$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft File: 4cWfpaa8h2985KRsqq5gYE8FGGY.mft (raw, json) Hash identifier: eQlHxhp6cETkWsKKFb3NzzAkwJtNEoc8zm7+3y1NEUk= Subject key identifier: 92:25:92:59:DB:F3:A4:3D:12:DB:25:6C:35:9F:C3:56:25:9F:F8:8C Authority key identifier: E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 Certificate issuer: /CN=A91FEDE7/serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft Manifest number: 2B Signing time: Sun 01 Mar 2026 10:11:21 +0000 Manifest this update: Sun 01 Mar 2026 10:11:20 +0000 Manifest next update: Sun 08 Mar 2026 10:11:20 +0000 Files and hashes: 1: 4cWfpaa8h2985KRsqq5gYE8FGGY.crl (hash: nVBS6egeqlfJKfgmFHRamTULWNEBLXivMStMT3GZspU=) 2: 63C2AF74D99E11F0A31734B566D3641D.roa (hash: XqsHjVz2/3IOIuZJsTXT+P8IFg2LCZpsTf20ES1Rkms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEDE7, serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866 Validity Not Before: Mar 1 10:11:20 2026 GMT Not After : Mar 8 10:11:20 2026 GMT Subject: CN=69a410c9-84eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:53:11:c8:56:a3:be:8f:46:25:dc:c1:a2:e1: 44:74:37:e7:a4:b3:c5:5d:79:db:8b:4e:aa:bf:59: 49:c2:b4:59:5b:6a:84:46:c2:7b:a4:54:39:4d:c5: 7a:d4:5e:3b:cb:37:30:ed:ca:f2:95:8e:fc:de:c9: eb:dc:da:77:38:99:74:24:01:02:02:63:55:31:42: a3:f4:09:54:2e:4f:1d:61:94:a5:a2:a0:a0:17:05: 40:7a:78:60:5c:06:76:bb:54:3d:16:9a:48:3c:2b: ef:96:6d:d8:5b:17:29:44:d5:f8:db:e0:39:ae:ec: f8:1e:74:bd:c0:29:99:e8:82:2e:5a:2a:ca:f5:15: f7:9b:f0:0c:70:09:3f:3f:8d:ea:44:52:8b:31:b4: e9:02:99:cd:b9:e7:12:b1:71:70:50:57:9a:b8:9c: 4c:cf:72:7a:a0:c3:b3:0b:bd:e7:bc:62:51:69:8c: b5:e0:2a:02:35:6b:10:34:b6:16:aa:04:67:92:66: fa:ea:0c:4f:c8:a9:cc:a5:f0:62:45:ae:c2:c7:8a: c9:19:66:4d:b5:c0:e6:c0:ec:83:19:ad:eb:b8:08: bf:ec:f9:e8:77:af:85:d4:29:76:9a:96:56:f7:b3: f0:2f:33:34:0b:9f:e5:67:8f:c0:c2:ab:e8:c8:dc: 63:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:25:92:59:DB:F3:A4:3D:12:DB:25:6C:35:9F:C3:56:25:9F:F8:8C X509v3 Authority Key Identifier: keyid:E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:0b:7c:de:74:37:56:c5:d6:fe:1d:02:13:09:ec:77:80:84: 5a:7a:a9:0b:84:5a:31:a3:25:88:41:8c:b3:7a:b8:6b:0f:24: 48:02:b6:db:3b:e2:84:51:b2:f7:3c:e9:6a:d0:39:cf:9e:35: 7b:16:d9:10:d2:3f:20:c3:37:8e:f6:58:37:cd:a3:92:d9:22: 1c:55:20:0b:99:63:0a:00:03:74:73:4e:5e:0f:36:aa:70:d2: 7b:be:88:82:2a:4c:7a:6c:67:29:ea:0e:7a:84:d0:81:71:96: 9f:0f:87:24:db:f6:9d:7e:07:db:70:93:74:5c:0b:ca:68:e7: 41:a2:39:0e:59:51:fe:99:e6:c7:9b:1a:73:a5:97:47:ba:8a: f8:82:34:2a:5a:90:3d:d0:b9:63:f2:d8:6b:ef:c0:ce:d7:e2: c6:31:0e:4e:13:eb:76:3e:d7:78:71:c6:cf:e9:85:94:32:12: 92:db:d0:35:84:49:35:1d:17:98:22:84:ca:74:8b:38:9d:fd: 29:e8:33:cd:65:17:aa:36:03:0d:2c:4d:d6:e2:5c:33:3e:84: ae:03:1e:37:f3:80:6a:dc:52:a7:74:cb:10:f4:cf:c9:bb:10: a7:04:22:64:dd:36:c9:a9:bf:1c:8a:0d:3b:2c:33:bb:50:02: 73:b7:a1:58 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RURFNzExMC8GA1UEBRMoRTFDNTlGQTVBNkJDODc2RjdDRTRBNDZDQUFBRTYwNjA0 RjA1MTg2NjAeFw0yNjAzMDExMDExMjBaFw0yNjAzMDgxMDExMjBaMBgxFjAUBgNV BAMTDTY5YTQxMGM5LTg0ZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzUxHIVqO+j0Yl3MGi4UR0N+eks8VdeduLTqq/WUnCtFlbaoRGwnukVDlNxXrU XjvLNzDtyvKVjvzeyevc2nc4mXQkAQICY1UxQqP0CVQuTx1hlKWioKAXBUB6eGBc Bna7VD0Wmkg8K++WbdhbFylE1fjb4Dmu7PgedL3AKZnogi5aKsr1Ffeb8AxwCT8/ jepEUosxtOkCmc255xKxcXBQV5q4nEzPcnqgw7MLvee8YlFpjLXgKgI1axA0thaq BGeSZvrqDE/Iqcyl8GJFrsLHiskZZk21wObA7IMZreu4CL/s+eh3r4XUKXaallb3 s/AvMzQLn+Vnj8DCq+jI3GPpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkiWSWdvz pD0S2yVsNZ/DViWf+IwwHwYDVR0jBBgwFoAU4cWfpaa8h2985KRsqq5gYE8FGGYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFREU3L0U3RkQzMDU4RDk5 RDExRjBCQkU3ODM5OTY2RDM2NDFELzRjV2ZwYWE4aDI5ODVLUnNxcTVnWUU4RkdH WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGNXZnBhYThoMjk4NUtSc3FxNWdZRThGR0dZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF REU3L0U3RkQzMDU4RDk5RDExRjBCQkU3ODM5OTY2RDM2NDFELzRjV2ZwYWE4aDI5 ODVLUnNxcTVnWUU4RkdHWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAwC3zedDdWxdb+HQITCex3gIRaeqkLhFoxoyWIQYyzerhrDyRIArbbO+KEUbL3 POlq0DnPnjV7FtkQ0j8gwzeO9lg3zaOS2SIcVSALmWMKAAN0c05eDzaqcNJ7voiC Kkx6bGcp6g56hNCBcZafD4ck2/adfgfbcJN0XAvKaOdBojkOWVH+mebHmxpzpZdH uor4gjQqWpA90Llj8thr78DO1+LGMQ5OE+t2Ptd4ccbP6YWUMhKS29A1hEk1HReY IoTKdIs4nf0p6DPNZReqNgMNLE3W4lwzPoSuAx4384Bq3FKndMsQ9M/JuxCnBCJk 3TbJqb8cig07LDO7UAJzt6FY -----END CERTIFICATE-----Generated at Mon Mar 2 09:22:42 2026 by rpki-client