$ rpki-client -vvf rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft File: 4W5PZeLjl-n84FeFomXGGXyCIMk.mft (raw, json) Hash identifier: HvV4B4RtyKfCYzsYrkWnsqKb3gKzwgiBySEdNi/gQ4U= Subject key identifier: C1:E2:04:F6:97:B9:77:75:76:C1:C0:66:A4:56:0D:C8:FC:DB:34:F4 Authority key identifier: E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9 Certificate issuer: /CN=A916DED9/serialNumber=E16E4F65E2E397E9FCE05785A265C6197C8220C9 Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft Manifest number: 01AD Signing time: Mon 02 Mar 2026 00:56:43 +0000 Manifest this update: Mon 02 Mar 2026 00:56:41 +0000 Manifest next update: Mon 09 Mar 2026 00:56:41 +0000 Files and hashes: 1: 4W5PZeLjl-n84FeFomXGGXyCIMk.crl (hash: e/b3dZzbqMSmGml4moTYta1UMIjOTFuV5PPtmudk06c=) 2: 880E53BC852A11EE8B988A85C4F9AE02.roa (hash: k5DYksJixKDhcJPFopcX+J9k9P/tVTzxnGH1/taUbzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.crl rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DED9, serialNumber=E16E4F65E2E397E9FCE05785A265C6197C8220C9 Validity Not Before: Mar 2 00:56:41 2026 GMT Not After : Mar 9 00:56:41 2026 GMT Subject: CN=69a4e04a-17f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e1:ad:c1:c8:64:d3:2b:58:79:70:25:6f:6e: b1:eb:00:de:9f:6c:63:26:44:67:c7:be:19:a9:fe: 01:32:b4:28:b7:83:af:1f:43:00:bf:52:0b:03:6c: 54:47:66:f1:c8:47:fa:1e:4a:ae:4a:e1:81:b0:69: d9:2c:2c:30:6d:bf:31:2a:2e:07:f7:92:70:34:ca: 7e:23:ba:95:47:a5:ec:c4:a0:ff:f5:be:95:87:fe: b9:cd:48:e3:8b:ab:c0:99:0a:9d:37:43:f2:e6:d3: 03:80:38:73:b8:eb:ea:2c:a8:bb:57:aa:6e:2c:ae: 69:7d:e5:79:51:5d:65:a4:14:c6:ff:b9:d2:90:ea: 40:ca:99:27:3a:b7:1d:9e:39:e1:7c:bf:db:2f:f4: d5:ba:59:ff:80:88:64:b7:35:4f:a1:9d:38:e2:4c: bc:94:47:29:62:98:96:3e:28:7c:30:0f:11:19:88: 64:ad:23:43:11:f6:4c:bd:4b:41:15:98:18:43:12: 11:38:bc:5c:bc:17:19:2d:79:a1:9b:e6:6a:24:65: f6:83:09:ca:65:cc:ea:37:da:83:98:e6:de:0d:8e: 22:54:a7:81:2a:b9:00:e8:11:b5:67:86:11:e4:9c: 64:c0:1e:23:88:b4:fe:48:f3:0b:90:cc:ca:9c:d3: f6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E2:04:F6:97:B9:77:75:76:C1:C0:66:A4:56:0D:C8:FC:DB:34:F4 X509v3 Authority Key Identifier: keyid:E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:c9:62:1b:e1:c5:52:c3:30:b9:63:fb:10:f3:43:2a:15:9b: 19:13:10:2f:6a:4e:b9:1c:7b:f9:da:85:8f:c3:de:fb:79:2f: f0:42:5f:72:99:10:8f:c1:67:cd:d5:9c:10:55:68:53:98:32: 85:f0:c4:61:25:32:60:32:cb:98:d5:73:3e:cb:28:58:5b:88: d0:18:bc:62:0e:1b:ab:83:25:38:3f:02:db:a4:f5:95:f7:68: 6e:6a:13:fb:c6:d3:5d:5a:d6:8c:5f:11:6d:79:67:3f:57:a9: 56:8f:40:30:f1:31:ff:6d:cc:e2:53:8d:7a:e3:41:71:79:5a: fc:73:39:61:9a:d3:e0:2b:bc:64:5d:68:b0:dd:fb:2a:f4:97: 8b:28:ba:fe:e9:72:c2:6a:58:31:c6:b4:01:b5:27:bd:79:5f: d9:ad:34:30:ed:fb:ee:76:99:f3:a1:31:eb:84:1e:d7:8c:89: d3:c8:3d:63:b6:f4:12:f5:2b:a8:ee:64:4a:df:ad:26:7a:1c: 43:f7:e4:16:21:90:28:95:9a:d8:be:2f:2c:f2:4b:02:39:7a: b5:cb:62:85:0f:dd:98:f4:0a:64:95:f6:fe:5b:e8:f0:b9:20: 5e:d7:ea:38:1d:b6:b9:4e:cb:7b:76:2d:73:01:24:b7:27:52: 08:4b:a9:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRFRDkxMTAvBgNVBAUTKEUxNkU0RjY1RTJFMzk3RTlGQ0UwNTc4NUEyNjVDNjE5 N0M4MjIwQzkwHhcNMjYwMzAyMDA1NjQxWhcNMjYwMzA5MDA1NjQxWjAYMRYwFAYD VQQDEw02OWE0ZTA0YS0xN2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquGtwchk0ytYeXAlb26x6wDen2xjJkRnx74Zqf4BMrQot4OvH0MAv1ILA2xU R2bxyEf6HkquSuGBsGnZLCwwbb8xKi4H95JwNMp+I7qVR6XsxKD/9b6Vh/65zUjj i6vAmQqdN0Py5tMDgDhzuOvqLKi7V6puLK5pfeV5UV1lpBTG/7nSkOpAypknOrcd njnhfL/bL/TVuln/gIhktzVPoZ044ky8lEcpYpiWPih8MA8RGYhkrSNDEfZMvUtB FZgYQxIROLxcvBcZLXmhm+ZqJGX2gwnKZczqN9qDmObeDY4iVKeBKrkA6BG1Z4YR 5JxkwB4jiLT+SPMLkMzKnNP2IwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMHiBPaX uXd1dsHAZqRWDcj82zT0MB8GA1UdIwQYMBaAFOFuT2Xi45fp/OBXhaJlxhl8giDJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REVEOS9ERjE1QjNCODg1 MjkxMUVFQUZEMDRDODRDNEY5QUUwMi80VzVQWmVMamwtbjg0RmVGb21YR0dYeUNJ TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRXNVBaZUxqbC1uODRGZUZvbVhHR1h5Q0lNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REVEOS9ERjE1QjNCODg1MjkxMUVFQUZEMDRDODRDNEY5QUUwMi80VzVQWmVMamwt bjg0RmVGb21YR0dYeUNJTWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlMliG+HFUsMwuWP7EPNDKhWbGRMQL2pOuRx7+dqFj8Pe+3kv8EJfcpkQj8Fn zdWcEFVoU5gyhfDEYSUyYDLLmNVzPssoWFuI0Bi8Yg4bq4MlOD8C26T1lfdobmoT +8bTXVrWjF8RbXlnP1epVo9AMPEx/23M4lONeuNBcXla/HM5YZrT4Cu8ZF1osN37 KvSXiyi6/ulywmpYMca0AbUnvXlf2a00MO377naZ86Ex64Qe14yJ08g9Y7b0EvUr qO5kSt+tJnocQ/fkFiGQKJWa2L4vLPJLAjl6tctihQ/dmPQKZJX2/lvo8LkgXtfq OB22uU7Le3YtcwEktydSCEupWQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:04:53 2026 by rpki-client