$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft File: GrHejsiRr6LU4cka9Vg0kL-7wgk.mft (raw, json) Hash identifier: tCiRZbUhd08kGMHz29fSTU1h2Q7MXXnfDtvUPBKEJUA= Subject key identifier: 08:11:B2:86:3C:83:16:B4:DF:88:00:16:A1:C6:A3:08:08:84:97:10 Authority key identifier: 1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09 Certificate issuer: /CN=A916DB3F/serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209 Certificate serial: 1EB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft Manifest number: 1EA9 Signing time: Sat 04 Apr 2026 15:58:28 +0000 Manifest this update: Sat 04 Apr 2026 15:58:27 +0000 Manifest next update: Sat 11 Apr 2026 15:58:27 +0000 Files and hashes: 1: GrHejsiRr6LU4cka9Vg0kL-7wgk.crl (hash: T3go/Lk69LDSsGsrkDylI/aBtvCe/kPFIpn5vJg4mwA=) 2: 7E8D9A52895411E6B3538424C4F9AE02.roa (hash: JuvAoXwq2q+25weckrh5AmxWev3ZprGRD1R3ygjTn5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7863 (0x1eb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB3F, serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209 Validity Not Before: Apr 4 15:58:27 2026 GMT Not After : Apr 11 15:58:27 2026 GMT Subject: CN=69d13523-c227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:33:93:1a:58:91:d1:d5:96:be:2a:0b:d0:4d: e3:e6:f9:d8:65:0c:8a:ff:8d:05:50:8f:4b:57:3a: b2:96:43:0a:fc:50:6e:c7:5a:1a:1e:55:ea:20:a4: f0:75:a7:f6:2c:8f:87:39:5a:88:0b:1c:ae:12:63: f6:78:cc:6c:20:58:00:b5:74:bf:d2:88:8e:32:b0: c0:40:e4:35:74:70:34:c7:ef:ba:fe:83:f3:2d:f2: a8:ed:97:e2:74:99:91:8d:35:dd:6a:7f:f1:99:52: 69:ce:35:48:c5:68:07:ed:92:4a:26:18:44:9d:f9: 17:b5:99:52:8d:13:cc:15:2d:ec:25:9d:bf:72:c2: 3c:7c:89:e1:e6:ae:b9:50:17:38:02:c4:c4:8a:9c: fc:13:15:90:65:72:0e:a3:28:21:0b:a0:ea:08:56: 5b:bd:50:07:62:b8:4a:ce:c3:d8:78:63:26:15:61: 42:3e:b4:69:08:86:21:7c:ad:2d:e6:5c:17:1d:d7: b2:be:73:33:e9:a8:15:1c:32:c3:01:b0:b3:62:a3: f4:9c:f5:72:87:13:80:29:2e:ef:62:e6:7c:eb:2c: 59:58:06:86:49:d5:fd:79:72:52:ac:0b:cc:cf:91: aa:28:2c:0a:60:87:20:23:ba:db:6f:7a:e3:c1:44: 58:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:11:B2:86:3C:83:16:B4:DF:88:00:16:A1:C6:A3:08:08:84:97:10 X509v3 Authority Key Identifier: keyid:1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:01:ad:ef:f4:83:ad:d0:b8:41:11:e0:f5:3c:c0:2d:f2:24: c1:eb:1a:1a:64:8a:55:00:d9:97:d2:05:37:02:73:44:39:cf: 69:37:65:30:5b:d7:ee:aa:f0:57:e7:68:ea:c5:c9:d9:44:c5: 94:f5:32:a2:3f:95:1b:54:ee:06:0e:8b:e4:c1:14:71:49:a2: 55:aa:38:9c:66:e2:8f:a3:18:1f:9a:d3:8a:98:78:ae:27:15: f6:6e:8b:b2:93:07:58:85:f0:95:ac:b4:01:ff:89:04:b3:f8: 3c:1f:fb:da:1e:17:55:ed:54:c5:0a:be:95:37:d2:cf:f3:55: 15:fc:dc:c1:bd:cb:d5:37:af:dd:b9:28:04:a0:37:21:dc:69: 6f:02:13:ef:57:b7:46:61:28:a6:f0:e6:21:3f:c4:f4:30:6e: d8:6a:0f:57:c1:7f:8a:59:a9:2c:cc:ec:96:99:63:3e:9c:07: c4:7a:59:a7:e8:c4:79:0b:b4:ef:20:e8:78:a4:12:a6:ac:6e: 14:56:47:61:af:13:8e:af:fc:22:44:9f:b2:8f:ea:e4:68:43: 70:3e:c2:6a:0a:0a:43:72:83:45:68:92:52:6c:2c:0b:81:ba: 4c:ab:1d:43:f2:31:ed:4c:90:b6:59:fc:9f:f9:7d:bc:83:10: 6f:0d:1f:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCM0YxMTAvBgNVBAUTKDFBQjFERThFQzg5MUFGQTJENEUxQzkxQUY1NTgzNDkw QkZCQkMyMDkwHhcNMjYwNDA0MTU1ODI3WhcNMjYwNDExMTU1ODI3WjAYMRYwFAYD VQQDEw02OWQxMzUyMy1jMjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDOTGliR0dWWvioL0E3j5vnYZQyK/40FUI9LVzqylkMK/FBux1oaHlXqIKTw daf2LI+HOVqICxyuEmP2eMxsIFgAtXS/0oiOMrDAQOQ1dHA0x++6/oPzLfKo7Zfi dJmRjTXdan/xmVJpzjVIxWgH7ZJKJhhEnfkXtZlSjRPMFS3sJZ2/csI8fInh5q65 UBc4AsTEipz8ExWQZXIOoyghC6DqCFZbvVAHYrhKzsPYeGMmFWFCPrRpCIYhfK0t 5lwXHdeyvnMz6agVHDLDAbCzYqP0nPVyhxOAKS7vYuZ86yxZWAaGSdX9eXJSrAvM z5GqKCwKYIcgI7rbb3rjwURY3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAgRsoY8 gxa034gAFqHGowgIhJcQMB8GA1UdIwQYMBaAFBqx3o7Ika+i1OHJGvVYNJC/u8IJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REIzRi9EMzkxMDEzNDg5 NTMxMUU2OEE4NTQ5MjNDNEY5QUUwMi9HckhlanNpUnI2TFU0Y2thOVZnMGtMLTd3 Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dySGVqc2lScjZMVTRja2E5Vmcwa0wtN3dnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REIzRi9EMzkxMDEzNDg5NTMxMUU2OEE4NTQ5MjNDNEY5QUUwMi9HckhlanNpUnI2 TFU0Y2thOVZnMGtMLTd3Z2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXAGt7/SDrdC4QRHg9TzALfIkwesaGmSKVQDZl9IFNwJzRDnPaTdlMFvX7qrw V+do6sXJ2UTFlPUyoj+VG1TuBg6L5MEUcUmiVao4nGbij6MYH5rTiph4ricV9m6L spMHWIXwlay0Af+JBLP4PB/72h4XVe1UxQq+lTfSz/NVFfzcwb3L1Tev3bkoBKA3 IdxpbwIT71e3RmEopvDmIT/E9DBu2GoPV8F/ilmpLMzslpljPpwHxHpZp+jEeQu0 7yDoeKQSpqxuFFZHYa8Tjq/8IkSfso/q5GhDcD7CagoKQ3KDRWiSUmwsC4G6TKsd Q/Ix7UyQtln8n/l9vIMQbw0fuA== -----END CERTIFICATE-----Generated at Mon Apr 6 09:55:24 2026 by rpki-client