$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft File: r4P0CG-0oWWIvizFUNW42dRCOYU.mft (raw, json) Hash identifier: 0Q5eOzg/MZFn4dmm6VS7haP2fzx1ZU7hWd3yX2gsDMQ= Subject key identifier: C1:1B:EC:39:A1:17:8B:3C:EA:5E:87:DD:58:C5:55:A9:ED:2B:79:09 Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 Certificate issuer: /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Certificate serial: 0841 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft Manifest number: 0835 Signing time: Mon 02 Mar 2026 00:21:01 +0000 Manifest this update: Mon 02 Mar 2026 00:21:00 +0000 Manifest next update: Mon 09 Mar 2026 00:21:00 +0000 Files and hashes: 1: r4P0CG-0oWWIvizFUNW42dRCOYU.crl (hash: QF8gIFPwyRKANkFoVwGRr4fJDieiXqAORXsR6PoE6GQ=) 2: BF529990959F11EC844CAD64C4F9AE02.roa (hash: OcrJ1OdtuDJwFGfS33ae+ZGC3AcOKMEW7bd8MKcrgcg=) 3: 6AB65D92AD1811EB84E05F5BC4F9AE02.roa (hash: gTT2ZxKnb2XSH45WCoVeGAW6gYRsMjn+fjxpbqHxVRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2113 (0x841) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BEA2, serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Validity Not Before: Mar 2 00:21:00 2026 GMT Not After : Mar 9 00:21:00 2026 GMT Subject: CN=69a4d7ed-861f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:02:a0:50:14:ae:56:1a:0d:ae:dd:6c:ec:29: 69:fa:7b:2c:d0:15:3c:8a:74:82:21:a6:b6:05:f3: da:a1:d9:95:69:2a:df:cc:b5:f9:e5:e1:a3:fd:41: e7:36:b6:82:72:ab:42:3e:38:6e:47:7c:88:9e:5f: 09:32:cb:45:ad:df:e1:a5:74:eb:68:13:3a:6a:e8: 36:9d:f7:59:7d:92:5a:ef:b3:02:93:e6:67:10:0b: 66:4e:cf:9e:7a:3b:bb:5b:67:38:39:67:e1:b1:fb: 3e:34:92:ad:26:fb:d5:6e:5b:47:ea:b9:e0:14:31: a8:bd:bc:88:b0:b5:5c:66:cf:9c:8e:f9:3c:73:11: 72:36:ab:3f:5d:b4:68:f2:69:e9:a2:58:55:c8:c0: 69:17:a5:f9:26:b0:78:67:a4:f1:28:0d:51:c0:b0: e5:12:a4:86:bc:a1:15:3b:49:a2:11:ff:bc:10:a4: b3:11:4f:3f:c4:aa:5b:a7:e9:1f:cb:c9:c3:4e:42: be:d2:ed:d7:ef:e6:f3:4c:35:54:e6:a4:b8:81:85: 51:5e:bf:03:41:ca:c0:a1:00:4c:ee:a4:1b:67:51: 70:59:81:c2:76:ef:9b:da:e1:35:38:8b:15:64:5f: 5a:98:a2:25:fb:c7:6e:5f:0d:e7:ee:f0:1e:19:99: c6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1B:EC:39:A1:17:8B:3C:EA:5E:87:DD:58:C5:55:A9:ED:2B:79:09 X509v3 Authority Key Identifier: keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:bb:4d:c6:e4:4a:84:56:31:fb:2a:30:68:47:e1:ae:0c:f2: cf:4b:73:be:63:46:b7:75:df:07:a1:1f:df:d9:c7:95:ae:ad: 5b:73:34:35:86:e1:85:4f:c9:9e:74:a4:4d:eb:b3:6b:81:fc: 0f:bf:41:f3:b3:3a:a1:55:52:53:ef:ea:9a:d5:fd:63:b6:12: 7b:c5:ee:b2:0c:f2:85:c0:81:cc:0e:71:05:85:b3:3e:23:0b: a4:b5:2c:1b:10:ac:12:96:bd:0f:2e:04:2d:80:77:ca:79:34: d4:ce:72:47:2f:77:04:58:ee:70:76:a3:63:63:56:83:a8:25: 9d:57:65:f6:74:65:89:b5:b6:cd:1d:80:a6:62:14:47:2e:b2: 5e:5e:ba:1e:57:7a:86:bf:aa:f0:5b:1c:3d:3a:73:1d:ce:23: 95:4c:80:2b:84:15:ee:d7:9c:b2:d6:98:3c:c7:c8:61:23:25: c4:2e:09:da:73:e1:e2:f3:45:75:9b:14:fe:ab:ec:70:6d:e7: 39:13:05:a1:d9:06:ef:6f:0f:19:be:73:c1:5c:62:fb:aa:0c: 8a:97:60:97:69:25:1e:94:21:d2:0f:23:24:16:ea:1b:a8:14: 13:ec:b9:68:ff:14:f4:55:7b:1e:5a:fd:36:3e:28:1f:40:da: 49:51:a1:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JFQTIxMTAvBgNVBAUTKEFGODNGNDA4NkZCNEExNjU4OEJFMkNDNTUwRDVCOEQ5 RDQ0MjM5ODUwHhcNMjYwMzAyMDAyMTAwWhcNMjYwMzA5MDAyMTAwWjAYMRYwFAYD VQQDEw02OWE0ZDdlZC04NjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiwKgUBSuVhoNrt1s7Clp+nss0BU8inSCIaa2BfPaodmVaSrfzLX55eGj/UHn NraCcqtCPjhuR3yInl8JMstFrd/hpXTraBM6aug2nfdZfZJa77MCk+ZnEAtmTs+e eju7W2c4OWfhsfs+NJKtJvvVbltH6rngFDGovbyIsLVcZs+cjvk8cxFyNqs/XbRo 8mnpolhVyMBpF6X5JrB4Z6TxKA1RwLDlEqSGvKEVO0miEf+8EKSzEU8/xKpbp+kf y8nDTkK+0u3X7+bzTDVU5qS4gYVRXr8DQcrAoQBM7qQbZ1FwWYHCdu+b2uE1OIsV ZF9amKIl+8duXw3n7vAeGZnGXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMEb7Dmh F4s86l6H3VjFVantK3kJMB8GA1UdIwQYMBaAFK+D9AhvtKFliL4sxVDVuNnUQjmF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkVBMi8xOUZFQTQ1ODAz MzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9XV0l2aXpGVU5XNDJkUkNP WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0UDBDRy0wb1dXSXZpekZVTlc0MmRSQ09ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkVBMi8xOUZFQTQ1ODAzMzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9X V0l2aXpGVU5XNDJkUkNPWVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYbtNxuRKhFYx+yowaEfhrgzyz0tzvmNGt3XfB6Ef39nHla6tW3M0NYbhhU/J nnSkTeuza4H8D79B87M6oVVSU+/qmtX9Y7YSe8XusgzyhcCBzA5xBYWzPiMLpLUs GxCsEpa9Dy4ELYB3ynk01M5yRy93BFjucHajY2NWg6glnVdl9nRlibW2zR2ApmIU Ry6yXl66Hld6hr+q8FscPTpzHc4jlUyAK4QV7tecstaYPMfIYSMlxC4J2nPh4vNF dZsU/qvscG3nORMFodkG728PGb5zwVxi+6oMipdgl2klHpQh0g8jJBbqG6gUE+y5 aP8U9FV7Hlr9Nj4oH0DaSVGhqg== -----END CERTIFICATE-----Generated at Mon Mar 2 05:44:54 2026 by rpki-client