$ rpki-client -vvf rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft File: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft (raw, json) Hash identifier: pJMv4l22b42b+SipnDbv4/9fI1VzGE5K/5Ukrm+4qcU= Subject key identifier: A9:DE:34:2E:87:26:8A:2F:7C:3F:7F:0A:4A:A7:B5:E9:B0:B0:16:F8 Authority key identifier: E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 Certificate issuer: /CN=A9149B61/serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft Manifest number: 0202 Signing time: Fri 17 Apr 2026 02:48:50 +0000 Manifest this update: Fri 17 Apr 2026 02:48:50 +0000 Manifest next update: Fri 24 Apr 2026 02:48:50 +0000 Files and hashes: 1: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl (hash: 3gBIhKCKXzyeFY3WEgXH7gDbOkEvQmE/fagcyFEuxpU=) 2: 10F1A0582B8511EEA7FF697BC4F9AE02.roa (hash: moXXvJLFKkIqyJw20Q1OuyiRN76hq8AL96LMv4bv4WY=) 3: D4FD2A902B8411EEBCDBEF7AC4F9AE02.roa (hash: W6ueRJhH8jQdhiEkMLdiQl56SAAwLpTfKRe8+DuwqEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149B61, serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Validity Not Before: Apr 17 02:48:50 2026 GMT Not After : Apr 24 02:48:50 2026 GMT Subject: CN=69e19f92-7a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e3:ce:bf:1d:92:da:64:39:c1:21:6d:2b:cc: d2:92:4e:52:0c:f3:44:eb:9b:9d:e2:39:36:7f:76: e5:e0:b6:de:10:50:91:83:80:44:c1:bd:19:01:40: d5:bd:cd:52:5f:c5:10:10:fe:88:d5:17:41:24:c7: 6e:b2:40:23:46:3b:1d:28:e4:96:c0:0f:76:e7:83: e0:13:dd:4e:ce:92:3f:b5:33:a6:9b:b3:f2:4f:6c: 52:50:92:4b:6d:d2:06:ea:1c:94:e8:07:5f:cc:cc: 8c:78:50:e0:2a:86:5c:6e:fd:9a:39:1e:73:a5:c7: 9f:9c:93:6a:f5:1e:30:8b:3e:79:ee:5b:58:32:e2: 09:df:90:d2:39:33:9a:be:b3:a4:04:84:b6:ba:ef: 6b:a9:62:15:31:d2:5c:70:d7:c5:28:82:33:66:64: de:04:41:ea:ca:cc:2b:47:01:fa:47:78:b1:92:4b: 52:a3:61:9b:5e:09:ee:01:7d:d8:31:2d:0f:7e:3b: e9:b8:d2:ff:bd:c0:32:a5:e6:a9:85:c3:e3:a6:ed: ac:e6:fb:a1:6c:9a:9b:c1:fc:a2:db:9a:3a:c5:d9: 6e:35:7d:3e:45:03:d6:9c:10:80:c6:50:ff:b1:85: 81:1d:a7:33:3e:44:49:07:0a:8c:a3:5c:e9:e8:19: e6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DE:34:2E:87:26:8A:2F:7C:3F:7F:0A:4A:A7:B5:E9:B0:B0:16:F8 X509v3 Authority Key Identifier: keyid:E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:e3:62:4c:b8:17:cf:00:02:48:73:cf:0b:50:86:64:6c:cc: 9e:a0:9c:da:ac:60:f9:a0:34:c9:03:c5:11:de:fe:78:b9:11: 50:5d:80:46:86:26:0c:70:15:22:67:1b:0f:f0:b5:59:df:18: 72:f4:7e:36:17:85:c4:e2:26:b5:98:4d:79:0d:32:c7:d4:b4: fb:2b:8b:9a:65:64:08:2e:cf:ec:be:b8:b0:57:70:30:8d:fb: a3:85:b8:be:69:64:8c:3d:fe:b4:e8:1d:f7:07:2c:b2:40:f8: f7:41:1a:59:a4:9d:ea:9c:27:5d:f2:46:e0:f0:3b:61:78:8d: 97:f5:03:fb:9e:2c:8c:ac:4f:41:95:22:33:12:5d:08:05:6c: e0:68:cb:4b:c8:52:1b:37:3b:32:7d:25:fc:1a:99:c7:1f:8a: cd:3c:5c:9c:f5:d2:50:f6:a4:b0:be:24:09:cf:0d:1e:2c:1b: 7b:8a:ba:1b:85:fb:45:04:9e:23:e3:be:22:0e:54:87:1c:b7: 62:95:96:61:8f:f6:ea:1f:62:ae:bd:95:9a:7b:21:94:1d:b9: 89:a3:1a:9f:fa:1d:8e:c2:1a:37:60:4e:13:f6:0e:c5:a0:5c: 15:41:b6:bc:cf:a4:ad:3f:9b:79:5f:2e:43:45:10:37:d8:f1: 3e:50:99:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlCNjExMTAvBgNVBAUTKEUzRTEwMEY4MDQwMTNBMDVGOTIyRUUxMUNCNEUwQUJF QTZDMjJCOTgwHhcNMjYwNDE3MDI0ODUwWhcNMjYwNDI0MDI0ODUwWjAYMRYwFAYD VQQDEw02OWUxOWY5Mi03YTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OPOvx2S2mQ5wSFtK8zSkk5SDPNE65ud4jk2f3bl4LbeEFCRg4BEwb0ZAUDV vc1SX8UQEP6I1RdBJMduskAjRjsdKOSWwA9254PgE91OzpI/tTOmm7PyT2xSUJJL bdIG6hyU6AdfzMyMeFDgKoZcbv2aOR5zpcefnJNq9R4wiz557ltYMuIJ35DSOTOa vrOkBIS2uu9rqWIVMdJccNfFKIIzZmTeBEHqyswrRwH6R3ixkktSo2GbXgnuAX3Y MS0PfjvpuNL/vcAypeaphcPjpu2s5vuhbJqbwfyi25o6xdluNX0+RQPWnBCAxlD/ sYWBHaczPkRJBwqMo1zp6BnmIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKneNC6H JoovfD9/CkqntemwsBb4MB8GA1UdIwQYMBaAFOPhAPgEAToF+SLuEctOCr6mwiuY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUI2MS83NjE2RDRGQzJB Q0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9nWDVJdTRSeTA0S3ZxYkNL NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtRUEtQVFCT2dYNUl1NFJ5MDRLdnFiQ0s1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUI2MS83NjE2RDRGQzJBQ0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9n WDVJdTRSeTA0S3ZxYkNLNWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApONiTLgXzwACSHPPC1CGZGzMnqCc2qxg+aA0yQPFEd7+eLkRUF2ARoYmDHAV ImcbD/C1Wd8YcvR+NheFxOImtZhNeQ0yx9S0+yuLmmVkCC7P7L64sFdwMI37o4W4 vmlkjD3+tOgd9wcsskD490EaWaSd6pwnXfJG4PA7YXiNl/UD+54sjKxPQZUiMxJd CAVs4GjLS8hSGzc7Mn0l/BqZxx+KzTxcnPXSUPaksL4kCc8NHiwbe4q6G4X7RQSe I+O+Ig5Uhxy3YpWWYY/26h9irr2VmnshlB25iaMan/odjsIaN2BOE/YOxaBcFUG2 vM+krT+beV8uQ0UQN9jxPlCZMw== -----END CERTIFICATE-----Generated at Fri Apr 17 14:24:17 2026 by rpki-client