$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft File: h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft (raw, json) Hash identifier: N7IR4riN9QwEqIG6yhV6L7IUvX7uhs18Nmb4WFRF63Q= Subject key identifier: 14:23:91:A1:EA:05:F2:D7:8D:CC:BC:81:8C:B0:54:43:6A:B0:13:A8 Authority key identifier: 87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C Certificate issuer: /CN=A916BCDF/serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C Certificate serial: 12CF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft Manifest number: 12AB Signing time: Mon 02 Mar 2026 17:05:17 +0000 Manifest this update: Mon 02 Mar 2026 17:05:17 +0000 Manifest next update: Mon 09 Mar 2026 17:05:17 +0000 Files and hashes: 1: h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl (hash: a1JtVzF/Nlk7tAxOtHvLi1vVIro6BuwDhrCduCrhSbw=) 2: 3BA64F0AF22611F094D5D2AE526F56BC.roa (hash: gjQ8EjTh4YTn2TSGcxeqBGmNj2WHRb5bDlBbyu/0FTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 17:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4815 (0x12cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BCDF, serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C Validity Not Before: Mar 2 17:05:17 2026 GMT Not After : Mar 9 17:05:17 2026 GMT Subject: CN=69a5c34d-d18d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:83:0a:bc:0c:91:47:50:28:db:00:29:a8:63: 98:b2:74:02:b0:6b:03:df:03:69:9c:88:4b:ab:3a: ef:33:bf:a2:d9:8b:b2:3c:7a:ee:b3:96:18:19:6d: 1b:8d:ab:45:63:c4:f3:52:fb:5e:84:e9:e2:cf:82: 86:bd:51:de:b9:49:ec:2c:b8:a9:d7:be:58:5b:66: 5f:3f:94:27:7f:f6:30:ac:e5:e2:75:e5:39:9b:8d: 00:e3:0b:e4:09:5d:e5:b4:ef:2e:37:0b:8b:0b:88: 61:c3:48:47:44:65:54:5f:28:e3:76:a2:d7:04:2b: 91:b5:49:f7:3f:3e:02:81:75:a7:33:5e:12:0f:3e: 11:63:a3:2a:71:43:dc:0f:fd:5c:46:fb:be:5d:47: ad:71:56:0f:10:d8:d9:2d:31:d1:5d:ff:f9:9d:48: bd:36:d7:4f:f1:bc:4d:88:a6:a4:58:5e:18:73:67: 5b:6c:cd:c9:ac:cf:2d:f1:88:b6:7a:6c:a0:ce:4a: b0:45:ab:63:5d:50:29:5a:5f:79:56:68:60:b4:f3: d9:37:9a:d1:42:cf:f4:c7:c4:43:d9:87:e5:2f:34: 8a:ed:75:d6:78:4c:df:68:ed:6d:32:34:3f:0c:07: e1:18:c5:59:1a:4f:c1:0f:e2:f7:f4:c0:10:e6:33: 26:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:23:91:A1:EA:05:F2:D7:8D:CC:BC:81:8C:B0:54:43:6A:B0:13:A8 X509v3 Authority Key Identifier: keyid:87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:0c:91:8f:be:c0:3a:ca:d0:75:96:1f:c9:4e:cd:04:12:70: 2f:b0:4b:64:5e:6c:b3:75:cf:86:4b:38:04:83:39:80:25:28: ed:32:f1:ad:a9:b3:f4:72:0f:8d:3b:09:b5:30:c4:5b:98:a6: 4d:75:e9:97:2e:08:a2:18:f8:b0:35:ee:f9:e9:c5:84:d0:a7: 1b:60:c9:ae:48:64:da:8c:6d:b6:87:01:db:01:65:2f:e2:b3: 43:24:4e:1a:16:ed:bb:69:9b:95:40:e0:41:6e:a3:5f:2c:3f: 61:14:45:02:67:d3:4c:bf:ac:72:0c:d8:ca:39:db:1d:6c:37: bc:79:9e:fb:df:be:40:31:ab:83:8d:51:ad:6a:1c:23:87:ce: 65:7d:e4:5c:c5:db:30:9c:bb:bc:9c:9f:80:c6:3e:af:75:ac: 84:1f:e7:6d:49:c0:75:a3:a8:c6:77:cb:10:68:57:15:3b:c2: 7c:9d:15:a8:c4:29:28:53:76:19:b0:56:fc:5e:58:31:9d:a2: 06:fa:62:4b:af:9d:50:02:15:49:7d:fc:5d:70:87:28:7b:a3: 14:84:77:0e:01:32:70:a7:5b:86:8a:09:9f:81:04:7e:f3:f6: a1:73:85:dc:cf:79:12:74:de:ba:de:92:c7:4b:70:a9:f1:e4: 2f:a7:15:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJDREYxMTAvBgNVBAUTKDg3OTU0QzAyMzFDQUFDQjJCRTJERkRCNTY3Qzc0QUY1 RUNCNzVCMEMwHhcNMjYwMzAyMTcwNTE3WhcNMjYwMzA5MTcwNTE3WjAYMRYwFAYD VQQDEw02OWE1YzM0ZC1kMThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYMKvAyRR1Ao2wApqGOYsnQCsGsD3wNpnIhLqzrvM7+i2YuyPHrus5YYGW0b jatFY8TzUvtehOniz4KGvVHeuUnsLLip175YW2ZfP5Qnf/YwrOXideU5m40A4wvk CV3ltO8uNwuLC4hhw0hHRGVUXyjjdqLXBCuRtUn3Pz4CgXWnM14SDz4RY6MqcUPc D/1cRvu+XUetcVYPENjZLTHRXf/5nUi9NtdP8bxNiKakWF4Yc2dbbM3JrM8t8Yi2 emygzkqwRatjXVApWl95VmhgtPPZN5rRQs/0x8RD2YflLzSK7XXWeEzfaO1tMjQ/ DAfhGMVZGk/BD+L39MAQ5jMmgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBQjkaHq BfLXjcy8gYywVENqsBOoMB8GA1UdIwQYMBaAFIeVTAIxyqyyvi39tWfHSvXst1sM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkNERi9FQ0UwRkJFNkUz NkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9oNVZNQWpIS3JMSy1MZjIxWjhkSzlleTNX d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2g1Vk1BakhLckxLLUxmMjFaOGRLOWV5M1d3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkNERi9FQ0UwRkJFNkUzNkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9oNVZNQWpIS3JM Sy1MZjIxWjhkSzlleTNXd3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUQyRj77AOsrQdZYfyU7NBBJwL7BLZF5ss3XPhks4BIM5gCUo7TLxramz9HIP jTsJtTDEW5imTXXply4Iohj4sDXu+enFhNCnG2DJrkhk2oxttocB2wFlL+KzQyRO Ghbtu2mblUDgQW6jXyw/YRRFAmfTTL+scgzYyjnbHWw3vHme+9++QDGrg41RrWoc I4fOZX3kXMXbMJy7vJyfgMY+r3WshB/nbUnAdaOoxnfLEGhXFTvCfJ0VqMQpKFN2 GbBW/F5YMZ2iBvpiS6+dUAIVSX38XXCHKHujFIR3DgEycKdbhooJn4EEfvP2oXOF 3M95EnTeut6Sx0twqfHkL6cVdg== -----END CERTIFICATE-----Generated at Wed Mar 4 08:40:05 2026 by rpki-client