$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft File: cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json) Hash identifier: e4RyL/NY0KMwzq3vJ4509oJ/ttTIt8y3VdhtKVG2jU8= Subject key identifier: 66:E3:DA:04:8A:32:F9:BC:38:13:34:2F:99:A6:AA:8F:A1:95:ED:5F Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 Certificate issuer: /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Certificate serial: 0C3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft Manifest number: 0C26 Signing time: Mon 02 Mar 2026 00:35:37 +0000 Manifest this update: Mon 02 Mar 2026 00:35:35 +0000 Manifest next update: Mon 09 Mar 2026 00:35:35 +0000 Files and hashes: 1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: UQhKljiR6UUIXyzsKzJ2L9aY/aFhUOJzTKHLi4feHHA=) 2: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: 6MBuRcB02GtiYUBvJ02SIBDjH2QM+fC5ns7ciouEVr4=) 3: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: OjXelywDvs3PcA0G5eAXOiCmYLOHa7gJb/8woUyNMgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3133 (0xc3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Validity Not Before: Mar 2 00:35:35 2026 GMT Not After : Mar 9 00:35:35 2026 GMT Subject: CN=69a4db59-314a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:08:84:b6:87:c0:65:dc:b5:4c:b0:49:00:85: dd:99:54:56:57:3b:b9:df:52:36:69:1b:6f:95:76: 86:c8:5e:d0:c9:bc:19:8c:3c:93:72:3f:84:a8:01: 1b:b3:18:bf:0f:d2:b7:60:6f:1b:e9:7d:c2:fb:b3: 37:7b:07:ab:b8:08:df:c0:d7:e0:cb:e8:d5:b0:db: 62:2b:f7:5d:77:b3:e7:52:e3:18:d5:11:5b:c2:3b: 1a:25:5b:d7:94:43:32:a4:dc:ff:c0:84:99:0c:b2: 3e:3b:2c:f0:49:95:77:38:f1:86:e0:0e:8f:79:58: c9:f4:db:8d:7a:bb:0e:25:a8:a9:a1:dc:d5:0a:e2: ae:55:17:30:74:e8:83:d7:b5:e3:91:89:06:f5:9a: 24:72:27:69:69:f9:9a:a8:16:5a:28:ba:82:b1:d3: 93:de:f5:b4:ee:0f:ce:e9:a6:6a:d4:f7:94:fb:74: bf:1b:cf:61:e4:4c:dd:3e:c9:f7:f1:2f:7b:15:6c: fb:03:d4:5c:53:a6:39:b1:b3:fd:0e:29:29:73:9a: 1d:9a:be:d5:73:17:f7:f2:3a:f4:59:fb:5f:6f:54: 8d:4a:48:a2:87:b7:51:af:7a:32:66:0e:59:f7:55: 82:37:27:9f:d9:11:44:e0:1c:91:d1:14:9c:7a:4c: 35:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E3:DA:04:8A:32:F9:BC:38:13:34:2F:99:A6:AA:8F:A1:95:ED:5F X509v3 Authority Key Identifier: keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:4f:96:f9:0f:e1:1e:02:36:cd:11:a6:7e:c5:55:6c:8a:1f: d6:1f:78:a8:e6:81:63:da:25:6f:62:f0:b8:6f:86:ac:72:fd: 36:78:fb:ad:1f:de:cc:27:68:64:4c:a4:91:d1:46:6b:95:ec: c8:a1:4b:4f:39:54:83:2c:b6:06:6a:ab:01:f2:6f:fd:03:78: 01:ca:22:fc:e6:9b:ed:f8:d8:50:bd:f4:72:4b:e7:11:3c:ae: 91:8f:d4:83:47:9c:26:14:52:28:f3:a3:59:c4:39:ea:8c:a5: 4a:8e:f3:06:d3:91:52:a5:3e:28:87:34:b6:2b:03:0e:5c:3c: 5e:35:c3:0b:37:fe:0e:bb:0d:fe:6b:40:a6:5f:7d:c9:fe:11: 43:0c:01:ea:d8:47:87:1b:ef:0b:7f:ca:6c:37:8d:97:5d:0a: 9a:29:8d:bf:1e:c1:4e:3c:75:4f:be:d5:fa:f7:24:fb:a3:29: 01:0d:89:e9:a6:5f:40:af:8b:8c:8f:a1:93:47:94:66:cb:3a: ef:1e:2d:79:fa:98:a0:cc:bd:01:de:21:a8:d2:3e:8e:e7:5f: 98:b4:c1:94:35:b2:8e:a5:b7:86:37:33:97:c2:77:8d:64:b7: 22:44:c6:43:83:09:65:d9:4c:9c:aa:7d:99:78:4c:ff:19:e7: c4:d5:70:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyMEIxMTAvBgNVBAUTKDcwNDZGODk4M0RGQzM3MDRCNkU1Q0Q3RUExMjgwRkQw RjUyOTc5QTAwHhcNMjYwMzAyMDAzNTM1WhcNMjYwMzA5MDAzNTM1WjAYMRYwFAYD VQQDEw02OWE0ZGI1OS0zMTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygiEtofAZdy1TLBJAIXdmVRWVzu531I2aRtvlXaGyF7QybwZjDyTcj+EqAEb sxi/D9K3YG8b6X3C+7M3eweruAjfwNfgy+jVsNtiK/ddd7PnUuMY1RFbwjsaJVvX lEMypNz/wISZDLI+OyzwSZV3OPGG4A6PeVjJ9NuNersOJaipodzVCuKuVRcwdOiD 17XjkYkG9ZokcidpafmaqBZaKLqCsdOT3vW07g/O6aZq1PeU+3S/G89h5EzdPsn3 8S97FWz7A9RcU6Y5sbP9Dikpc5odmr7Vcxf38jr0Wftfb1SNSkiih7dRr3oyZg5Z 91WCNyef2RFE4ByR0RScekw1BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGbj2gSK Mvm8OBM0L5mmqo+hle1fMB8GA1UdIwQYMBaAFHBG+Jg9/DcEtuXNfqEoD9D1KXmg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzIwQi8wRkZGN0FBQTI3 QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53UzI1YzEtb1NnUDBQVXBl YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFYjRtRDM4TndTMjVjMS1vU2dQMFBVcGVhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzIwQi8wRkZGN0FBQTI3QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53 UzI1YzEtb1NnUDBQVXBlYUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhk+W+Q/hHgI2zRGmfsVVbIof1h94qOaBY9olb2LwuG+GrHL9Nnj7rR/ezCdo ZEykkdFGa5XsyKFLTzlUgyy2BmqrAfJv/QN4Acoi/Oab7fjYUL30ckvnETyukY/U g0ecJhRSKPOjWcQ56oylSo7zBtORUqU+KIc0tisDDlw8XjXDCzf+DrsN/mtApl99 yf4RQwwB6thHhxvvC3/KbDeNl10KmimNvx7BTjx1T77V+vck+6MpAQ2J6aZfQK+L jI+hk0eUZss67x4tefqYoMy9Ad4hqNI+judfmLTBlDWyjqW3hjczl8J3jWS3IkTG Q4MJZdlMnKp9mXhM/xnnxNVwCQ== -----END CERTIFICATE-----Generated at Mon Mar 2 19:54:31 2026 by rpki-client