$ rpki-client -vvf rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft File: tRdNgmVknN0nQmySfRaHddeD1Tg.mft (raw, json) Hash identifier: QOq06OOC02GQHKNr0zvjcg3D/NLbQCWr5AH0sAJFgy4= Subject key identifier: 43:5C:92:EC:32:85:9A:F7:F4:EE:BE:4E:57:9B:BE:21:FE:94:FC:43 Authority key identifier: B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38 Certificate issuer: /CN=A916D459/serialNumber=B5174D8265649CDD27426C927D168775D783D538 Certificate serial: 0BB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft Manifest number: 0BA9 Signing time: Tue 24 Mar 2026 18:50:48 +0000 Manifest this update: Tue 24 Mar 2026 18:50:47 +0000 Manifest next update: Tue 31 Mar 2026 18:50:47 +0000 Files and hashes: 1: tRdNgmVknN0nQmySfRaHddeD1Tg.crl (hash: NZDjRC8a5cN5vUgJ4v+l5DJYQoVpPPGP6jL1xSKrmWs=) 2: 61E12BD0CA0611EEB05EB92CC4F9AE02.roa (hash: IuciT/jDYsEHuZMLoxbp4gzhohFWomxgcVWfQKh8vS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:50:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2995 (0xbb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D459, serialNumber=B5174D8265649CDD27426C927D168775D783D538 Validity Not Before: Mar 24 18:50:47 2026 GMT Not After : Mar 31 18:50:47 2026 GMT Subject: CN=69c2dd08-d43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:39:3b:6b:8e:8c:1d:f6:73:71:72:4b:6d:ca: 1a:e3:60:64:96:dc:4d:e9:fb:55:86:f5:61:a5:63: fd:fc:3f:dc:94:67:c7:50:af:3f:f3:2b:44:ed:23: 15:1f:cf:22:02:c5:52:16:e6:49:ac:f5:30:35:5f: fa:0e:80:3b:99:1e:09:95:e1:f0:68:b5:b7:9e:6f: 3b:47:c8:00:93:6b:c7:cb:8b:42:d6:a2:c6:eb:59: 36:17:03:3f:47:5f:82:e7:2d:ef:b1:28:76:b6:a4: 30:97:0a:72:0c:88:c0:96:8f:78:81:cb:34:34:15: c8:de:88:9d:00:42:96:93:ea:55:62:d1:6c:8f:6b: c9:e6:c4:15:ae:76:56:79:3f:7b:ce:12:92:d0:35: 29:5a:df:ba:59:83:33:23:79:ab:07:1e:cc:23:30: 0a:0c:3f:b5:fe:d7:67:a9:97:eb:86:20:bf:08:f2: 05:4e:ae:db:c7:17:fb:65:8f:51:d3:89:5d:6d:ce: 89:53:29:07:0d:8e:3b:9d:a8:73:7a:c9:ea:ec:8c: be:c8:51:27:41:97:c1:ce:b5:f5:29:3b:dc:70:d8: 17:5a:65:a4:2b:66:75:20:36:8b:a5:8d:09:01:e1: 66:17:73:50:a5:66:92:a5:63:81:b0:ea:ac:3d:7c: 29:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5C:92:EC:32:85:9A:F7:F4:EE:BE:4E:57:9B:BE:21:FE:94:FC:43 X509v3 Authority Key Identifier: keyid:B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:93:ea:51:cd:a6:a9:c7:5e:f4:6c:61:6b:b9:59:1f:a6:32: 65:87:06:c6:c6:b9:83:7f:95:08:62:84:6c:91:70:90:44:4f: 3a:f3:ac:fb:6f:83:15:cc:a4:43:de:40:85:15:ea:79:fb:de: d7:bc:ef:94:71:54:cc:8f:da:e3:50:6d:9e:e2:26:08:4f:28: 82:70:53:da:93:52:83:fb:8c:f2:0a:56:19:4b:ae:d6:eb:3f: 96:f6:86:fb:c9:42:00:c0:2e:c0:5c:6b:bb:4c:56:d5:cf:a5: 7c:4d:56:20:80:d6:10:10:e6:c2:4e:06:f6:a8:7f:d5:f1:f3: 0e:d3:ca:63:57:40:c9:87:8e:42:c4:13:e0:6a:aa:5b:f4:d0: 6d:9d:ad:33:ff:af:ba:78:67:92:82:6d:c5:8c:9a:5a:90:ee: 9d:3e:0a:c6:07:78:c7:ff:2b:26:9d:60:2a:0f:84:50:2e:be: 24:3d:3b:09:ea:c2:69:c1:59:cd:63:f0:66:a9:d8:7a:f8:b6: 46:fe:83:c7:18:97:6b:59:28:44:a5:c2:77:a0:e5:9b:17:3d: 0c:ba:f6:8e:21:04:bd:f5:aa:e4:13:3a:73:d0:b4:ff:55:82: c9:bd:ac:f8:6b:5f:35:1b:39:12:1d:a0:56:3c:c2:a9:fc:43: de:c3:b0:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ0NTkxMTAvBgNVBAUTKEI1MTc0RDgyNjU2NDlDREQyNzQyNkM5MjdEMTY4Nzc1 RDc4M0Q1MzgwHhcNMjYwMzI0MTg1MDQ3WhcNMjYwMzMxMTg1MDQ3WjAYMRYwFAYD VQQDEw02OWMyZGQwOC1kNDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4zk7a46MHfZzcXJLbcoa42BkltxN6ftVhvVhpWP9/D/clGfHUK8/8ytE7SMV H88iAsVSFuZJrPUwNV/6DoA7mR4JleHwaLW3nm87R8gAk2vHy4tC1qLG61k2FwM/ R1+C5y3vsSh2tqQwlwpyDIjAlo94gcs0NBXI3oidAEKWk+pVYtFsj2vJ5sQVrnZW eT97zhKS0DUpWt+6WYMzI3mrBx7MIzAKDD+1/tdnqZfrhiC/CPIFTq7bxxf7ZY9R 04ldbc6JUykHDY47nahzesnq7Iy+yFEnQZfBzrX1KTvccNgXWmWkK2Z1IDaLpY0J AeFmF3NQpWaSpWOBsOqsPXwpfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFENckuwy hZr39O6+TlebviH+lPxDMB8GA1UdIwQYMBaAFLUXTYJlZJzdJ0Jskn0Wh3XXg9U4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDQ1OS85OUVDODlFQzQy MjAxMUVBQjUzMDIwMTZDNEY5QUUwMi90UmROZ21Wa25OMG5RbXlTZlJhSGRkZUQx VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RSZE5nbVZrbk4wblFteVNmUmFIZGRlRDFUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDQ1OS85OUVDODlFQzQyMjAxMUVBQjUzMDIwMTZDNEY5QUUwMi90UmROZ21Wa25O MG5RbXlTZlJhSGRkZUQxVGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAppPqUc2mqcde9Gxha7lZH6YyZYcGxsa5g3+VCGKEbJFwkERPOvOs+2+DFcyk Q95AhRXqefve17zvlHFUzI/a41BtnuImCE8ognBT2pNSg/uM8gpWGUuu1us/lvaG +8lCAMAuwFxru0xW1c+lfE1WIIDWEBDmwk4G9qh/1fHzDtPKY1dAyYeOQsQT4Gqq W/TQbZ2tM/+vunhnkoJtxYyaWpDunT4Kxgd4x/8rJp1gKg+EUC6+JD07CerCacFZ zWPwZqnYevi2Rv6DxxiXa1koRKXCd6Dlmxc9DLr2jiEEvfWq5BM6c9C0/1WCyb2s +GtfNRs5Eh2gVjzCqfxD3sOwLg== -----END CERTIFICATE-----Generated at Thu Mar 26 10:12:45 2026 by rpki-client