$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft File: E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json) Hash identifier: q0cr5lhf2KIgf4k32+/AbQzfRqGOuEjwSZgW0v/WaPw= Subject key identifier: 15:66:FD:29:5F:8C:C3:A1:96:8E:5A:35:4C:A3:95:10:17:EB:A4:62 Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Certificate serial: 0D45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft Manifest number: 0D24 Signing time: Mon 02 Mar 2026 01:03:26 +0000 Manifest this update: Mon 02 Mar 2026 01:03:24 +0000 Manifest next update: Mon 09 Mar 2026 01:03:24 +0000 Files and hashes: 1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: oUVH+ocLowLrrTkLPP1orXjFzsTTv8y9VM0yuvHzkiI=) 2: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: Un5EoRL9PQC9xIW5CX3zoZdwpivD2GxDkHynm1gEUVk=) 3: 0827E4147F7911EC86DE4B56C4F9AE02.roa (hash: HpflIZHPJw/jzbgP6VSoBVTn6YCT3C7WFMC80MZUPak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3397 (0xd45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Validity Not Before: Mar 2 01:03:24 2026 GMT Not After : Mar 9 01:03:24 2026 GMT Subject: CN=69a4e1dd-49b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:54:a9:0c:24:f7:23:54:95:ae:55:52:c4:07: 08:3d:0d:a2:15:f5:95:d5:6b:97:d0:40:95:eb:38: 74:fa:84:0a:5f:a3:68:c4:af:85:86:da:e9:07:51: b0:b0:28:9a:26:01:ae:9f:25:5a:a2:58:95:0f:c3: a1:94:b7:89:03:5f:a4:c4:22:e7:24:ff:de:9b:c7: d9:e2:87:cd:b9:60:a3:a9:3c:59:b1:36:12:51:dd: cb:64:88:8b:cb:a6:98:17:63:03:3a:c0:fa:a8:0a: 50:67:95:f9:85:44:f8:2b:20:56:34:57:95:be:5e: 68:f0:75:df:b2:23:0c:c3:d4:e5:0a:86:f0:f7:fe: bd:c0:3f:a3:1e:14:a3:20:c7:a5:fa:d3:ed:e0:65: a4:eb:51:c4:87:15:5c:d7:44:f0:50:87:36:4b:fc: a4:0c:c4:3a:7d:6d:6f:c5:2e:43:b6:5b:b3:42:87: 14:54:d5:a1:4d:5f:05:a8:59:55:9d:83:28:e2:9a: 4a:3f:98:1d:b5:d5:a8:98:53:f2:9d:a3:eb:19:d6: 3c:f4:70:04:ae:e4:ef:44:a9:7d:cc:4e:3e:5e:a4: 8b:e9:50:c0:ca:91:df:7f:6c:46:b5:7e:0d:a9:68: 8b:21:e7:5a:88:c9:48:66:83:d7:96:23:21:31:1e: ac:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:66:FD:29:5F:8C:C3:A1:96:8E:5A:35:4C:A3:95:10:17:EB:A4:62 X509v3 Authority Key Identifier: keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:f6:fe:44:39:c4:69:ab:be:d9:51:33:b2:48:66:bc:14:75: be:34:d2:c2:d5:2d:da:8c:97:e4:21:7e:5e:1f:0e:7d:3f:8d: f1:45:67:78:4f:96:a2:3a:c0:32:d7:0c:ea:69:08:c6:bc:8e: 6d:57:34:27:48:a7:3a:a0:08:5e:c4:c8:1d:be:88:e3:aa:13: d7:a3:bd:0b:5d:3a:76:1d:f9:93:aa:a3:a5:3f:2c:c4:fc:b8: 0f:46:72:b0:3a:fc:27:22:33:be:05:0f:98:15:1f:9e:9a:49: 89:98:33:84:ce:17:fb:a1:22:2b:48:13:9e:f3:dd:4b:9e:14: 49:7e:a9:04:f0:20:60:57:6c:64:73:82:5b:23:cc:73:41:dc: b3:19:c5:4d:d7:23:c8:44:89:46:a4:5d:18:b9:cc:8e:f4:85: 43:5c:bc:b3:a6:01:2c:e6:d5:3b:07:1b:51:23:5f:c4:5e:28: 0f:de:dc:14:fe:6a:35:05:6c:9a:4b:55:9f:82:d3:ed:35:54: 00:e0:88:f3:25:62:3e:18:63:f1:31:08:dc:26:17:7f:bc:2f: e2:16:2b:c5:0e:6a:74:cb:47:47:93:c7:22:56:05:e3:cd:17: 37:ce:50:07:3c:d6:96:46:be:96:e5:08:65:25:69:83:34:f1: 1f:8c:24:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGOUMxMTAvBgNVBAUTKDEzOENEMTBBNDc3OERFMEUzNTkxMUU5QzlDOTQ0RjRC MjFDNERCMDkwHhcNMjYwMzAyMDEwMzI0WhcNMjYwMzA5MDEwMzI0WjAYMRYwFAYD VQQDEw02OWE0ZTFkZC00OWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6VSpDCT3I1SVrlVSxAcIPQ2iFfWV1WuX0ECV6zh0+oQKX6NoxK+FhtrpB1Gw sCiaJgGunyVaoliVD8OhlLeJA1+kxCLnJP/em8fZ4ofNuWCjqTxZsTYSUd3LZIiL y6aYF2MDOsD6qApQZ5X5hUT4KyBWNFeVvl5o8HXfsiMMw9TlCobw9/69wD+jHhSj IMel+tPt4GWk61HEhxVc10TwUIc2S/ykDMQ6fW1vxS5DtluzQocUVNWhTV8FqFlV nYMo4ppKP5gdtdWomFPynaPrGdY89HAEruTvRKl9zE4+XqSL6VDAypHff2xGtX4N qWiLIedaiMlIZoPXliMhMR6sVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBVm/Slf jMOhlo5aNUyjlRAX66RiMB8GA1UdIwQYMBaAFBOM0QpHeN4ONZEenJyUT0shxNsJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY5Qy8yOUNCMDIwRUZB MEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNnNDFrUjZjbkpSUFN5SEUy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0elJDa2Q0M2c0MWtSNmNuSlJQU3lIRTJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEY5Qy8yOUNCMDIwRUZBMEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNn NDFrUjZjbkpSUFN5SEUyd2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIPb+RDnEaau+2VEzskhmvBR1vjTSwtUt2oyX5CF+Xh8OfT+N8UVneE+WojrA MtcM6mkIxryObVc0J0inOqAIXsTIHb6I46oT16O9C106dh35k6qjpT8sxPy4D0Zy sDr8JyIzvgUPmBUfnppJiZgzhM4X+6EiK0gTnvPdS54USX6pBPAgYFdsZHOCWyPM c0HcsxnFTdcjyESJRqRdGLnMjvSFQ1y8s6YBLObVOwcbUSNfxF4oD97cFP5qNQVs mktVn4LT7TVUAOCI8yViPhhj8TEI3CYXf7wv4hYrxQ5qdMtHR5PHIlYF480XN85Q BzzWlka+luUIZSVpgzTxH4wktg== -----END CERTIFICATE-----Generated at Mon Mar 2 04:14:23 2026 by rpki-client