$ rpki-client -vvf rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft File: GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft (raw, json) Hash identifier: OxO796OZAtASoCmQ8XbTnl+kwgaIgadJgIWQtPylPhU= Subject key identifier: 41:9A:A1:D1:3B:B7:56:81:2B:27:B0:95:E7:3C:3B:79:3D:B5:59:B4 Authority key identifier: 19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36 Certificate issuer: /CN=A919400C/serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636 Certificate serial: 06AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft Manifest number: 069B Signing time: Mon 02 Mar 2026 01:36:02 +0000 Manifest this update: Mon 02 Mar 2026 01:35:57 +0000 Manifest next update: Mon 09 Mar 2026 01:35:57 +0000 Files and hashes: 1: GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl (hash: ztXssytT63XjrdDNwpT/v4cXEyqoYtw0JyQZDIoDu0Q=) 2: 3D83702E66CB11EFA2A66984C4F9AE02.roa (hash: +NAtERqXI5BWv3l66N7WKi+JxVXdhJ8+OhvCCk1pDS8=) 3: B945FB7A386011F0A5422D16C4F9AE02.roa (hash: v8tFqSyD/yC8tPwLNMdLmpUz08abpzsc7HAxSyXgJBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1709 (0x6ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919400C, serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636 Validity Not Before: Mar 2 01:35:57 2026 GMT Not After : Mar 9 01:35:57 2026 GMT Subject: CN=69a4e981-582d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:53:fb:5c:00:9c:45:fd:41:8a:6e:81:80:09: 09:ca:f6:3a:57:12:c0:70:f5:2e:41:09:2a:0c:83: ad:cb:80:6a:ce:b2:69:cf:54:48:4c:2e:26:bb:fb: 01:e5:de:c1:f5:b4:2a:f4:a5:43:68:ce:8a:71:2c: 9d:1a:e8:04:b9:f0:ea:28:e0:5c:f0:c7:90:bd:3b: 38:e9:b3:1d:9a:f7:d5:45:ce:13:52:d1:09:19:4d: 08:35:81:42:48:47:e6:bf:b5:67:fd:73:7c:3d:27: 5e:09:f4:c9:2b:98:bd:56:dc:e4:83:cf:50:c2:75: 8f:68:85:e1:dc:c0:22:de:2f:9e:82:74:56:07:e4: 52:a0:c2:2a:b5:d2:30:60:ac:41:f4:93:6e:6a:ad: 4a:c6:bf:cd:f8:a0:24:62:22:f1:c4:4c:39:c7:51: cf:80:1a:29:e7:96:b8:86:0a:80:3d:e6:02:bc:87: 9c:dc:ae:5d:3c:53:ec:ab:1f:1e:e8:ed:e6:06:fb: c6:a8:d2:45:63:bf:a6:40:b3:70:19:34:2f:e1:62: 0f:67:da:a3:8f:15:7a:d2:48:57:f3:42:ad:82:8d: 8c:76:e5:74:36:cc:36:0f:92:b5:3d:f4:d2:8c:a7: 3e:8f:db:3e:d0:f9:49:12:f2:77:97:4d:4a:46:ff: be:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9A:A1:D1:3B:B7:56:81:2B:27:B0:95:E7:3C:3B:79:3D:B5:59:B4 X509v3 Authority Key Identifier: keyid:19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:7b:cd:db:46:a8:e9:58:39:cd:96:a5:05:5d:50:cb:dc:df: 5a:8f:ad:d1:b2:08:d4:70:a5:df:a2:f8:72:ac:7f:f9:07:38: 37:26:84:b6:13:0f:d4:00:e9:94:48:99:09:32:37:ae:00:be: 15:36:23:b4:73:01:97:c7:5f:e0:5f:4f:3a:4a:63:21:bf:38: de:58:f9:28:6f:3b:65:1b:94:a0:a0:2c:f6:12:3b:55:3a:0e: 42:9a:af:b3:22:e6:c9:a4:93:b2:bd:55:61:48:94:78:59:38: 89:6a:e4:40:c5:51:81:6f:06:1d:68:97:95:e2:b2:1e:d9:a4: 51:ff:4b:f6:81:47:8e:01:ff:8d:04:b0:6b:53:c5:31:7e:73: 3b:91:db:12:5d:01:fd:f6:19:5e:b6:96:c4:e0:8e:2d:7f:16: 8c:f5:bf:66:c3:99:12:a5:ba:8d:ef:93:2a:b8:7c:ca:45:8d: d5:e1:56:44:c0:f9:6d:e8:68:01:d9:c0:7f:3c:fb:f4:97:4b: 65:93:39:df:8f:bd:a1:b9:f1:6b:ee:3c:61:d2:34:a2:58:b6: ae:bf:68:8a:0c:15:01:7c:ef:d1:26:a1:7b:25:e1:8e:bb:2b: d6:20:ca:32:04:4f:01:64:e8:fe:e3:65:98:b6:cb:7c:ee:46: d3:45:da:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQwMEMxMTAvBgNVBAUTKDE5NUIyNjdENkQxNTNBRjdEMDJCNkJFQjIyQ0UxNTkz RDkyNUI2MzYwHhcNMjYwMzAyMDEzNTU3WhcNMjYwMzA5MDEzNTU3WjAYMRYwFAYD VQQDEw02OWE0ZTk4MS01ODJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlP7XACcRf1Bim6BgAkJyvY6VxLAcPUuQQkqDIOty4BqzrJpz1RITC4mu/sB 5d7B9bQq9KVDaM6KcSydGugEufDqKOBc8MeQvTs46bMdmvfVRc4TUtEJGU0INYFC SEfmv7Vn/XN8PSdeCfTJK5i9Vtzkg89QwnWPaIXh3MAi3i+egnRWB+RSoMIqtdIw YKxB9JNuaq1Kxr/N+KAkYiLxxEw5x1HPgBop55a4hgqAPeYCvIec3K5dPFPsqx8e 6O3mBvvGqNJFY7+mQLNwGTQv4WIPZ9qjjxV60khX80Ktgo2MduV0Nsw2D5K1PfTS jKc+j9s+0PlJEvJ3l01KRv++EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEGaodE7 t1aBKyewlec8O3k9tVm0MB8GA1UdIwQYMBaAFBlbJn1tFTr30Ctr6yLOFZPZJbY2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDAwQy9DM0VDRDk2OEE2 NzQxMUVCOEM0MzIyNkZDNEY5QUUwMi9HVnNtZlcwVk92ZlFLMnZySXM0Vms5a2x0 alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dWc21mVzBWT3ZmUUsydnJJczRWazlrbHRqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDAwQy9DM0VDRDk2OEE2NzQxMUVCOEM0MzIyNkZDNEY5QUUwMi9HVnNtZlcwVk92 ZlFLMnZySXM0Vms5a2x0alkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbnvN20ao6Vg5zZalBV1Qy9zfWo+t0bII1HCl36L4cqx/+Qc4NyaEthMP1ADp lEiZCTI3rgC+FTYjtHMBl8df4F9POkpjIb843lj5KG87ZRuUoKAs9hI7VToOQpqv syLmyaSTsr1VYUiUeFk4iWrkQMVRgW8GHWiXleKyHtmkUf9L9oFHjgH/jQSwa1PF MX5zO5HbEl0B/fYZXraWxOCOLX8WjPW/ZsOZEqW6je+TKrh8ykWN1eFWRMD5beho AdnAfzz79JdLZZM534+9obnxa+48YdI0oli2rr9oigwVAXzv0SaheyXhjrsr1iDK MgRPAWTo/uNlmLbLfO5G00XazQ== -----END CERTIFICATE-----Generated at Mon Mar 2 10:54:22 2026 by rpki-client