$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft File: aa41zc5jfrZF61Bl7eEtWOdZkjY.mft (raw, json) Hash identifier: ReD9UNtqwluZkEbYyGgiAtr3MZIQkTStazK7Oe6Oca4= Subject key identifier: D3:85:3A:11:27:0B:6C:6E:A5:00:A9:C0:86:1A:99:73:B1:3C:4D:9E Authority key identifier: 69:AE:35:CD:CE:63:7E:B6:45:EB:50:65:ED:E1:2D:58:E7:59:92:36 Certificate issuer: /CN=A911BD6E/serialNumber=69AE35CDCE637EB645EB5065EDE12D58E7599236 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft Manifest number: 33 Signing time: Wed 25 Mar 2026 07:50:48 +0000 Manifest this update: Wed 25 Mar 2026 07:50:48 +0000 Manifest next update: Wed 01 Apr 2026 07:50:48 +0000 Files and hashes: 1: aa41zc5jfrZF61Bl7eEtWOdZkjY.crl (hash: vz0xXAwsH1TA4qUrgdOnHg6u00yXR0vmRXAuMTykYdY=) 2: 8A1624CEE29211F0A7536C41456F56BC.roa (hash: 8wnCI5N573pkzZtHUtb6fStu9xHz76SfS/f/10QACGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.crl rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:50:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD6E, serialNumber=69AE35CDCE637EB645EB5065EDE12D58E7599236 Validity Not Before: Mar 25 07:50:48 2026 GMT Not After : Apr 1 07:50:48 2026 GMT Subject: CN=69c393d8-0b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e3:bf:2a:4d:b0:3c:1a:96:3f:c6:06:34:33: 87:dd:28:aa:46:d5:2f:31:16:e6:6b:c0:69:1f:fe: cd:fa:aa:4d:3b:1d:d3:88:24:0c:39:70:cc:bf:15: 1b:f5:c8:9c:da:58:0e:5c:2d:8e:40:63:46:f6:35: f1:82:28:52:96:12:40:fc:9d:fe:f1:27:cd:0f:58: b9:a0:e2:7c:9b:ce:f1:e0:c3:aa:a3:33:c4:42:a8: 3a:ce:d4:28:4e:fe:87:49:34:12:88:57:f6:92:ac: d8:5c:d9:f3:70:8c:a0:dc:2a:93:f7:a4:bc:41:14: 55:c6:87:8d:13:45:29:98:a1:eb:90:25:09:0b:20: 0d:1b:2d:c5:9e:fa:0c:e1:32:e5:87:32:e8:33:17: d8:db:d6:fe:ef:d8:36:02:6c:c0:76:7b:aa:c5:9e: b2:c1:48:47:d3:fd:b2:94:f1:27:79:2c:ce:f9:1b: 7b:ea:26:5c:96:66:cd:c3:22:80:02:af:bb:e8:2d: 64:48:5a:2d:8a:df:ea:4a:f7:e0:bb:de:90:84:e5: 0a:81:15:14:5f:81:27:f0:59:7d:19:5f:cb:46:34: 65:13:21:76:03:10:45:61:c7:34:b6:c7:28:b4:0a: 14:ab:54:2b:67:88:9c:ff:95:7a:31:2a:d9:f0:ce: df:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:85:3A:11:27:0B:6C:6E:A5:00:A9:C0:86:1A:99:73:B1:3C:4D:9E X509v3 Authority Key Identifier: keyid:69:AE:35:CD:CE:63:7E:B6:45:EB:50:65:ED:E1:2D:58:E7:59:92:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:92:76:18:93:ad:d6:90:cd:f2:8f:fb:a6:ef:1c:b4:8d:73: 9f:04:38:08:f5:d0:9c:7a:51:1c:12:03:a9:64:e5:da:4e:ee: f3:c2:b3:bf:47:9d:ad:9e:2e:ff:f9:41:3f:fa:dc:88:67:53: e5:a6:ce:94:48:93:cd:ef:0f:9b:fb:0a:64:f7:2c:d1:18:19: 81:33:d4:c4:e9:ba:3f:6e:a9:24:71:49:aa:e7:5e:58:f9:3f: a7:b7:df:95:d5:31:bb:bb:56:2f:e3:52:fc:fa:a1:5f:42:df: 72:df:7b:6b:a5:74:e6:b8:e5:9f:99:e0:f5:9b:89:6d:b4:8c: a4:20:90:3a:77:98:95:e8:ab:65:61:c4:fc:94:e1:dd:db:97: a5:d0:c9:e4:39:73:20:39:d2:5a:03:8e:2e:c6:98:3b:d1:21: a6:b6:65:89:4d:e3:c5:ed:bd:95:bb:71:57:3a:a6:73:ec:36: d0:ce:2d:e5:e7:58:6a:9b:11:35:62:22:59:a6:96:22:6b:10: fa:4b:2d:dd:76:e2:9e:b1:ed:06:61:08:54:4e:1a:3a:e4:a8: e6:31:09:df:34:0a:46:ca:df:16:8e:07:46:d4:40:01:48:f4: 0e:72:fd:3b:63:b3:8c:30:42:44:e8:6b:fa:52:91:79:50:ce: c7:d6:e1:71 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkQ2RTExMC8GA1UEBRMoNjlBRTM1Q0RDRTYzN0VCNjQ1RUI1MDY1RURFMTJENThF NzU5OTIzNjAeFw0yNjAzMjUwNzUwNDhaFw0yNjA0MDEwNzUwNDhaMBgxFjAUBgNV BAMTDTY5YzM5M2Q4LTBiN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0478qTbA8GpY/xgY0M4fdKKpG1S8xFuZrwGkf/s36qk07HdOIJAw5cMy/FRv1 yJzaWA5cLY5AY0b2NfGCKFKWEkD8nf7xJ80PWLmg4nybzvHgw6qjM8RCqDrO1ChO /odJNBKIV/aSrNhc2fNwjKDcKpP3pLxBFFXGh40TRSmYoeuQJQkLIA0bLcWe+gzh MuWHMugzF9jb1v7v2DYCbMB2e6rFnrLBSEfT/bKU8Sd5LM75G3vqJlyWZs3DIoAC r7voLWRIWi2K3+pK9+C73pCE5QqBFRRfgSfwWX0ZX8tGNGUTIXYDEEVhxzS2xyi0 ChSrVCtniJz/lXoxKtnwzt/5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU04U6EScL bG6lAKnAhhqZc7E8TZ4wHwYDVR0jBBgwFoAUaa41zc5jfrZF61Bl7eEtWOdZkjYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCRDZFL0JGNEYyNDdBRTI5 MTExRjA5NkUyN0QxMTQ1NkY1NkJDL2FhNDF6YzVqZnJaRjYxQmw3ZUV0V09kWmtq WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWE0MXpjNWpmclpGNjFCbDdlRXRXT2Raa2pZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC RDZFL0JGNEYyNDdBRTI5MTExRjA5NkUyN0QxMTQ1NkY1NkJDL2FhNDF6YzVqZnJa RjYxQmw3ZUV0V09kWmtqWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB1knYYk63WkM3yj/um7xy0jXOfBDgI9dCcelEcEgOpZOXaTu7zwrO/R52tni7/ +UE/+tyIZ1Plps6USJPN7w+b+wpk9yzRGBmBM9TE6bo/bqkkcUmq515Y+T+nt9+V 1TG7u1Yv41L8+qFfQt9y33trpXTmuOWfmeD1m4lttIykIJA6d5iV6KtlYcT8lOHd 25el0MnkOXMgOdJaA44uxpg70SGmtmWJTePF7b2Vu3FXOqZz7DbQzi3l51hqmxE1 YiJZppYiaxD6Sy3dduKese0GYQhUTho65KjmMQnfNApGyt8WjgdG1EABSPQOcv07 Y7OMMEJE6Gv6UpF5UM7H1uFx -----END CERTIFICATE-----Generated at Thu Mar 26 05:25:40 2026 by rpki-client