$ rpki-client -vvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft File: aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft (raw, json) Hash identifier: ctZ08mNE3E3D0dmkEI0YPpEQK5wLfYNGirM7K8utMIU= Subject key identifier: 42:CC:71:80:2C:0F:DC:09:81:3E:33:2D:35:9D:26:64:D5:8A:D1:8E Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 Certificate issuer: /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Certificate serial: 2350 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft Manifest number: 2309 Signing time: Mon 02 Mar 2026 00:23:34 +0000 Manifest this update: Mon 02 Mar 2026 00:23:33 +0000 Manifest next update: Mon 09 Mar 2026 00:23:33 +0000 Files and hashes: 1: aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl (hash: xcRGNgHDKXZ6S5dCOZ6PF/D+35faQsYTCdg7+TsoG5o=) 2: 1AC9199AD3CB11EF84052053C4F9AE02.roa (hash: xoG3XA1Lq0Bqa5zm6JhMhmxLN46lI4bw6ffgxEn95DU=) 3: DD73806ED3C811EF9D76942FC4F9AE02.roa (hash: XuMtilZNPhFP3hcI0EFjINtqqdDqROMWrGc5+3vleHI=) 4: 443C3AF2D3F611EFB03C5C14C4F9AE02.roa (hash: yjQDivJZ1s/I1gyM4tvZvat6RLwGZDHbtVct4nnyZGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9040 (0x2350) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119333, serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Validity Not Before: Mar 2 00:23:33 2026 GMT Not After : Mar 9 00:23:33 2026 GMT Subject: CN=69a4d886-cc7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c9:6a:04:2a:2d:a8:ca:88:f5:e9:a9:41:a3: ab:3a:5c:8a:6d:05:10:03:50:f1:39:87:f0:c0:69: b7:8c:5d:de:70:d5:e4:d1:d7:8e:a0:64:df:81:fa: 65:a4:b9:11:30:b4:e8:a3:bc:69:3b:2f:d9:77:da: e4:d3:ce:fd:99:1e:7e:ee:e1:50:7a:6d:60:4d:f9: 76:ec:64:e1:ca:de:a5:f7:78:63:10:fa:8f:ab:6a: 81:ec:02:88:8f:9d:2b:58:5b:9d:49:c5:11:c4:52: 0a:92:5d:92:3e:56:70:76:2a:ea:54:0d:3b:df:85: 26:83:2d:da:98:91:1a:11:66:75:f3:15:c6:40:0e: 4e:a8:22:72:6a:89:74:68:fc:1b:a8:a7:1f:26:36: f7:da:55:5b:46:4e:bc:94:c2:b3:ad:4a:5c:d7:5e: 78:37:31:ac:01:d5:23:4e:64:db:df:59:95:63:39: 9e:ae:55:ae:54:26:66:c3:b5:5d:8a:52:7a:a5:76: 42:ba:26:32:c3:a0:21:bf:66:b5:34:47:47:3b:a4: 29:90:09:ab:e8:dd:f9:65:8b:d2:2f:57:2b:a3:bc: e9:84:ae:a4:2d:9c:ad:c3:dc:d5:46:c6:50:66:5b: 7e:b0:c1:2d:d4:c1:71:60:a5:07:17:64:0c:81:dd: bb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CC:71:80:2C:0F:DC:09:81:3E:33:2D:35:9D:26:64:D5:8A:D1:8E X509v3 Authority Key Identifier: keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:53:85:36:96:59:31:3f:03:ba:9c:4e:62:ae:4d:4d:ff:9b: df:88:2f:d5:58:4c:e4:a7:c2:d0:2c:16:de:dd:74:87:b8:6a: c8:79:7c:27:6c:57:a4:26:d6:8b:bb:10:67:16:1d:4c:24:13: ba:fe:9f:46:1c:ad:2f:95:e0:81:e8:2d:24:2a:63:eb:e9:90: de:63:8c:ca:77:32:22:22:a4:0d:be:7e:86:40:8a:32:62:bb: df:6e:8b:24:4c:c0:77:e0:af:ef:1b:fe:3c:fa:f0:15:03:50: ff:6c:5c:28:95:66:6e:c4:c3:ba:fc:8b:44:fc:a7:be:03:3b: 71:bf:27:73:37:43:15:de:a9:26:91:f0:2b:e8:e4:5e:f9:f5: 19:b2:1d:ef:72:70:f8:08:fd:57:bb:35:00:3c:4f:18:f4:f0: cb:59:cd:e2:88:11:ce:4b:ca:1e:5d:28:6e:3e:5b:8a:34:ad: f3:96:de:e7:fc:cf:58:6a:31:2a:dc:6d:ff:3a:b9:e1:1b:d5: 68:66:0a:4b:21:c0:bb:6d:0e:6f:23:19:65:d2:91:5c:b5:41: 5f:df:47:df:03:bf:bb:80:bd:ea:96:b4:91:4a:45:8b:88:4a: d1:00:44:11:c0:43:7f:c1:5b:7e:05:e9:83:fe:c6:b8:f8:07: e7:a5:07:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzMzMxMTAvBgNVBAUTKDY5OUU2NzQyNTY3QkU3MzI5Q0MzQTc4NkRFQjc4NTdF MkMyNDIwRjkwHhcNMjYwMzAyMDAyMzMzWhcNMjYwMzA5MDAyMzMzWjAYMRYwFAYD VQQDEw02OWE0ZDg4Ni1jYzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMlqBCotqMqI9empQaOrOlyKbQUQA1DxOYfwwGm3jF3ecNXk0deOoGTfgfpl pLkRMLToo7xpOy/Zd9rk0879mR5+7uFQem1gTfl27GThyt6l93hjEPqPq2qB7AKI j50rWFudScURxFIKkl2SPlZwdirqVA0734Umgy3amJEaEWZ18xXGQA5OqCJyaol0 aPwbqKcfJjb32lVbRk68lMKzrUpc1154NzGsAdUjTmTb31mVYzmerlWuVCZmw7Vd ilJ6pXZCuiYyw6Ahv2a1NEdHO6QpkAmr6N35ZYvSL1cro7zphK6kLZytw9zVRsZQ Zlt+sMEt1MFxYKUHF2QMgd27UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFELMcYAs D9wJgT4zLTWdJmTVitGOMB8GA1UdIwQYMBaAFGmeZ0JWe+cynMOnht63hX4sJCD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzMy8wNjVEQTNCQUI4 NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6S2N3NmVHM3JlRmZpd2tJ UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FaNW5RbFo3NXpLY3c2ZUczcmVGZml3a0lQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTMzMy8wNjVEQTNCQUI4NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6 S2N3NmVHM3JlRmZpd2tJUGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZFOFNpZZMT8DupxOYq5NTf+b34gv1VhM5KfC0CwW3t10h7hqyHl8J2xXpCbW i7sQZxYdTCQTuv6fRhytL5XggegtJCpj6+mQ3mOMyncyIiKkDb5+hkCKMmK7326L JEzAd+Cv7xv+PPrwFQNQ/2xcKJVmbsTDuvyLRPynvgM7cb8nczdDFd6pJpHwK+jk Xvn1GbId73Jw+Aj9V7s1ADxPGPTwy1nN4ogRzkvKHl0obj5bijSt85be5/zPWGox Ktxt/zq54RvVaGYKSyHAu20ObyMZZdKRXLVBX99H3wO/u4C96pa0kUpFi4hK0QBE EcBDf8FbfgXpg/7GuPgH56UHBg== -----END CERTIFICATE-----Generated at Mon Mar 2 08:01:13 2026 by rpki-client