$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft File: GcmgwhkwwW6kFprC6-3H5snXtS8.mft (raw, json) Hash identifier: 6rosyAWoNE6OMYKHEr0zyLhjlnl4aaWTuWxxKu6+99Y= Subject key identifier: C6:8A:D9:1D:18:68:37:3B:2D:53:9E:33:E8:7D:36:4B:3F:51:83:E3 Authority key identifier: 19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F Certificate issuer: /CN=A916BCBA/serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft Manifest number: 33 Signing time: Wed 25 Mar 2026 07:52:34 +0000 Manifest this update: Wed 25 Mar 2026 07:52:34 +0000 Manifest next update: Wed 01 Apr 2026 07:52:34 +0000 Files and hashes: 1: GcmgwhkwwW6kFprC6-3H5snXtS8.crl (hash: XzTEjFba9Xn2W54JkNVIj4kLguOAGAyy3VuSP/8xtPg=) 2: 167F2222E8D211F091D937E6616F56BC.roa (hash: hqoxp1DZQxlSqrDmlnlQZc0fxw5C7ZE4Da6abuSlt+s=) 3: FAFCF5C4E8D111F0BEA778E4616F56BC.roa (hash: hw46GZqTqfjXwDHxT7HupOClnkJFY7kri3rb/x0rAqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BCBA, serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F Validity Not Before: Mar 25 07:52:34 2026 GMT Not After : Apr 1 07:52:34 2026 GMT Subject: CN=69c39442-382e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:01:48:16:d6:4c:e5:0d:0b:36:ef:14:1b:4d: 03:03:16:0b:04:14:1b:01:3a:7f:6c:bc:6c:06:dd: b4:01:9e:1c:97:78:d0:65:25:ce:bb:f9:f3:6a:be: d3:c7:6f:8b:a1:ca:0a:61:c5:e0:42:ed:7f:c4:81: fa:8e:a6:05:c8:56:d1:b8:ea:99:08:9c:8f:e4:1a: 33:17:83:90:24:98:04:d9:b0:a4:87:4f:24:6c:a3: ec:1b:ed:37:bf:d3:6e:7e:2e:72:e6:25:b9:ae:2b: 82:c3:be:0b:93:00:c4:23:86:1d:78:15:aa:09:e7: 84:ed:06:40:55:7c:28:43:84:41:57:be:f8:2b:cf: bc:cc:13:6e:5f:ee:8a:30:5a:63:6e:43:0d:5d:74: 96:7d:1d:56:80:b2:35:59:0e:c7:07:be:39:1b:c6: d4:d9:d0:ac:5f:e3:f3:97:17:aa:f2:37:5d:52:cf: 96:c7:ac:54:50:85:b3:bd:20:69:f8:40:a4:6c:6c: 68:20:56:41:1a:10:5c:c1:83:a0:52:d9:a7:e6:2f: b3:5a:99:06:69:3a:f7:c1:ff:c6:a2:73:18:8d:8a: 5c:eb:f9:26:cc:b8:1c:e1:c2:56:f6:02:a8:2a:a2: bf:ca:cc:79:eb:f7:76:c3:0d:99:ef:52:72:1b:41: b7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8A:D9:1D:18:68:37:3B:2D:53:9E:33:E8:7D:36:4B:3F:51:83:E3 X509v3 Authority Key Identifier: keyid:19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:3a:a3:ea:ef:d1:70:53:80:d4:95:d5:1f:41:45:65:65:27: 9a:f5:b7:2f:3d:55:ca:3b:e8:bf:b8:ab:46:1a:e6:bd:76:ed: c6:be:54:3a:e7:fe:cd:b4:07:d6:f8:7d:0b:27:36:83:73:4c: 2a:4b:5a:f0:94:e0:06:cd:60:98:3f:8f:11:7d:d4:c4:ea:87: a4:74:a3:40:1d:d1:e0:0c:db:01:fb:46:bf:7e:d3:f6:e2:f0: 0e:61:b1:25:2a:1c:2b:01:f4:12:a7:ac:da:45:b5:52:7b:ab: 47:fa:02:a1:54:82:0e:6a:ab:5f:2e:40:c4:81:38:18:15:eb: 1f:e8:18:9e:85:7c:c0:fc:3d:85:d2:f1:f0:39:e7:88:2d:aa: f1:af:e8:4a:4e:69:0c:0a:f9:73:a6:15:b0:cf:fa:24:09:e0: 59:f3:af:40:3d:29:bb:d6:cf:82:b2:85:8a:f0:15:45:2a:08: 1e:47:65:88:93:63:6f:57:45:b3:37:41:f7:48:ef:0b:ba:20: 87:0d:5b:fb:49:27:ec:f0:38:13:cf:31:0a:ec:cb:15:e4:0f: f4:b7:0c:36:33:99:4f:33:6c:5e:66:00:89:69:f7:9c:96:74: e4:c3:d3:db:b8:28:52:ca:73:b7:57:f3:1a:29:60:55:02:62: 63:8a:42:60 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QkNCQTExMC8GA1UEBRMoMTlDOUEwQzIxOTMwQzE2RUE0MTY5QUMyRUJFREM3RTZD OUQ3QjUyRjAeFw0yNjAzMjUwNzUyMzRaFw0yNjA0MDEwNzUyMzRaMBgxFjAUBgNV BAMTDTY5YzM5NDQyLTM4MmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChAUgW1kzlDQs27xQbTQMDFgsEFBsBOn9svGwG3bQBnhyXeNBlJc67+fNqvtPH b4uhygphxeBC7X/EgfqOpgXIVtG46pkInI/kGjMXg5AkmATZsKSHTyRso+wb7Te/ 025+LnLmJbmuK4LDvguTAMQjhh14FaoJ54TtBkBVfChDhEFXvvgrz7zME25f7oow WmNuQw1ddJZ9HVaAsjVZDscHvjkbxtTZ0Kxf4/OXF6ryN11Sz5bHrFRQhbO9IGn4 QKRsbGggVkEaEFzBg6BS2afmL7NamQZpOvfB/8aicxiNilzr+SbMuBzhwlb2Aqgq or/KzHnr93bDDZnvUnIbQbfpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxorZHRho NzstU54z6H02Sz9Rg+MwHwYDVR0jBBgwFoAUGcmgwhkwwW6kFprC6+3H5snXtS8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCQ0JBLzM0MDBDNzE4RTYy QzExRjA5NzZBOTVGQjZGNkY1NkJDL0djbWd3aGt3d1c2a0ZwckM2LTNINXNuWHRT OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2NtZ3doa3d3VzZrRnByQzYtM0g1c25YdFM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC Q0JBLzM0MDBDNzE4RTYyQzExRjA5NzZBOTVGQjZGNkY1NkJDL0djbWd3aGt3d1c2 a0ZwckM2LTNINXNuWHRTOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBeOqPq79FwU4DUldUfQUVlZSea9bcvPVXKO+i/uKtGGua9du3GvlQ65/7NtAfW +H0LJzaDc0wqS1rwlOAGzWCYP48RfdTE6oekdKNAHdHgDNsB+0a/ftP24vAOYbEl KhwrAfQSp6zaRbVSe6tH+gKhVIIOaqtfLkDEgTgYFesf6BiehXzA/D2F0vHwOeeI Larxr+hKTmkMCvlzphWwz/okCeBZ869APSm71s+CsoWK8BVFKggeR2WIk2NvV0Wz N0H3SO8LuiCHDVv7SSfs8DgTzzEK7MsV5A/0tww2M5lPM2xeZgCJafeclnTkw9Pb uChSynO3V/MaKWBVAmJjikJg -----END CERTIFICATE-----Generated at Thu Mar 26 19:04:56 2026 by rpki-client