$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft File: cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json) Hash identifier: 0yS2P2me0eK9qbUlYkUxbfUpfhVpDAER5T9AVY+P1Wc= Subject key identifier: 37:FC:57:06:7F:94:C1:C0:3F:1F:EA:D5:4F:7A:D3:0A:65:86:38:4E Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 Certificate issuer: /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Certificate serial: 0C49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft Manifest number: 0C32 Signing time: Tue 24 Mar 2026 18:35:49 +0000 Manifest this update: Tue 24 Mar 2026 18:35:49 +0000 Manifest next update: Tue 31 Mar 2026 18:35:49 +0000 Files and hashes: 1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: au1RQXWWlrbw1uCew23kjIQdLTBacpr+lH/iRejHiiM=) 2: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: 6MBuRcB02GtiYUBvJ02SIBDjH2QM+fC5ns7ciouEVr4=) 3: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: OjXelywDvs3PcA0G5eAXOiCmYLOHa7gJb/8woUyNMgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3145 (0xc49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Validity Not Before: Mar 24 18:35:49 2026 GMT Not After : Mar 31 18:35:49 2026 GMT Subject: CN=69c2d985-ed8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f6:6c:ea:19:43:a8:43:5c:f1:37:e7:9e:d0: 07:e2:f3:b1:f8:c7:0f:e8:95:5c:99:c2:2a:f9:85: 5f:ad:84:c6:2f:da:cc:2e:97:6a:1e:34:18:4c:72: 76:f1:70:39:96:7b:57:94:a3:b6:cc:2d:3d:73:8c: bd:28:b2:6f:bc:e0:3c:23:09:85:50:4f:f6:0d:73: c2:47:6b:d6:0f:37:3f:52:6e:4f:eb:ed:e0:9e:16: 49:5d:ad:d2:66:a3:53:c6:26:bf:b5:ef:f2:27:15: a5:24:7a:8b:6d:16:15:07:58:8c:9c:e7:48:fa:6a: 62:98:5b:7c:8c:31:d2:c1:cf:4e:1d:97:e8:59:b3: ed:07:8b:3a:2f:3e:95:c3:02:bd:8e:c0:92:47:24: 73:23:f1:bd:82:0a:88:0a:4b:16:41:25:f0:f0:06: 53:4a:34:a7:01:09:7f:8b:13:25:dd:9a:89:20:f0: f0:4e:f1:bc:02:54:13:b5:6d:17:af:63:79:2a:6c: d8:dd:bd:b9:69:09:1f:7c:98:f7:46:50:57:8c:6a: 98:df:65:fe:1b:e6:0e:c9:40:a0:52:47:7b:95:f9: c6:f5:a5:b8:e6:de:0d:77:5d:d6:0e:dd:a3:3c:61: 18:51:ee:82:08:9e:da:00:26:b2:cc:af:3f:6d:94: b0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FC:57:06:7F:94:C1:C0:3F:1F:EA:D5:4F:7A:D3:0A:65:86:38:4E X509v3 Authority Key Identifier: keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:8d:c0:da:29:46:12:54:f1:d3:d6:79:de:f9:6c:af:b0:2f: 6c:5e:7e:ad:ef:5c:79:68:c9:3e:0d:69:57:ed:15:61:bd:e8: f9:23:1e:c3:40:2b:63:f9:53:12:b2:ec:8e:30:69:c3:02:0a: 77:4f:56:09:69:5d:6a:26:39:a9:73:60:7e:6c:50:c5:fd:01: 52:2b:6c:b1:4f:6e:83:07:ef:c3:30:03:59:9f:a7:c2:cf:63: a5:3e:83:68:70:79:f7:c7:62:38:4c:fe:7c:0b:aa:1a:a3:75: ee:8f:94:87:2a:a4:38:8d:7f:bd:dd:e2:98:b4:97:71:24:6e: 8f:22:45:69:13:98:af:70:54:92:31:31:b8:65:7c:95:50:09: c1:3d:37:c1:8a:53:e5:9f:26:e3:8e:34:02:29:ce:30:bc:d8: f3:72:0c:cd:08:b9:70:65:e0:ae:b4:25:3e:72:16:81:99:00: 73:1d:83:f8:de:c3:e8:cf:31:41:09:ea:65:b2:6f:cc:dd:b4: 24:6b:5e:fe:7e:29:2d:23:86:0d:26:2e:bc:68:6f:2e:3d:3c: 3f:36:74:38:ea:fb:1a:0e:ef:d8:2d:06:ae:b8:42:76:9e:2c: f6:66:68:02:b7:11:b0:53:c2:b7:f3:6e:90:e8:ad:83:74:ac: 2b:a0:7b:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyMEIxMTAvBgNVBAUTKDcwNDZGODk4M0RGQzM3MDRCNkU1Q0Q3RUExMjgwRkQw RjUyOTc5QTAwHhcNMjYwMzI0MTgzNTQ5WhcNMjYwMzMxMTgzNTQ5WjAYMRYwFAYD VQQDEw02OWMyZDk4NS1lZDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/Zs6hlDqENc8TfnntAH4vOx+McP6JVcmcIq+YVfrYTGL9rMLpdqHjQYTHJ2 8XA5lntXlKO2zC09c4y9KLJvvOA8IwmFUE/2DXPCR2vWDzc/Um5P6+3gnhZJXa3S ZqNTxia/te/yJxWlJHqLbRYVB1iMnOdI+mpimFt8jDHSwc9OHZfoWbPtB4s6Lz6V wwK9jsCSRyRzI/G9ggqICksWQSXw8AZTSjSnAQl/ixMl3ZqJIPDwTvG8AlQTtW0X r2N5KmzY3b25aQkffJj3RlBXjGqY32X+G+YOyUCgUkd7lfnG9aW45t4Nd13WDt2j PGEYUe6CCJ7aACayzK8/bZSwQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDf8VwZ/ lMHAPx/q1U960wplhjhOMB8GA1UdIwQYMBaAFHBG+Jg9/DcEtuXNfqEoD9D1KXmg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzIwQi8wRkZGN0FBQTI3 QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53UzI1YzEtb1NnUDBQVXBl YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFYjRtRDM4TndTMjVjMS1vU2dQMFBVcGVhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzIwQi8wRkZGN0FBQTI3QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53 UzI1YzEtb1NnUDBQVXBlYUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUY3A2ilGElTx09Z53vlsr7AvbF5+re9ceWjJPg1pV+0VYb3o+SMew0ArY/lT ErLsjjBpwwIKd09WCWldaiY5qXNgfmxQxf0BUitssU9ugwfvwzADWZ+nws9jpT6D aHB598diOEz+fAuqGqN17o+UhyqkOI1/vd3imLSXcSRujyJFaROYr3BUkjExuGV8 lVAJwT03wYpT5Z8m4440AinOMLzY83IMzQi5cGXgrrQlPnIWgZkAcx2D+N7D6M8x QQnqZbJvzN20JGte/n4pLSOGDSYuvGhvLj08PzZ0OOr7Gg7v2C0GrrhCdp4s9mZo ArcRsFPCt/NukOitg3SsK6B7Kw== -----END CERTIFICATE-----Generated at Thu Mar 26 08:57:25 2026 by rpki-client