$ rpki-client -vvf rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft File: 4mcctGrTmxwXJOxjzVOymz5IHpk.mft (raw, json) Hash identifier: UlomribkTao5K+tC4Q3d25vUFxUCXLPaE96tUzdKGn0= Subject key identifier: A3:1A:DB:95:F5:F5:C7:88:C8:C2:2B:9B:2E:48:76:21:46:6F:F7:14 Authority key identifier: E2:67:1C:B4:6A:D3:9B:1C:17:24:EC:63:CD:53:B2:9B:3E:48:1E:99 Certificate issuer: /CN=A914145F/serialNumber=E2671CB46AD39B1C1724EC63CD53B29B3E481E99 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4mcctGrTmxwXJOxjzVOymz5IHpk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft Manifest number: 19 Signing time: Fri 17 Apr 2026 08:38:23 +0000 Manifest this update: Fri 17 Apr 2026 08:38:23 +0000 Manifest next update: Fri 24 Apr 2026 08:38:23 +0000 Files and hashes: 1: 4mcctGrTmxwXJOxjzVOymz5IHpk.crl (hash: +N0R0UYP+q2aNAiT44hKPUQRWwdkMBsiZXDLCMQEVnI=) 2: 2C8A1D2C16BA11F18FA4AADE273D8C67.roa (hash: twoRF5oqlZ7HCh1Oa3drRkDKu566LB667OHWRh/w7Jg=) 3: 2D0F8E9E16BA11F18FA4AADE273D8C67.roa (hash: yWwtKIoGzkza5ajepsaaRnUFxlesI9AwU+G4CnGMim4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.crl rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4mcctGrTmxwXJOxjzVOymz5IHpk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914145F, serialNumber=E2671CB46AD39B1C1724EC63CD53B29B3E481E99 Validity Not Before: Apr 17 08:38:23 2026 GMT Not After : Apr 24 08:38:23 2026 GMT Subject: CN=69e1f17f-c37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:72:b3:19:9c:bc:fb:47:24:7f:38:68:02:63: 58:18:52:da:ac:a9:a1:c1:ca:bf:bf:b0:55:fb:17: 2f:48:b8:8e:fc:3d:31:4b:2a:a3:1f:b7:12:fd:39: a2:74:a5:7f:e7:6e:d2:31:e7:3d:4c:58:9f:f1:6d: 7b:b3:06:eb:a8:b5:2a:4f:9e:ff:e6:8c:06:bf:b9: d2:b9:d6:5b:4d:cb:45:5e:c9:17:44:cf:81:cc:29: 75:64:4c:a8:6d:45:7c:58:66:38:3d:d0:91:67:6f: fb:80:7d:1a:66:be:cc:d6:ed:90:b9:56:45:68:10: 4a:d9:a8:05:cb:dc:e1:f6:30:e1:b0:0c:1b:3e:5c: 28:b1:f4:6e:fd:ab:21:9e:8f:55:7d:4e:a1:b0:3c: 8a:d7:1a:c3:8f:ee:df:6a:a8:23:b4:1a:a7:83:99: 7b:cf:72:4f:df:83:8e:70:61:33:46:c6:8c:2c:27: 13:bf:b3:a3:37:bc:d8:08:8b:48:c7:74:71:75:a0: ec:c3:99:4c:16:b1:dc:c2:19:fb:56:d2:74:6e:b2: 95:e1:01:61:bc:27:0c:ff:0e:82:da:c4:24:d2:fa: 97:88:f4:a4:e7:50:3b:a2:97:b0:a4:af:6d:4e:2a: 6b:bb:52:cd:55:ae:9b:a1:14:9e:ae:e4:c8:28:bc: 81:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1A:DB:95:F5:F5:C7:88:C8:C2:2B:9B:2E:48:76:21:46:6F:F7:14 X509v3 Authority Key Identifier: keyid:E2:67:1C:B4:6A:D3:9B:1C:17:24:EC:63:CD:53:B2:9B:3E:48:1E:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4mcctGrTmxwXJOxjzVOymz5IHpk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:92:b4:b8:8e:0b:d2:d4:04:8c:8f:57:9d:57:07:58:13:49: 99:3a:02:29:99:99:01:73:b2:29:62:5b:bd:3c:2d:16:e4:af: 93:23:8e:5c:9b:2c:49:ca:77:84:a4:23:41:01:da:db:47:03: cd:eb:c7:94:6f:ac:0c:37:22:6c:ce:24:82:bf:1f:b8:1c:e1: c8:c6:6c:99:bc:23:0d:5a:8e:a5:be:5e:0e:3f:1f:66:fc:a4: 6c:5e:03:bf:68:15:49:4a:8f:b6:b5:10:ea:ab:b4:0a:62:07: a4:a9:dc:12:7f:84:34:6b:97:1c:8d:7a:ef:ac:fe:63:bd:38: 4a:91:79:dd:58:db:b6:1e:2a:48:82:32:76:dc:8d:b7:7a:34: 11:cd:f8:59:46:af:1a:a9:6c:d8:28:d2:68:1f:7b:72:29:21: 7f:6f:11:74:5e:3a:31:f2:36:2f:af:d6:69:74:a6:dd:c8:9e: db:29:da:a4:62:89:a8:7b:19:4b:74:3b:cf:e7:d5:6c:3b:6a: 9d:51:da:f5:fc:5e:1a:04:f3:15:f9:59:1b:91:9a:3c:e1:3e: a7:2a:40:ad:2f:22:20:5a:68:26:fb:c9:fb:92:84:c9:3b:46: 9a:e2:1a:86:83:a3:52:8c:12:a5:85:b9:be:76:2f:08:49:d6: dc:85:81:d5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTQ1RjExMC8GA1UEBRMoRTI2NzFDQjQ2QUQzOUIxQzE3MjRFQzYzQ0Q1M0IyOUIz RTQ4MUU5OTAeFw0yNjA0MTcwODM4MjNaFw0yNjA0MjQwODM4MjNaMBgxFjAUBgNV BAMTDTY5ZTFmMTdmLWMzN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDacrMZnLz7RyR/OGgCY1gYUtqsqaHByr+/sFX7Fy9IuI78PTFLKqMftxL9OaJ0 pX/nbtIx5z1MWJ/xbXuzBuuotSpPnv/mjAa/udK51ltNy0VeyRdEz4HMKXVkTKht RXxYZjg90JFnb/uAfRpmvszW7ZC5VkVoEErZqAXL3OH2MOGwDBs+XCix9G79qyGe j1V9TqGwPIrXGsOP7t9qqCO0GqeDmXvPck/fg45wYTNGxowsJxO/s6M3vNgIi0jH dHF1oOzDmUwWsdzCGftW0nRuspXhAWG8Jwz/DoLaxCTS+peI9KTnUDuil7Ckr21O Kmu7Us1VrpuhFJ6u5MgovIGNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoxrblfX1 x4jIwiubLkh2IUZv9xQwHwYDVR0jBBgwFoAU4mcctGrTmxwXJOxjzVOymz5IHpkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxNDVGL0I0NzJGMDVDMTZC OTExRjE4QjI5MEI0ODI3M0Q4QzY3LzRtY2N0R3JUbXh3WEpPeGp6Vk95bXo1SUhw ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvNG1jY3RHclRteHdYSk94anpWT3ltejVJSHBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx NDVGL0I0NzJGMDVDMTZCOTExRjE4QjI5MEI0ODI3M0Q4QzY3LzRtY2N0R3JUbXh3 WEpPeGp6Vk95bXo1SUhway5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQALkrS4jgvS1ASMj1edVwdYE0mZOgIpmZkBc7IpYlu9PC0W5K+TI45cmyxJyneE pCNBAdrbRwPN68eUb6wMNyJsziSCvx+4HOHIxmyZvCMNWo6lvl4OPx9m/KRsXgO/ aBVJSo+2tRDqq7QKYgekqdwSf4Q0a5ccjXrvrP5jvThKkXndWNu2HipIgjJ23I23 ejQRzfhZRq8aqWzYKNJoH3tyKSF/bxF0Xjox8jYvr9ZpdKbdyJ7bKdqkYomoexlL dDvP59VsO2qdUdr1/F4aBPMV+VkbkZo84T6nKkCtLyIgWmgm+8n7koTJO0aa4hqG g6NSjBKlhbm+di8ISdbchYHV -----END CERTIFICATE-----Generated at Fri Apr 17 21:01:55 2026 by rpki-client