$ rpki-client -vvf rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft File: 4NVEW4CxgX9i88ZKqMj21-E64QM.mft (raw, json) Hash identifier: tLUvUt7bV1Jsri6FpRz/zqrM3rK8LWUe7aNrbzvftHU= Subject key identifier: 4F:3C:A3:91:BA:F7:DF:3F:7A:15:20:98:06:26:45:0E:2F:C3:5E:B3 Authority key identifier: E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03 Certificate issuer: /CN=A918E469/serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103 Certificate serial: 0262 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft Manifest number: 0258 Signing time: Fri 17 Apr 2026 01:59:59 +0000 Manifest this update: Fri 17 Apr 2026 01:59:59 +0000 Manifest next update: Fri 24 Apr 2026 01:59:59 +0000 Files and hashes: 1: 4NVEW4CxgX9i88ZKqMj21-E64QM.crl (hash: X/V0uLpL1zNq1xUNZsx2sfUy6U+arCEh7T+4aAYZwPI=) 2: A4D24AE4C8A811F0B2500664C4F9AE02.roa (hash: 5KyYdKKzKKNZJ5o3lIKnEvZm4/+01rm3shU8ePI1af8=) 3: D3CE9058A5AD11ED95DBC66FC4F9AE02.roa (hash: 1d10xZbJawZOgiRoLspusD2wd9i5IKQYkPksSCGbosM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 610 (0x262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E469, serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103 Validity Not Before: Apr 17 01:59:59 2026 GMT Not After : Apr 24 01:59:59 2026 GMT Subject: CN=69e1941f-1bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b1:9c:1c:38:97:39:54:91:13:17:da:67:c4: 0c:2e:8a:bf:f6:8a:2a:fc:a7:f7:86:c9:d1:4d:9e: 91:35:1d:8a:4e:94:e4:fe:9d:b9:43:17:18:4c:ea: 5d:82:a8:82:35:8c:6a:09:06:9d:bc:3d:5f:fc:e8: 55:58:9f:26:05:12:81:60:a7:0c:cf:48:6e:51:40: be:e0:00:26:9a:d9:ae:3f:c7:ed:21:dd:e6:a3:b7: c1:1f:fc:22:df:70:e4:49:04:4b:ac:16:4c:a3:33: bd:43:7c:64:6e:78:9c:07:58:4d:19:99:9d:61:38: 0f:43:97:9e:51:f4:2c:eb:0f:3c:d5:8b:4e:fc:cf: 25:82:06:82:7f:a2:60:7b:9b:be:9e:1c:8f:3b:c9: 72:1b:67:9a:70:56:b0:3e:20:61:cb:fc:a7:86:46: 1f:21:2f:1c:87:f8:5e:61:49:bb:bf:6b:15:ca:e0: 2b:48:b3:30:da:32:98:13:6f:04:20:0f:2a:31:43: 87:cf:0d:25:5c:91:4b:1c:9e:7c:90:15:8d:f2:8e: 1b:bc:40:b9:0f:86:a0:64:11:e6:d2:7d:b8:d3:75: 57:d3:d2:0d:8d:da:72:92:dc:57:0a:51:cc:0b:7e: f1:16:f0:bb:15:e8:ea:bc:65:7f:19:64:d2:8b:19: b9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3C:A3:91:BA:F7:DF:3F:7A:15:20:98:06:26:45:0E:2F:C3:5E:B3 X509v3 Authority Key Identifier: keyid:E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:64:37:b1:c7:7e:ac:09:4e:0e:41:24:e6:d4:7e:0a:72:9d: 16:4f:b2:d2:b0:61:a9:6d:9b:7c:6f:df:0a:7b:06:78:d4:a2: 2c:16:42:2b:22:43:e9:54:85:07:9e:e1:39:0c:0a:19:ca:10: 53:aa:5f:9c:97:0b:b9:a2:d2:be:a6:55:e5:da:ce:3c:2b:c8: 18:60:1e:63:a8:b2:05:d9:d7:a7:14:68:de:5f:bc:85:ce:54: e2:ac:65:55:cb:ae:65:26:c3:69:ec:c8:cd:c7:15:3f:41:04: f7:14:7c:1f:28:4e:79:ba:79:03:19:37:16:8b:1a:5c:a1:0f: 17:f6:45:15:6d:18:2e:6d:61:3f:9b:61:e6:d3:62:9d:d8:1a: 4e:8a:df:29:e8:7e:4a:45:ea:9c:92:bc:65:f8:eb:93:d7:4c: 29:df:31:4e:76:e6:ad:10:ce:e5:14:cf:63:33:7d:8c:27:35: 7b:8c:50:60:71:22:e7:fc:a0:d3:22:54:46:3b:27:7c:b0:d1: 26:e7:2c:07:e4:64:a9:92:f7:b4:0e:12:ad:00:cf:0d:49:82: 29:b9:de:46:f4:73:83:0d:96:f3:4d:7b:57:b2:7d:6e:11:9e: fe:7c:b4:2b:4d:c8:47:b6:43:c9:11:8b:9a:f2:0f:f5:81:8e: 6a:bc:90:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0NjkxMTAvBgNVBAUTKEUwRDU0NDVCODBCMTgxN0Y2MkYzQzY0QUE4QzhGNkQ3 RTEzQUUxMDMwHhcNMjYwNDE3MDE1OTU5WhcNMjYwNDI0MDE1OTU5WjAYMRYwFAYD VQQDEw02OWUxOTQxZi0xYmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LGcHDiXOVSRExfaZ8QMLoq/9ooq/Kf3hsnRTZ6RNR2KTpTk/p25QxcYTOpd gqiCNYxqCQadvD1f/OhVWJ8mBRKBYKcMz0huUUC+4AAmmtmuP8ftId3mo7fBH/wi 33DkSQRLrBZMozO9Q3xkbnicB1hNGZmdYTgPQ5eeUfQs6w881YtO/M8lggaCf6Jg e5u+nhyPO8lyG2eacFawPiBhy/ynhkYfIS8ch/heYUm7v2sVyuArSLMw2jKYE28E IA8qMUOHzw0lXJFLHJ58kBWN8o4bvEC5D4agZBHm0n2403VX09INjdpyktxXClHM C37xFvC7FejqvGV/GWTSixm5XwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE88o5G6 998/ehUgmAYmRQ4vw16zMB8GA1UdIwQYMBaAFODVRFuAsYF/YvPGSqjI9tfhOuED MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTQ2OS9FRkE1NjNDOEE1 QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdYOWk4OFpLcU1qMjEtRTY0 UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzROVkVXNEN4Z1g5aTg4WktxTWoyMS1FNjRRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTQ2OS9FRkE1NjNDOEE1QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdY OWk4OFpLcU1qMjEtRTY0UU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh2Q3scd+rAlODkEk5tR+CnKdFk+y0rBhqW2bfG/fCnsGeNSiLBZCKyJD6VSF B57hOQwKGcoQU6pfnJcLuaLSvqZV5drOPCvIGGAeY6iyBdnXpxRo3l+8hc5U4qxl VcuuZSbDaezIzccVP0EE9xR8HyhOebp5Axk3FosaXKEPF/ZFFW0YLm1hP5th5tNi ndgaTorfKeh+SkXqnJK8Zfjrk9dMKd8xTnbmrRDO5RTPYzN9jCc1e4xQYHEi5/yg 0yJURjsnfLDRJucsB+RkqZL3tA4SrQDPDUmCKbneRvRzgw2W8017V7J9bhGe/ny0 K03IR7ZDyRGLmvIP9YGOaryQsg== -----END CERTIFICATE-----Generated at Fri Apr 17 20:06:47 2026 by rpki-client