$ rpki-client -vvf rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft File: ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft (raw, json) Hash identifier: SsPp8qNBMZlGO5N1FxJ9Ckrq5wolD/GG537uSvcFkFc= Subject key identifier: F1:A8:AF:E3:82:D4:C7:86:87:4F:DE:87:D1:40:3F:75:70:28:00:08 Authority key identifier: 49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 Certificate issuer: /CN=A916C7B6/serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Certificate serial: 0BFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft Manifest number: 0BF7 Signing time: Tue 24 Mar 2026 18:40:26 +0000 Manifest this update: Tue 24 Mar 2026 18:40:25 +0000 Manifest next update: Tue 31 Mar 2026 18:40:25 +0000 Files and hashes: 1: ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl (hash: fG8VRaAsnMXHozMnCllOX3bVjOXM0ivryyzC20Fqds4=) 2: 1A8553B831F011EAA18AC76AC4F9AE02.roa (hash: tnVPuD19UwWln3/34cxqq1xm4up8rwSwfbjxhWxlsQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3071 (0xbff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C7B6, serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Validity Not Before: Mar 24 18:40:25 2026 GMT Not After : Mar 31 18:40:25 2026 GMT Subject: CN=69c2da9a-7df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:47:ad:eb:f4:92:f0:f8:6d:8e:c2:1b:8b:0f: 6b:53:1e:e0:d3:b0:f7:5e:fa:b2:3a:c3:44:eb:72: ba:2f:8e:bf:4f:5b:f4:3c:52:07:8c:a9:1b:77:22: dd:ac:eb:48:b2:e9:51:46:cc:14:61:3a:eb:70:f7: 9a:e8:c1:8e:3c:b8:7c:49:2c:4f:e3:d0:20:57:9e: c8:a4:67:99:78:2c:63:a6:a8:61:aa:d3:7e:4f:d4: ba:e7:5d:8b:33:12:ff:ef:82:dd:b1:73:56:6d:4d: f0:c0:d9:98:f9:36:fe:5a:06:fa:b6:fb:2b:89:47: b3:e2:f7:d4:dd:e5:1a:84:b1:bd:36:db:0e:c2:e5: 9d:5f:5f:2b:8e:7d:64:4b:48:ef:dd:73:73:93:f4: 6e:be:d1:e2:fb:42:3d:fb:36:1f:f2:42:eb:a9:f8: cd:08:fd:95:a2:e5:f9:62:b5:41:d3:79:4b:86:10: 72:da:ff:ab:3f:2a:ea:bc:1d:80:ef:56:c8:9d:eb: fd:d2:12:5d:15:6e:56:eb:d5:2b:91:5f:99:8c:83: d5:4e:dd:b2:54:63:df:a8:29:e6:ca:ad:15:81:27: 8a:f6:ec:b2:92:b5:24:c0:2e:90:7c:21:78:cb:ee: da:62:1e:0e:1e:36:a6:96:af:13:e8:c5:02:69:95: 51:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A8:AF:E3:82:D4:C7:86:87:4F:DE:87:D1:40:3F:75:70:28:00:08 X509v3 Authority Key Identifier: keyid:49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:41:34:a4:3b:a2:25:78:39:43:55:77:a4:cf:ef:99:50:63: 74:e2:81:1d:a7:3b:28:e1:10:87:8d:02:0e:4c:35:dd:c8:49: 55:84:97:03:bb:2e:8e:d9:9a:89:3c:a1:96:30:8b:9b:24:9b: 9b:b6:a1:4a:ee:6f:0d:68:97:58:da:ee:6f:59:cb:a0:00:18: 3d:f9:90:ce:34:62:a1:58:56:6d:80:2c:04:d8:64:b5:4d:3f: 27:32:5e:fb:17:fc:68:9d:7e:49:7d:5d:58:f5:80:7f:89:46: 5d:4f:4f:54:0a:70:02:5d:76:bb:ef:20:07:72:19:5c:43:dd: c0:1e:a4:1d:65:07:1f:c0:eb:1f:86:a6:13:5d:fe:d9:86:0c: 3c:ea:39:aa:7d:0b:5f:3c:38:a6:95:b8:4e:3f:a2:96:11:c8: b5:b7:89:d2:f4:14:69:f7:12:b5:87:21:c2:10:9d:3a:4a:43: bf:6e:76:19:76:33:bf:9f:a6:ef:0c:4f:00:45:e5:43:37:ac: 5e:dd:d6:f7:93:cc:f2:17:6b:ed:fd:7b:e2:e7:c5:a7:5f:ac: b6:c9:b2:b0:d9:1c:a5:11:ae:29:1a:28:fe:b3:b8:e7:d6:14: 98:ce:1e:c1:7f:e2:1d:4d:a8:07:48:ac:73:80:40:a0:2a:ac: f4:5c:dd:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM3QjYxMTAvBgNVBAUTKDQ5M0QzRUFGRTA0MDU3Mjg0MUU5RkFCMjU2RDBDNjA0 NENCODU4QzgwHhcNMjYwMzI0MTg0MDI1WhcNMjYwMzMxMTg0MDI1WjAYMRYwFAYD VQQDEw02OWMyZGE5YS03ZGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEet6/SS8PhtjsIbiw9rUx7g07D3XvqyOsNE63K6L46/T1v0PFIHjKkbdyLd rOtIsulRRswUYTrrcPea6MGOPLh8SSxP49AgV57IpGeZeCxjpqhhqtN+T9S6512L MxL/74LdsXNWbU3wwNmY+Tb+Wgb6tvsriUez4vfU3eUahLG9NtsOwuWdX18rjn1k S0jv3XNzk/RuvtHi+0I9+zYf8kLrqfjNCP2VouX5YrVB03lLhhBy2v+rPyrqvB2A 71bInev90hJdFW5W69UrkV+ZjIPVTt2yVGPfqCnmyq0VgSeK9uyykrUkwC6QfCF4 y+7aYh4OHjamlq8T6MUCaZVRyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPGor+OC 1MeGh0/eh9FAP3VwKAAIMB8GA1UdIwQYMBaAFEk9Pq/gQFcoQen6slbQxgRMuFjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzdCNi80M0Y2QTU3ODMx RUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5aEI2ZnF5VnRER0JFeTRX TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NUMC1yLUJBVnloQjZmcXlWdERHQkV5NFdNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzdCNi80M0Y2QTU3ODMxRUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5 aEI2ZnF5VnRER0JFeTRXTWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmUE0pDuiJXg5Q1V3pM/vmVBjdOKBHac7KOEQh40CDkw13chJVYSXA7sujtma iTyhljCLmySbm7ahSu5vDWiXWNrub1nLoAAYPfmQzjRioVhWbYAsBNhktU0/JzJe +xf8aJ1+SX1dWPWAf4lGXU9PVApwAl12u+8gB3IZXEPdwB6kHWUHH8DrH4amE13+ 2YYMPOo5qn0LXzw4ppW4Tj+ilhHItbeJ0vQUafcStYchwhCdOkpDv252GXYzv5+m 7wxPAEXlQzesXt3W95PM8hdr7f174ufFp1+stsmysNkcpRGuKRoo/rO459YUmM4e wX/iHU2oB0isc4BAoCqs9FzdZg== -----END CERTIFICATE-----Generated at Thu Mar 26 21:37:02 2026 by rpki-client