$ rpki-client -vvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft File: gp8PQIhN2ZESEAWwfQmiy_-03sY.mft (raw, json) Hash identifier: j2iMMV9JNwug+g7RxYr+OU9zYBCVQw9X5D6Ol3s6r3w= Subject key identifier: 20:0A:AD:BE:6A:67:36:C4:E5:2F:43:53:CC:7C:64:4C:51:A9:82:60 Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6 Certificate issuer: /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6 Certificate serial: 0C9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft Manifest number: 0C85 Signing time: Tue 24 Mar 2026 18:26:12 +0000 Manifest this update: Tue 24 Mar 2026 18:26:12 +0000 Manifest next update: Tue 31 Mar 2026 18:26:12 +0000 Files and hashes: 1: gp8PQIhN2ZESEAWwfQmiy_-03sY.crl (hash: aenvewWuT8bjXC8LgnRUGli3d0JxznreeK919getLNM=) 2: 46D7B1B468F911EFAB3D9424C4F9AE02.roa (hash: EANYonIlLAQsD77itNqvU5Ar2XS9wRUAE//HQHxkYJ8=) 3: 2D2322ECF53111F0B165BC265F6F56BC.roa (hash: tZiy66LheF6UARgLL7DjkA4ZOPMuv3MTdVKtCblCRCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3231 (0xc9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A16CF, serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6 Validity Not Before: Mar 24 18:26:12 2026 GMT Not After : Mar 31 18:26:12 2026 GMT Subject: CN=69c2d744-fbbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:49:37:75:a0:ba:0d:37:0f:08:1b:cf:d1:fe: 63:c5:b3:54:f7:44:51:50:d0:60:05:fa:dd:3b:8e: 25:6d:f1:21:9d:88:1f:92:d2:3f:45:fb:dd:ff:a7: df:f0:05:19:5c:84:52:67:ea:b1:af:f4:04:df:e5: 4b:a4:fd:8b:ef:a5:c7:bc:8b:bd:9d:4e:a9:d2:78: 79:a9:49:97:9f:a1:ab:fd:7b:f6:ed:63:64:cf:bd: 8a:fd:8d:8d:a9:34:43:19:6e:37:3d:39:44:4c:67: 46:f5:b9:9b:ed:b3:53:04:e0:7f:e1:42:f3:82:68: e2:a7:e1:c7:7f:26:c4:3c:b7:2a:d2:1a:8e:27:18: 88:b7:bc:15:85:66:95:fc:42:5c:57:a1:2f:e4:a7: eb:ed:9a:12:5c:bd:a9:41:f2:b7:26:aa:b6:d8:64: e0:4a:61:ed:98:7c:89:66:ba:bc:1d:9c:2f:75:8a: 66:7f:ac:38:85:fb:de:b0:c9:f5:01:3f:ad:5c:e6: 57:cb:5b:55:59:e7:d9:9c:80:b8:e9:a4:ab:2a:76: eb:28:56:a9:91:66:55:5d:d5:e1:a2:38:b5:13:d1: c0:d2:bb:00:8b:a3:cc:7d:cd:88:db:39:36:43:18: ec:aa:0b:b4:2e:aa:b6:5f:66:73:e1:42:34:9f:d8: be:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0A:AD:BE:6A:67:36:C4:E5:2F:43:53:CC:7C:64:4C:51:A9:82:60 X509v3 Authority Key Identifier: keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f6:6f:bc:a2:5f:1e:eb:2d:88:14:f1:79:ee:f7:36:e6:30: a2:e3:ef:a6:ca:18:42:a8:f3:9c:5c:d5:cb:f8:f3:2b:c5:14: 8f:72:b2:d2:fb:03:e7:9a:a4:7f:23:0a:9c:4d:43:4e:f3:ce: 3e:f5:a3:de:58:ce:c1:7f:2e:58:a0:7b:e6:59:21:14:57:f0: c9:12:ea:f6:70:a5:77:c4:d5:a7:46:0a:2d:23:91:15:8d:2a: a1:71:ad:ff:3f:55:3e:b9:1c:2a:a0:c7:7d:f9:1a:f7:f2:75: 49:ab:ed:8d:48:e1:e4:14:91:ca:2a:63:15:04:a4:cb:dc:c7: 47:05:78:f0:d2:4e:cb:3a:03:9f:be:cc:f1:16:a8:a7:4e:84: cc:00:d5:52:72:68:d4:2c:5e:5a:af:0b:a6:99:91:c0:42:b3: aa:17:25:35:00:28:9c:1a:57:ff:33:09:f8:d3:dc:11:b5:17: 9f:d6:e9:eb:be:7a:88:8c:cf:23:fa:a0:05:48:91:be:d6:ba: db:e6:c6:ff:bd:e7:11:b5:a1:9e:17:60:df:01:c9:31:c9:9c: d0:47:06:ca:a3:4a:be:19:fc:39:de:44:13:ce:f5:3a:8b:d8: 08:96:ba:64:c0:13:9c:07:c4:42:03:8b:eb:ec:98:9e:f2:81: 42:ba:b6:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE2Q0YxMTAvBgNVBAUTKDgyOUYwRjQwODg0REQ5OTExMjEwMDVCMDdEMDlBMkNC RkZCNERFQzYwHhcNMjYwMzI0MTgyNjEyWhcNMjYwMzMxMTgyNjEyWjAYMRYwFAYD VQQDEw02OWMyZDc0NC1mYmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0k3daC6DTcPCBvP0f5jxbNU90RRUNBgBfrdO44lbfEhnYgfktI/Rfvd/6ff 8AUZXIRSZ+qxr/QE3+VLpP2L76XHvIu9nU6p0nh5qUmXn6Gr/Xv27WNkz72K/Y2N qTRDGW43PTlETGdG9bmb7bNTBOB/4ULzgmjip+HHfybEPLcq0hqOJxiIt7wVhWaV /EJcV6Ev5Kfr7ZoSXL2pQfK3Jqq22GTgSmHtmHyJZrq8HZwvdYpmf6w4hfvesMn1 AT+tXOZXy1tVWefZnIC46aSrKnbrKFapkWZVXdXhoji1E9HA0rsAi6PMfc2I2zk2 Qxjsqgu0Lqq2X2Zz4UI0n9i+FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCAKrb5q ZzbE5S9DU8x8ZExRqYJgMB8GA1UdIwQYMBaAFIKfD0CITdmREhAFsH0Josv/tN7G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTZDRi8yQ0FENTA4ODE5 QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJaRVNFQVd3ZlFtaXlfLTAz c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwOFBRSWhOMlpFU0VBV3dmUW1peV8tMDNzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTZDRi8yQ0FENTA4ODE5QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJa RVNFQVd3ZlFtaXlfLTAzc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADvZvvKJfHustiBTxee73NuYwouPvpsoYQqjznFzVy/jzK8UUj3Ky0vsD55qk fyMKnE1DTvPOPvWj3ljOwX8uWKB75lkhFFfwyRLq9nCld8TVp0YKLSORFY0qoXGt /z9VPrkcKqDHffka9/J1SavtjUjh5BSRyipjFQSky9zHRwV48NJOyzoDn77M8Rao p06EzADVUnJo1CxeWq8LppmRwEKzqhclNQAonBpX/zMJ+NPcEbUXn9bp6756iIzP I/qgBUiRvta62+bG/73nEbWhnhdg3wHJMcmc0EcGyqNKvhn8Od5EE871OovYCJa6 ZMATnAfEQgOL6+yYnvKBQrq21w== -----END CERTIFICATE-----Generated at Thu Mar 26 00:55:24 2026 by rpki-client