$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft File: aa41zc5jfrZF61Bl7eEtWOdZkjY.mft (raw, json) Hash identifier: LYia6fIlpSTDXrqP1kSj2SUdvpjfsIrdL1SBwqNPU2E= Subject key identifier: 7B:FA:08:F5:0D:FE:B9:75:4C:D7:3A:E2:AA:50:91:3E:15:E0:7B:86 Authority key identifier: 69:AE:35:CD:CE:63:7E:B6:45:EB:50:65:ED:E1:2D:58:E7:59:92:36 Certificate issuer: /CN=A911BD6E/serialNumber=69AE35CDCE637EB645EB5065EDE12D58E7599236 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft Manifest number: 28 Signing time: Tue 03 Mar 2026 08:27:40 +0000 Manifest this update: Tue 03 Mar 2026 08:27:39 +0000 Manifest next update: Tue 10 Mar 2026 08:27:39 +0000 Files and hashes: 1: aa41zc5jfrZF61Bl7eEtWOdZkjY.crl (hash: hY/ErgHV59tcWucAoKxrodCP3K+szipYJDo0EM/NppQ=) 2: 8A1624CEE29211F0A7536C41456F56BC.roa (hash: 8wnCI5N573pkzZtHUtb6fStu9xHz76SfS/f/10QACGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.crl rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD6E, serialNumber=69AE35CDCE637EB645EB5065EDE12D58E7599236 Validity Not Before: Mar 3 08:27:39 2026 GMT Not After : Mar 10 08:27:39 2026 GMT Subject: CN=69a69b7c-f38d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f4:2a:22:49:79:e9:2f:8f:6f:46:e8:4a:34: fa:a3:05:f6:3a:3f:7a:82:6a:ee:7d:c3:fc:91:3c: 4f:09:43:ea:b5:b8:a8:50:de:bd:d1:1f:89:0d:de: 93:2e:96:6b:0b:a6:65:4e:01:ff:2d:bc:d3:89:e7: c3:2b:7b:d8:0a:40:04:d0:b2:42:b9:7d:10:0e:5b: 98:bb:c0:45:33:17:75:7b:92:02:c5:f0:92:56:f9: 81:67:27:2f:0d:81:9f:16:f2:6b:f3:92:dc:2d:bc: 94:83:85:5a:c1:c8:0f:48:72:b1:67:84:38:98:b5: 13:38:e8:17:11:9c:32:e6:a5:30:b0:51:4f:14:20: d1:4f:89:22:4c:89:60:59:ab:88:e8:6a:a5:32:9a: cd:9b:41:b7:6a:89:cf:21:ff:0e:0f:03:14:de:d3: 34:91:2d:92:26:87:ba:cb:3f:03:34:32:4f:4d:75: e9:cd:b5:6a:46:d9:d9:df:e2:5d:3d:7c:b0:e0:dd: 14:49:c0:04:55:54:07:57:ab:a4:34:2c:4c:29:db: e3:2d:be:65:41:46:49:74:fc:18:2f:35:1c:a9:63: ef:d2:57:45:80:f1:f9:bc:84:79:16:40:1f:83:3e: 34:48:2a:4b:2f:bb:66:e6:89:df:4b:77:98:c6:70: d4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FA:08:F5:0D:FE:B9:75:4C:D7:3A:E2:AA:50:91:3E:15:E0:7B:86 X509v3 Authority Key Identifier: keyid:69:AE:35:CD:CE:63:7E:B6:45:EB:50:65:ED:E1:2D:58:E7:59:92:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:b5:fb:1f:c3:3e:fb:f0:5f:1d:ab:b6:05:fb:99:70:2c:1e: c3:c3:88:67:d7:7e:fa:7f:aa:ee:5b:85:94:dc:b0:01:9b:d7: 38:e6:73:aa:c0:50:c7:2c:8a:e8:e1:7c:b2:21:88:e6:ed:eb: 20:66:1e:20:a7:b4:0a:6b:6a:4a:71:8d:d8:b3:32:4d:63:e3: 62:1d:91:c9:53:65:48:ed:42:d5:ea:4d:8b:15:ee:6c:6a:13: 1d:41:11:44:7a:66:d2:bf:76:e8:22:15:00:85:38:59:0d:9a: c5:6d:e9:c9:7b:7c:98:cf:94:85:11:4f:97:9e:66:8b:84:91: 99:31:91:49:97:8d:f0:73:d8:bd:5d:3f:63:39:ac:7a:d2:b6: f4:dc:6d:bf:05:c3:81:0a:50:a8:aa:2c:b0:ef:5f:5d:d8:e2: c8:25:f6:9c:07:a3:4b:15:92:69:05:9d:c4:61:3a:27:0b:01: 29:32:68:dc:4e:39:e3:9e:6a:33:d5:f5:b2:f4:46:56:3e:9a: 3c:ec:ab:93:79:c1:da:39:04:3a:52:a6:23:d9:07:5f:23:44: 0c:53:7e:f6:59:58:c7:7e:11:06:01:8b:f0:e6:41:12:86:db: 08:37:de:e8:bf:57:08:e7:3c:66:91:68:24:96:90:ea:1c:d2: d9:c1:e5:ca -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkQ2RTExMC8GA1UEBRMoNjlBRTM1Q0RDRTYzN0VCNjQ1RUI1MDY1RURFMTJENThF NzU5OTIzNjAeFw0yNjAzMDMwODI3MzlaFw0yNjAzMTAwODI3MzlaMBgxFjAUBgNV BAMTDTY5YTY5YjdjLWYzOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCb9CoiSXnpL49vRuhKNPqjBfY6P3qCau59w/yRPE8JQ+q1uKhQ3r3RH4kN3pMu lmsLpmVOAf8tvNOJ58Mre9gKQATQskK5fRAOW5i7wEUzF3V7kgLF8JJW+YFnJy8N gZ8W8mvzktwtvJSDhVrByA9IcrFnhDiYtRM46BcRnDLmpTCwUU8UINFPiSJMiWBZ q4joaqUyms2bQbdqic8h/w4PAxTe0zSRLZImh7rLPwM0Mk9NdenNtWpG2dnf4l09 fLDg3RRJwARVVAdXq6Q0LEwp2+MtvmVBRkl0/BgvNRypY+/SV0WA8fm8hHkWQB+D PjRIKksvu2bmid9Ld5jGcNQrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUe/oI9Q3+ uXVM1zriqlCRPhXge4YwHwYDVR0jBBgwFoAUaa41zc5jfrZF61Bl7eEtWOdZkjYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCRDZFL0JGNEYyNDdBRTI5 MTExRjA5NkUyN0QxMTQ1NkY1NkJDL2FhNDF6YzVqZnJaRjYxQmw3ZUV0V09kWmtq WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWE0MXpjNWpmclpGNjFCbDdlRXRXT2Raa2pZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC RDZFL0JGNEYyNDdBRTI5MTExRjA5NkUyN0QxMTQ1NkY1NkJDL2FhNDF6YzVqZnJa RjYxQmw3ZUV0V09kWmtqWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB3tfsfwz778F8dq7YF+5lwLB7Dw4hn1376f6ruW4WU3LABm9c45nOqwFDHLIro 4XyyIYjm7esgZh4gp7QKa2pKcY3YszJNY+NiHZHJU2VI7ULV6k2LFe5sahMdQRFE embSv3boIhUAhThZDZrFbenJe3yYz5SFEU+XnmaLhJGZMZFJl43wc9i9XT9jOax6 0rb03G2/BcOBClCoqiyw719d2OLIJfacB6NLFZJpBZ3EYTonCwEpMmjcTjnjnmoz 1fWy9EZWPpo87KuTecHaOQQ6UqYj2QdfI0QMU372WVjHfhEGAYvw5kEShtsIN97o v1cI5zxmkWgklpDqHNLZweXK -----END CERTIFICATE-----Generated at Wed Mar 4 14:51:49 2026 by rpki-client