$ rpki-client -vvf rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft File: 4yZfQR3LsPEXSFI4boF_4njS-Q4.mft (raw, json) Hash identifier: 4nynSKlqRh4TR68LoZeFWnIqpgE49FbKbd7WHj0Hi+w= Subject key identifier: 39:14:0F:39:DD:50:CD:77:C2:A6:54:E6:C4:FC:EA:D6:7C:48:43:D2 Authority key identifier: E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E Certificate issuer: /CN=A91598B1/serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft Manifest number: 3A Signing time: Sun 01 Mar 2026 09:59:13 +0000 Manifest this update: Sun 01 Mar 2026 09:59:13 +0000 Manifest next update: Sun 08 Mar 2026 09:59:13 +0000 Files and hashes: 1: 4yZfQR3LsPEXSFI4boF_4njS-Q4.crl (hash: k5hnHm38fk+u5cz8NbuPy873i1QQyglo6hWI9BcOV1E=) 2: DE80A48EC7EF11F0A991652AC4F9AE02.roa (hash: H7kSN8+Xlu4BXj6sGCock6IRGM49q5itOkR0aztzbHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91598B1, serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E Validity Not Before: Mar 1 09:59:13 2026 GMT Not After : Mar 8 09:59:13 2026 GMT Subject: CN=69a40df1-9af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b5:0b:77:cd:84:e7:35:f8:c0:b3:f0:66:89: 20:3f:45:73:32:0d:7f:e8:34:ac:27:52:06:05:80: 39:ca:97:3f:93:44:8a:5c:ab:f6:7f:fc:5c:bd:ef: 27:16:4d:8f:f5:b2:49:13:6d:f7:27:19:2a:51:8b: d0:53:0d:78:4d:27:2d:82:f8:68:c2:d0:97:ba:68: d4:57:64:e0:58:71:0e:fa:05:13:98:94:47:80:ba: 4c:11:ec:de:7f:99:80:dd:bf:8e:54:20:2e:2b:c5: 11:88:cc:61:e5:ea:88:b8:ac:ab:44:1b:de:fa:d4: 18:d3:57:af:52:14:bd:48:94:c0:97:e5:97:b6:fc: 31:ed:27:2e:4f:a7:8e:95:ec:01:11:b6:f8:7f:8e: ee:47:08:44:5f:73:dd:b4:3b:d8:56:f2:86:e2:0d: e6:0e:30:b8:c4:51:63:10:21:42:1c:ea:b0:16:a5: ca:82:2c:f8:d2:cc:76:5d:ba:98:d5:b0:7c:38:b5: 4a:45:a7:a5:67:67:95:46:65:ff:fb:72:fd:0f:f5: 67:f6:56:0d:ab:d3:71:6e:ca:74:02:40:63:4c:84: 6a:e8:56:29:14:57:39:cc:a1:a4:03:ee:ac:d2:40: 31:52:c9:a5:d1:3e:bf:63:a0:2d:15:e0:d9:5c:88: d5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:14:0F:39:DD:50:CD:77:C2:A6:54:E6:C4:FC:EA:D6:7C:48:43:D2 X509v3 Authority Key Identifier: keyid:E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d0:8c:db:25:7b:8b:72:bc:da:fc:e6:ac:d4:89:0b:f5:28: 7b:cf:bc:b0:63:0f:6e:d9:f1:5d:0e:9a:c9:cf:37:e2:80:dc: 0e:3e:ad:fa:c8:e9:df:a2:f3:2d:d7:65:f8:70:a1:b7:1f:35: 41:fb:b5:3d:08:d1:52:7e:72:b8:af:bc:32:05:cc:c3:f9:df: 96:2a:f3:63:73:06:30:e2:70:1c:0f:60:a2:f6:12:12:7e:3e: c6:ee:ed:e6:e4:b1:9f:63:b9:8c:ae:92:69:6a:62:7b:27:34: 46:a8:e1:77:f8:c5:87:72:2e:16:a5:8b:c7:c6:16:29:63:e7: 58:5d:ae:26:47:52:58:f1:53:4a:46:de:c9:50:a7:43:33:2c: 42:4f:bb:cc:31:fc:46:51:e2:04:cd:62:42:07:1d:99:83:49: a2:00:91:85:97:ba:72:dd:e6:ca:86:29:90:9f:18:68:af:fe: ca:50:af:25:1a:79:ce:02:35:a4:72:32:bf:06:5a:39:35:03: 44:b6:28:e7:a2:84:fb:6d:15:2c:8e:d4:f4:74:35:57:85:c8: 19:1f:53:db:51:76:50:7b:ca:71:f2:10:ca:c8:42:b7:6b:ab: 59:57:93:24:81:52:9f:6e:e1:29:ee:17:3d:53:4f:52:06:74: a8:4c:8e:26 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OThCMTExMC8GA1UEBRMoRTMyNjVGNDExRENCQjBGMTE3NDg1MjM4NkU4MTdGRTI3 OEQyRjkwRTAeFw0yNjAzMDEwOTU5MTNaFw0yNjAzMDgwOTU5MTNaMBgxFjAUBgNV BAMTDTY5YTQwZGYxLTlhZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHtQt3zYTnNfjAs/BmiSA/RXMyDX/oNKwnUgYFgDnKlz+TRIpcq/Z//Fy97ycW TY/1skkTbfcnGSpRi9BTDXhNJy2C+GjC0Je6aNRXZOBYcQ76BROYlEeAukwR7N5/ mYDdv45UIC4rxRGIzGHl6oi4rKtEG9761BjTV69SFL1IlMCX5Ze2/DHtJy5Pp46V 7AERtvh/ju5HCERfc920O9hW8obiDeYOMLjEUWMQIUIc6rAWpcqCLPjSzHZdupjV sHw4tUpFp6VnZ5VGZf/7cv0P9Wf2Vg2r03FuynQCQGNMhGroVikUVznMoaQD7qzS QDFSyaXRPr9joC0V4NlciNXxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUORQPOd1Q zXfCplTmxPzq1nxIQ9IwHwYDVR0jBBgwFoAU4yZfQR3LsPEXSFI4boF/4njS+Q4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5OEIxLzcyMDI3NkIwQzY2 NTExRjA5QTkwM0UzN0M0RjlBRTAyLzR5WmZRUjNMc1BFWFNGSTRib0ZfNG5qUy1R NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNHlaZlFSM0xzUEVYU0ZJNGJvRl80bmpTLVE0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 OEIxLzcyMDI3NkIwQzY2NTExRjA5QTkwM0UzN0M0RjlBRTAyLzR5WmZRUjNMc1BF WFNGSTRib0ZfNG5qUy1RNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAc0IzbJXuLcrza/Oas1IkL9Sh7z7ywYw9u2fFdDprJzzfigNwOPq36yOnfovMt 12X4cKG3HzVB+7U9CNFSfnK4r7wyBczD+d+WKvNjcwYw4nAcD2Ci9hISfj7G7u3m 5LGfY7mMrpJpamJ7JzRGqOF3+MWHci4WpYvHxhYpY+dYXa4mR1JY8VNKRt7JUKdD MyxCT7vMMfxGUeIEzWJCBx2Zg0miAJGFl7py3ebKhimQnxhor/7KUK8lGnnOAjWk cjK/Blo5NQNEtijnooT7bRUsjtT0dDVXhcgZH1PbUXZQe8px8hDKyEK3a6tZV5Mk gVKfbuEp7hc9U09SBnSoTI4m -----END CERTIFICATE-----Generated at Sun Mar 1 23:16:59 2026 by rpki-client