$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft File: aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json) Hash identifier: O7ZSP3qfMiRY4oItxu/QiIFmK3ZdqSBRNGylZ2owmsk= Subject key identifier: 4F:3C:36:76:98:7D:73:7C:5E:6E:CA:E8:FB:C4:20:82:A4:69:54:25 Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D Certificate issuer: /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D Certificate serial: 3552 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft Manifest number: 352F Signing time: Thu 26 Mar 2026 15:18:18 +0000 Manifest this update: Thu 26 Mar 2026 15:18:17 +0000 Manifest next update: Thu 02 Apr 2026 15:18:17 +0000 Files and hashes: 1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: Y/QskkuWo9LJH/Ql3YZTawdPZyoal53eQopqOuUHcpk=) 2: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: r04m0dygY46FaQTW/nPIfiQRgJAEQgwcrVUDGTqnrns=) 3: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: qSmohF2Ew/7iNqjlaac7NjVFQvypLZR1CdqVmQUsvSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 15:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13650 (0x3552) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C1FE, serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D Validity Not Before: Mar 26 15:18:17 2026 GMT Not After : Apr 2 15:18:17 2026 GMT Subject: CN=69c54e3a-d948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c9:80:fd:b1:de:20:9a:ba:af:67:22:72:85: be:f9:58:ae:84:fb:4e:24:64:51:98:84:15:e4:66: 98:cc:5e:2a:e3:08:d1:f8:7b:ad:a2:ec:4e:26:37: b8:67:02:c4:bb:c3:de:61:f9:0d:12:b1:58:f0:38: 0e:be:d7:04:77:1d:34:20:76:55:ef:f4:74:73:da: 62:22:77:b9:39:e3:52:d4:f4:78:77:04:b8:05:e2: 8a:f1:4a:98:b9:30:dc:a9:a8:2b:4e:7b:13:a9:70: 38:96:26:e7:1c:4e:c4:e1:8c:bc:4f:6f:9f:91:5c: c1:64:86:2a:f7:60:60:ce:b2:2e:5f:0a:a3:ef:da: 6c:da:78:85:c0:fe:da:f7:89:17:6c:6c:8d:2e:4d: de:81:12:a3:87:af:cb:8d:21:39:8e:5e:93:73:36: d7:07:7c:7d:fa:5f:7d:a2:04:4b:41:8d:c4:37:70: 95:24:b8:a5:34:57:1a:51:e4:dd:9b:ef:73:04:eb: 08:53:06:1f:2b:79:84:38:4b:1d:18:79:51:64:a7: ec:15:bc:44:4d:78:b5:61:ec:4f:3b:63:3f:e3:a5: f0:1e:77:db:b5:47:1c:4c:fc:48:bd:76:0c:bd:18: e1:90:fc:46:bc:94:38:9f:12:c8:df:10:ca:75:d7: 6c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3C:36:76:98:7D:73:7C:5E:6E:CA:E8:FB:C4:20:82:A4:69:54:25 X509v3 Authority Key Identifier: keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:c6:74:a2:96:d2:8e:1e:76:c4:4e:b5:ef:09:64:32:ec:53: 80:41:18:45:7d:3e:a4:a5:74:90:57:7a:3b:00:26:c8:4e:42: ed:ae:33:c0:e0:e5:4b:b3:0d:f4:a9:ae:c0:b5:0c:c2:41:cf: a8:80:93:e0:2c:4d:59:62:c7:4e:ba:27:54:4b:ae:43:da:f7: 94:9a:ef:df:44:30:97:14:12:de:3e:21:71:19:83:8b:7d:34: 66:93:7b:15:6e:c3:64:64:a9:8e:32:14:cd:77:7e:f7:ff:c7: 2c:58:be:d1:1a:1b:c5:e8:4c:aa:df:f1:f1:49:6b:d3:bb:a7: 7a:09:40:65:fe:4e:93:c1:ba:ad:87:0b:61:94:50:d4:76:22: b3:77:68:44:11:b3:50:d8:20:5a:37:8e:7e:a8:c1:cb:3f:4d: dc:81:1e:aa:f3:eb:20:7e:6d:aa:9b:f1:ac:f1:0b:bb:bc:f9: ac:16:41:90:cb:08:dd:8b:24:c0:d6:d5:6c:99:03:0d:b6:50: 1a:82:78:cc:02:8b:83:49:1c:46:da:52:6d:cd:81:eb:7b:f0: 65:6d:84:de:14:23:41:65:d9:ad:f5:cb:d0:88:60:16:7f:3f: bf:f9:1a:9f:8c:c1:75:a1:c1:a0:64:f4:b3:5b:ac:b6:43:aa: 1c:4d:ed:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMxRkUxMTAvBgNVBAUTKDY5OUEwRjhEMTVBMzRGNTk5NTZDQjQ4MDBDNkM0NDA0 REMwRUJENUQwHhcNMjYwMzI2MTUxODE3WhcNMjYwNDAyMTUxODE3WjAYMRYwFAYD VQQDEw02OWM1NGUzYS1kOTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMmA/bHeIJq6r2cicoW++ViuhPtOJGRRmIQV5GaYzF4q4wjR+HutouxOJje4 ZwLEu8PeYfkNErFY8DgOvtcEdx00IHZV7/R0c9piIne5OeNS1PR4dwS4BeKK8UqY uTDcqagrTnsTqXA4libnHE7E4Yy8T2+fkVzBZIYq92BgzrIuXwqj79ps2niFwP7a 94kXbGyNLk3egRKjh6/LjSE5jl6TczbXB3x9+l99ogRLQY3EN3CVJLilNFcaUeTd m+9zBOsIUwYfK3mEOEsdGHlRZKfsFbxETXi1YexPO2M/46XwHnfbtUccTPxIvXYM vRjhkPxGvJQ4nxLI3xDKdddsKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE88NnaY fXN8Xm7K6PvEIIKkaVQlMB8GA1UdIwQYMBaAFGmaD40Vo09ZlWy0gAxsRATcDr1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzFGRS9EMTE4QUFCQTFE QUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQxbVZiTFNBREd4RUJOd092 VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fab1BqUldqVDFtVmJMU0FER3hFQk53T3ZWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzFGRS9EMTE4QUFCQTFEQUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQx bVZiTFNBREd4RUJOd092VjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM8Z0opbSjh52xE617wlkMuxTgEEYRX0+pKV0kFd6OwAmyE5C7a4zwODlS7MN 9KmuwLUMwkHPqICT4CxNWWLHTronVEuuQ9r3lJrv30QwlxQS3j4hcRmDi300ZpN7 FW7DZGSpjjIUzXd+9//HLFi+0RobxehMqt/x8Ulr07uneglAZf5Ok8G6rYcLYZRQ 1HYis3doRBGzUNggWjeOfqjByz9N3IEeqvPrIH5tqpvxrPELu7z5rBZBkMsI3Ysk wNbVbJkDDbZQGoJ4zAKLg0kcRtpSbc2B63vwZW2E3hQjQWXZrfXL0IhgFn8/v/ka n4zBdaHBoGT0s1ustkOqHE3thw== -----END CERTIFICATE-----Generated at Sat Mar 28 10:43:33 2026 by rpki-client