$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft File: GcmgwhkwwW6kFprC6-3H5snXtS8.mft (raw, json) Hash identifier: 1w+mSEusOgMRBpQl8tEkWCtoW6o9FslfdE8pFphWZGc= Subject key identifier: E1:AD:18:A9:09:B7:93:87:4F:04:58:01:3F:8E:B1:61:F1:36:86:26 Authority key identifier: 19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F Certificate issuer: /CN=A916BCBA/serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft Manifest number: 27 Signing time: Sun 01 Mar 2026 10:19:01 +0000 Manifest this update: Sun 01 Mar 2026 10:19:00 +0000 Manifest next update: Sun 08 Mar 2026 10:19:00 +0000 Files and hashes: 1: GcmgwhkwwW6kFprC6-3H5snXtS8.crl (hash: r/W11xW6Zs/I/f1G/pbR03Oo8droTtL2+nethIFk1b4=) 2: 167F2222E8D211F091D937E6616F56BC.roa (hash: hqoxp1DZQxlSqrDmlnlQZc0fxw5C7ZE4Da6abuSlt+s=) 3: FAFCF5C4E8D111F0BEA778E4616F56BC.roa (hash: hw46GZqTqfjXwDHxT7HupOClnkJFY7kri3rb/x0rAqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BCBA, serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F Validity Not Before: Mar 1 10:19:00 2026 GMT Not After : Mar 8 10:19:00 2026 GMT Subject: CN=69a41294-0d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:5b:a0:67:e3:7e:54:09:20:1c:fc:0f:c9:62: 5d:b1:1b:0c:b0:98:91:96:a1:a8:81:0f:f8:71:6e: c0:c9:44:06:7b:bc:78:b9:a4:a2:b3:63:65:25:06: f1:78:cc:27:e7:d9:5d:91:ce:af:cf:c7:8c:91:fa: d4:43:c5:67:40:f2:b4:bb:7b:f3:ab:d2:53:89:cd: 77:85:97:12:bc:e4:d6:ca:af:a1:73:92:f2:c9:c4: 4e:e8:90:a1:88:ee:59:23:d2:7d:fa:e2:8f:6c:8b: 07:d8:6b:7f:02:ca:6f:2c:31:49:20:79:c8:4a:13: 11:32:4b:8d:90:3e:de:94:f3:ce:8b:32:74:f1:d2: c5:53:8d:89:72:aa:da:81:c8:c9:8e:a3:78:f6:b9: 6c:3a:d2:12:3e:63:91:51:a1:82:44:63:1d:22:0b: 15:f1:31:fb:35:e3:aa:66:e1:dc:eb:0c:79:47:1b: 24:dc:99:57:77:d4:89:6a:ef:0a:7e:b4:6c:a3:18: f0:52:ee:11:94:15:16:3b:9b:7e:3d:aa:23:9a:35: 27:40:9f:6e:ec:23:22:f3:12:3f:91:99:2a:c7:97: f3:5b:fb:4e:52:c2:99:50:bb:27:af:43:dd:08:80: 3f:56:cb:8a:1d:83:a2:c9:0c:71:c8:db:ca:d0:a5: a7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AD:18:A9:09:B7:93:87:4F:04:58:01:3F:8E:B1:61:F1:36:86:26 X509v3 Authority Key Identifier: keyid:19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:15:8d:ad:02:0c:07:d6:e1:60:14:9d:6e:ff:95:e2:c9:e0: 36:d8:8f:8a:14:21:80:12:f6:f4:56:15:58:89:6a:21:c5:b9: 2c:c3:bb:75:b9:1b:a7:a2:bc:0e:dc:1a:da:6a:57:c5:19:12: b9:f6:ef:89:0a:d1:31:9e:3e:ec:9a:7f:19:b1:2b:2d:94:3e: 3f:09:95:02:27:1f:34:4d:d2:45:47:94:26:19:a8:4d:45:e8: c9:75:71:3d:71:67:43:11:0c:fa:cc:fb:fa:c2:28:36:55:92: ef:55:b7:21:5b:40:42:de:01:54:c3:6d:57:b3:d4:54:f1:b5: 5b:ef:59:52:3a:6d:3c:15:b5:28:eb:28:be:2f:73:1b:e1:60: 70:b8:fc:03:e9:b3:8f:40:4a:5b:04:1e:95:4f:8f:d8:45:e2: bc:d2:17:28:69:fc:b7:32:a4:3a:84:d1:cf:a4:c7:2c:0a:86: 16:ff:50:64:40:c0:9c:51:5e:f3:c8:6d:ab:af:9f:0e:f0:4e: 4f:cc:6c:0b:f6:cc:b2:4f:68:06:c9:ce:ca:77:63:16:93:67: 7a:b7:88:82:57:33:d6:3a:b8:a4:cc:9c:2d:20:87:77:94:94: 14:59:82:8f:69:3c:b4:59:4e:f8:d5:83:ef:25:fc:e0:be:17: 3b:60:c8:c5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QkNCQTExMC8GA1UEBRMoMTlDOUEwQzIxOTMwQzE2RUE0MTY5QUMyRUJFREM3RTZD OUQ3QjUyRjAeFw0yNjAzMDExMDE5MDBaFw0yNjAzMDgxMDE5MDBaMBgxFjAUBgNV BAMTDTY5YTQxMjk0LTBkNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvW6Bn435UCSAc/A/JYl2xGwywmJGWoaiBD/hxbsDJRAZ7vHi5pKKzY2UlBvF4 zCfn2V2Rzq/Px4yR+tRDxWdA8rS7e/Or0lOJzXeFlxK85NbKr6FzkvLJxE7okKGI 7lkj0n364o9siwfYa38Cym8sMUkgechKExEyS42QPt6U886LMnTx0sVTjYlyqtqB yMmOo3j2uWw60hI+Y5FRoYJEYx0iCxXxMfs146pm4dzrDHlHGyTcmVd31Ilq7wp+ tGyjGPBS7hGUFRY7m349qiOaNSdAn27sIyLzEj+RmSrHl/Nb+05SwplQuyevQ90I gD9Wy4odg6LJDHHI28rQpae1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4a0YqQm3 k4dPBFgBP46xYfE2hiYwHwYDVR0jBBgwFoAUGcmgwhkwwW6kFprC6+3H5snXtS8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCQ0JBLzM0MDBDNzE4RTYy QzExRjA5NzZBOTVGQjZGNkY1NkJDL0djbWd3aGt3d1c2a0ZwckM2LTNINXNuWHRT OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2NtZ3doa3d3VzZrRnByQzYtM0g1c25YdFM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC Q0JBLzM0MDBDNzE4RTYyQzExRjA5NzZBOTVGQjZGNkY1NkJDL0djbWd3aGt3d1c2 a0ZwckM2LTNINXNuWHRTOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCLFY2tAgwH1uFgFJ1u/5XiyeA22I+KFCGAEvb0VhVYiWohxbksw7t1uRunorwO 3BraalfFGRK59u+JCtExnj7smn8ZsSstlD4/CZUCJx80TdJFR5QmGahNRejJdXE9 cWdDEQz6zPv6wig2VZLvVbchW0BC3gFUw21Xs9RU8bVb71lSOm08FbUo6yi+L3Mb 4WBwuPwD6bOPQEpbBB6VT4/YReK80hcoafy3MqQ6hNHPpMcsCoYW/1BkQMCcUV7z yG2rr58O8E5PzGwL9syyT2gGyc7Kd2MWk2d6t4iCVzPWOrikzJwtIId3lJQUWYKP aTy0WU741YPvJfzgvhc7YMjF -----END CERTIFICATE-----Generated at Mon Mar 2 09:11:52 2026 by rpki-client