$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft File: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft (raw, json) Hash identifier: Hd5qJ/AHi+laV/CJym7CEBmk0I3Kt43VO93+25CZ7T8= Subject key identifier: B3:74:8D:67:EB:75:AC:29:21:5F:6B:FD:9E:27:5A:4F:F7:3A:15:BC Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 19E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft Manifest number: 1721 Signing time: Sun 22 Mar 2026 16:56:37 +0000 Manifest this update: Sun 22 Mar 2026 16:56:37 +0000 Manifest next update: Sun 29 Mar 2026 16:56:37 +0000 Files and hashes: 1: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl (hash: CphUo4fkOdZF1zlIWGthrDTzTgMxCnmfs8L0+TeE2QU=) 2: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (hash: sogBCjppD56h+GcWQ3rByWlelY4eKvIMYEluAiQ+/rw=) 3: D26DDCB6F36C11E88E372D61C4F9AE02.roa (hash: udH7VqFuj24SImPiW/5wQH4EZuTGeAeHle7Uqa/NLtg=) 4: 876FDB56D90211EFB7CAB32BC4F9AE02.roa (hash: SDPBjnTMeFUTZDsjrMLQTR6B+G1th0jqK4ZQRb1Qvcs=) 5: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (hash: JRMt5syEhbsraqmogl+r4Cn6WjqteDPA68BCYDsj7VY=) 6: 289E0AA2119711F1BED17E8E383D8C67.roa (hash: gncKZ2tj3jSylYMyhZVPoI28YfzJsEOGEVlwwCaD31A=) 7: 164F6E2079BF11EAB3ADD60FC4F9AE02.roa (hash: Ww0TTboh4t7XJh5yPzaTmih1SxJhA11Efd1I0MEuPiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6625 (0x19e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: Mar 22 16:56:37 2026 GMT Not After : Mar 29 16:56:37 2026 GMT Subject: CN=69c01f45-2388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4c:b9:f8:e2:21:c9:12:e1:86:eb:34:91:3a: 13:a6:20:77:0a:6f:29:55:78:2b:32:fe:e4:d4:a3: a5:da:dd:ce:5c:ce:c2:b8:52:1b:37:9b:e8:2e:53: c3:4b:25:fa:6b:aa:c6:a6:53:47:af:da:9c:63:16: ca:18:4a:d2:33:d6:ef:4a:50:ec:6b:93:b8:a5:b5: dd:18:30:a9:0a:ee:e2:f7:78:01:aa:71:ae:29:23: 7f:0f:89:15:e3:be:b4:29:6a:8f:6a:2e:8b:2f:96: e9:fd:ce:12:d8:b6:12:9f:3d:2d:48:33:11:45:e5: 91:8c:e5:08:28:28:d6:82:29:f4:5f:b2:44:dd:07: 01:46:e6:d4:15:f7:f8:c8:d0:8a:1c:97:5a:c4:ec: a1:56:18:14:99:a5:52:21:d2:e1:76:88:bb:d0:6e: 4c:37:4a:a8:af:96:48:4a:14:a4:01:3d:84:cc:fd: 73:92:18:6e:4f:01:40:b8:da:84:16:bb:87:46:fb: 93:bd:8c:1d:bf:ff:99:50:67:9b:44:75:70:e1:b5: a1:b9:f2:1c:4f:4d:ea:3f:ea:0d:9a:9f:b4:30:69: 40:e5:53:6b:01:28:67:a2:05:d6:31:9d:07:18:04: de:04:13:69:91:d5:6c:50:99:3c:bc:5d:da:f0:cf: f0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:74:8D:67:EB:75:AC:29:21:5F:6B:FD:9E:27:5A:4F:F7:3A:15:BC X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e9:d0:be:44:a6:3a:37:dd:ad:c5:3a:f8:2c:e4:19:88:59:e0: 9b:77:e1:f2:7f:0b:b1:92:39:80:69:6f:fd:63:a9:3a:83:78: 76:b8:6f:74:db:7f:5c:46:3d:5b:db:39:c0:ff:bb:a0:3f:ca: 15:d7:98:bf:3d:1b:43:5c:b6:2e:60:ee:14:cd:5f:77:7f:6c: e1:db:7d:a4:99:5c:62:5c:35:62:dd:77:28:0a:9a:e8:fb:ee: 16:2e:ae:43:c0:74:2d:37:3b:33:93:17:8b:0c:d5:ca:ba:c5: 5c:14:28:29:7e:75:17:cf:d2:6a:f9:f8:42:a6:4c:ea:6e:39: bc:05:3a:1c:16:50:8b:c3:f5:34:be:ec:18:ac:a2:7b:92:d9: 9a:16:cf:17:a8:f6:45:95:96:f7:a7:31:ab:2d:d4:b2:8b:41: 5e:ce:6a:b9:e5:9a:52:5d:21:be:c4:af:a8:33:5d:7d:d7:07: 63:0d:69:c7:c8:b5:d0:e0:0f:08:fd:7b:9c:52:10:c0:cb:b6: fd:cb:3b:d1:81:61:0d:25:22:54:bd:a0:29:b8:e3:fe:df:e4: 51:a3:a1:54:32:55:72:cd:be:37:7a:9e:ad:76:02:44:25:5f: fa:64:0f:83:a9:8c:b7:aa:20:37:56:c5:5d:93:22:ed:3a:4a: ef:72:ff:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjYwMzIyMTY1NjM3WhcNMjYwMzI5MTY1NjM3WjAYMRYwFAYD VQQDEw02OWMwMWY0NS0yMzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEy5+OIhyRLhhus0kToTpiB3Cm8pVXgrMv7k1KOl2t3OXM7CuFIbN5voLlPD SyX6a6rGplNHr9qcYxbKGErSM9bvSlDsa5O4pbXdGDCpCu7i93gBqnGuKSN/D4kV 4760KWqPai6LL5bp/c4S2LYSnz0tSDMRReWRjOUIKCjWgin0X7JE3QcBRubUFff4 yNCKHJdaxOyhVhgUmaVSIdLhdoi70G5MN0qor5ZIShSkAT2EzP1zkhhuTwFAuNqE FruHRvuTvYwdv/+ZUGebRHVw4bWhufIcT03qP+oNmp+0MGlA5VNrAShnogXWMZ0H GATeBBNpkdVsUJk8vF3a8M/wvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLN0jWfr dawpIV9r/Z4nWk/3OhW8MB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkRBNC8xRUM3MDJCQ0YxQTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNO ejNaTjhMbWtEVDZGUUdaRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA6dC+RKY6N92txTr4LOQZiFngm3fh8n8LsZI5gGlv/WOpOoN4drhvdNt/XEY9 W9s5wP+7oD/KFdeYvz0bQ1y2LmDuFM1fd39s4dt9pJlcYlw1Yt13KAqa6PvuFi6u Q8B0LTc7M5MXiwzVyrrFXBQoKX51F8/Savn4QqZM6m45vAU6HBZQi8P1NL7sGKyi e5LZmhbPF6j2RZWW96cxqy3UsotBXs5queWaUl0hvsSvqDNdfdcHYw1px8i10OAP CP17nFIQwMu2/cs70YFhDSUiVL2gKbjj/t/kUaOhVDJVcs2+N3qerXYCRCVf+mQP g6mMt6ogN1bFXZMi7TpK73L/Ew== -----END CERTIFICATE-----Generated at Tue Mar 24 12:51:29 2026 by rpki-client