$ rpki-client -vvf rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft File: GzpBGgdaXbGixkL41KG8PLW8uxw.mft (raw, json) Hash identifier: g4Gfjx4Q53LdNBBaSntQ6X2Dt+mlL+UaoxhM6Idoceg= Subject key identifier: 00:43:3A:6F:78:84:B7:C9:FB:9D:B7:C6:45:09:9F:D6:F5:25:66:22 Authority key identifier: 1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C Certificate issuer: /CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Certificate serial: 0297 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft Manifest number: 028F Signing time: Wed 25 Mar 2026 01:10:16 +0000 Manifest this update: Wed 25 Mar 2026 01:10:15 +0000 Manifest next update: Wed 01 Apr 2026 01:10:15 +0000 Files and hashes: 1: GzpBGgdaXbGixkL41KG8PLW8uxw.crl (hash: sAw70RyT2NnSkd+eqNC+NnWZtB0PDItA5fqAcn6P06M=) 2: F1F8A98442D811ED854B9670C4F9AE02.roa (hash: OIapcLyZFM+hQRAVWMttZwkt/KgLVw6oa519ZpxWQ4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 663 (0x297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C3CC, serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Validity Not Before: Mar 25 01:10:15 2026 GMT Not After : Apr 1 01:10:15 2026 GMT Subject: CN=69c335f8-f015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a1:16:33:93:e1:91:f3:4c:9f:87:8b:a2:bd: 21:4b:a5:4a:e8:b9:de:2b:9f:d9:cc:7b:04:19:e5: 20:5f:0a:d0:1c:4d:68:3e:55:fd:ce:be:ee:88:74: df:ce:81:4c:24:af:71:9a:9f:df:35:77:54:f1:e6: ae:00:89:8f:e2:84:f6:29:cb:c7:e5:d3:3a:cd:5c: 24:67:13:8a:0d:22:d1:50:fc:37:b9:bb:e5:3d:ad: 0c:19:c4:8f:3d:59:ee:f5:34:51:03:25:b1:95:77: eb:5c:39:e4:ca:a7:f2:68:79:55:d6:e1:ed:12:c2: 33:c5:84:da:de:e6:ae:dc:a2:a4:07:5d:5f:33:42: 95:4b:12:cd:05:81:d7:3e:57:91:8a:b2:56:a8:19: ef:61:90:36:57:4b:90:5b:f2:f0:95:0c:8a:89:f3: a2:2f:4e:bd:f4:1d:a3:fc:14:b2:cf:a9:6f:c5:55: 60:a7:4a:0a:69:4b:96:e1:70:ba:fe:7f:b2:55:96: 78:36:a7:df:b4:4a:21:fb:d7:19:b3:56:42:ca:d4: 46:c3:76:15:09:51:31:36:4b:c5:ab:5a:e3:3c:a8: 94:b5:90:a2:58:d5:b3:d2:08:95:4e:a9:2a:ab:7e: 3d:2e:15:c4:df:bc:89:a1:47:d8:69:84:fb:32:bf: 47:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:43:3A:6F:78:84:B7:C9:FB:9D:B7:C6:45:09:9F:D6:F5:25:66:22 X509v3 Authority Key Identifier: keyid:1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:7a:8e:e4:20:3e:45:4b:18:7f:c7:42:da:7f:78:e0:8c:11: 1b:c5:08:97:aa:ea:d1:0b:6c:8d:ef:2d:48:0a:b4:63:d7:d3: 9d:b6:8c:32:76:3a:bc:88:24:bb:36:b5:e1:e1:3c:96:92:26: 55:67:33:fc:8f:45:fd:46:e7:67:9a:f6:f4:2d:33:f3:42:0a: 24:0b:22:7d:48:35:25:0d:9c:ab:ec:0d:d7:c4:5c:cd:39:20: cd:98:4d:d7:10:77:dc:bd:19:b2:ea:61:82:6f:09:0b:bd:2a: f4:44:94:d7:27:c6:d2:e3:14:ae:5c:9a:bd:03:0b:67:eb:e4: 82:b8:98:fd:3b:03:3f:72:a0:cd:27:61:c2:02:2b:2b:53:8a: 6a:00:a0:aa:2c:16:c3:f7:ca:cf:6e:5e:11:8d:5a:28:5c:83: 04:36:5a:a2:13:be:59:77:c2:a9:bc:e9:36:19:79:a9:09:2e: 04:2f:6c:cd:0f:e1:7a:6c:31:97:bf:ec:f0:e4:75:3d:2a:15: 62:34:f5:68:da:f6:4b:78:9b:f1:4e:68:cc:f4:f3:af:a5:a6: 26:8c:8e:c9:9c:a5:a7:da:95:38:d5:47:d5:9c:cb:1c:de:1c: f7:89:e7:c1:9c:ef:fd:98:e5:43:4b:d6:0e:81:0b:45:d5:31: 12:d1:d0:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzQ0MxMTAvBgNVBAUTKDFCM0E0MTFBMDc1QTVEQjFBMkM2NDJGOEQ0QTFCQzND QjVCQ0JCMUMwHhcNMjYwMzI1MDExMDE1WhcNMjYwNDAxMDExMDE1WjAYMRYwFAYD VQQDEw02OWMzMzVmOC1mMDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5qEWM5PhkfNMn4eLor0hS6VK6LneK5/ZzHsEGeUgXwrQHE1oPlX9zr7uiHTf zoFMJK9xmp/fNXdU8eauAImP4oT2KcvH5dM6zVwkZxOKDSLRUPw3ubvlPa0MGcSP PVnu9TRRAyWxlXfrXDnkyqfyaHlV1uHtEsIzxYTa3uau3KKkB11fM0KVSxLNBYHX PleRirJWqBnvYZA2V0uQW/LwlQyKifOiL0699B2j/BSyz6lvxVVgp0oKaUuW4XC6 /n+yVZZ4NqfftEoh+9cZs1ZCytRGw3YVCVExNkvFq1rjPKiUtZCiWNWz0giVTqkq q349LhXE37yJoUfYaYT7Mr9HfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABDOm94 hLfJ+523xkUJn9b1JWYiMB8GA1UdIwQYMBaAFBs6QRoHWl2xosZC+NShvDy1vLsc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzNDQy80QTE0NzQwNDQy RDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhiR2l4a0w0MUtHOFBMVzh1 eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d6cEJHZ2RhWGJHaXhrTDQxS0c4UExXOHV4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzNDQy80QTE0NzQwNDQyRDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhi R2l4a0w0MUtHOFBMVzh1eHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiXqO5CA+RUsYf8dC2n944IwRG8UIl6rq0Qtsje8tSAq0Y9fTnbaMMnY6vIgk uza14eE8lpImVWcz/I9F/UbnZ5r29C0z80IKJAsifUg1JQ2cq+wN18RczTkgzZhN 1xB33L0Zsuphgm8JC70q9ESU1yfG0uMUrlyavQMLZ+vkgriY/TsDP3KgzSdhwgIr K1OKagCgqiwWw/fKz25eEY1aKFyDBDZaohO+WXfCqbzpNhl5qQkuBC9szQ/hemwx l7/s8OR1PSoVYjT1aNr2S3ib8U5ozPTzr6WmJoyOyZylp9qVONVH1ZzLHN4c94nn wZzv/ZjlQ0vWDoELRdUxEtHQxA== -----END CERTIFICATE-----Generated at Thu Mar 26 19:05:38 2026 by rpki-client