$ rpki-client -vvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft File: aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft (raw, json) Hash identifier: lihxZbyxEHfIOyHOaV9gXVoXOQY8FefoQ5S5Z9TEkwI= Subject key identifier: 4C:F2:F6:4F:25:F4:4D:11:72:53:EA:92:4B:13:73:C2:54:13:EC:6D Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 Certificate issuer: /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Certificate serial: 235C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft Manifest number: 2315 Signing time: Tue 24 Mar 2026 15:46:41 +0000 Manifest this update: Tue 24 Mar 2026 15:46:40 +0000 Manifest next update: Tue 31 Mar 2026 15:46:40 +0000 Files and hashes: 1: aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl (hash: emLivSMgRJkfjAsR+2vz94hs35Bu5xdU/7n1zwVkdQ8=) 2: DD73806ED3C811EF9D76942FC4F9AE02.roa (hash: XuMtilZNPhFP3hcI0EFjINtqqdDqROMWrGc5+3vleHI=) 3: 443C3AF2D3F611EFB03C5C14C4F9AE02.roa (hash: yjQDivJZ1s/I1gyM4tvZvat6RLwGZDHbtVct4nnyZGo=) 4: 1AC9199AD3CB11EF84052053C4F9AE02.roa (hash: xoG3XA1Lq0Bqa5zm6JhMhmxLN46lI4bw6ffgxEn95DU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:46:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9052 (0x235c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119333, serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Validity Not Before: Mar 24 15:46:40 2026 GMT Not After : Mar 31 15:46:40 2026 GMT Subject: CN=69c2b1e1-159f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:12:0c:ca:1c:5a:b1:b5:e6:5e:b9:8d:43:3a: 3f:f1:ca:f0:e6:5f:62:40:ce:85:0c:21:11:bf:d4: 43:70:d3:e5:78:37:2a:36:84:66:4d:15:9d:b9:30: 68:5b:b9:a8:84:71:2c:92:ab:fd:ac:a1:a7:ec:a7: be:f0:d8:32:b9:b6:62:df:63:3e:f8:40:2a:49:9c: 41:a5:4d:61:ce:a1:f4:06:41:41:8d:40:90:e4:e4: 2b:50:a6:3b:7d:40:ea:25:17:29:d0:88:05:66:e0: 4c:7e:14:a4:d5:dc:35:cc:b5:71:f2:a0:b9:2e:58: 89:fc:ed:51:e1:45:fe:10:ee:99:da:79:07:83:53: 67:e8:f3:45:12:64:f2:5b:d0:d3:d0:5a:3b:82:5c: 50:51:58:8a:ad:07:1f:b7:72:ad:81:7c:5c:32:ad: 27:ae:37:7e:7c:b1:3a:8c:cc:0e:5b:b8:7c:b9:f1: 8f:49:c9:d0:69:93:b7:59:c8:6b:12:18:15:53:a0: 61:69:d7:ed:ab:9e:fc:88:5c:3c:5f:33:b2:93:18: 35:bd:65:d9:a3:9f:81:c4:f4:38:3a:96:3d:b0:28: bb:1e:4e:07:43:89:3e:6e:37:6c:a1:56:3c:3a:7f: 42:6a:e8:ac:3f:22:ab:c2:77:8c:ec:c8:9f:4b:20: 98:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F2:F6:4F:25:F4:4D:11:72:53:EA:92:4B:13:73:C2:54:13:EC:6D X509v3 Authority Key Identifier: keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:0f:63:e4:6f:d4:69:41:b0:1e:9d:ca:14:18:a3:d0:1c:f2: 0c:da:3c:83:b9:66:10:ac:49:e9:d0:3a:5c:8a:c6:86:61:8b: c3:bc:a6:48:70:9c:0f:08:a1:63:3a:25:8c:2c:14:75:aa:42: e1:51:ef:23:8a:a3:f2:2f:b3:43:eb:81:09:73:9e:68:a9:f5: 74:c7:b0:cd:05:ea:7b:b7:23:58:8c:73:65:f3:39:49:bf:6e: 9d:75:57:28:6a:97:36:74:20:02:95:e1:7e:c1:3e:e5:a8:38: e5:fb:18:23:de:79:23:65:3b:ef:32:75:77:4b:87:10:aa:34: b7:7b:60:2d:ba:17:06:7e:85:e7:69:17:47:55:c4:83:38:d0: 16:32:fb:29:e3:c3:2c:89:ba:47:ee:ff:6c:82:d0:28:f5:a2: 9c:f9:17:70:af:91:a0:13:31:6c:c7:a2:4a:20:ac:64:41:99: 17:87:8a:c9:be:72:7f:99:87:1a:5e:b0:f5:f0:06:a4:0b:57: 35:dd:ee:05:ca:ca:8c:45:80:10:db:8b:81:67:20:a9:af:f5: 39:e3:02:40:07:f1:fe:ac:4f:ce:34:dd:d8:52:76:bf:ce:dc: a9:6b:f0:8e:88:21:ea:45:04:a5:66:58:df:33:dd:00:60:3a: 28:b0:70:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzMzMxMTAvBgNVBAUTKDY5OUU2NzQyNTY3QkU3MzI5Q0MzQTc4NkRFQjc4NTdF MkMyNDIwRjkwHhcNMjYwMzI0MTU0NjQwWhcNMjYwMzMxMTU0NjQwWjAYMRYwFAYD VQQDEw02OWMyYjFlMS0xNTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkRIMyhxasbXmXrmNQzo/8crw5l9iQM6FDCERv9RDcNPleDcqNoRmTRWduTBo W7mohHEskqv9rKGn7Ke+8NgyubZi32M++EAqSZxBpU1hzqH0BkFBjUCQ5OQrUKY7 fUDqJRcp0IgFZuBMfhSk1dw1zLVx8qC5LliJ/O1R4UX+EO6Z2nkHg1Nn6PNFEmTy W9DT0Fo7glxQUViKrQcft3KtgXxcMq0nrjd+fLE6jMwOW7h8ufGPScnQaZO3Wchr EhgVU6Bhadftq578iFw8XzOykxg1vWXZo5+BxPQ4OpY9sCi7Hk4HQ4k+bjdsoVY8 On9CauisPyKrwneM7MifSyCYyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEzy9k8l 9E0RclPqkksTc8JUE+xtMB8GA1UdIwQYMBaAFGmeZ0JWe+cynMOnht63hX4sJCD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzMy8wNjVEQTNCQUI4 NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6S2N3NmVHM3JlRmZpd2tJ UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FaNW5RbFo3NXpLY3c2ZUczcmVGZml3a0lQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTMzMy8wNjVEQTNCQUI4NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6 S2N3NmVHM3JlRmZpd2tJUGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxQ9j5G/UaUGwHp3KFBij0BzyDNo8g7lmEKxJ6dA6XIrGhmGLw7ymSHCcDwih YzoljCwUdapC4VHvI4qj8i+zQ+uBCXOeaKn1dMewzQXqe7cjWIxzZfM5Sb9unXVX KGqXNnQgApXhfsE+5ag45fsYI955I2U77zJ1d0uHEKo0t3tgLboXBn6F52kXR1XE gzjQFjL7KePDLIm6R+7/bILQKPWinPkXcK+RoBMxbMeiSiCsZEGZF4eKyb5yf5mH Gl6w9fAGpAtXNd3uBcrKjEWAENuLgWcgqa/1OeMCQAfx/qxPzjTd2FJ2v87cqWvw jogh6kUEpWZY3zPdAGA6KLBw/Q== -----END CERTIFICATE-----Generated at Thu Mar 26 04:11:03 2026 by rpki-client