$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft File: aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft (raw, json) Hash identifier: /Nh5RxIEkjlcGgAOrefSf4ouK8j3BeuA2ZCatjUu6rY= Subject key identifier: 2A:EF:02:AD:AB:F9:A8:EF:E9:2A:7F:0D:C7:D5:9E:05:98:EB:6D:07 Authority key identifier: 68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F Certificate issuer: /CN=A911CA82/serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft Manifest number: ED Signing time: Tue 24 Mar 2026 22:18:45 +0000 Manifest this update: Tue 24 Mar 2026 22:18:45 +0000 Manifest next update: Tue 31 Mar 2026 22:18:45 +0000 Files and hashes: 1: aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl (hash: vRw6+k54GZVvjTxEUTrly/ByPQYOHxUt4Hdy8ERferY=) 2: AF4301D4CF8511EF94856A41C4F9AE02.roa (hash: c+4urNgJNXNWBhwpLiUNezIdmF5mlVJxmjpsI9/AkQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA82, serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F Validity Not Before: Mar 24 22:18:45 2026 GMT Not After : Mar 31 22:18:45 2026 GMT Subject: CN=69c30dc5-92fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:74:e0:92:1c:c4:94:07:8d:b9:3f:e9:2c:b5: 5e:e5:d2:68:25:e6:70:23:12:ab:96:e2:12:59:10: bc:2c:9d:a6:a5:95:d9:d6:5b:ea:f2:d0:e1:f2:02: 2c:b7:9d:7b:31:d7:ca:b8:a3:e7:fc:7a:2f:7f:50: 4e:fd:52:4b:5f:78:ef:41:92:31:c3:28:ed:d1:5e: ac:b7:16:07:4f:a0:57:34:16:55:7e:08:12:62:8c: 9e:d6:81:61:ff:69:c5:4e:d2:64:c7:c4:09:9c:de: 2b:0c:86:5d:88:5c:8d:eb:1e:ed:85:7c:28:0f:1f: 56:8b:e3:95:8d:99:e2:25:5a:15:ca:1d:44:8d:97: 85:58:c7:b6:1c:02:ec:ea:32:60:b9:47:5c:72:46: 1d:46:92:27:ca:e7:e9:d5:09:33:a4:f9:66:af:e4: 95:c7:4e:a5:1b:69:94:5e:9d:cd:04:94:6d:f1:96: 14:a9:8b:48:4c:77:77:4f:05:1b:49:77:6a:97:f0: 5c:00:e6:65:d3:b7:d2:48:4e:f7:dd:cf:98:a0:22: 23:e3:cb:f9:26:23:32:08:8e:7b:4b:67:da:71:9a: e1:78:a3:f1:93:bb:b6:4d:f2:ae:05:fc:9a:34:b1: ba:f1:0b:7d:54:44:7c:f0:db:9c:64:d9:1c:1b:89: 4c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EF:02:AD:AB:F9:A8:EF:E9:2A:7F:0D:C7:D5:9E:05:98:EB:6D:07 X509v3 Authority Key Identifier: keyid:68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:aa:5f:42:39:e1:9d:60:e3:21:06:21:fe:0d:e5:62:73:d1: 23:66:c9:26:8d:94:1f:8d:08:ab:ac:a1:eb:85:8c:b3:f9:7c: d2:40:7d:ad:69:8a:2a:30:24:92:39:37:c8:fa:a1:b7:62:b4: 9b:36:b8:22:c4:d5:f2:62:8a:a2:d1:8a:5e:75:16:fc:f9:81: a9:e7:2e:10:41:bb:12:63:aa:ed:ae:64:cb:da:56:de:07:ae: 59:f2:8d:6e:f9:c0:69:64:ca:66:70:a0:f0:ee:92:72:59:7f: 8c:9c:cf:38:3a:ce:bd:82:6f:8a:32:5c:78:80:a6:09:74:ff: 1e:cc:0f:50:21:04:ef:7a:ed:a3:2f:ab:bb:46:ab:f0:40:c7: ee:b0:29:57:3a:f7:5f:e0:55:a1:bc:59:37:ba:d4:f1:ca:cc: 8f:d0:74:ed:11:d0:c0:2b:25:68:61:59:8b:9a:43:ce:dc:ac: 63:66:ba:4d:b6:bd:16:e4:43:28:de:80:f6:d3:8a:d4:c2:99: 63:1f:6b:15:cc:82:c5:00:0e:ca:a8:4f:51:de:46:ae:e1:c1: f5:58:0f:5f:ea:ad:3a:c3:ff:dc:aa:2c:c7:bc:9b:d0:a9:96: b3:03:db:e8:b8:bf:bc:de:2c:e6:70:e2:f0:6f:75:31:a6:b1: 79:8e:07:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBODIxMTAvBgNVBAUTKDY4NDEzRDQxRjYwMDVFMDMxNkUwRTI1NzZGMjI2QzIx ODhBQTE1NkYwHhcNMjYwMzI0MjIxODQ1WhcNMjYwMzMxMjIxODQ1WjAYMRYwFAYD VQQDEw02OWMzMGRjNS05MmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHTgkhzElAeNuT/pLLVe5dJoJeZwIxKrluISWRC8LJ2mpZXZ1lvq8tDh8gIs t517MdfKuKPn/Hovf1BO/VJLX3jvQZIxwyjt0V6stxYHT6BXNBZVfggSYoye1oFh /2nFTtJkx8QJnN4rDIZdiFyN6x7thXwoDx9Wi+OVjZniJVoVyh1EjZeFWMe2HALs 6jJguUdcckYdRpInyufp1QkzpPlmr+SVx06lG2mUXp3NBJRt8ZYUqYtITHd3TwUb SXdql/BcAOZl07fSSE733c+YoCIj48v5JiMyCI57S2facZrheKPxk7u2TfKuBfya NLG68Qt9VER88NucZNkcG4lMaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCrvAq2r +ajv6Sp/DcfVngWY620HMB8GA1UdIwQYMBaAFGhBPUH2AF4DFuDiV28ibCGIqhVv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E4Mi9GNjk5RTM1NENG MTIxMUVGOEYxRDIwNUJDNEY5QUUwMi9hRUU5UWZZQVhnTVc0T0pYYnlKc0lZaXFG VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FFRTlRZllBWGdNVzRPSlhieUpzSVlpcUZXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0E4Mi9GNjk5RTM1NENGMTIxMUVGOEYxRDIwNUJDNEY5QUUwMi9hRUU5UWZZQVhn TVc0T0pYYnlKc0lZaXFGVzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHKpfQjnhnWDjIQYh/g3lYnPRI2bJJo2UH40Iq6yh64WMs/l80kB9rWmKKjAk kjk3yPqht2K0mza4IsTV8mKKotGKXnUW/PmBqecuEEG7EmOq7a5ky9pW3geuWfKN bvnAaWTKZnCg8O6Scll/jJzPODrOvYJvijJceICmCXT/HswPUCEE73rtoy+ru0ar 8EDH7rApVzr3X+BVobxZN7rU8crMj9B07RHQwCslaGFZi5pDztysY2a6Tba9FuRD KN6A9tOK1MKZYx9rFcyCxQAOyqhPUd5GruHB9VgPX+qtOsP/3Kosx7yb0KmWswPb 6Li/vN4s5nDi8G91MaaxeY4H7w== -----END CERTIFICATE-----Generated at Thu Mar 26 23:02:09 2026 by rpki-client