$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft File: gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft (raw, json) Hash identifier: cmrYYxZB1Y22vZa+hnsaMC7eBdWKH+199/Cq4f58l/k= Subject key identifier: 7C:A2:A1:BC:DA:72:54:EE:36:96:01:71:BD:ED:0B:00:07:C4:D6:4E Authority key identifier: 81:2F:F0:DE:1C:34:41:46:3C:C9:5C:A8:84:23:BE:5A:10:AD:B1:74 Certificate issuer: /CN=A914E4E2/serialNumber=812FF0DE1C3441463CC95CA88423BE5A10ADB174 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft Manifest number: 38 Signing time: Wed 25 Mar 2026 07:47:40 +0000 Manifest this update: Wed 25 Mar 2026 07:47:39 +0000 Manifest next update: Wed 01 Apr 2026 07:47:39 +0000 Files and hashes: 1: gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl (hash: 43Kax5bL0JCfJ3FKiZ3e4C8nQPrDTbIbqwqRk+l2QRw=) 2: 6F81A4F8E64811F09CAB54BE376F56BC.roa (hash: kTGqoANe0FuZnU39X94Ie/hbapSgOp3eh2oaDxbXHwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E4E2, serialNumber=812FF0DE1C3441463CC95CA88423BE5A10ADB174 Validity Not Before: Mar 25 07:47:39 2026 GMT Not After : Apr 1 07:47:39 2026 GMT Subject: CN=69c3931c-4bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cb:16:86:b3:e6:b9:38:6e:fa:8c:e0:37:04: a0:14:62:c6:89:ee:bd:90:b1:a2:ef:8c:6f:2a:a6: 07:1a:03:12:db:19:b6:0b:eb:b2:00:14:a4:a3:1a: b1:3d:29:a0:35:85:6b:df:08:8a:58:a6:4a:60:29: 89:52:c6:54:4b:f6:79:7b:42:dd:81:94:d3:fc:15: 11:94:bb:14:42:f1:18:c6:44:78:5c:17:1e:d7:df: d6:f2:e2:1c:92:fb:7f:1f:9e:26:c7:93:20:79:63: f6:e8:43:67:3e:e5:bd:8f:85:8a:47:53:35:aa:a0: ed:d2:13:97:52:ae:6c:d8:f3:2e:72:04:3e:f4:96: f5:26:02:99:a7:e3:4f:08:74:b6:99:6d:7f:b9:fb: 62:bf:0f:3f:f5:17:fc:1d:36:8b:3b:25:cb:76:21: df:65:0f:6d:81:3f:be:3c:77:70:b3:d3:ea:70:87: 80:f9:4a:c9:b3:0c:f2:ac:ad:c8:4d:97:e4:18:4b: 15:47:c7:18:a3:70:3c:aa:49:d0:7d:f8:8b:19:80: c3:e3:7c:7c:fe:06:a0:5a:0e:c4:15:b1:8d:24:5e: ba:34:31:40:da:93:a3:c4:f9:73:b9:57:72:3e:c1: 36:d8:9c:42:f3:ab:7d:c2:38:40:8b:92:c9:0d:d8: ed:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A2:A1:BC:DA:72:54:EE:36:96:01:71:BD:ED:0B:00:07:C4:D6:4E X509v3 Authority Key Identifier: keyid:81:2F:F0:DE:1C:34:41:46:3C:C9:5C:A8:84:23:BE:5A:10:AD:B1:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:f0:6e:8f:70:21:12:24:89:b7:11:3a:7c:34:b0:08:f6:b3: b0:e0:47:be:ff:25:8e:52:07:a3:c8:a2:ed:ff:56:8a:59:f4: 31:78:b5:df:62:55:42:23:b6:71:6c:6e:2e:37:0b:55:ea:4f: 87:cc:93:ae:e6:98:ec:41:e2:f5:50:29:78:c8:9c:72:d5:83: f7:37:63:9e:9d:1a:b9:ec:4a:25:10:51:c4:97:70:64:74:62: 8f:be:7f:1a:77:49:7b:14:d0:7a:aa:0e:fd:29:ed:02:9a:c1: 90:48:f4:33:0f:8c:32:d6:e8:85:4f:06:87:f1:5f:03:c0:25: 6e:de:89:ae:6c:fd:c4:38:18:07:10:2a:d5:ea:a7:d3:d1:17: c4:60:65:6f:65:f9:9e:d1:7b:9d:f8:5d:66:41:9b:64:21:f9: 35:ac:88:ad:7f:df:7b:25:82:2c:6d:11:53:79:a9:c3:a4:ef: b9:ac:26:9a:30:73:c4:78:d5:f3:b1:2c:f8:62:4a:5e:28:a2: 20:7d:8d:62:59:e9:a1:05:c4:4e:e2:2b:ef:a8:89:da:35:31: 30:3f:19:30:61:7c:fd:bd:b2:7d:a5:71:d8:a4:9f:c6:d8:b4: 7d:19:e4:8b:1e:38:79:12:f3:ad:e1:a5:39:b0:c7:66:67:fd: 68:3b:f2:38 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTRFMjExMC8GA1UEBRMoODEyRkYwREUxQzM0NDE0NjNDQzk1Q0E4ODQyM0JFNUEx MEFEQjE3NDAeFw0yNjAzMjUwNzQ3MzlaFw0yNjA0MDEwNzQ3MzlaMBgxFjAUBgNV BAMTDTY5YzM5MzFjLTRiZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWyxaGs+a5OG76jOA3BKAUYsaJ7r2QsaLvjG8qpgcaAxLbGbYL67IAFKSjGrE9 KaA1hWvfCIpYpkpgKYlSxlRL9nl7Qt2BlNP8FRGUuxRC8RjGRHhcFx7X39by4hyS +38fnibHkyB5Y/boQ2c+5b2PhYpHUzWqoO3SE5dSrmzY8y5yBD70lvUmApmn408I dLaZbX+5+2K/Dz/1F/wdNos7Jct2Id9lD22BP748d3Cz0+pwh4D5SsmzDPKsrchN l+QYSxVHxxijcDyqSdB9+IsZgMPjfHz+BqBaDsQVsY0kXro0MUDak6PE+XO5V3I+ wTbYnELzq33COECLkskN2O2dAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfKKhvNpy VO42lgFxve0LAAfE1k4wHwYDVR0jBBgwFoAUgS/w3hw0QUY8yVyohCO+WhCtsXQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFNEUyLzQxQ0U5REVFREFG QTExRjA5QUY2MTYyMDdDRDM2NDFEL2dTX3czaHcwUVVZOHlWeW9oQ08tV2hDdHNY US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ1NfdzNodzBRVVk4eVZ5b2hDTy1XaEN0c1hRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF NEUyLzQxQ0U5REVFREFGQTExRjA5QUY2MTYyMDdDRDM2NDFEL2dTX3czaHcwUVVZ OHlWeW9oQ08tV2hDdHNYUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAW8G6PcCESJIm3ETp8NLAI9rOw4Ee+/yWOUgejyKLt/1aKWfQxeLXfYlVCI7Zx bG4uNwtV6k+HzJOu5pjsQeL1UCl4yJxy1YP3N2OenRq57EolEFHEl3BkdGKPvn8a d0l7FNB6qg79Ke0CmsGQSPQzD4wy1uiFTwaH8V8DwCVu3omubP3EOBgHECrV6qfT 0RfEYGVvZfme0Xud+F1mQZtkIfk1rIitf997JYIsbRFTeanDpO+5rCaaMHPEeNXz sSz4YkpeKKIgfY1iWemhBcRO4ivvqInaNTEwPxkwYXz9vbJ9pXHYpJ/G2LR9GeSL Hjh5EvOt4aU5sMdmZ/1oO/I4 -----END CERTIFICATE-----Generated at Fri Mar 27 00:53:56 2026 by rpki-client