$ rpki-client -vvf rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft File: A4zy4oB33yytpFdW-12ZpuJA_Qk.mft (raw, json) Hash identifier: kRaKCIay7TCtnifOGpW4HwTAyeGR9wB1g34KFXL3u8U= Subject key identifier: 41:6A:B4:05:6E:51:C2:2C:88:1C:BC:B8:F2:B1:BB:5D:DC:8E:B5:E9 Authority key identifier: 03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09 Certificate issuer: /CN=A9112CEC/serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09 Certificate serial: 3531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft Manifest number: 3525 Signing time: Tue 24 Mar 2026 15:06:45 +0000 Manifest this update: Tue 24 Mar 2026 15:06:45 +0000 Manifest next update: Tue 31 Mar 2026 15:06:45 +0000 Files and hashes: 1: A4zy4oB33yytpFdW-12ZpuJA_Qk.crl (hash: cUIxPEZE3kDzVyEC+dNWlScdBWt37q96+NlCuHrVDqI=) 2: 55A4C5C004AA11E8935B7021C4F9AE02.roa (hash: H6okVBbXA5R44ceAsB8vN/16AqSmiHbSqzPIsnHvUSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13617 (0x3531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112CEC, serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09 Validity Not Before: Mar 24 15:06:45 2026 GMT Not After : Mar 31 15:06:45 2026 GMT Subject: CN=69c2a885-b04c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:81:d9:05:c1:be:c4:32:e7:bb:d8:3d:17:73: f1:b9:d8:e6:69:c4:0b:06:bd:d7:6b:49:69:af:da: 8f:cd:08:7e:80:e5:68:ce:8c:1b:ac:d2:69:c8:c0: 89:79:72:99:34:21:e7:c6:57:9d:1f:45:6d:46:c0: dc:bd:b3:d9:a3:a2:3f:ed:72:90:7c:92:f4:47:f1: 03:4e:2b:8f:66:25:a0:08:c6:6d:aa:c3:49:24:f9: 52:f8:14:e5:b6:98:7c:2f:26:25:b3:32:9b:7f:95: a9:78:d4:d8:49:58:a3:6b:89:8e:8b:5c:24:5b:5d: 87:97:9b:51:43:54:f6:ee:9f:6e:fe:db:ae:4a:2d: 09:d5:7a:e9:10:f1:2c:db:4e:7a:0b:04:bf:ca:99: b3:5d:52:ac:01:38:7c:cb:11:fb:1f:4e:cf:e4:a3: bd:6d:94:34:62:ce:df:3a:7b:10:1c:81:ae:29:3c: f8:e4:b6:ad:7e:79:bf:2a:2d:fa:4f:a2:70:c9:ac: 72:28:26:22:b7:40:b3:60:f4:dd:ef:8a:20:50:d7: 71:f0:2f:50:41:39:65:a3:16:da:ed:5c:ee:c3:3d: 82:af:b4:22:92:76:5a:ad:04:b6:eb:18:5c:dd:da: ca:82:33:fd:dc:d7:e8:ed:86:55:84:11:d2:79:01: a0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6A:B4:05:6E:51:C2:2C:88:1C:BC:B8:F2:B1:BB:5D:DC:8E:B5:E9 X509v3 Authority Key Identifier: keyid:03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:64:91:05:bf:6e:e7:11:d0:c5:22:f4:77:19:19:80:2c:62: 79:6f:71:f3:11:79:4f:00:3f:5a:26:82:45:40:42:3f:04:4b: c0:d6:47:38:a4:df:9c:ea:72:0f:69:9d:6f:ed:92:fd:5b:bb: 13:a1:40:07:c3:bf:c8:60:bc:4c:af:f7:b7:6f:3b:ce:d0:f6: 10:53:29:29:35:15:06:ae:7e:72:f6:c3:2d:dd:fe:82:28:17: ce:6a:b3:47:70:4c:09:e2:3f:ff:7b:22:d2:b9:9f:e7:9f:d3: e4:c1:b4:fb:d2:36:78:45:3d:23:8c:b4:2f:f8:8e:5a:31:01: 8c:96:ca:e3:c6:da:07:90:45:76:b2:88:a8:a3:57:3b:4d:d2: 7a:9d:83:d2:b8:a6:81:a4:29:d0:3c:f8:62:84:d5:a5:66:11: de:83:42:f9:03:7e:6e:44:e9:82:39:f7:da:27:db:46:95:e4: da:cd:75:21:59:c7:5e:fc:9b:6b:0e:3c:68:78:04:60:fa:41: 71:9d:c6:f4:6d:73:37:20:71:15:1a:23:8f:27:91:8a:a5:f1: 10:8e:3b:8d:67:a1:a5:b1:33:6c:34:40:45:cf:18:c3:22:04: 8b:06:f8:b1:fb:01:b3:cd:e8:a2:31:de:49:66:73:08:4c:7b: 8a:d7:b7:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJDRUMxMTAvBgNVBAUTKDAzOENGMkUyODA3N0RGMkNBREE0NTc1NkZCNUQ5OUE2 RTI0MEZEMDkwHhcNMjYwMzI0MTUwNjQ1WhcNMjYwMzMxMTUwNjQ1WjAYMRYwFAYD VQQDEw02OWMyYTg4NS1iMDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYHZBcG+xDLnu9g9F3PxudjmacQLBr3Xa0lpr9qPzQh+gOVozowbrNJpyMCJ eXKZNCHnxledH0VtRsDcvbPZo6I/7XKQfJL0R/EDTiuPZiWgCMZtqsNJJPlS+BTl tph8LyYlszKbf5WpeNTYSVija4mOi1wkW12Hl5tRQ1T27p9u/tuuSi0J1XrpEPEs 2056CwS/ypmzXVKsATh8yxH7H07P5KO9bZQ0Ys7fOnsQHIGuKTz45Latfnm/Ki36 T6JwyaxyKCYit0CzYPTd74ogUNdx8C9QQTlloxba7Vzuwz2Cr7QiknZarQS26xhc 3drKgjP93Nfo7YZVhBHSeQGgLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEFqtAVu UcIsiBy8uPKxu13cjrXpMB8GA1UdIwQYMBaAFAOM8uKAd98sraRXVvtdmabiQP0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkNFQy9COEIwQzc4ODFE QTQxMUUyOEM5M0U3OUEwOEIwMkNEMi9BNHp5NG9CMzN5eXRwRmRXLTEyWnB1SkFf UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0enk0b0IzM3l5dHBGZFctMTJacHVKQV9Ray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkNFQy9COEIwQzc4ODFEQTQxMUUyOEM5M0U3OUEwOEIwMkNEMi9BNHp5NG9CMzN5 eXRwRmRXLTEyWnB1SkFfUWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqmSRBb9u5xHQxSL0dxkZgCxieW9x8xF5TwA/WiaCRUBCPwRLwNZHOKTfnOpy D2mdb+2S/Vu7E6FAB8O/yGC8TK/3t287ztD2EFMpKTUVBq5+cvbDLd3+gigXzmqz R3BMCeI//3si0rmf55/T5MG0+9I2eEU9I4y0L/iOWjEBjJbK48baB5BFdrKIqKNX O03Sep2D0rimgaQp0Dz4YoTVpWYR3oNC+QN+bkTpgjn32ifbRpXk2s11IVnHXvyb aw48aHgEYPpBcZ3G9G1zNyBxFRojjyeRiqXxEI47jWehpbEzbDRARc8YwyIEiwb4 sfsBs83oojHeSWZzCEx7ite3Jw== -----END CERTIFICATE-----Generated at Thu Mar 26 07:33:11 2026 by rpki-client