$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft File: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft (raw, json) Hash identifier: b1knTWrzhgzZE07BmBZjpu5xZDWsL7zES12Zm3R71cI= Subject key identifier: 31:31:3D:BE:15:B2:9A:34:A2:BC:85:E9:5D:6D:CB:00:EA:AF:79:39 Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 19E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft Manifest number: 1723 Signing time: Tue 24 Mar 2026 18:38:58 +0000 Manifest this update: Tue 24 Mar 2026 18:38:58 +0000 Manifest next update: Tue 31 Mar 2026 18:38:58 +0000 Files and hashes: 1: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl (hash: lskCS4QVrEFgkbpCW+h7WtaVl6t6NPPXnbpxf6BGEt8=) 2: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (hash: sogBCjppD56h+GcWQ3rByWlelY4eKvIMYEluAiQ+/rw=) 3: 876FDB56D90211EFB7CAB32BC4F9AE02.roa (hash: mopxh+C67BhRELSVxdi8gg147Vo0atvbUuabzPbge/c=) 4: D26DDCB6F36C11E88E372D61C4F9AE02.roa (hash: udH7VqFuj24SImPiW/5wQH4EZuTGeAeHle7Uqa/NLtg=) 5: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (hash: JRMt5syEhbsraqmogl+r4Cn6WjqteDPA68BCYDsj7VY=) 6: 289E0AA2119711F1BED17E8E383D8C67.roa (hash: gncKZ2tj3jSylYMyhZVPoI28YfzJsEOGEVlwwCaD31A=) 7: 164F6E2079BF11EAB3ADD60FC4F9AE02.roa (hash: Ww0TTboh4t7XJh5yPzaTmih1SxJhA11Efd1I0MEuPiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6628 (0x19e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: Mar 24 18:38:58 2026 GMT Not After : Mar 31 18:38:58 2026 GMT Subject: CN=69c2da42-93a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9b:2f:eb:25:a4:d0:04:b9:34:c5:ab:1b:8d: 7c:e6:4d:94:dc:8a:0d:42:f6:3d:5f:73:03:98:5d: 9b:d0:c7:be:7a:24:78:37:df:62:ef:35:2b:0c:68: fa:88:44:e4:a8:fa:db:64:e5:9e:6a:9d:93:d2:03: 1a:a3:2d:1f:b4:73:5f:bd:bc:10:97:4d:fd:00:36: 59:6b:01:20:1b:7a:77:b8:8b:92:d8:c5:4f:83:e2: 24:36:3d:c6:a6:68:ad:71:40:27:4f:16:e8:92:7e: be:09:fd:8c:31:c4:aa:16:81:f4:2e:8d:f4:fa:7f: 1a:09:06:a2:5a:29:eb:62:2f:e2:b3:cb:9a:88:70: ce:85:3a:34:ae:30:bd:c2:2e:ab:15:69:87:53:03: 09:f8:da:e1:ff:e7:52:ea:60:6d:b5:31:0f:32:21: c0:76:82:b0:73:fa:eb:2c:80:99:6b:a9:ae:3e:78: 1c:4b:27:11:29:5f:8c:19:57:2c:b6:6d:3d:6a:7f: 6a:95:48:ed:45:f1:46:9d:dc:01:36:27:31:cd:6c: 19:42:0e:63:f1:82:6f:0e:77:a0:bb:eb:95:4e:15: fc:8e:8f:76:1b:ec:7d:9f:2a:ac:0c:ec:25:97:e6: 3f:b7:65:1a:96:00:f2:00:c2:0a:9e:b6:f6:e2:3a: 7b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:31:3D:BE:15:B2:9A:34:A2:BC:85:E9:5D:6D:CB:00:EA:AF:79:39 X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e8:35:8a:0a:0f:ee:dd:13:d2:95:02:09:98:4f:a6:65:c5:d4: c9:36:53:a9:d2:5f:77:70:37:f8:ce:2c:97:cb:00:cc:07:f1: 77:79:f0:af:90:51:80:5b:26:50:c5:50:d9:ce:59:81:61:05: d6:19:7b:76:60:90:4b:6e:49:e8:fb:48:6d:d0:93:2f:c9:81: 51:d7:e9:e3:9e:5c:9b:b1:7a:f2:2b:55:07:ba:68:c9:11:e6: a0:95:56:7c:85:2e:dd:f4:5e:6b:7a:fe:52:65:f1:ed:f4:21: e3:72:fa:05:15:a4:f2:1c:4a:9f:17:ad:71:56:d5:a3:02:7f: 64:11:ff:2e:8b:1a:3d:18:78:03:20:0c:71:b9:ba:d3:3f:66: 48:bb:91:27:ec:49:dd:77:04:77:49:0c:45:7c:09:ae:25:cd: 73:e5:72:4e:7c:94:9e:39:2e:2a:aa:93:3f:52:9f:85:0a:da: a4:0b:46:de:33:b8:ce:d3:19:0c:09:df:a0:b2:79:c9:e5:a6: 8d:6e:e8:d9:3d:94:21:3c:af:fa:bb:9b:87:e7:09:23:e1:ab: ec:a5:93:c2:f7:0b:d4:61:87:3b:40:5f:40:57:0e:ca:57:df: 78:0b:55:04:5f:b2:f4:85:6d:07:80:2c:b7:7f:0c:30:16:e3: 36:41:35:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjYwMzI0MTgzODU4WhcNMjYwMzMxMTgzODU4WjAYMRYwFAYD VQQDEw02OWMyZGE0Mi05M2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4psv6yWk0AS5NMWrG4185k2U3IoNQvY9X3MDmF2b0Me+eiR4N99i7zUrDGj6 iETkqPrbZOWeap2T0gMaoy0ftHNfvbwQl039ADZZawEgG3p3uIuS2MVPg+IkNj3G pmitcUAnTxbokn6+Cf2MMcSqFoH0Lo30+n8aCQaiWinrYi/is8uaiHDOhTo0rjC9 wi6rFWmHUwMJ+Nrh/+dS6mBttTEPMiHAdoKwc/rrLICZa6muPngcSycRKV+MGVcs tm09an9qlUjtRfFGndwBNicxzWwZQg5j8YJvDnegu+uVThX8jo92G+x9nyqsDOwl l+Y/t2UalgDyAMIKnrb24jp7wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDExPb4V spo0oryF6V1tywDqr3k5MB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkRBNC8xRUM3MDJCQ0YxQTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNO ejNaTjhMbWtEVDZGUUdaRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA6DWKCg/u3RPSlQIJmE+mZcXUyTZTqdJfd3A3+M4sl8sAzAfxd3nwr5BRgFsm UMVQ2c5ZgWEF1hl7dmCQS25J6PtIbdCTL8mBUdfp455cm7F68itVB7poyRHmoJVW fIUu3fRea3r+UmXx7fQh43L6BRWk8hxKnxetcVbVowJ/ZBH/LosaPRh4AyAMcbm6 0z9mSLuRJ+xJ3XcEd0kMRXwJriXNc+VyTnyUnjkuKqqTP1KfhQrapAtG3jO4ztMZ DAnfoLJ5yeWmjW7o2T2UITyv+rubh+cJI+Gr7KWTwvcL1GGHO0BfQFcOylffeAtV BF+y9IVtB4Ast38MMBbjNkE15A== -----END CERTIFICATE-----Generated at Thu Mar 26 04:43:58 2026 by rpki-client