$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft File: GcmgwhkwwW6kFprC6-3H5snXtS8.mft (raw, json) Hash identifier: IR0ualdxLNgIGcG1ofTnz/N0UN9eJSY+DIMTLu4BpQw= Subject key identifier: 1C:25:BA:24:92:E9:44:B2:CE:AE:04:A7:2B:25:BF:44:04:61:50:63 Authority key identifier: 19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F Certificate issuer: /CN=A916BCBA/serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft Manifest number: 28 Signing time: Tue 03 Mar 2026 08:29:27 +0000 Manifest this update: Tue 03 Mar 2026 08:29:27 +0000 Manifest next update: Tue 10 Mar 2026 08:29:27 +0000 Files and hashes: 1: GcmgwhkwwW6kFprC6-3H5snXtS8.crl (hash: PfiKpO3qbPmvS1yEIfanqHFIADGDaeZFAFjhiKLPO7A=) 2: FAFCF5C4E8D111F0BEA778E4616F56BC.roa (hash: hw46GZqTqfjXwDHxT7HupOClnkJFY7kri3rb/x0rAqQ=) 3: 167F2222E8D211F091D937E6616F56BC.roa (hash: hqoxp1DZQxlSqrDmlnlQZc0fxw5C7ZE4Da6abuSlt+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BCBA, serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F Validity Not Before: Mar 3 08:29:27 2026 GMT Not After : Mar 10 08:29:27 2026 GMT Subject: CN=69a69be7-704e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:80:a8:8d:56:3d:7e:74:38:49:b0:32:d8:0f: b9:ad:52:38:60:d3:13:2e:67:8b:80:7b:09:30:5d: 77:5e:80:31:f2:5f:e1:a5:9a:06:c7:cb:30:8c:ce: 50:4e:78:ee:58:8d:90:2a:d2:e2:76:1c:81:11:71: 74:b5:65:76:06:2f:bd:00:65:50:f7:24:58:46:ef: c9:8b:77:39:61:65:96:1c:e4:0f:a8:2c:a5:68:c0: 39:97:6e:0b:d4:98:ac:a1:69:e9:d4:dd:58:81:c8: c8:1c:55:f3:22:f0:80:a0:ab:26:38:26:ad:8c:d6: a0:24:40:49:30:74:5e:19:b0:d8:b8:4d:41:96:e5: a1:f2:fb:a2:91:f9:43:bd:c1:b1:4e:b9:70:c9:ba: ad:96:41:7e:91:f1:bb:40:0e:49:8a:77:5e:68:9a: d0:44:51:e4:d7:8c:5d:58:6f:f6:79:7b:e4:60:1c: 07:fd:2f:d2:fb:c0:8c:5b:88:57:47:ee:d5:e4:ea: 8b:c5:90:93:b1:c4:b1:af:a2:60:42:97:f0:65:90: ce:da:d4:f7:1f:69:91:9c:8d:a0:1a:4f:f7:10:88: 92:42:a5:d4:96:21:ba:81:be:25:f0:3b:bd:e6:2b: 36:f1:9e:2d:ae:42:4d:3a:f4:40:0d:ac:79:8f:08: 87:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:25:BA:24:92:E9:44:B2:CE:AE:04:A7:2B:25:BF:44:04:61:50:63 X509v3 Authority Key Identifier: keyid:19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:cb:79:fa:8b:87:df:d7:3f:b2:3d:06:0f:fa:70:d5:7e:e0: 2a:5a:c0:c2:83:86:2e:10:30:48:b2:ae:9b:b4:80:eb:80:60: d6:4f:09:d2:67:15:64:ac:fd:8c:aa:ad:f1:0a:13:f2:e4:39: 2b:dd:54:54:3c:a9:43:74:18:50:9b:7d:09:cd:9f:0c:ae:db: fb:74:82:a1:c2:ba:a8:31:3c:70:a0:7d:8a:21:f3:a5:ba:66: 5c:6a:31:ae:3e:a2:06:be:ee:b7:11:3f:79:90:0e:fc:b6:fa: f4:28:ed:75:a4:13:e7:4a:de:c2:19:55:70:20:c4:85:c7:1d: f0:f4:f2:fb:4f:a1:11:b6:f1:03:90:40:08:8e:28:94:6f:db: 89:4e:1b:6c:58:d2:4b:52:60:20:d7:f6:28:5d:1e:e3:64:e1: 38:32:8b:01:d3:d9:a3:72:79:1c:64:3f:01:32:b2:5f:21:2e: 80:80:75:e5:09:d3:47:f3:f2:e0:64:81:b8:03:fd:86:91:5b: 80:af:f4:a2:92:7e:29:69:ea:01:05:94:54:a8:f0:e0:85:3f: ab:20:01:c3:8d:79:4f:f4:88:ac:09:8d:77:35:3b:38:ba:94: ff:0c:62:f8:9b:3a:38:1c:70:d7:ad:bf:88:b2:c9:00:ea:e6: b0:05:99:63 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QkNCQTExMC8GA1UEBRMoMTlDOUEwQzIxOTMwQzE2RUE0MTY5QUMyRUJFREM3RTZD OUQ3QjUyRjAeFw0yNjAzMDMwODI5MjdaFw0yNjAzMTAwODI5MjdaMBgxFjAUBgNV BAMTDTY5YTY5YmU3LTcwNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIgKiNVj1+dDhJsDLYD7mtUjhg0xMuZ4uAewkwXXdegDHyX+GlmgbHyzCMzlBO eO5YjZAq0uJ2HIERcXS1ZXYGL70AZVD3JFhG78mLdzlhZZYc5A+oLKVowDmXbgvU mKyhaenU3ViByMgcVfMi8ICgqyY4Jq2M1qAkQEkwdF4ZsNi4TUGW5aHy+6KR+UO9 wbFOuXDJuq2WQX6R8btADkmKd15omtBEUeTXjF1Yb/Z5e+RgHAf9L9L7wIxbiFdH 7tXk6ovFkJOxxLGvomBCl/BlkM7a1PcfaZGcjaAaT/cQiJJCpdSWIbqBviXwO73m Kzbxni2uQk069EANrHmPCIdbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHCW6JJLp RLLOrgSnKyW/RARhUGMwHwYDVR0jBBgwFoAUGcmgwhkwwW6kFprC6+3H5snXtS8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCQ0JBLzM0MDBDNzE4RTYy QzExRjA5NzZBOTVGQjZGNkY1NkJDL0djbWd3aGt3d1c2a0ZwckM2LTNINXNuWHRT OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2NtZ3doa3d3VzZrRnByQzYtM0g1c25YdFM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC Q0JBLzM0MDBDNzE4RTYyQzExRjA5NzZBOTVGQjZGNkY1NkJDL0djbWd3aGt3d1c2 a0ZwckM2LTNINXNuWHRTOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA3y3n6i4ff1z+yPQYP+nDVfuAqWsDCg4YuEDBIsq6btIDrgGDWTwnSZxVkrP2M qq3xChPy5Dkr3VRUPKlDdBhQm30JzZ8Mrtv7dIKhwrqoMTxwoH2KIfOlumZcajGu PqIGvu63ET95kA78tvr0KO11pBPnSt7CGVVwIMSFxx3w9PL7T6ERtvEDkEAIjiiU b9uJThtsWNJLUmAg1/YoXR7jZOE4MosB09mjcnkcZD8BMrJfIS6AgHXlCdNH8/Lg ZIG4A/2GkVuAr/Sikn4paeoBBZRUqPDghT+rIAHDjXlP9IisCY13NTs4upT/DGL4 mzo4HHDXrb+IsskA6uawBZlj -----END CERTIFICATE-----Generated at Wed Mar 4 08:39:58 2026 by rpki-client