$ rpki-client -vvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft File: aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft (raw, json) Hash identifier: kRKJU1wdb9YZDUzK/jne0kiBL1H8ToNqiyBPO8XUgcM= Subject key identifier: F9:FB:30:33:DA:42:2E:5A:98:E9:4B:E3:81:23:CF:AE:DB:8D:34:78 Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 Certificate issuer: /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Certificate serial: 2362 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft Manifest number: 231B Signing time: Sat 04 Apr 2026 15:46:34 +0000 Manifest this update: Sat 04 Apr 2026 15:46:34 +0000 Manifest next update: Sat 11 Apr 2026 15:46:34 +0000 Files and hashes: 1: aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl (hash: IgaIZG7+vtpS0lC/TrfqW5MiV6+YBsIlY+ST/t4y7SU=) 2: 1AC9199AD3CB11EF84052053C4F9AE02.roa (hash: xoG3XA1Lq0Bqa5zm6JhMhmxLN46lI4bw6ffgxEn95DU=) 3: DD73806ED3C811EF9D76942FC4F9AE02.roa (hash: XuMtilZNPhFP3hcI0EFjINtqqdDqROMWrGc5+3vleHI=) 4: 443C3AF2D3F611EFB03C5C14C4F9AE02.roa (hash: yjQDivJZ1s/I1gyM4tvZvat6RLwGZDHbtVct4nnyZGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9058 (0x2362) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119333, serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Validity Not Before: Apr 4 15:46:34 2026 GMT Not After : Apr 11 15:46:34 2026 GMT Subject: CN=69d1325a-99aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f5:12:4c:ad:5f:2d:d7:19:9e:21:36:0a:92: 74:23:d6:b5:86:e3:4b:92:90:2c:18:2f:92:77:8f: ea:0c:50:fd:70:ad:ae:ef:70:57:c1:84:0f:95:51: 21:6d:b9:3e:91:99:46:7e:99:b6:80:45:58:9d:83: 53:b0:10:67:35:97:5c:7c:5f:f4:04:d1:ba:de:34: 97:be:25:d1:7d:12:82:71:c9:4a:97:bf:31:ea:2a: 2d:53:cf:11:96:0b:7e:5a:37:47:f7:75:8b:f7:db: f9:07:d5:ae:d6:75:e8:7f:69:67:fe:d3:85:4e:42: 98:14:93:1c:f0:34:88:63:be:07:79:1d:c1:5a:e9: d0:3d:4e:46:46:0e:bd:4a:91:6d:68:1d:d6:e3:46: 40:a0:c2:0c:91:8a:c7:68:bb:7d:17:c7:89:41:b6: 1b:ad:cf:5b:14:e9:f3:f4:95:96:a2:70:99:9f:34: be:89:c7:3d:ba:d5:32:ab:ed:1a:2f:f9:b1:9c:b5: e6:00:a9:3e:e5:ee:94:59:7a:d7:fb:80:c9:ae:34: 33:15:44:1e:a5:c3:9b:d0:6a:5e:c5:79:d7:82:55: e1:09:48:e4:b3:07:fe:28:62:08:2d:4e:82:d4:0e: b2:21:09:ae:f4:ba:48:13:cc:35:5f:20:58:10:5b: 61:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FB:30:33:DA:42:2E:5A:98:E9:4B:E3:81:23:CF:AE:DB:8D:34:78 X509v3 Authority Key Identifier: keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b1:22:53:8a:d8:27:6e:2d:9e:69:65:01:62:64:d9:b2:54: b0:a1:af:58:ef:ba:67:f5:28:16:b7:10:1a:32:0a:e3:54:d4: 35:d4:96:8e:cd:d5:9f:b4:a1:11:a0:d1:81:ea:db:4a:fb:b2: 30:6d:f2:3c:f4:dc:dd:89:75:d5:cb:70:29:cd:90:ef:a4:a6: fb:dd:b7:75:89:b1:e0:3b:36:ee:67:77:7d:e3:22:99:94:f6: 33:3e:7b:1c:10:2b:58:29:4d:9d:92:0a:a1:e6:ea:12:7c:fb: 3a:67:24:b8:b2:0e:17:84:03:6e:a7:04:7a:37:83:6e:b3:9e: 1b:e6:bf:f2:7b:3e:06:31:80:f5:af:a5:b9:40:b9:8d:71:d5: 1a:61:01:ca:19:dd:29:e8:21:e6:c8:92:5e:45:9d:9a:79:2f: 2b:62:0b:08:89:0a:d7:8e:d0:92:a2:c1:72:2c:be:85:74:cb: 9a:d0:0b:d6:e6:1b:b1:1e:4c:8d:8f:eb:ef:9b:3b:92:41:3d: 7a:ca:1f:70:17:72:68:88:0d:3d:ed:f0:95:04:62:a1:3f:ef: 76:9c:b4:43:8c:a5:1e:08:dd:1c:8c:93:21:fe:fa:25:7f:78: 6e:df:09:62:3c:73:be:34:24:d0:67:74:8b:23:e1:7f:5e:c2: 4e:cd:45:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzMzMxMTAvBgNVBAUTKDY5OUU2NzQyNTY3QkU3MzI5Q0MzQTc4NkRFQjc4NTdF MkMyNDIwRjkwHhcNMjYwNDA0MTU0NjM0WhcNMjYwNDExMTU0NjM0WjAYMRYwFAYD VQQDEw02OWQxMzI1YS05OWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvUSTK1fLdcZniE2CpJ0I9a1huNLkpAsGC+Sd4/qDFD9cK2u73BXwYQPlVEh bbk+kZlGfpm2gEVYnYNTsBBnNZdcfF/0BNG63jSXviXRfRKCcclKl78x6iotU88R lgt+WjdH93WL99v5B9Wu1nXof2ln/tOFTkKYFJMc8DSIY74HeR3BWunQPU5GRg69 SpFtaB3W40ZAoMIMkYrHaLt9F8eJQbYbrc9bFOnz9JWWonCZnzS+icc9utUyq+0a L/mxnLXmAKk+5e6UWXrX+4DJrjQzFUQepcOb0GpexXnXglXhCUjkswf+KGIILU6C 1A6yIQmu9LpIE8w1XyBYEFthUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPn7MDPa Qi5amOlL44Ejz67bjTR4MB8GA1UdIwQYMBaAFGmeZ0JWe+cynMOnht63hX4sJCD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzMy8wNjVEQTNCQUI4 NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6S2N3NmVHM3JlRmZpd2tJ UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FaNW5RbFo3NXpLY3c2ZUczcmVGZml3a0lQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTMzMy8wNjVEQTNCQUI4NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6 S2N3NmVHM3JlRmZpd2tJUGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjbEiU4rYJ24tnmllAWJk2bJUsKGvWO+6Z/UoFrcQGjIK41TUNdSWjs3Vn7Sh EaDRgerbSvuyMG3yPPTc3Yl11ctwKc2Q76Sm+923dYmx4Ds27md3feMimZT2Mz57 HBArWClNnZIKoebqEnz7OmckuLIOF4QDbqcEejeDbrOeG+a/8ns+BjGA9a+luUC5 jXHVGmEByhndKegh5siSXkWdmnkvK2ILCIkK147QkqLBciy+hXTLmtAL1uYbsR5M jY/r75s7kkE9esofcBdyaIgNPe3wlQRioT/vdpy0Q4ylHgjdHIyTIf76JX94bt8J YjxzvjQk0Gd0iyPhf17CTs1FHA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:51:47 2026 by rpki-client