$ rpki-client -vvf rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft File: aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft (raw, json) Hash identifier: CB76WyB3VVrQTrYb0pLvkKiErR4lEjP7UHL/mfxhi6w= Subject key identifier: A6:B9:63:05:D7:7F:9E:F2:14:4D:F1:DA:E9:97:AE:8D:D6:B9:46:33 Authority key identifier: 68:7F:BA:20:E2:F7:89:17:E0:FB:03:B9:12:B8:C8:56:37:C5:37:3D Certificate issuer: /CN=A913B243/serialNumber=687FBA20E2F78917E0FB03B912B8C85637C5373D Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft Manifest number: 4A Signing time: Wed 25 Mar 2026 07:29:15 +0000 Manifest this update: Wed 25 Mar 2026 07:29:15 +0000 Manifest next update: Wed 01 Apr 2026 07:29:15 +0000 Files and hashes: 1: aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl (hash: gaTk6OY3dDcur8R8olrwgnsMt9WL+PIBe84aetXB5QA=) 2: F800618EBBA511F0B0EA597FC4F9AE02.roa (hash: zx0wMVGXNski+XKZAMtyBUkbSRt+Hcyh2fuW03NU7nA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B243, serialNumber=687FBA20E2F78917E0FB03B912B8C85637C5373D Validity Not Before: Mar 25 07:29:15 2026 GMT Not After : Apr 1 07:29:15 2026 GMT Subject: CN=69c38ecb-8288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:60:14:e3:13:f2:09:1e:5a:8e:2a:71:62:a4: e5:27:76:b8:84:ea:45:3a:cf:d5:94:27:0e:a1:b2: a9:88:6b:1c:8b:13:d6:c6:8e:21:90:80:a0:dc:e3: 2a:a4:68:c3:a0:b6:60:b0:7b:00:23:d7:c4:bd:fb: 0f:c1:dd:78:c6:d5:92:87:75:07:c4:16:60:55:10: 03:04:02:53:90:05:e3:27:88:d3:47:b9:68:96:6c: da:21:a7:3e:42:1e:54:aa:63:bb:70:bb:40:24:03: e8:92:61:36:90:ee:ad:19:ce:4a:8c:a2:09:c1:29: 18:23:75:fa:77:ef:5a:6e:b1:fe:79:e8:06:35:cc: b8:21:6a:2b:2c:95:37:ff:68:f7:14:a5:41:0d:74: 83:ae:e5:3c:80:e9:16:0c:02:aa:b8:26:46:60:4f: c3:30:ef:e6:7a:14:fc:28:42:94:28:92:0f:c8:0a: 23:4b:bc:ad:27:b4:48:77:58:86:96:74:0b:03:25: e0:40:66:c1:bf:8c:45:93:4e:1f:4b:a1:e6:56:dc: 7d:d3:72:02:7e:da:ff:be:9e:c2:e2:2e:8b:9e:73: 42:5e:fd:08:a9:9d:6b:1d:bd:1d:1e:42:d0:00:45: 5f:48:84:be:47:07:d6:4f:fd:41:d8:d3:fd:7e:18: a6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B9:63:05:D7:7F:9E:F2:14:4D:F1:DA:E9:97:AE:8D:D6:B9:46:33 X509v3 Authority Key Identifier: keyid:68:7F:BA:20:E2:F7:89:17:E0:FB:03:B9:12:B8:C8:56:37:C5:37:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:6d:90:bf:30:59:da:e7:6b:ed:2c:7b:71:4d:0a:76:92:7d: 9a:e5:d2:c8:a2:0e:d9:f3:9f:65:2e:f3:26:f8:d8:fd:bb:7b: 9c:7d:83:0c:a0:d7:59:b5:32:1e:93:6f:cd:0c:f4:07:bc:eb: 5e:ce:6c:b9:44:54:8b:98:a5:7d:e2:b2:0c:66:51:35:27:0b: 30:1b:da:3c:f1:db:24:2a:bb:cb:bb:85:2d:c8:74:ce:7b:1d: 98:38:2a:a8:99:24:5d:e6:36:ea:70:35:84:86:54:f0:f5:aa: db:e3:82:35:7c:a0:ca:bc:b0:e9:55:6c:8c:75:77:77:16:3e: 30:19:04:03:2d:e5:6d:54:a5:9b:dc:71:13:45:bc:ec:f9:3a: 2e:cb:3b:5c:59:98:31:69:59:39:4b:91:bd:d9:57:d3:93:a4: 2f:71:f5:66:e2:06:80:0c:01:ad:75:f5:85:37:8f:76:2a:4e: dd:d4:f0:0d:e3:00:57:17:d6:3c:34:61:f5:1e:85:1d:fa:9d: 2c:9d:42:a8:3d:4b:12:46:9a:42:5d:5c:73:66:ab:00:28:d2: 02:cf:23:88:a3:43:84:fe:94:33:b6:c4:48:f8:c2:03:89:af: 98:82:e5:09:21:be:e4:9f:6c:e9:5a:84:78:e6:f8:4f:30:a8: 73:16:bf:59 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjI0MzExMC8GA1UEBRMoNjg3RkJBMjBFMkY3ODkxN0UwRkIwM0I5MTJCOEM4NTYz N0M1MzczRDAeFw0yNjAzMjUwNzI5MTVaFw0yNjA0MDEwNzI5MTVaMBgxFjAUBgNV BAMTDTY5YzM4ZWNiLTgyODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoYBTjE/IJHlqOKnFipOUndriE6kU6z9WUJw6hsqmIaxyLE9bGjiGQgKDc4yqk aMOgtmCwewAj18S9+w/B3XjG1ZKHdQfEFmBVEAMEAlOQBeMniNNHuWiWbNohpz5C HlSqY7twu0AkA+iSYTaQ7q0ZzkqMognBKRgjdfp371pusf556AY1zLghaisslTf/ aPcUpUENdIOu5TyA6RYMAqq4JkZgT8Mw7+Z6FPwoQpQokg/ICiNLvK0ntEh3WIaW dAsDJeBAZsG/jEWTTh9LoeZW3H3TcgJ+2v++nsLiLouec0Je/QipnWsdvR0eQtAA RV9IhL5HB9ZP/UHY0/1+GKazAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUprljBdd/ nvIUTfHa6Zeujda5RjMwHwYDVR0jBBgwFoAUaH+6IOL3iRfg+wO5ErjIVjfFNz0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCMjQzL0E5QTc1M0EwQkI5 OTExRjBCNUZCNjk2QUM0RjlBRTAyL2FILTZJT0wzaVJmZy13TzVFcmpJVmpmRk56 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYUgtNklPTDNpUmZnLXdPNUVyaklWamZGTnowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC MjQzL0E5QTc1M0EwQkI5OTExRjBCNUZCNjk2QUM0RjlBRTAyL2FILTZJT0wzaVJm Zy13TzVFcmpJVmpmRk56MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCYbZC/MFna52vtLHtxTQp2kn2a5dLIog7Z859lLvMm+Nj9u3ucfYMMoNdZtTIe k2/NDPQHvOtezmy5RFSLmKV94rIMZlE1JwswG9o88dskKrvLu4UtyHTOex2YOCqo mSRd5jbqcDWEhlTw9arb44I1fKDKvLDpVWyMdXd3Fj4wGQQDLeVtVKWb3HETRbzs +TouyztcWZgxaVk5S5G92VfTk6QvcfVm4gaADAGtdfWFN492Kk7d1PAN4wBXF9Y8 NGH1HoUd+p0snUKoPUsSRppCXVxzZqsAKNICzyOIo0OE/pQztsRI+MIDia+YguUJ Ib7kn2zpWoR45vhPMKhzFr9Z -----END CERTIFICATE-----Generated at Thu Mar 26 02:11:04 2026 by rpki-client