$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft File: No88k4tgFBJSGjqBkAmXj8_pHn4.mft (raw, json) Hash identifier: diPdooCv+eNJG5j790I4MzcmrSCElqqVHVeTNqRcB04= Subject key identifier: 35:21:EA:A5:BD:2D:6A:B0:0F:A7:57:96:BA:F6:73:EF:FF:76:7B:2A Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Certificate serial: 1805 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft Manifest number: 1750 Signing time: Tue 24 Mar 2026 16:27:32 +0000 Manifest this update: Tue 24 Mar 2026 16:27:31 +0000 Manifest next update: Tue 31 Mar 2026 16:27:31 +0000 Files and hashes: 1: No88k4tgFBJSGjqBkAmXj8_pHn4.crl (hash: 6yxZQaqkpxhsktfJCWRB8OXAhSGguYB3ZfaiGTkzwCQ=) 2: 987E6D9E985711F08C4D1E11C4F9AE02.roa (hash: r0zQtknSI2b1VOObJtQgivU8i179m1LSf29AF/HDojU=) 3: 5EB452C8D70D11F0B16F7C3995D3641D.roa (hash: zuF/1ukwcpBwhWZK7Pi8Xbxw6hgooL/a/hSXDjQ9478=) 4: 38A5FCB48FC911E8902DFE16C4F9AE02.roa (hash: jGhrtAK4exRlSw5p5BupizFtQ6ARkyDeq/Ro7o2534k=) 5: F053A1CAC28B11EBBF310469C4F9AE02.roa (hash: gzM1l4gp+yuIxG32teQrIV23U2rjsf7ARAI2SMfdJwk=) 6: 760F20A2439411EDA0D65E77C4F9AE02.roa (hash: cDmjUkJy5QnoYB2Efhi3ILeopilkHuY54fAfFL06ehs=) 7: EC065A52C28D11EBBCABCA6CC4F9AE02.roa (hash: NhWTMkdQoGhGAyUJAewdIYvP2elN/pEDuvTMVFPBYQI=) 8: 986FA3843F8F11EBA86B1F11C4F9AE02.roa (hash: mZ5vq8Tj60q8YoaKNQyf2XVsVELSCKKyxOomhTBpzeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6149 (0x1805) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B, serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Validity Not Before: Mar 24 16:27:31 2026 GMT Not After : Mar 31 16:27:31 2026 GMT Subject: CN=69c2bb74-74de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:35:0a:bd:a6:80:3e:0f:6d:f9:64:6a:bc:fa: b7:69:5e:0a:d4:22:29:92:6e:ed:3b:96:83:13:11: 88:2e:dc:2f:7a:ef:b1:5c:60:e9:8f:04:d9:9c:35: b7:28:e5:9a:83:d6:28:a8:df:b6:a4:86:cc:4f:9a: e6:f3:75:7a:be:33:5a:79:4c:90:a6:26:cd:30:4e: ab:d5:d0:c2:5f:6e:1f:22:8f:d7:f2:78:dc:89:90: 4a:b6:e1:f4:b3:43:cf:b3:0b:10:d4:df:fa:5d:17: 34:4f:7c:98:f9:bf:57:0e:30:c1:03:c3:c0:5f:e5: 7c:fd:97:ce:b2:de:0c:7f:73:80:f3:1e:9a:ff:9d: de:9c:29:6c:55:ec:1b:30:e3:62:23:71:c6:22:36: 98:37:49:1f:43:06:6e:52:bd:7b:57:bc:17:93:c4: a0:41:e5:85:7c:b0:0f:99:fa:3c:9e:2d:fb:87:92: ae:ff:62:9e:84:0f:65:63:36:c2:a7:92:a5:db:83: b5:ae:f8:fb:a6:83:b7:f6:97:ee:b0:c2:31:7e:ed: e6:75:ba:d1:47:66:f7:45:b7:0b:ef:d8:ae:cd:2a: 87:29:88:c2:a0:6a:cb:7f:6b:e4:e6:17:eb:a0:ff: 1a:50:bd:bc:03:65:8d:ae:f1:0d:7d:9f:51:9e:f7: dd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:21:EA:A5:BD:2D:6A:B0:0F:A7:57:96:BA:F6:73:EF:FF:76:7B:2A X509v3 Authority Key Identifier: keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:34:50:31:df:62:90:51:66:70:d0:c2:5b:13:f7:d5:67:b6: ae:4d:e8:d7:b7:12:07:c5:d7:35:ec:76:8b:d3:83:2a:6d:75: 6f:d0:77:65:f5:5e:e7:7c:ff:95:9c:b8:ca:de:f8:f0:4c:4d: c3:02:1f:4a:35:fa:5e:c7:a8:66:e9:5e:c3:c4:ce:97:16:01: 4d:60:a8:e2:2e:d0:a0:b9:ef:32:80:59:34:7b:14:38:55:3f: 2c:93:e3:0a:74:b5:05:29:2f:13:d3:12:c6:94:fc:c9:b6:a8: 27:af:c2:64:5b:23:b3:5c:d9:8a:8b:55:57:5b:db:60:fa:88: 12:34:a7:45:4a:15:83:e1:a2:0f:b9:41:e8:d1:39:09:17:7d: 8a:d5:c3:26:bf:fa:ce:8a:ae:b9:0b:19:2b:51:5d:c9:d1:35: 21:a1:3e:e5:ff:47:16:72:bc:f0:da:29:a0:d6:40:bd:a1:ba: 25:3c:8b:48:ea:85:15:a3:1f:f6:eb:77:48:03:00:1a:bf:26: 81:4d:a5:e8:c8:91:96:16:dc:1c:b0:84:bb:85:7f:d1:e3:f6: 5e:a3:74:5b:77:2d:ba:1d:06:01:a2:4b:e2:75:46:66:8e:8f: 7a:a5:9f:0d:71:72:b2:a3:f5:48:0d:cd:35:90:05:26:88:90: f3:95:dd:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKDM2OEYzQzkzOEI2MDE0MTI1MjFBM0E4MTkwMDk5NzhG Q0ZFOTFFN0UwHhcNMjYwMzI0MTYyNzMxWhcNMjYwMzMxMTYyNzMxWjAYMRYwFAYD VQQDEw02OWMyYmI3NC03NGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzUKvaaAPg9t+WRqvPq3aV4K1CIpkm7tO5aDExGILtwveu+xXGDpjwTZnDW3 KOWag9YoqN+2pIbMT5rm83V6vjNaeUyQpibNME6r1dDCX24fIo/X8njciZBKtuH0 s0PPswsQ1N/6XRc0T3yY+b9XDjDBA8PAX+V8/ZfOst4Mf3OA8x6a/53enClsVewb MONiI3HGIjaYN0kfQwZuUr17V7wXk8SgQeWFfLAPmfo8ni37h5Ku/2KehA9lYzbC p5Kl24O1rvj7poO39pfusMIxfu3mdbrRR2b3RbcL79iuzSqHKYjCoGrLf2vk5hfr oP8aUL28A2WNrvENfZ9Rnvfd0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDUh6qW9 LWqwD6dXlrr2c+//dnsqMB8GA1UdIwQYMBaAFDaPPJOLYBQSUho6gZAJl4/P6R5+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi9GOThCNUYwQzIx RjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZCSlNHanFCa0FtWGo4X3BI bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05vODhrNHRnRkJKU0dqcUJrQW1YajhfcEhuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjE4Qi9GOThCNUYwQzIxRjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZC SlNHanFCa0FtWGo4X3BIbjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzzRQMd9ikFFmcNDCWxP31We2rk3o17cSB8XXNex2i9ODKm11b9B3ZfVe53z/ lZy4yt748ExNwwIfSjX6XseoZulew8TOlxYBTWCo4i7QoLnvMoBZNHsUOFU/LJPj CnS1BSkvE9MSxpT8ybaoJ6/CZFsjs1zZiotVV1vbYPqIEjSnRUoVg+GiD7lB6NE5 CRd9itXDJr/6zoquuQsZK1FdydE1IaE+5f9HFnK88NopoNZAvaG6JTyLSOqFFaMf 9ut3SAMAGr8mgU2l6MiRlhbcHLCEu4V/0eP2XqN0W3ctuh0GAaJL4nVGZo6PeqWf DXFysqP1SA3NNZAFJoiQ85XdVA== -----END CERTIFICATE-----Generated at Thu Mar 26 11:33:23 2026 by rpki-client