$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft File: cLDwRtLzp0OW6Cx56OPazyYLOe4.mft (raw, json) Hash identifier: 4HLBewzKYKKAJ+d8S6WZlp/MdrUVSlgG/UegrOPkp6o= Subject key identifier: FE:82:72:CA:40:DB:A5:F2:D6:B9:C7:58:F9:BF:71:B9:09:0E:B8:43 Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Certificate serial: 2541 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft Manifest number: 24F7 Signing time: Tue 24 Mar 2026 15:42:38 +0000 Manifest this update: Tue 24 Mar 2026 15:42:37 +0000 Manifest next update: Tue 31 Mar 2026 15:42:37 +0000 Files and hashes: 1: cLDwRtLzp0OW6Cx56OPazyYLOe4.crl (hash: /tEsGSzfuy+VPfdm6Y/XcMW3UMchkuHF1nGEBc2GSRg=) 2: 19C92BC88DF311E7B616ED66C4F9AE02.roa (hash: +IkwJLutymOe9v3tylysd9fl5AOsxnKrdRtvPHuXuAw=) 3: 1A8324E28DF311E7B616ED66C4F9AE02.roa (hash: xPiIQYGhCGnM669LTO7uPzCNucP7Qj7zT3MtzGxRzjA=) 4: 027532E6385F11EAA879692AC4F9AE02.roa (hash: zmQ9A/lcBUnjJnBlCqaFgeAg9dsA076fd2DTYjhD0KY=) 5: E080F3508DFC11E7A7F08785C4F9AE02.roa (hash: N/cJUWhUEKkKWK0CKRJr7DF4dmuct4+FW2hs6wmCMag=) 6: 83684F548DF411E7A230506DC4F9AE02.roa (hash: MUxckfSz9Vm7iQtZJ6qwGlxpqt//E4KlehICs43rvhI=) 7: 5C9B073691CD11E7AD932563C4F9AE02.roa (hash: ywt3dHYNiuHbaJVB62YniE7qoiCCSqHfA23fnnqywh8=) 8: B2ED9AEE913311E79B98C45BC4F9AE02.roa (hash: N9yj3pAAVs5m7SimFwaSce/DJ3a2aOwWL6WwhlLDDfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9537 (0x2541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Validity Not Before: Mar 24 15:42:37 2026 GMT Not After : Mar 31 15:42:37 2026 GMT Subject: CN=69c2b0ee-4c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a5:05:cb:44:4a:f6:d9:0f:a8:a0:6b:3a:ee: 93:fc:11:93:09:95:b5:02:e3:17:69:2b:42:d0:bc: 73:4f:8f:3d:12:98:7d:5c:41:d4:25:04:09:cd:1b: 81:41:81:a8:20:35:d6:66:bb:f1:9b:65:cf:49:4a: c9:b1:5a:e0:0f:64:d5:e4:6b:35:c0:48:76:c9:1a: c7:be:42:62:f6:e6:d6:c4:c6:a8:d8:57:d4:64:94: d7:00:bf:6a:f9:6b:48:ee:47:be:22:81:6d:f4:ec: be:03:b6:88:5e:1b:ab:e5:84:13:ef:67:06:79:3f: c2:40:e6:8b:50:d4:77:9b:3c:0e:2b:a8:9b:d8:cf: 78:1a:ad:f1:6e:1b:87:e2:c5:1d:3a:f8:af:72:35: 64:4a:39:cb:62:ab:a7:40:76:6f:58:58:c6:32:59: 85:f8:49:9a:41:ef:10:cf:28:28:50:3d:24:a9:ec: 51:d4:93:cd:3c:23:7b:66:23:8c:a8:77:49:09:21: db:89:ff:51:a1:21:33:cf:21:81:0f:ee:d0:1e:ba: d6:c7:62:b7:12:72:e4:07:f1:2a:54:18:02:34:bc: 5d:92:32:f7:cd:c0:f5:ce:20:ec:0d:e0:3d:2e:e2: 3c:d6:ba:43:26:bb:b8:92:55:28:b3:e9:c3:12:25: 01:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:82:72:CA:40:DB:A5:F2:D6:B9:C7:58:F9:BF:71:B9:09:0E:B8:43 X509v3 Authority Key Identifier: keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:d5:8c:a5:fe:52:d4:da:24:7a:e2:95:5c:2f:c1:7c:52:dc: 63:fc:12:92:db:c5:30:1b:a2:c5:f0:b1:c4:98:c8:12:eb:50: da:44:a0:45:ca:28:d8:dd:1c:ec:c6:ed:6f:84:31:0a:da:ce: ce:18:55:68:bb:79:36:6d:4d:8e:d5:e2:4e:86:7c:96:2a:20: 08:d8:0c:11:e4:ba:cc:6a:be:2f:7f:2e:07:45:40:c3:81:02: 77:06:e4:f6:3f:65:5b:56:62:de:02:49:ab:7d:93:02:a7:a4: 6a:54:b5:80:3c:a4:94:f6:9d:f3:d2:10:82:69:b3:36:49:b1: 16:62:ff:b3:1d:2f:7b:75:2a:ac:61:0c:8f:d2:ca:a8:e2:f2: 95:48:7c:b2:df:4d:52:5b:53:eb:2f:46:2b:9b:e6:9d:3a:4e: bb:25:e9:84:6d:30:8a:89:f9:6c:64:5f:2e:b4:91:64:4d:0d: 58:7b:ba:74:77:9e:6e:1a:8d:f5:79:99:a6:c0:0f:20:41:b0: c4:55:b7:66:4a:d8:37:5b:c2:fd:f6:29:e8:55:bb:e9:13:f7: 8f:1e:e1:b1:07:c1:49:bf:d7:02:5f:83:03:72:39:0f:a7:19: ba:4f:a6:7a:59:42:d8:82:c8:c3:21:f6:09:84:d3:c5:fb:59: ff:14:5a:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKDcwQjBGMDQ2RDJGM0E3NDM5NkU4MkM3OUU4RTNEQUNG MjYwQjM5RUUwHhcNMjYwMzI0MTU0MjM3WhcNMjYwMzMxMTU0MjM3WjAYMRYwFAYD VQQDEw02OWMyYjBlZS00YzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6UFy0RK9tkPqKBrOu6T/BGTCZW1AuMXaStC0LxzT489Eph9XEHUJQQJzRuB QYGoIDXWZrvxm2XPSUrJsVrgD2TV5Gs1wEh2yRrHvkJi9ubWxMao2FfUZJTXAL9q +WtI7ke+IoFt9Oy+A7aIXhur5YQT72cGeT/CQOaLUNR3mzwOK6ib2M94Gq3xbhuH 4sUdOvivcjVkSjnLYqunQHZvWFjGMlmF+EmaQe8QzygoUD0kqexR1JPNPCN7ZiOM qHdJCSHbif9RoSEzzyGBD+7QHrrWx2K3EnLkB/EqVBgCNLxdkjL3zcD1ziDsDeA9 LuI81rpDJru4klUos+nDEiUBIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP6CcspA 26Xy1rnHWPm/cbkJDrhDMB8GA1UdIwQYMBaAFHCw8EbS86dDlugseejj2s8mCznu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS80NkM3RjE3MjRG MTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAwT1c2Q3g1Nk9QYXp5WUxP ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMRHdSdEx6cDBPVzZDeDU2T1BhenlZTE9lNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjZBQS80NkM3RjE3MjRGMTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAw T1c2Q3g1Nk9QYXp5WUxPZTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAtWMpf5S1NokeuKVXC/BfFLcY/wSktvFMBuixfCxxJjIEutQ2kSgRcoo2N0c 7Mbtb4QxCtrOzhhVaLt5Nm1NjtXiToZ8liogCNgMEeS6zGq+L38uB0VAw4ECdwbk 9j9lW1Zi3gJJq32TAqekalS1gDyklPad89IQgmmzNkmxFmL/sx0ve3UqrGEMj9LK qOLylUh8st9NUltT6y9GK5vmnTpOuyXphG0wion5bGRfLrSRZE0NWHu6dHeebhqN 9XmZpsAPIEGwxFW3ZkrYN1vC/fYp6FW76RP3jx7hsQfBSb/XAl+DA3I5D6cZuk+m ellC2ILIwyH2CYTTxftZ/xRaTA== -----END CERTIFICATE-----Generated at Thu Mar 26 09:04:33 2026 by rpki-client