$ rpki-client -vvf rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft File: AQtAe3X24zjzr7WajWJxXDwC7PQ.mft (raw, json) Hash identifier: QmDkELAaA/2s+q1C7l1e+ro6NhhkJ1QdZrn5Wcdev60= Subject key identifier: A0:CF:31:29:CA:75:DB:63:46:04:C8:B0:DE:B9:D5:EB:C9:CD:42:18 Authority key identifier: 01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4 Certificate issuer: /CN=A9132EC7/serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4 Certificate serial: 1772 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft Manifest number: 175D Signing time: Tue 24 Mar 2026 16:30:55 +0000 Manifest this update: Tue 24 Mar 2026 16:30:54 +0000 Manifest next update: Tue 31 Mar 2026 16:30:54 +0000 Files and hashes: 1: AQtAe3X24zjzr7WajWJxXDwC7PQ.crl (hash: CMkPCrC1LD+Kkmf4qS1QvHfJxQ1YSU45qFIeGTC+EYg=) 2: 0D4F5906FA7911E7B85F4E7EC4F9AE02.roa (hash: AiYRW8mdMjJMqLWYsa9g8EWEojUvhBuGHCSk9XUHpuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6002 (0x1772) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132EC7, serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4 Validity Not Before: Mar 24 16:30:54 2026 GMT Not After : Mar 31 16:30:54 2026 GMT Subject: CN=69c2bc3f-be5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:9b:3a:5f:79:58:7c:73:9b:21:ff:ad:53:4b: f1:2e:44:de:33:65:2c:d4:32:a5:53:1a:73:a3:f2: 3d:dc:c0:3a:f1:71:99:fa:fb:0f:91:0b:4d:5f:31: 97:a2:b0:2c:96:c1:7c:d7:21:7f:f7:98:6b:71:c4: 1d:91:2a:d5:55:f7:a3:ef:99:f7:09:29:97:b3:83: 93:62:a6:cb:f9:35:6a:dd:1c:e5:9f:c8:72:91:04: 8c:33:89:05:ad:70:e6:ff:97:af:45:e3:53:ef:f0: db:04:32:f0:15:8a:fd:12:5f:bf:c0:23:08:8a:30: 4e:9c:df:5e:a9:16:2a:32:ce:66:23:30:bc:f3:78: 1a:85:46:3d:7d:19:8e:03:f3:22:5c:cd:65:6b:f3: 22:cd:d2:4c:8d:99:a8:55:60:af:14:d8:9e:dd:9b: 61:09:52:b8:42:2d:0e:af:fa:8b:43:26:64:3b:d1: ca:53:0e:f4:2e:0b:46:31:13:ef:ed:27:76:92:a0: 9b:0f:b6:ff:bb:ca:64:a0:e2:e9:0e:1e:bc:60:5b: db:5c:3e:64:de:1b:19:d7:e2:6e:7a:50:07:45:96: 5f:98:d6:96:e0:cc:65:bf:31:d0:1c:a2:68:0a:3f: c6:a2:7b:6e:0c:52:7b:89:f7:82:9a:24:f3:06:08: 4b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CF:31:29:CA:75:DB:63:46:04:C8:B0:DE:B9:D5:EB:C9:CD:42:18 X509v3 Authority Key Identifier: keyid:01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:ce:89:46:aa:ef:60:61:91:e7:13:03:83:84:0e:45:03:03: a1:f8:c0:f8:d7:33:bc:04:79:a3:f0:96:88:c5:73:8d:b1:53: fa:b2:f3:20:56:49:39:26:21:f6:ac:af:df:a5:87:0e:80:f8: 73:fc:a9:f0:33:29:cd:c7:9b:1a:5f:0b:29:15:78:85:8b:39: 4b:f3:e2:74:9f:e9:33:35:16:6c:40:c6:d0:00:02:ff:5b:a4: d5:b8:2e:a8:af:95:1d:00:57:3b:39:3e:53:69:a6:ae:18:cf: 36:a3:28:c2:8f:36:51:0d:a9:d3:bf:91:0f:70:5d:c0:ba:81: b9:3d:27:ca:33:db:8d:ab:ce:eb:5a:47:3e:21:da:13:f4:a1: 71:fc:ca:f2:1b:3b:7b:b0:d3:e4:52:35:f6:d4:ca:36:87:4a: 9e:68:19:b0:26:ff:1e:09:10:c3:e2:61:f4:ec:4f:84:35:39: bc:d6:6b:75:77:72:a3:b1:31:e0:20:a3:3f:18:d2:5e:82:c8: bd:41:54:a1:26:a2:c6:84:b1:ae:48:7d:13:63:74:32:88:13: a2:94:4e:82:53:77:7f:95:54:6e:61:b9:17:7e:4e:af:f2:b6: 04:e4:13:82:20:39:ec:0c:05:a1:72:ce:c3:02:cd:bb:a5:e7: 65:f1:c9:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJFQzcxMTAvBgNVBAUTKDAxMEI0MDdCNzVGNkUzMzhGM0FGQjU5QThENjI3MTVD M0MwMkVDRjQwHhcNMjYwMzI0MTYzMDU0WhcNMjYwMzMxMTYzMDU0WjAYMRYwFAYD VQQDEw02OWMyYmMzZi1iZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Zs6X3lYfHObIf+tU0vxLkTeM2Us1DKlUxpzo/I93MA68XGZ+vsPkQtNXzGX orAslsF81yF/95hrccQdkSrVVfej75n3CSmXs4OTYqbL+TVq3Rzln8hykQSMM4kF rXDm/5evReNT7/DbBDLwFYr9El+/wCMIijBOnN9eqRYqMs5mIzC883gahUY9fRmO A/MiXM1la/MizdJMjZmoVWCvFNie3ZthCVK4Qi0Or/qLQyZkO9HKUw70LgtGMRPv 7Sd2kqCbD7b/u8pkoOLpDh68YFvbXD5k3hsZ1+JuelAHRZZfmNaW4MxlvzHQHKJo Cj/GontuDFJ7ifeCmiTzBghLSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKDPMSnK ddtjRgTIsN651evJzUIYMB8GA1UdIwQYMBaAFAELQHt19uM486+1mo1icVw8Auz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkVDNy8yOTM0NzI2QUZB NzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6anpyN1dhaldKeFhEd0M3 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRdEFlM1gyNHpqenI3V2FqV0p4WER3QzdQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkVDNy8yOTM0NzI2QUZBNzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6 anpyN1dhaldKeFhEd0M3UFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJM6JRqrvYGGR5xMDg4QORQMDofjA+NczvAR5o/CWiMVzjbFT+rLzIFZJOSYh 9qyv36WHDoD4c/yp8DMpzcebGl8LKRV4hYs5S/PidJ/pMzUWbEDG0AAC/1uk1bgu qK+VHQBXOzk+U2mmrhjPNqMowo82UQ2p07+RD3BdwLqBuT0nyjPbjavO61pHPiHa E/ShcfzK8hs7e7DT5FI19tTKNodKnmgZsCb/HgkQw+Jh9OxPhDU5vNZrdXdyo7Ex 4CCjPxjSXoLIvUFUoSaixoSxrkh9E2N0MogTopROglN3f5VUbmG5F35Or/K2BOQT giA57AwFoXLOwwLNu6XnZfHJLg== -----END CERTIFICATE-----Generated at Thu Mar 26 17:44:42 2026 by rpki-client