$ rpki-client -vvf rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft File: aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft (raw, json) Hash identifier: oL647fvQNzVM7hRF/QfA6eR/VSF0xATzFv/0jiHPOXk= Subject key identifier: F1:E3:86:DD:06:6A:7F:3D:9E:84:58:7E:10:0D:45:96:1D:47:23:76 Authority key identifier: 69:EC:F0:E2:A1:ED:8F:05:CC:27:8B:3E:13:F6:62:ED:0B:35:48:8C Certificate issuer: /CN=A9131CF4/serialNumber=69ECF0E2A1ED8F05CC278B3E13F662ED0B35488C Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft Manifest number: 4D Signing time: Wed 25 Mar 2026 07:27:22 +0000 Manifest this update: Wed 25 Mar 2026 07:27:21 +0000 Manifest next update: Wed 01 Apr 2026 07:27:21 +0000 Files and hashes: 1: aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.crl (hash: 9EL8Rjep9Jqzg5LxxoMWP/M31sRdK9QcKO/Gt01llos=) 2: 4B2379BEB71911F0AAA11D51C4F9AE02.roa (hash: ym/P1+PLUpEQKVLi2u6tem8jb0mTZASUmnMv8PJgl7k=) 3: F11E4CE6B71811F0B6A0AF50C4F9AE02.roa (hash: 91XVnfqDvuubQ63399MOb9g9RyzRumGsmN3T5NY63OE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.crl rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131CF4, serialNumber=69ECF0E2A1ED8F05CC278B3E13F662ED0B35488C Validity Not Before: Mar 25 07:27:21 2026 GMT Not After : Apr 1 07:27:21 2026 GMT Subject: CN=69c38e59-76ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cd:fe:82:ab:72:46:c9:7d:55:0c:57:6f:b9: 50:e4:ab:37:51:77:79:ce:a1:74:0d:ce:b8:01:f6: 6c:8a:91:7f:a4:79:bb:ef:6b:64:76:3c:d3:df:86: db:b0:dd:fd:f9:5d:95:a6:60:15:22:46:74:b3:e1: 35:13:4f:3d:38:8d:2f:d8:d2:26:ce:f7:56:e3:dd: e5:83:84:63:2e:32:cf:7f:de:57:c3:93:b0:4c:bd: 5e:fc:1a:28:b3:9a:6b:e3:68:02:84:1f:5a:91:a8: 8f:99:cb:8f:d4:10:68:95:37:cd:e9:36:61:b0:bd: f8:70:16:98:12:5b:a8:e8:78:1b:e1:c7:3e:ec:5a: 1c:a1:0c:63:e4:df:89:d9:fa:96:f6:cc:ce:03:2f: a8:4d:a9:9d:76:37:86:34:22:1f:f2:f3:df:e4:e5: 03:0c:44:a8:f0:74:b3:e5:b4:a4:d7:8d:00:c4:22: 4c:2f:39:10:40:04:6c:15:b9:12:30:26:95:b8:ef: 86:da:96:30:c8:3f:3e:03:12:60:0c:9f:3e:f2:b3: bc:61:2d:06:54:dc:1e:fa:3b:c9:7e:32:43:27:5c: 55:03:b5:be:87:3d:11:39:da:54:cb:56:b4:fa:1e: 4f:69:3b:a2:3c:51:b9:b3:38:c2:0c:fe:9a:f7:36: 0c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E3:86:DD:06:6A:7F:3D:9E:84:58:7E:10:0D:45:96:1D:47:23:76 X509v3 Authority Key Identifier: keyid:69:EC:F0:E2:A1:ED:8F:05:CC:27:8B:3E:13:F6:62:ED:0B:35:48:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:8e:48:2c:c2:70:19:93:4a:6f:cc:32:9d:6d:82:b0:58:a0: 68:09:28:d8:06:a8:3d:e6:48:82:0b:bd:c0:17:2d:18:c3:7c: d2:50:bb:5e:fe:16:5a:12:a8:9f:83:70:65:07:a9:0a:f5:8a: a8:f9:dc:04:85:0f:da:c8:7f:26:6a:8b:d8:aa:00:13:f1:47: fa:19:15:0d:e5:8b:f2:f8:9b:2a:51:74:d2:99:ec:5e:b8:4d: ff:9a:18:ec:4f:1a:0d:fe:3d:e0:bc:cc:b2:8a:a2:a4:bf:39: 9d:97:0e:d4:6c:2c:b8:04:51:bb:9b:10:2b:fb:8f:f8:ad:a0: c5:3a:01:ad:d3:51:26:a7:02:a6:30:bf:fc:cc:00:3e:38:f7: 31:e3:ee:e2:d5:15:e5:52:b2:32:5e:59:81:0e:b3:c6:08:b7: f4:30:af:21:91:ab:87:75:57:65:43:df:0d:f2:7e:d6:db:d7: c1:10:1a:60:00:40:6b:9a:71:cb:27:08:61:b9:f8:db:5a:d5: 53:2d:d3:fa:eb:2b:cd:77:1d:cf:9e:10:14:32:a2:0d:a9:d4: 26:e2:89:df:c5:41:c5:48:b4:f6:76:66:d0:ca:50:2a:0b:8f: b6:66:c7:06:e5:0f:5f:fc:bb:78:d2:5d:30:5c:6d:41:f5:fc: 1e:9c:ac:14 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MUNGNDExMC8GA1UEBRMoNjlFQ0YwRTJBMUVEOEYwNUNDMjc4QjNFMTNGNjYyRUQw QjM1NDg4QzAeFw0yNjAzMjUwNzI3MjFaFw0yNjA0MDEwNzI3MjFaMBgxFjAUBgNV BAMTDTY5YzM4ZTU5LTc2ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOzf6Cq3JGyX1VDFdvuVDkqzdRd3nOoXQNzrgB9myKkX+kebvva2R2PNPfhtuw 3f35XZWmYBUiRnSz4TUTTz04jS/Y0ibO91bj3eWDhGMuMs9/3lfDk7BMvV78Giiz mmvjaAKEH1qRqI+Zy4/UEGiVN83pNmGwvfhwFpgSW6joeBvhxz7sWhyhDGPk34nZ +pb2zM4DL6hNqZ12N4Y0Ih/y89/k5QMMRKjwdLPltKTXjQDEIkwvORBABGwVuRIw JpW474baljDIPz4DEmAMnz7ys7xhLQZU3B76O8l+MkMnXFUDtb6HPRE52lTLVrT6 Hk9pO6I8UbmzOMIM/pr3NgwzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8eOG3QZq fz2ehFh+EA1Flh1HI3YwHwYDVR0jBBgwFoAUaezw4qHtjwXMJ4s+E/Zi7Qs1SIww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxQ0Y0LzNFQTYzOEM4Qjcx MTExRjBBNUMyODA3M0M0RjlBRTAyL2Flenc0cUh0andYTUo0cy1FX1ppN1FzMVNJ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYWV6dzRxSHRqd1hNSjRzLUVfWmk3UXMxU0l3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx Q0Y0LzNFQTYzOEM4QjcxMTExRjBBNUMyODA3M0M0RjlBRTAyL2Flenc0cUh0andY TUo0cy1FX1ppN1FzMVNJdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCHjkgswnAZk0pvzDKdbYKwWKBoCSjYBqg95kiCC73AFy0Yw3zSULte/hZaEqif g3BlB6kK9Yqo+dwEhQ/ayH8maovYqgAT8Uf6GRUN5Yvy+JsqUXTSmexeuE3/mhjs TxoN/j3gvMyyiqKkvzmdlw7UbCy4BFG7mxAr+4/4raDFOgGt01EmpwKmML/8zAA+ OPcx4+7i1RXlUrIyXlmBDrPGCLf0MK8hkauHdVdlQ98N8n7W29fBEBpgAEBrmnHL JwhhufjbWtVTLdP66yvNdx3PnhAUMqINqdQm4onfxUHFSLT2dmbQylAqC4+2ZscG 5Q9f/Lt40l0wXG1B9fwenKwU -----END CERTIFICATE-----Generated at Thu Mar 26 20:41:14 2026 by rpki-client