$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft File: 4QiBh_ZAlCY92mdJqV9zqmwasGM.mft (raw, json) Hash identifier: 0cBJwsW5VghPjCHx6Eb4tzb4rhV9GGdczll6QpUuC70= Subject key identifier: 20:BB:93:EB:C0:64:AA:76:45:42:F5:49:32:0A:F2:0A:B2:3B:BB:62 Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Certificate serial: 0379 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft Manifest number: 031A Signing time: Mon 02 Mar 2026 01:50:05 +0000 Manifest this update: Mon 02 Mar 2026 01:50:03 +0000 Manifest next update: Mon 09 Mar 2026 01:50:03 +0000 Files and hashes: 1: 4QiBh_ZAlCY92mdJqV9zqmwasGM.crl (hash: JMc1QxEcXwaeAoA1Ha+g+zeh9fqrqkCTGQb1Bcvleds=) 2: 3632957E441311EE8A03A472C4F9AE02.roa (hash: q3R3Z5X1T0mDLlNf77Yk218o6FRRLXNDRBGSb64nfwk=) 3: 9DC49A2449A011EEB3DFDD0DC4F9AE02.roa (hash: p+UeUBZLNfVcILDbG/Vs8m+8CX7E6t087ZJ3Y/QwrEU=) 4: 4C7C3EA8E8F511EDBC11CF6BC4F9AE02.roa (hash: COioLyJbu/e3uvbQV1n9vX+vGsHQAYO7b3Wq65xjUiQ=) 5: CCEE4F76CAC711EF80553A61C4F9AE02.roa (hash: 9XttczLV35TbIsRyxnvkVV1SwDtBMDtmmz0jP57anGE=) 6: 780136B63D1211EEBB0A0C5AC4F9AE02.roa (hash: qOVfuxOcXEGczrElgsifoGyg+2yvfE+iAiy9HUM2oaw=) 7: CC647BDECAC711EF80553A61C4F9AE02.roa (hash: pGv8bqgouza+9ls1Jv6sS5DZecPeFnJlFfkF4At2/Jc=) 8: 3D34A750A88111ED80831318C4F9AE02.roa (hash: 938kJULjUWq7ERdmvvEpfAsKR6ZtJFQcMkUCxB9CQdI=) 9: 78BC7D28A87E11ED9AE70779C4F9AE02.roa (hash: nzhO6pn9Jq+NWD376kohlETBIxuo3LM08XYnXIpmi24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 889 (0x379) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Validity Not Before: Mar 2 01:50:03 2026 GMT Not After : Mar 9 01:50:03 2026 GMT Subject: CN=69a4eccc-610c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ad:c1:eb:a8:ae:20:ca:22:d8:96:56:f0:fa: 93:50:a6:d6:14:f6:fe:b1:44:b4:45:33:d7:b8:75: 7f:0c:18:6e:6d:bf:e2:c2:c4:a1:97:3b:30:54:c9: 0f:3c:40:ff:30:34:95:ed:06:ec:92:13:7f:28:cb: 97:2d:ea:fb:8a:58:29:04:da:84:c1:94:d2:ab:1f: b8:40:df:d6:9e:d6:98:93:c9:90:c8:1b:d6:39:af: 5e:db:ba:49:54:ae:9e:3c:4f:d6:28:19:ce:52:55: 5a:17:5b:11:ec:37:f4:c5:9b:a3:ee:f0:3b:20:01: ab:c3:74:75:bd:b5:35:2f:fd:e0:5f:79:a5:06:f7: c5:41:e1:37:a9:35:ed:51:a2:b0:53:16:de:08:91: 82:e6:67:6c:d8:56:94:07:0e:fe:09:a8:d3:2d:6f: 50:39:6e:0a:b4:bd:3b:e9:9f:cb:5d:67:83:88:21: 1f:f6:8b:b9:48:8e:0a:de:f3:a0:ba:a6:26:4c:d4: 70:d3:27:e8:3e:23:45:57:07:39:99:77:c0:e5:27: c3:80:1c:f6:7b:fc:3c:05:87:30:ca:66:69:b5:ac: f6:9d:92:a4:c9:57:6a:aa:e0:9d:d7:44:24:2b:8d: ef:77:f8:59:07:48:6b:91:2a:b6:b1:11:b7:09:71: 36:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BB:93:EB:C0:64:AA:76:45:42:F5:49:32:0A:F2:0A:B2:3B:BB:62 X509v3 Authority Key Identifier: keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ac:a7:29:70:22:b2:ed:83:51:b8:ba:11:47:a7:64:2f:a4: 50:6b:f5:1e:5d:1c:22:c1:dc:3a:fb:4e:a3:84:b0:3f:bd:b3: 96:50:93:7d:96:34:52:85:0d:63:a6:ab:a8:3a:cd:63:f9:98: 01:9d:d0:2f:f6:e2:24:79:09:34:26:c0:7a:b2:43:18:4c:50: dd:90:88:32:00:dc:a1:46:4e:f9:a4:d3:52:55:ba:ff:ad:b8: 20:0f:46:92:5b:43:8d:66:5e:58:63:36:fc:61:d5:5d:0f:eb: 06:4b:22:ec:f9:0a:b9:42:77:2a:07:82:3b:c7:20:e6:7e:81: 30:48:96:3c:03:ea:a9:01:96:79:ef:f8:f2:86:e6:c6:f7:4a: 61:0d:1e:e1:81:17:26:6d:41:6d:cc:9f:fb:bf:72:e2:e1:89: 42:ab:b0:91:99:46:f5:91:ba:c9:58:ad:a2:8a:8f:47:c5:ad: 07:8a:65:84:c1:53:9e:76:21:e9:02:8d:ec:b3:2e:ca:60:6a: 5f:53:a7:73:58:4b:ba:05:ca:81:90:ae:73:be:1c:4e:54:d4: 33:95:54:7e:5c:2d:b0:3b:d0:49:51:10:6b:34:ca:a1:13:59: 74:18:bf:fe:fc:1b:0f:b7:26:29:3f:ab:b8:67:29:9b:2d:96: fc:a7:27:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB NkMxQUIwNjMwHhcNMjYwMzAyMDE1MDAzWhcNMjYwMzA5MDE1MDAzWjAYMRYwFAYD VQQDEw02OWE0ZWNjYy02MTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzq3B66iuIMoi2JZW8PqTUKbWFPb+sUS0RTPXuHV/DBhubb/iwsShlzswVMkP PED/MDSV7QbskhN/KMuXLer7ilgpBNqEwZTSqx+4QN/WntaYk8mQyBvWOa9e27pJ VK6ePE/WKBnOUlVaF1sR7Df0xZuj7vA7IAGrw3R1vbU1L/3gX3mlBvfFQeE3qTXt UaKwUxbeCJGC5mds2FaUBw7+CajTLW9QOW4KtL076Z/LXWeDiCEf9ou5SI4K3vOg uqYmTNRw0yfoPiNFVwc5mXfA5SfDgBz2e/w8BYcwymZptaz2nZKkyVdqquCd10Qk K43vd/hZB0hrkSq2sRG3CXE2xwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCC7k+vA ZKp2RUL1STIK8gqyO7tiMB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1 MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkFDNS80NzBBNjIwNDE1MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxD WTkybWRKcVY5enFtd2FzR00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjaynKXAisu2DUbi6EUenZC+kUGv1Hl0cIsHcOvtOo4SwP72zllCTfZY0UoUN Y6arqDrNY/mYAZ3QL/biJHkJNCbAerJDGExQ3ZCIMgDcoUZO+aTTUlW6/624IA9G kltDjWZeWGM2/GHVXQ/rBksi7PkKuUJ3KgeCO8cg5n6BMEiWPAPqqQGWee/48obm xvdKYQ0e4YEXJm1Bbcyf+79y4uGJQquwkZlG9ZG6yVitooqPR8WtB4plhMFTnnYh 6QKN7LMuymBqX1Onc1hLugXKgZCuc74cTlTUM5VUflwtsDvQSVEQazTKoRNZdBi/ /vwbD7cmKT+ruGcpmy2W/KcnIQ== -----END CERTIFICATE-----Generated at Mon Mar 2 18:30:30 2026 by rpki-client