$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft File: gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft (raw, json) Hash identifier: rCTbHdLRqfStmgn8bQcXNyCQLf/PMwdy6qlI0gfs8/g= Subject key identifier: B3:80:0C:37:04:CC:50:98:25:43:D6:9C:00:A8:3C:0B:55:FD:D7:13 Authority key identifier: 81:2F:F0:DE:1C:34:41:46:3C:C9:5C:A8:84:23:BE:5A:10:AD:B1:74 Certificate issuer: /CN=A914E4E2/serialNumber=812FF0DE1C3441463CC95CA88423BE5A10ADB174 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft Manifest number: 2C Signing time: Mon 02 Mar 2026 13:59:15 +0000 Manifest this update: Mon 02 Mar 2026 13:59:15 +0000 Manifest next update: Mon 09 Mar 2026 13:59:15 +0000 Files and hashes: 1: gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl (hash: 4VjdlD1iqyTfHWPUDyGhuFpSxy2GxJUWQ3g9ODl/HzU=) 2: 6F81A4F8E64811F09CAB54BE376F56BC.roa (hash: kTGqoANe0FuZnU39X94Ie/hbapSgOp3eh2oaDxbXHwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E4E2, serialNumber=812FF0DE1C3441463CC95CA88423BE5A10ADB174 Validity Not Before: Mar 2 13:59:15 2026 GMT Not After : Mar 9 13:59:15 2026 GMT Subject: CN=69a597b3-02ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:2e:25:83:0c:37:ef:65:26:09:94:53:cb: dc:83:fa:56:38:ef:af:c1:3e:63:bf:e8:ad:76:a9: f8:4e:80:97:63:e2:1e:12:19:b1:c2:b7:23:3f:1a: 27:60:1f:c3:c9:ce:d6:9c:05:f1:c0:0e:0d:49:1e: a1:e4:d2:74:2f:b1:eb:68:4e:77:d4:b7:ac:a4:90: 89:69:d1:de:be:18:86:37:a0:cc:66:6a:e4:77:c3: 8a:6a:6a:9e:54:7b:53:d9:69:3e:fa:d1:75:ed:55: a2:9e:90:a7:57:e5:9e:6c:e2:a7:d3:44:d4:62:c2: b9:68:f5:1f:20:00:b4:2a:b0:b9:5c:0f:f1:0f:c1: 64:35:e2:8d:ab:aa:9a:a9:1d:a9:d7:6e:6c:ba:5f: 56:f7:a6:5e:8e:fc:bd:1c:6e:ff:75:02:2c:f0:c8: 71:24:c5:b2:ce:7e:06:6a:19:d3:3c:8c:19:61:ec: 04:d8:99:74:e3:98:ff:25:c8:69:b2:fd:c8:55:aa: b6:92:63:d8:18:b0:86:71:6e:bb:68:7a:01:aa:ae: 21:fd:b7:4b:d8:ef:b1:ef:f0:46:86:ac:5c:90:8e: 86:dd:7c:6e:81:ae:29:e2:12:c1:4b:d2:ed:01:35: 01:8f:fd:82:06:57:97:71:16:a2:7e:ae:e4:e9:69: 9d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:80:0C:37:04:CC:50:98:25:43:D6:9C:00:A8:3C:0B:55:FD:D7:13 X509v3 Authority Key Identifier: keyid:81:2F:F0:DE:1C:34:41:46:3C:C9:5C:A8:84:23:BE:5A:10:AD:B1:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a7:97:8b:48:06:1d:e3:af:55:4d:ed:d5:80:5d:ba:8c:60: 11:e4:77:ee:16:f0:b2:fd:6d:1c:62:f8:86:41:c7:05:50:d0: 70:05:5f:c2:9c:f6:b7:f1:60:a4:3d:91:e7:3c:f9:89:25:ae: 0c:3c:b7:ea:ce:fd:f6:75:13:75:83:98:80:e3:fb:87:c7:7c: 6a:d2:21:de:d2:73:be:5c:44:47:40:30:b1:23:11:4f:3a:3b: f6:84:19:9a:03:80:03:e9:19:16:5b:47:6d:ea:78:84:0d:96: 0a:0a:8e:5e:b3:e0:84:4d:cc:37:e1:73:34:d8:4a:9b:b7:be: 77:a2:6e:d8:87:73:fa:60:cb:5c:03:b7:40:c4:79:af:6b:62: f0:4c:0b:32:05:2c:10:1b:56:a7:db:4f:53:15:34:85:0a:2c: 2b:80:52:71:9f:25:5c:9e:06:24:e5:0d:24:76:0c:6a:33:b9: 71:bd:ea:49:bf:4a:49:90:4f:92:21:4e:b4:c2:7d:15:4d:3e: 3b:d5:06:25:5c:64:5e:ae:0e:10:19:64:8c:79:d2:a8:d5:0d: 35:0b:8c:cc:b7:4b:dc:e6:79:3a:db:f1:e7:ed:21:80:0c:8d: 5d:eb:20:f0:9b:33:ec:0b:0c:f0:7f:c9:d6:b0:23:2d:8d:6a: 5e:4a:f6:07 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTRFMjExMC8GA1UEBRMoODEyRkYwREUxQzM0NDE0NjNDQzk1Q0E4ODQyM0JFNUEx MEFEQjE3NDAeFw0yNjAzMDIxMzU5MTVaFw0yNjAzMDkxMzU5MTVaMBgxFjAUBgNV BAMTDTY5YTU5N2IzLTAyYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwjC4lgww372UmCZRTy9yD+lY476/BPmO/6K12qfhOgJdj4h4SGbHCtyM/Gidg H8PJztacBfHADg1JHqHk0nQvsetoTnfUt6ykkIlp0d6+GIY3oMxmauR3w4pqap5U e1PZaT760XXtVaKekKdX5Z5s4qfTRNRiwrlo9R8gALQqsLlcD/EPwWQ14o2rqpqp HanXbmy6X1b3pl6O/L0cbv91AizwyHEkxbLOfgZqGdM8jBlh7ATYmXTjmP8lyGmy /chVqraSY9gYsIZxbrtoegGqriH9t0vY77Hv8EaGrFyQjobdfG6BriniEsFL0u0B NQGP/YIGV5dxFqJ+ruTpaZ3DAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUs4AMNwTM UJglQ9acAKg8C1X91xMwHwYDVR0jBBgwFoAUgS/w3hw0QUY8yVyohCO+WhCtsXQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFNEUyLzQxQ0U5REVFREFG QTExRjA5QUY2MTYyMDdDRDM2NDFEL2dTX3czaHcwUVVZOHlWeW9oQ08tV2hDdHNY US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ1NfdzNodzBRVVk4eVZ5b2hDTy1XaEN0c1hRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF NEUyLzQxQ0U5REVFREFGQTExRjA5QUY2MTYyMDdDRDM2NDFEL2dTX3czaHcwUVVZ OHlWeW9oQ08tV2hDdHNYUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBcp5eLSAYd469VTe3VgF26jGAR5HfuFvCy/W0cYviGQccFUNBwBV/CnPa38WCk PZHnPPmJJa4MPLfqzv32dRN1g5iA4/uHx3xq0iHe0nO+XERHQDCxIxFPOjv2hBma A4AD6RkWW0dt6niEDZYKCo5es+CETcw34XM02Eqbt753om7Yh3P6YMtcA7dAxHmv a2LwTAsyBSwQG1an209TFTSFCiwrgFJxnyVcngYk5Q0kdgxqM7lxvepJv0pJkE+S IU60wn0VTT471QYlXGRerg4QGWSMedKo1Q01C4zMt0vc5nk62/Hn7SGADI1d6yDw mzPsCwzwf8nWsCMtjWpeSvYH -----END CERTIFICATE-----Generated at Mon Mar 2 17:17:06 2026 by rpki-client