$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft File: _qS5bzmD92nHM5dFbBK5D2QkbHw.mft (raw, json) Hash identifier: AeF718H/25J07s6yb/qxqGA1EEST9p9AYuJrZzKi4AY= Subject key identifier: 3A:0A:76:B1:D3:65:D0:20:64:4B:4B:E9:D4:57:44:96:48:5B:AA:B0 Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C Certificate issuer: /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C Certificate serial: 1907 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft Manifest number: 18E4 Signing time: Tue 24 Mar 2026 16:22:06 +0000 Manifest this update: Tue 24 Mar 2026 16:22:05 +0000 Manifest next update: Tue 31 Mar 2026 16:22:05 +0000 Files and hashes: 1: _qS5bzmD92nHM5dFbBK5D2QkbHw.crl (hash: FTruDMrpRxy6YgogB5ERq5B6oKzYXG6TkMzo+3Sl/lA=) 2: 8C3BBD78F0D611EDAF996E15C4F9AE02.roa (hash: awYe5rrh007RCSjsVd7jO0qaN9guB6y5rbMfa7rSYvk=) 3: 5A8744D8143411EEAB1A5D73C4F9AE02.roa (hash: gpPf8YHxUumqTPOX7/waaXvtALxStgij8JmqlVAXhlc=) 4: 7F77220A143811EE97A64D19C4F9AE02.roa (hash: aze7oRbnjZ11dpJLkBi4xyiEoCsX64SwDqIgSioB2cM=) 5: C6454260AA9A11E7B4776E52C4F9AE02.roa (hash: QtWEc3antTd2K+91CBKQnCvQy2+FDNwa+QWniiVB1lI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6407 (0x1907) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C Validity Not Before: Mar 24 16:22:05 2026 GMT Not After : Mar 31 16:22:05 2026 GMT Subject: CN=69c2ba2e-7f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e8:be:9f:bb:43:9b:ad:9d:e5:c3:ac:9b:77: c4:75:4f:aa:e0:f9:16:17:2e:7b:08:7d:b7:9c:7d: a2:65:fd:db:1f:2c:88:3d:98:6a:8e:c2:fb:3b:7d: 75:b4:27:05:a9:79:6c:cf:c9:9d:30:5d:5a:5d:8d: 83:32:f2:5c:2c:15:25:7c:1b:ec:68:8a:68:de:31: 2d:93:11:36:e5:0d:2d:97:26:e7:b8:ea:0a:6d:44: b5:ee:85:c8:47:c6:5e:38:08:6a:3e:84:8c:c4:04: 49:0f:d2:a9:4f:9b:ea:2a:61:7d:4a:80:6c:81:0d: d6:09:e7:a0:fa:a0:61:03:44:6c:cd:f3:48:6d:2c: 55:a5:39:31:71:93:84:ba:b9:1e:24:18:10:04:6b: d7:77:f4:29:92:93:ab:39:1d:a1:ed:2b:45:3a:ab: c2:b9:39:0a:19:b0:97:ee:1f:17:ac:4d:0e:cc:ee: 32:17:2d:b7:2a:cd:34:98:78:7c:b5:34:71:c9:58: a2:e6:28:2d:f9:7a:fa:c8:cd:d1:fc:85:37:9c:87: 40:ee:dc:b1:91:96:f6:4e:b1:0e:8c:45:d1:5d:f6: b5:4b:e7:dd:44:59:f6:6a:94:ac:20:f1:31:9a:dd: 0c:f4:c9:5f:99:03:5c:bc:19:28:a3:5f:d3:d5:c1: e9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0A:76:B1:D3:65:D0:20:64:4B:4B:E9:D4:57:44:96:48:5B:AA:B0 X509v3 Authority Key Identifier: keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:59:fe:7c:e3:46:75:c6:b4:96:7e:19:c1:d4:43:34:1a:c0: 91:91:1c:df:51:0e:f1:f7:a5:dd:51:8a:f7:f1:8c:f7:b2:df: 4b:9a:8b:f8:db:50:ed:95:da:da:ea:59:17:d2:82:6b:fc:c4: 78:70:06:90:9f:53:5f:61:c6:f9:30:bb:6a:03:f5:35:95:82: ea:14:f6:69:b2:b3:e1:9a:84:1c:ba:30:85:46:dd:bb:a2:eb: 65:f1:f4:41:f7:9b:26:b7:3c:51:73:a3:70:b3:0e:b6:97:04: 84:e7:9f:f4:27:9e:a3:df:9a:00:6b:7d:2a:64:0f:46:27:c0: 41:37:62:bd:1f:01:50:05:48:24:b8:26:92:6d:13:85:cd:3e: ec:f3:21:d0:28:ee:04:c0:c6:fe:d3:ad:82:f7:7c:ee:14:c5: 84:61:c0:6b:16:3a:ad:54:b2:66:35:0b:c1:dc:be:5b:88:f6: eb:93:8f:06:4c:ea:d5:82:17:6c:bf:93:f4:88:79:bd:e3:84: 37:4f:49:e3:59:b8:35:81:7a:2f:a7:5b:11:4a:d9:eb:41:fa: b2:3e:b0:16:e5:d4:65:ab:6a:8b:9b:4f:f3:4d:c2:2e:81:c7: 92:ad:1f:d2:31:79:f1:37:0a:20:d5:a2:d2:40:0c:ec:6b:39: ce:ad:f7:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQzNkExMTAvBgNVBAUTKEZFQTRCOTZGMzk4M0Y3NjlDNzMzOTc0NTZDMTJCOTBG NjQyNDZDN0MwHhcNMjYwMzI0MTYyMjA1WhcNMjYwMzMxMTYyMjA1WjAYMRYwFAYD VQQDEw02OWMyYmEyZS03ZjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuui+n7tDm62d5cOsm3fEdU+q4PkWFy57CH23nH2iZf3bHyyIPZhqjsL7O311 tCcFqXlsz8mdMF1aXY2DMvJcLBUlfBvsaIpo3jEtkxE25Q0tlybnuOoKbUS17oXI R8ZeOAhqPoSMxARJD9KpT5vqKmF9SoBsgQ3WCeeg+qBhA0RszfNIbSxVpTkxcZOE urkeJBgQBGvXd/QpkpOrOR2h7StFOqvCuTkKGbCX7h8XrE0OzO4yFy23Ks00mHh8 tTRxyVii5igt+Xr6yM3R/IU3nIdA7tyxkZb2TrEOjEXRXfa1S+fdRFn2apSsIPEx mt0M9MlfmQNcvBkoo1/T1cHpHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDoKdrHT ZdAgZEtL6dRXRJZIW6qwMB8GA1UdIwQYMBaAFP6kuW85g/dpxzOXRWwSuQ9kJGx8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS8zN0FCRDcwOEFB OUExMUU3QkFDNDEyNTJDNEY5QUUwMi9fcVM1YnptRDkybkhNNWRGYkJLNUQyUWti SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19xUzViem1EOTJuSE01ZEZiQks1RDJRa2JIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDM2QS8zN0FCRDcwOEFBOUExMUU3QkFDNDEyNTJDNEY5QUUwMi9fcVM1YnptRDky bkhNNWRGYkJLNUQyUWtiSHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhVn+fONGdca0ln4ZwdRDNBrAkZEc31EO8fel3VGK9/GM97LfS5qL+NtQ7ZXa 2upZF9KCa/zEeHAGkJ9TX2HG+TC7agP1NZWC6hT2abKz4ZqEHLowhUbdu6LrZfH0 QfebJrc8UXOjcLMOtpcEhOef9Ceeo9+aAGt9KmQPRifAQTdivR8BUAVIJLgmkm0T hc0+7PMh0CjuBMDG/tOtgvd87hTFhGHAaxY6rVSyZjULwdy+W4j265OPBkzq1YIX bL+T9Ih5veOEN09J41m4NYF6L6dbEUrZ60H6sj6wFuXUZatqi5tP803CLoHHkq0f 0jF58TcKINWi0kAM7Gs5zq33Rw== -----END CERTIFICATE-----Generated at Thu Mar 26 12:36:54 2026 by rpki-client