$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft File: GcmgwhkwwW6kFprC6-3H5snXtS8.mft (raw, json) Hash identifier: dShKOyxXx6c4pu96oznNiHEMd/pPLYb4IlOAb4T0J3Q= Subject key identifier: 83:96:67:2E:18:F4:97:75:98:1F:7C:5F:EE:DB:9E:36:87:66:40:BF Authority key identifier: 19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F Certificate issuer: /CN=A916BCBA/serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft Manifest number: 3F Signing time: Fri 17 Apr 2026 08:14:26 +0000 Manifest this update: Fri 17 Apr 2026 08:14:26 +0000 Manifest next update: Fri 24 Apr 2026 08:14:26 +0000 Files and hashes: 1: GcmgwhkwwW6kFprC6-3H5snXtS8.crl (hash: wzNEngB1z49l3S8disWb6bIZM+/3l7mBm2WN6LBxiDY=) 2: FAFCF5C4E8D111F0BEA778E4616F56BC.roa (hash: hw46GZqTqfjXwDHxT7HupOClnkJFY7kri3rb/x0rAqQ=) 3: 167F2222E8D211F091D937E6616F56BC.roa (hash: hqoxp1DZQxlSqrDmlnlQZc0fxw5C7ZE4Da6abuSlt+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BCBA, serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F Validity Not Before: Apr 17 08:14:26 2026 GMT Not After : Apr 24 08:14:26 2026 GMT Subject: CN=69e1ebe2-9c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a3:3b:55:1a:87:c7:43:ef:f1:7c:62:55:05: 93:33:8c:c7:3d:ed:fb:47:1c:d8:48:e0:a7:d2:60: 1e:fe:3a:1e:1b:d4:15:d3:06:44:50:e9:a1:86:6f: 25:9b:61:f6:81:09:1a:2f:8d:7e:1f:e1:53:ed:98: 74:f7:e1:d1:92:57:c3:8c:e3:60:bb:90:2b:c4:9c: a6:48:0e:dd:fc:a7:22:d0:a9:09:2f:39:fd:1b:1b: 27:5b:33:5e:ed:4e:c4:d0:49:4b:4d:b0:89:25:c0: 20:b6:6d:01:0b:6c:0f:98:db:e5:8f:23:c3:88:b4: aa:9a:6b:be:52:2e:99:cf:4d:66:de:ab:fa:3a:70: 63:c5:87:96:d5:db:b8:68:88:68:82:bd:82:88:27: 03:6b:74:c8:84:54:08:7e:26:8e:c1:9a:32:8e:ac: b0:fd:dc:53:f6:a8:1f:55:62:a0:18:9c:45:df:ed: 6e:ab:6c:e7:40:55:d1:6d:6e:13:62:df:f4:d0:8d: a8:5a:2b:1f:0a:f8:5d:2b:76:56:35:3f:2f:83:34: 93:c0:f1:36:cc:de:3f:a5:75:81:74:be:3e:7d:21: 1f:e0:9d:b3:66:48:37:4c:c4:44:c4:64:69:82:5e: ec:b9:58:f9:81:33:03:c6:76:b6:18:a3:9c:15:68: 38:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:96:67:2E:18:F4:97:75:98:1F:7C:5F:EE:DB:9E:36:87:66:40:BF X509v3 Authority Key Identifier: keyid:19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:c3:e8:ce:bd:5c:38:32:a1:fa:e6:05:1d:ad:7c:43:0f:97: 9e:42:3e:7f:2f:e1:b8:5a:aa:c1:e9:fb:c1:a6:3a:02:f2:8c: 7b:9d:bf:87:2d:55:b9:c7:52:68:6f:2d:9a:dd:e4:24:dc:20: 7e:ca:cf:fe:82:1a:22:5d:ae:b9:6f:fc:9e:aa:91:69:43:88: b9:b8:ac:95:0f:f2:fa:05:39:74:7a:5d:39:66:19:59:b5:77: 21:c6:48:2d:7d:e2:26:f0:e3:37:2a:88:5f:38:bb:95:9e:6f: 50:60:84:d2:53:45:ed:c0:88:cc:0f:b9:d4:5a:9f:ec:ca:d9: f3:0e:da:91:c1:17:9e:7d:40:c8:e4:eb:39:05:4a:f9:bd:61: f8:6d:f3:aa:0b:70:3c:23:0f:53:86:b7:77:a3:5e:1e:5b:9f: 2e:57:77:0f:92:a6:fd:65:79:82:d8:ef:67:5d:ee:69:3c:c8: 89:60:ff:7c:eb:95:57:11:f2:e4:75:d5:d6:f7:d7:3e:d7:49: 3c:6b:e3:43:03:36:43:f6:cf:53:b5:1b:e1:1d:3a:e3:08:54: 8d:d2:5f:51:c6:20:f9:1d:18:b2:8d:8b:4b:84:dd:3e:e3:3a: 2a:bc:df:8f:e1:40:1c:d7:52:e3:01:f2:cf:64:4f:93:6f:d6: 87:a9:0b:22 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QkNCQTExMC8GA1UEBRMoMTlDOUEwQzIxOTMwQzE2RUE0MTY5QUMyRUJFREM3RTZD OUQ3QjUyRjAeFw0yNjA0MTcwODE0MjZaFw0yNjA0MjQwODE0MjZaMBgxFjAUBgNV BAMTDTY5ZTFlYmUyLTljMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmoztVGofHQ+/xfGJVBZMzjMc97ftHHNhI4KfSYB7+Oh4b1BXTBkRQ6aGGbyWb YfaBCRovjX4f4VPtmHT34dGSV8OM42C7kCvEnKZIDt38pyLQqQkvOf0bGydbM17t TsTQSUtNsIklwCC2bQELbA+Y2+WPI8OItKqaa75SLpnPTWbeq/o6cGPFh5bV27ho iGiCvYKIJwNrdMiEVAh+Jo7BmjKOrLD93FP2qB9VYqAYnEXf7W6rbOdAVdFtbhNi 3/TQjahaKx8K+F0rdlY1Py+DNJPA8TbM3j+ldYF0vj59IR/gnbNmSDdMxETEZGmC Xuy5WPmBMwPGdrYYo5wVaDgtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUg5ZnLhj0 l3WYH3xf7tueNodmQL8wHwYDVR0jBBgwFoAUGcmgwhkwwW6kFprC6+3H5snXtS8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCQ0JBLzM0MDBDNzE4RTYy QzExRjA5NzZBOTVGQjZGNkY1NkJDL0djbWd3aGt3d1c2a0ZwckM2LTNINXNuWHRT OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2NtZ3doa3d3VzZrRnByQzYtM0g1c25YdFM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC Q0JBLzM0MDBDNzE4RTYyQzExRjA5NzZBOTVGQjZGNkY1NkJDL0djbWd3aGt3d1c2 a0ZwckM2LTNINXNuWHRTOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAiw+jOvVw4MqH65gUdrXxDD5eeQj5/L+G4WqrB6fvBpjoC8ox7nb+HLVW5x1Jo by2a3eQk3CB+ys/+ghoiXa65b/yeqpFpQ4i5uKyVD/L6BTl0el05ZhlZtXchxkgt feIm8OM3KohfOLuVnm9QYITSU0XtwIjMD7nUWp/sytnzDtqRwReefUDI5Os5BUr5 vWH4bfOqC3A8Iw9Thrd3o14eW58uV3cPkqb9ZXmC2O9nXe5pPMiJYP9865VXEfLk ddXW99c+10k8a+NDAzZD9s9TtRvhHTrjCFSN0l9RxiD5HRiyjYtLhN0+4zoqvN+P 4UAc11LjAfLPZE+Tb9aHqQsi -----END CERTIFICATE-----Generated at Fri Apr 17 14:49:05 2026 by rpki-client