$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft File: T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft (raw, json) Hash identifier: A/CMgMKpKoVX5mwr+JwjjgRszt5bNzxMkn1QJGk2l6Y= Subject key identifier: 4E:B4:6C:F5:A2:88:3E:C0:E6:00:79:A2:70:2D:2E:5A:E5:5E:B3:AE Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 Certificate issuer: /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Certificate serial: 086E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft Manifest number: 14E8 Signing time: Sun 01 Mar 2026 23:45:10 +0000 Manifest this update: Sun 01 Mar 2026 23:45:08 +0000 Manifest next update: Sun 08 Mar 2026 23:45:08 +0000 Files and hashes: 1: T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl (hash: k0mBQfyxBCa6iODPTXD0KhFEQCz+uH1pVhZrg1D8L5Y=) 2: 3C73210E29E711F0AB5EBA80C4F9AE02.roa (hash: WaFe3SyyQFza6rob4551vLHEG9MjFm7GNFMpsJB01sU=) 3: F4075E7CF28611EF976CB83AC4F9AE02.roa (hash: 2XB9AUT5vQE1XXVh7JlV1lG+7wXXx67sWItW8OX0UI0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2158 (0x86e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Validity Not Before: Mar 1 23:45:08 2026 GMT Not After : Mar 8 23:45:08 2026 GMT Subject: CN=69a4cf86-76ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:dd:35:2e:18:4d:ae:18:42:8a:d2:ec:d4:f6: b3:5a:28:28:54:7d:19:ed:64:b8:02:a0:7d:42:01: 90:5b:9e:73:54:13:af:df:8c:c3:3a:ba:ba:c6:bb: 50:f3:d0:13:7a:d6:47:e8:a4:c5:0e:7e:33:04:38: 36:b1:ff:cd:b3:4a:fe:69:02:05:e7:ed:5b:9f:cf: de:36:11:ad:ea:8a:41:17:19:86:8f:4d:0e:e5:2c: 40:91:50:3d:8d:2b:9b:de:98:0d:69:ce:84:79:85: 14:36:21:7a:fe:d6:35:56:d7:8d:a4:79:4f:db:eb: 73:c2:3e:0b:51:29:c2:d2:d8:40:df:ab:69:50:af: 21:60:ff:c0:18:d4:68:eb:77:07:f0:10:ff:f4:c3: ac:9f:c2:ba:d4:80:9e:d5:68:7d:83:f4:90:b2:d3: 18:b2:73:b6:fa:93:85:28:38:44:d9:78:99:ee:ed: 55:5e:5b:01:31:eb:12:fa:fa:2a:da:eb:1b:04:04: 2a:3e:5d:5a:2f:80:0c:4e:a2:32:6e:47:2c:49:fc: e2:89:72:eb:a7:14:39:72:09:4e:01:5b:21:ff:ac: 9a:c8:27:d5:9b:38:6b:01:89:7f:25:b1:43:7b:b3: 23:84:d2:aa:ba:27:70:fd:28:c7:97:6d:02:14:10: 1d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B4:6C:F5:A2:88:3E:C0:E6:00:79:A2:70:2D:2E:5A:E5:5E:B3:AE X509v3 Authority Key Identifier: keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:5e:d3:ae:b3:e9:b4:68:50:1d:c1:87:75:28:d7:79:f7:71: a0:e9:ea:56:b0:59:0d:9c:c6:3b:7c:93:09:4b:d7:9c:de:19: f5:c1:50:2c:a2:dd:75:e4:f4:75:19:4b:97:4f:9f:99:3e:4f: af:57:d6:73:ca:b0:ae:a8:9f:6a:79:aa:44:c3:19:36:ef:d9: 7b:d3:c6:fe:88:ec:d1:e8:cf:f6:41:2e:f5:a5:07:31:51:43: ed:52:4f:70:29:c3:e9:a1:9e:3c:a9:dd:0e:6f:8e:4a:44:85: 14:50:de:a4:4f:3a:8a:14:1e:ea:d6:e6:de:6a:16:a7:51:e3: e7:fb:2f:d2:2e:63:06:0b:30:a0:2a:f8:c4:5f:69:6a:eb:31: fd:80:58:fc:b2:31:6a:74:40:7e:7d:3d:c4:bb:2d:79:84:a7: 16:66:14:35:81:6e:82:42:ce:e7:72:24:69:ad:dc:51:e3:75: 15:64:39:ff:82:d3:ba:55:63:b5:b7:71:27:fa:bd:34:9b:67: bd:07:61:98:59:d6:36:41:d0:1f:7e:f3:70:3e:32:90:09:2d: 8d:0d:c8:98:d4:91:47:4a:a3:36:e2:3b:af:a1:dd:e3:fe:75: 11:cd:87:c6:34:72:01:7f:fe:34:f0:01:83:3b:e4:79:a0:12: 44:68:0e:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDRGRkE1MjhDNkU0NjdFRDQ1OEY1MzVGQzVDNkREOURC RUQwQ0U3MzcwHhcNMjYwMzAxMjM0NTA4WhcNMjYwMzA4MjM0NTA4WjAYMRYwFAYD VQQDEw02OWE0Y2Y4Ni03NmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3901LhhNrhhCitLs1PazWigoVH0Z7WS4AqB9QgGQW55zVBOv34zDOrq6xrtQ 89ATetZH6KTFDn4zBDg2sf/Ns0r+aQIF5+1bn8/eNhGt6opBFxmGj00O5SxAkVA9 jSub3pgNac6EeYUUNiF6/tY1VteNpHlP2+tzwj4LUSnC0thA36tpUK8hYP/AGNRo 63cH8BD/9MOsn8K61ICe1Wh9g/SQstMYsnO2+pOFKDhE2XiZ7u1VXlsBMesS+voq 2usbBAQqPl1aL4AMTqIybkcsSfziiXLrpxQ5cglOAVsh/6yayCfVmzhrAYl/JbFD e7MjhNKquidw/SjHl20CFBAduwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE60bPWi iD7A5gB5onAtLlrlXrOuMB8GA1UdIwQYMBaAFE/6UoxuRn7UWPU1/Fxt2dvtDOc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0Ulk5VFg4WEczWjItME01 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfcFNqRzVHZnRSWTlUWDhYRzNaMi0wTTV6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0 Ulk5VFg4WEczWjItME01emMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjF7TrrPptGhQHcGHdSjXefdxoOnqVrBZDZzGO3yTCUvXnN4Z9cFQLKLddeT0 dRlLl0+fmT5Pr1fWc8qwrqifanmqRMMZNu/Ze9PG/ojs0ejP9kEu9aUHMVFD7VJP cCnD6aGePKndDm+OSkSFFFDepE86ihQe6tbm3moWp1Hj5/sv0i5jBgswoCr4xF9p ausx/YBY/LIxanRAfn09xLsteYSnFmYUNYFugkLO53Ikaa3cUeN1FWQ5/4LTulVj tbdxJ/q9NJtnvQdhmFnWNkHQH37zcD4ykAktjQ3ImNSRR0qjNuI7r6Hd4/51Ec2H xjRyAX/+NPABgzvkeaASRGgOEA== -----END CERTIFICATE-----Generated at Mon Mar 2 09:15:44 2026 by rpki-client