$ rpki-client -vvf rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft File: 4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft (raw, json) Hash identifier: Tk9wgGqt314zHUOfKc3lhmoypHfRwJml+qbsQq2rgDE= Subject key identifier: BF:97:A0:63:3B:90:15:C7:D7:28:5D:E6:69:FA:81:F3:55:5E:89:F9 Authority key identifier: E0:24:35:D5:13:49:3C:3D:41:3D:31:ED:1F:8E:0D:CA:30:AE:0C:9E Certificate issuer: /CN=A9190059/serialNumber=E02435D513493C3D413D31ED1F8E0DCA30AE0C9E Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft Manifest number: 33 Signing time: Sun 01 Mar 2026 10:05:11 +0000 Manifest this update: Sun 01 Mar 2026 10:05:11 +0000 Manifest next update: Sun 08 Mar 2026 10:05:11 +0000 Files and hashes: 1: 4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl (hash: rDzAPZgES1TSbJiGrZPm8AQ5AQgSPogC0SUhT5V9KNU=) 2: 0DA28718CE5E11F084703925C4F9AE02.roa (hash: aNAGDtc4oo9p4iSroAq26pCHqmBV0FiomHYHA3EdekQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190059, serialNumber=E02435D513493C3D413D31ED1F8E0DCA30AE0C9E Validity Not Before: Mar 1 10:05:11 2026 GMT Not After : Mar 8 10:05:11 2026 GMT Subject: CN=69a40f57-72a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9b:01:1b:07:30:37:14:2a:bc:07:d7:23:45: 15:67:dd:5b:f6:34:2c:e0:63:95:8b:40:5f:e1:4a: fa:fe:99:62:b7:56:41:fa:a9:c4:28:f0:28:d8:af: 4b:3d:4e:28:6f:1a:47:86:44:3f:7f:ae:a8:71:d0: 75:bc:ae:75:83:95:e7:7a:2b:62:a7:51:5b:55:27: d5:f9:c4:98:aa:82:38:ea:e3:71:9e:31:22:f8:44: 05:31:b1:06:3f:02:f6:f7:43:ab:9d:16:85:57:ef: df:eb:39:92:a2:4f:f6:0d:60:7a:64:de:90:8b:18: 24:76:18:e9:65:0c:ec:16:66:e1:34:fe:b7:96:ea: 5f:7f:fa:95:33:41:fd:12:89:c1:17:f8:8a:a6:42: 22:d7:7e:85:fa:4d:71:b4:b1:f7:e1:d2:2e:2f:28: 93:2b:ff:1a:02:6f:e7:98:f0:44:b7:8f:59:7c:79: 62:02:d4:4d:db:d2:fb:44:cf:cf:5a:48:13:da:17: ff:2c:a9:cf:b3:24:5e:1b:73:1e:1c:b3:08:28:73: 41:62:a3:26:c9:94:18:fa:11:f7:31:6e:8f:0a:57: e5:e2:3b:60:8c:7c:99:b5:00:db:0f:fd:8d:ef:8e: 55:e8:62:fc:55:48:2d:67:43:1d:30:c4:c1:26:b2: 9e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:97:A0:63:3B:90:15:C7:D7:28:5D:E6:69:FA:81:F3:55:5E:89:F9 X509v3 Authority Key Identifier: keyid:E0:24:35:D5:13:49:3C:3D:41:3D:31:ED:1F:8E:0D:CA:30:AE:0C:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:7b:f8:88:49:83:50:2b:6d:c8:c6:80:16:8b:0b:fd:01:32: 17:ad:30:2d:42:fa:7f:f5:82:d5:a9:04:1d:a8:88:4d:f7:01: d1:9f:e6:34:e5:84:9e:fa:39:7f:1c:c0:2f:59:73:ed:99:a4: 7d:41:71:a2:8b:4a:56:53:a5:37:ad:f0:5a:00:7a:ce:ee:32: 17:92:5c:68:e7:f7:e6:2b:80:ff:bf:5a:8e:ea:cb:f0:0f:3a: 67:de:6d:53:53:f5:8c:4e:80:81:ca:8b:54:d7:d0:6a:f5:db: ef:65:c7:7b:8b:43:a9:86:d7:64:7c:7e:df:4b:9d:55:7a:f6: 79:69:67:c6:9e:ef:7b:a4:ed:4e:84:ed:07:07:08:00:37:14: 25:90:a5:77:7f:dd:3c:82:50:0d:9b:0c:dc:f5:83:4c:76:98: 19:a8:51:c1:8b:8f:04:c4:05:c8:e4:03:0d:2d:da:1a:25:b0: f6:43:c4:97:72:fa:b3:32:38:3f:ec:47:e4:58:9c:d4:a2:9a: 04:16:07:05:31:7b:32:6d:57:aa:bd:a0:60:5b:c0:01:73:39: 66:8f:3f:11:b0:41:3b:00:68:0d:ab:85:26:e0:22:0c:8e:a7: 8f:bd:d1:0a:ad:80:47:5f:ed:56:29:7a:cf:d4:01:b9:aa:db: a0:03:4e:c5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDA1OTExMC8GA1UEBRMoRTAyNDM1RDUxMzQ5M0MzRDQxM0QzMUVEMUY4RTBEQ0Ez MEFFMEM5RTAeFw0yNjAzMDExMDA1MTFaFw0yNjAzMDgxMDA1MTFaMBgxFjAUBgNV BAMTDTY5YTQwZjU3LTcyYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmmwEbBzA3FCq8B9cjRRVn3Vv2NCzgY5WLQF/hSvr+mWK3VkH6qcQo8CjYr0s9 TihvGkeGRD9/rqhx0HW8rnWDled6K2KnUVtVJ9X5xJiqgjjq43GeMSL4RAUxsQY/ Avb3Q6udFoVX79/rOZKiT/YNYHpk3pCLGCR2GOllDOwWZuE0/reW6l9/+pUzQf0S icEX+IqmQiLXfoX6TXG0sffh0i4vKJMr/xoCb+eY8ES3j1l8eWIC1E3b0vtEz89a SBPaF/8sqc+zJF4bcx4cswgoc0FioybJlBj6Efcxbo8KV+XiO2CMfJm1ANsP/Y3v jlXoYvxVSC1nQx0wxMEmsp7RAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUv5egYzuQ FcfXKF3mafqB81VeifkwHwYDVR0jBBgwFoAU4CQ11RNJPD1BPTHtH44NyjCuDJ4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwMDU5LzQ3OTk5NDlFQ0U1 RDExRjBBMzM0Q0U3NEM0RjlBRTAyLzRDUTExUk5KUEQxQlBUSHRINDROeWpDdURK NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNENRMTFSTkpQRDFCUFRIdEg0NE55akN1REo0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw MDU5LzQ3OTk5NDlFQ0U1RDExRjBBMzM0Q0U3NEM0RjlBRTAyLzRDUTExUk5KUEQx QlBUSHRINDROeWpDdURKNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBNe/iISYNQK23IxoAWiwv9ATIXrTAtQvp/9YLVqQQdqIhN9wHRn+Y05YSe+jl/ HMAvWXPtmaR9QXGii0pWU6U3rfBaAHrO7jIXklxo5/fmK4D/v1qO6svwDzpn3m1T U/WMToCByotU19Bq9dvvZcd7i0OphtdkfH7fS51VevZ5aWfGnu97pO1OhO0HBwgA NxQlkKV3f908glANmwzc9YNMdpgZqFHBi48ExAXI5AMNLdoaJbD2Q8SXcvqzMjg/ 7EfkWJzUopoEFgcFMXsybVeqvaBgW8ABczlmjz8RsEE7AGgNq4Um4CIMjqePvdEK rYBHX+1WKXrP1AG5qtugA07F -----END CERTIFICATE-----Generated at Sun Mar 1 23:11:46 2026 by rpki-client