$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft File: AxycJuW6sbAa8YoLsblwq1dzRWs.mft (raw, json) Hash identifier: FPefgO0fZzolzqap8z9q+PEy3LZjJfI5fDCsPYEPPv0= Subject key identifier: EE:1B:81:53:A3:E2:CA:16:DA:D5:31:86:6C:A1:01:4A:26:35:D2:F2 Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B Certificate serial: 06E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft Manifest number: 0698 Signing time: Tue 24 Mar 2026 22:23:47 +0000 Manifest this update: Tue 24 Mar 2026 22:23:46 +0000 Manifest next update: Tue 31 Mar 2026 22:23:46 +0000 Files and hashes: 1: AxycJuW6sbAa8YoLsblwq1dzRWs.crl (hash: r0wNOYdYp1yXdLGuN5B7pZbqiKZITyIdR0qtFPtlVzg=) 2: 37DF315640B111F0B139F22BC4F9AE02.roa (hash: g+Gj7U1+efQL3hqCetjfGn6GeGSvm7QivUZN+eVJ75c=) 3: F2CF477E50C711EF8B03E673C4F9AE02.roa (hash: TqJzuidUjyyQb1G7wiFhjyqX67oOjt0bf49SD3Yyr2c=) 4: 3B428CDA8AE011EF90B73462C4F9AE02.roa (hash: gxgtsWBnEAP6vapnZK0uqNLpyymktd5A/5L7ecDmBUQ=) 5: E88EE726E93611EF9E3FF729C4F9AE02.roa (hash: OIMoYuOlDFIxnQLjJwwfFn81y6oP24XgHKLcwV1zvZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1765 (0x6e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D8D9, serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B Validity Not Before: Mar 24 22:23:46 2026 GMT Not After : Mar 31 22:23:46 2026 GMT Subject: CN=69c30ef3-6de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ae:9a:85:03:87:e4:8c:71:b1:86:d5:a2:7a: 09:8e:9d:58:ad:ac:04:dc:25:3b:22:35:70:9a:13: 9e:0b:bb:31:72:89:4a:ca:a8:fa:4c:65:94:92:80: 38:2f:d9:80:4f:6e:b0:35:0e:62:97:f3:46:21:67: 2a:ef:b9:59:42:6f:de:7f:6b:7c:40:26:57:e9:ce: 26:8f:f4:7d:ca:32:cd:34:9b:94:01:18:94:c2:fa: ea:30:99:ef:3f:f0:7f:51:76:c9:3e:22:56:63:46: 73:10:0d:d6:ba:51:5f:dc:b8:32:f8:89:a6:d1:8c: 6d:8b:15:b5:e5:2f:ec:7f:d3:a9:91:b9:2b:54:1b: 37:28:a4:22:b0:af:fd:07:00:de:8b:8e:ec:9f:29: b1:0b:8c:c4:a4:e8:12:d8:83:25:31:63:0b:1b:63: 95:28:3a:ea:40:8b:f1:ae:96:cb:8e:77:1c:94:ba: c0:a5:28:2c:c7:bf:2f:eb:94:df:00:29:b9:44:83: 94:81:10:a4:11:de:95:4e:b8:22:11:78:e5:14:18: a5:4b:fc:0e:6e:68:70:1a:d8:50:2e:6e:bf:43:e1: db:36:04:33:af:01:75:77:4f:d6:50:03:c5:3a:51: 04:b9:81:d8:0f:a6:49:31:4a:2c:bf:f3:3b:7d:a9: 67:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1B:81:53:A3:E2:CA:16:DA:D5:31:86:6C:A1:01:4A:26:35:D2:F2 X509v3 Authority Key Identifier: keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:2e:26:fa:d1:b9:60:45:18:b9:86:54:39:2d:6b:38:94:d3: 95:a3:64:ec:88:e1:6d:7d:9e:c2:ca:9b:b4:06:e2:87:1e:45: a3:b7:56:db:40:47:7a:d5:e8:4d:83:a8:f4:5d:d7:96:af:c5: 5c:1e:82:58:d6:81:1b:04:38:25:96:1a:e3:b1:8d:48:16:5d: 98:7d:77:31:f0:0f:13:b5:84:5f:30:35:4a:48:3f:41:f6:7c: 34:25:5c:bf:21:e3:1a:b5:a5:77:b5:e7:0a:3a:12:53:d6:cc: 3e:be:77:2e:da:f9:8b:d6:60:aa:ed:2a:c0:c1:f1:95:de:38: b6:41:f8:ea:d8:03:b6:f6:73:b3:43:13:b8:46:42:4a:eb:ea: ef:94:ed:08:7a:07:7f:34:f7:16:76:61:f2:90:a2:94:96:b0: 83:91:9e:1a:4c:aa:d6:f1:bf:06:f1:d6:6d:29:57:93:14:ba: e6:6c:33:1f:21:0f:1b:df:6a:e1:4e:bb:a0:a1:b1:e9:f4:b2: 33:18:ad:05:d8:14:98:7b:eb:2b:44:93:d5:90:5f:65:77:bc: 0e:06:9e:c6:18:bb:65:03:d0:b1:1b:3b:e1:69:fc:9d:0b:af: 07:31:5b:04:88:a0:b6:18:b1:6d:1e:e5:1a:9b:c1:de:17:d7: af:7d:c3:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ4RDkxMTAvBgNVBAUTKDAzMUM5QzI2RTVCQUIxQjAxQUYxOEEwQkIxQjk3MEFC NTc3MzQ1NkIwHhcNMjYwMzI0MjIyMzQ2WhcNMjYwMzMxMjIyMzQ2WjAYMRYwFAYD VQQDEw02OWMzMGVmMy02ZGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnK6ahQOH5IxxsYbVonoJjp1YrawE3CU7IjVwmhOeC7sxcolKyqj6TGWUkoA4 L9mAT26wNQ5il/NGIWcq77lZQm/ef2t8QCZX6c4mj/R9yjLNNJuUARiUwvrqMJnv P/B/UXbJPiJWY0ZzEA3WulFf3Lgy+Imm0YxtixW15S/sf9OpkbkrVBs3KKQisK/9 BwDei47snymxC4zEpOgS2IMlMWMLG2OVKDrqQIvxrpbLjncclLrApSgsx78v65Tf ACm5RIOUgRCkEd6VTrgiEXjlFBilS/wObmhwGthQLm6/Q+HbNgQzrwF1d0/WUAPF OlEEuYHYD6ZJMUosv/M7falnPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO4bgVOj 4soW2tUxhmyhAUomNdLyMB8GA1UdIwQYMBaAFAMcnCblurGwGvGKC7G5cKtXc0Vr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDhEOS81NDgzQkZCNkM4 RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNiQWE4WW9Mc2Jsd3ExZHpS V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F4eWNKdVc2c2JBYThZb0xzYmx3cTFkelJXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDhEOS81NDgzQkZCNkM4RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNi QWE4WW9Mc2Jsd3ExZHpSV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVi4m+tG5YEUYuYZUOS1rOJTTlaNk7IjhbX2ewsqbtAbihx5Fo7dW20BHetXo TYOo9F3Xlq/FXB6CWNaBGwQ4JZYa47GNSBZdmH13MfAPE7WEXzA1Skg/QfZ8NCVc vyHjGrWld7XnCjoSU9bMPr53Ltr5i9Zgqu0qwMHxld44tkH46tgDtvZzs0MTuEZC Suvq75TtCHoHfzT3FnZh8pCilJawg5GeGkyq1vG/BvHWbSlXkxS65mwzHyEPG99q 4U67oKGx6fSyMxitBdgUmHvrK0ST1ZBfZXe8Dgaexhi7ZQPQsRs74Wn8nQuvBzFb BIigthixbR7lGpvB3hfXr33DWQ== -----END CERTIFICATE-----Generated at Thu Mar 26 10:49:10 2026 by rpki-client