$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft File: aeHOy4gdpslouq4HMjfCZglaRc0.mft (raw, json) Hash identifier: tPBvsO0pI0L2M6BLA5ihImCgf5SPteHqoGJDRQ2uzYs= Subject key identifier: C0:7C:A6:A0:42:7F:E6:0E:1B:FA:9B:E3:DB:D3:F5:B8:B1:33:1A:2C Authority key identifier: 69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD Certificate issuer: /CN=A9172CB5/serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD Certificate serial: 043E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft Manifest number: 0433 Signing time: Tue 24 Mar 2026 23:57:13 +0000 Manifest this update: Tue 24 Mar 2026 23:57:13 +0000 Manifest next update: Tue 31 Mar 2026 23:57:13 +0000 Files and hashes: 1: aeHOy4gdpslouq4HMjfCZglaRc0.crl (hash: QIcuCV5vAqW79j7dIYS1Lwob47oyHOYrvw1+/Cq531g=) 2: DD2DD3489F9111ECB958FF25C4F9AE02.roa (hash: vXrK9p/bSrHzrE6vhfvw5W6cs8ipAH77l/lL+wAN7AU=) 3: 9F2E362C9B6E11ECA489542DC4F9AE02.roa (hash: WIpmvZboL8zGeqdfKYkKJllfP49N0pu45nwr7tiKflE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:57:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1086 (0x43e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172CB5, serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD Validity Not Before: Mar 24 23:57:13 2026 GMT Not After : Mar 31 23:57:13 2026 GMT Subject: CN=69c324d9-8338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:99:52:c9:11:1d:38:e4:f6:44:64:66:73:ed: 38:c3:aa:19:4b:7c:dc:dd:d6:73:b6:26:b8:ea:ce: ca:e1:9d:7e:7f:5f:c8:99:e9:9c:43:18:5d:76:5d: 0d:2f:98:45:75:8c:8d:f9:f5:45:ee:57:5b:64:8d: 13:f5:28:77:e4:00:89:14:b2:4e:69:5a:bc:09:46: 81:13:cd:1b:fa:eb:17:22:c9:38:e0:d9:82:50:39: 7d:c7:61:25:be:11:17:f9:cf:56:df:70:fa:a1:d5: ed:e5:b8:e6:c3:47:70:82:6b:a4:e7:75:ba:24:ef: 3d:f1:78:31:e1:02:00:57:8d:cf:b7:dc:71:a7:d8: c9:8b:f3:58:4a:38:b5:79:6a:07:c5:e9:c7:86:7e: 9e:3f:ca:32:19:db:78:fb:af:cd:4a:bf:b6:d4:cd: 71:cc:89:e9:e4:75:46:3b:55:17:e1:7a:07:6f:5e: 67:59:53:0d:27:52:de:5e:d1:c2:29:a0:f3:25:f2: d6:87:f6:4b:dd:57:75:a4:7c:ba:fd:f7:06:19:26: 80:71:2a:f2:5e:fd:fc:7a:67:bc:08:83:54:4e:ba: 61:9e:f3:ed:d5:a7:79:f0:48:ba:cf:81:d8:d2:a7: d6:ea:30:cb:6b:c2:60:32:24:6a:6d:43:49:8b:59: bf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7C:A6:A0:42:7F:E6:0E:1B:FA:9B:E3:DB:D3:F5:B8:B1:33:1A:2C X509v3 Authority Key Identifier: keyid:69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:66:d9:17:95:a5:eb:47:80:39:47:9e:4e:52:81:06:b5:98: 43:45:16:b7:3c:42:03:34:7c:37:05:b2:2b:0d:39:eb:c0:29: 66:52:dc:1e:23:92:be:88:a7:52:98:fd:97:55:51:a8:b4:70: 23:3b:72:41:46:96:b2:bc:2b:58:ab:0d:32:ac:79:7c:1c:12: b0:e2:57:97:5e:56:55:f4:54:52:25:ad:c6:ae:2f:10:30:1b: 83:ed:64:1b:27:52:55:7a:ad:36:3b:26:3c:65:ba:7e:3c:9d: c6:31:a2:3e:a1:17:03:6c:e8:8c:24:b8:ff:4f:44:69:04:d6: 39:84:bf:d8:0a:8a:a1:ed:6f:bf:c6:80:58:ae:40:0f:77:f3: ad:cd:f9:e4:dd:53:66:00:3d:a6:27:ea:97:73:67:3c:8a:61: a4:e8:fe:cf:ee:88:24:dd:b2:a8:3d:a1:15:32:d3:c8:38:64: 17:55:8c:9c:51:a0:ce:a8:da:9b:30:b3:e9:18:ea:52:fc:ed: a0:b1:8c:f0:b8:4b:80:05:2f:f7:27:7e:1e:98:42:d8:84:f7: 07:a7:7b:6c:ad:65:07:3e:cf:6a:2a:44:db:4d:8c:c8:4b:fd: 3b:a1:42:7a:40:e4:f9:a6:67:72:26:31:80:d1:d3:63:4e:7c: 5c:4b:12:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDQjUxMTAvBgNVBAUTKDY5RTFDRUNCODgxREE2Qzk2OEJBQUUwNzMyMzdDMjY2 MDk1QTQ1Q0QwHhcNMjYwMzI0MjM1NzEzWhcNMjYwMzMxMjM1NzEzWjAYMRYwFAYD VQQDEw02OWMzMjRkOS04MzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4JlSyREdOOT2RGRmc+04w6oZS3zc3dZztia46s7K4Z1+f1/ImemcQxhddl0N L5hFdYyN+fVF7ldbZI0T9Sh35ACJFLJOaVq8CUaBE80b+usXIsk44NmCUDl9x2El vhEX+c9W33D6odXt5bjmw0dwgmuk53W6JO898Xgx4QIAV43Pt9xxp9jJi/NYSji1 eWoHxenHhn6eP8oyGdt4+6/NSr+21M1xzInp5HVGO1UX4XoHb15nWVMNJ1LeXtHC KaDzJfLWh/ZL3Vd1pHy6/fcGGSaAcSryXv38eme8CINUTrphnvPt1ad58Ei6z4HY 0qfW6jDLa8JgMiRqbUNJi1m/twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMB8pqBC f+YOG/qb49vT9bixMxosMB8GA1UdIwQYMBaAFGnhzsuIHabJaLquBzI3wmYJWkXN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkNCNS8zOUQ3NjcyMDlC NkExMUVDQTY4MjM1MjJDNEY5QUUwMi9hZUhPeTRnZHBzbG91cTRITWpmQ1pnbGFS YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlSE95NGdkcHNsb3VxNEhNamZDWmdsYVJjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkNCNS8zOUQ3NjcyMDlCNkExMUVDQTY4MjM1MjJDNEY5QUUwMi9hZUhPeTRnZHBz bG91cTRITWpmQ1pnbGFSYzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUWbZF5Wl60eAOUeeTlKBBrWYQ0UWtzxCAzR8NwWyKw0568ApZlLcHiOSvoin Upj9l1VRqLRwIztyQUaWsrwrWKsNMqx5fBwSsOJXl15WVfRUUiWtxq4vEDAbg+1k GydSVXqtNjsmPGW6fjydxjGiPqEXA2zojCS4/09EaQTWOYS/2AqKoe1vv8aAWK5A D3fzrc355N1TZgA9pifql3NnPIphpOj+z+6IJN2yqD2hFTLTyDhkF1WMnFGgzqja mzCz6RjqUvztoLGM8LhLgAUv9yd+HphC2IT3B6d7bK1lBz7PaipE202MyEv9O6FC ekDk+aZnciYxgNHTY058XEsSBw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:32:43 2026 by rpki-client