$ rpki-client -vvf rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft File: Satd0R3JItzI8j3VqSxplN1wNQQ.mft (raw, json) Hash identifier: hRES1TMD6CPfzMf1xqWSWHc8lkSR0tEqoGcVm98om0g= Subject key identifier: 33:67:BD:4B:22:05:83:BA:3E:16:E3:10:14:C9:A6:90:F3:DD:97:2B Authority key identifier: 49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04 Certificate issuer: /CN=A916593B/serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504 Certificate serial: 03F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft Manifest number: 03EA Signing time: Wed 25 Mar 2026 00:11:48 +0000 Manifest this update: Wed 25 Mar 2026 00:11:47 +0000 Manifest next update: Wed 01 Apr 2026 00:11:47 +0000 Files and hashes: 1: Satd0R3JItzI8j3VqSxplN1wNQQ.crl (hash: WCtm4Zf1QBJjYd9fBJhgzw66kQGoyCAqY2eXuxX0MfE=) 2: 718673B6BB7F11EC9E187F19C4F9AE02.roa (hash: vBsafuWlA5fDTGa/5s57fr9OWMHZTtKdoWY5g838LV8=) 3: 83A55CAE190111F1924FB715213D8C67.roa (hash: nlTRTD0+8MZz2UjHUQp1Ig/zh1Jia7bSOziI2rZb1o0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1015 (0x3f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916593B, serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504 Validity Not Before: Mar 25 00:11:47 2026 GMT Not After : Apr 1 00:11:47 2026 GMT Subject: CN=69c32843-ebe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:13:a6:41:17:aa:8e:aa:e8:41:fe:8c:6b:41: 24:81:39:77:58:59:bf:e5:33:b4:70:82:6a:e7:20: 74:89:fc:15:c8:4e:16:e3:23:38:e4:5a:50:73:2b: fa:8b:14:77:45:ce:e3:35:79:ef:c3:b1:2a:13:b4: 73:39:f0:20:c6:67:e3:ae:f8:19:8f:75:ed:ad:c7: b7:19:62:84:99:0d:a9:e7:89:74:ec:11:97:f7:f1: 32:74:4f:98:c2:53:d0:a3:d7:c1:c7:07:41:6d:61: 42:ff:eb:d0:7a:8f:30:52:04:be:15:56:12:91:66: c6:64:27:c5:dd:57:3d:53:18:dd:3d:4a:6b:eb:a3: 81:16:bd:46:94:2a:6d:83:12:a9:3d:fc:60:7d:e5: 8f:a8:28:f8:dc:f5:a7:01:fb:32:38:f0:89:88:f8: 47:51:01:70:b9:ed:b3:b9:82:cb:10:4a:a6:db:69: f8:52:7e:53:81:21:9d:fb:d7:06:be:81:e3:f8:9c: 65:2d:e9:af:a7:56:ab:06:8a:3f:ee:93:64:f4:fd: 10:52:e0:b8:85:1c:78:f6:7b:d7:57:55:ef:45:58: 11:fb:2d:26:3e:a2:e5:dc:d0:0b:73:51:ec:28:d2: 67:10:5b:a8:f6:47:eb:63:3e:82:24:07:c7:5b:a8: 6a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:67:BD:4B:22:05:83:BA:3E:16:E3:10:14:C9:A6:90:F3:DD:97:2B X509v3 Authority Key Identifier: keyid:49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c8:72:e1:06:15:14:b6:0f:45:ac:5d:d5:db:9b:26:e4:e9: 8b:b2:b2:73:e4:43:07:e0:47:19:01:52:24:5d:38:51:ea:91: 69:a6:45:60:97:f5:d4:bd:12:8b:fe:3b:3b:ae:d1:0c:4a:bb: aa:21:07:af:47:51:7c:9b:7e:9e:7c:5b:44:e0:69:e2:90:38: 78:c0:a8:94:0b:9e:54:05:89:65:d1:83:74:e6:db:e0:ab:94: 1b:c4:28:4a:a9:6f:fe:b5:6e:49:c9:08:d3:27:e3:73:43:1e: 4c:69:c9:7e:32:bb:ce:e4:81:2c:e3:65:77:86:c6:ca:b7:6c: c4:ae:a4:35:20:11:a7:b9:30:47:c4:88:99:91:cb:da:72:d8: df:68:59:9a:6e:cb:6a:2f:1e:f5:3e:4e:47:dc:1c:f5:67:0b: 6b:98:6a:98:75:5d:23:bd:c2:a4:d0:f7:25:34:aa:a7:5e:18: 15:50:2d:fd:71:d3:c9:bc:5d:76:17:f8:ff:c4:13:b6:03:50: 68:74:72:41:57:de:9e:86:b1:51:f4:17:be:c8:7d:58:7c:54: 2f:ce:3b:40:48:5c:dc:81:dd:85:99:5c:6a:46:1d:46:ee:34: ee:fd:55:04:ec:b8:a0:dc:80:c7:69:f2:1a:58:47:73:9d:b0: 59:9b:f8:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU5M0IxMTAvBgNVBAUTKDQ5QUI1REQxMURDOTIyRENDOEYyM0RENUE5MkM2OTk0 REQ3MDM1MDQwHhcNMjYwMzI1MDAxMTQ3WhcNMjYwNDAxMDAxMTQ3WjAYMRYwFAYD VQQDEw02OWMzMjg0My1lYmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxOmQReqjqroQf6Ma0EkgTl3WFm/5TO0cIJq5yB0ifwVyE4W4yM45FpQcyv6 ixR3Rc7jNXnvw7EqE7RzOfAgxmfjrvgZj3Xtrce3GWKEmQ2p54l07BGX9/EydE+Y wlPQo9fBxwdBbWFC/+vQeo8wUgS+FVYSkWbGZCfF3Vc9UxjdPUpr66OBFr1GlCpt gxKpPfxgfeWPqCj43PWnAfsyOPCJiPhHUQFwue2zuYLLEEqm22n4Un5TgSGd+9cG voHj+JxlLemvp1arBoo/7pNk9P0QUuC4hRx49nvXV1XvRVgR+y0mPqLl3NALc1Hs KNJnEFuo9kfrYz6CJAfHW6hqrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDNnvUsi BYO6PhbjEBTJppDz3ZcrMB8GA1UdIwQYMBaAFEmrXdEdySLcyPI91aksaZTdcDUE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTkzQi8xMDNDN0QxQ0JC N0ExMUVDODI5RUU4MERDNEY5QUUwMi9TYXRkMFIzSkl0ekk4ajNWcVN4cGxOMXdO UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhdGQwUjNKSXR6SThqM1ZxU3hwbE4xd05RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTkzQi8xMDNDN0QxQ0JCN0ExMUVDODI5RUU4MERDNEY5QUUwMi9TYXRkMFIzSkl0 ekk4ajNWcVN4cGxOMXdOUVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe8hy4QYVFLYPRaxd1dubJuTpi7Kyc+RDB+BHGQFSJF04UeqRaaZFYJf11L0S i/47O67RDEq7qiEHr0dRfJt+nnxbROBp4pA4eMColAueVAWJZdGDdObb4KuUG8Qo Sqlv/rVuSckI0yfjc0MeTGnJfjK7zuSBLONld4bGyrdsxK6kNSARp7kwR8SImZHL 2nLY32hZmm7Lai8e9T5OR9wc9WcLa5hqmHVdI73CpND3JTSqp14YFVAt/XHTybxd dhf4/8QTtgNQaHRyQVfenoaxUfQXvsh9WHxUL847QEhc3IHdhZlcakYdRu407v1V BOy4oNyAx2nyGlhHc52wWZv4Dg== -----END CERTIFICATE-----Generated at Thu Mar 26 12:54:07 2026 by rpki-client