e2:f0:30:33: cd:b5:5d:1f:f0:6c:50:c0:0b:f2:7b:ce:7e:90:7c: d5:2f:e1:38:10:9d:57:81:1c:32:5d:02:b8:38:88: 83:31:43:82:f6:40:d3:c9:73:17:d7:e3:9b:77:fa: 15:c8:a1:e9:e7:1a:fb:36:9b:bf:95:12:b8:76:9c: c8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:88:23:77:B2:BD:49:69:2E:1E:6E:16:9D:EC:E5:EC:5A:55:AC:FE X509v3 Authority Key Identifier: keyid:AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:52:e4:ce:c7:80:66:46:41:92:fa:62:fe:bf:83:e7:00:f2: 92:26:aa:fb:d6:aa:f2:a9:5c:e5:96:3d:d8:f1:61:df:b9:8a: 9d:10:e7:8c:f5:b4:13:fe:b1:e8:6e:1c:6b:20:60:66:2f:2e: e2:7b:0b:28:bb:31:85:be:34:37:d3:d5:66:63:97:e1:5a:f6: fd:19:b4:0c:62:9d:ca:b2:4b:11:9a:d5:a4:bc:f9:6a:32:e5: 1e:81:d6:94:d4:eb:33:6f:9c:cc:db:47:c6:88:99:ee:d4:4c: 77:39:d1:16:7c:a9:f4:40:21:98:2d:53:93:05:74:65:f7:e2: 45:ee:25:71:4e:e7:eb:ce:f7:1b:73:24:2f:39:23:46:2a:0f: 20:5e:ec:d2:60:85:e4:00:73:27:c1:40:aa:ea:c3:ea:c2:f9: 91:60:c4:f8:9e:b4:01:d1:09:e0:51:e3:c1:fb:01:df:a7:ca: 0e:94:7c:5e:be:6d:5f:d5:8a:7b:bc:20:41:76:d4:01:b9:24: 8f:08:1d:22:4c:8a:a2:8a:de:54:7a:b5:64:2d:26:a4:39:30: d3:5c:cf:46:9f:05:86:41:3c:0d:37:e0:54:0d:7b:70:d2:39: 77:43:ec:a5:a5:e7:86:5f:f1:9c:95:e3:82:b9:01:48:e2:09: 95:da:f0:5d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjFDQTExMC8GA1UEBRMoQUY4Q0RDRTZFRDQyNzdFQ0ZCMEZEQTg4MkFENDc0OTJE RTg1OEZCNjAeFw0yNjAzMDEwOTQ0MTBaFw0yNjAzMDgwOTQ0MTBaMBgxFjAUBgNV BAMTDTY5YTQwYTZhLTViMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCQ8i9kz9/GPTlEYvDuScHGRE9z2histJXFxGDdOcCb6MPgYKJDKgw2gLyuI6jB JLONU7lyTEUeDCzrzBdwoxHopBSIuOm+A6N8HP8TCZx6KL7AhIIbEw6z5HnmXuAD 1fT3+/3eBn881tZ4SvfIZZyBEZBbXY/HwEpmPZ/MiFRJ+q9kMzlSS4nm72SH84qB 6wexGG6mLJQjKoCoARZwtyKXeLkwTGeape8G3AiPg3taWen5YOYCp3vfwmWSSun1 4vAwM821XR/wbFDAC/J7zn6QfNUv4TgQnVeBHDJdArg4iIMxQ4L2QNPJcxfX45t3 +hXIoennGvs2m7+VErh2nMifAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiogjd7K9 SWkuHm4Wnezl7FpVrP4wHwYDVR0jBBgwFoAUr4zc5u1Cd+z7D9qIKtR0kt6Fj7Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMUNBLzJERjVCQjgwQUIz MDExRjA4RkMwQzk0OEM0RjlBRTAyL3I0emM1dTFDZC16N0Q5cUlLdFIwa3Q2Rmo3 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjR6YzV1MUNkLXo3RDlxSUt0UjBrdDZGajdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG MUNBLzJERjVCQjgwQUIzMDExRjA4RkMwQzk0OEM0RjlBRTAyL3I0emM1dTFDZC16 N0Q5cUlLdFIwa3Q2Rmo3WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAnUuTOx4BmRkGS+mL+v4PnAPKSJqr71qryqVzllj3Y8WHfuYqdEOeM9bQT/rHo bhxrIGBmLy7iewsouzGFvjQ309VmY5fhWvb9GbQMYp3KsksRmtWkvPlqMuUegdaU 1Oszb5zM20fGiJnu1Ex3OdEWfKn0QCGYLVOTBXRl9+JF7iVxTufrzvcbcyQvOSNG Kg8gXuzSYIXkAHMnwUCq6sPqwvmRYMT4nrQB0QngUePB+wHfp8oOlHxevm1f1Yp7 vCBBdtQBuSSPCB0iTIqiit5UerVkLSakOTDTXM9GnwWGQTwNN+BUDXtw0jl3Q+yl peeGX/GcleOCuQFI4gmV2vBd -----END CERTIFICATE-----Generated at Mon Mar 2 14:10:57 2026 by rpki-client