$ rpki-client -vvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft File: aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft (raw, json) Hash identifier: rP0u7uwo3ly/WnG66LEqhay8TuH/VBzUoudZ9Bam3wI= Subject key identifier: B0:E4:1F:77:A4:38:1B:5C:BE:6C:D8:28:87:F4:7D:86:E8:DF:48:18 Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 Certificate issuer: /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Certificate serial: 236D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft Manifest number: 2323 Signing time: Thu 16 Apr 2026 15:48:11 +0000 Manifest this update: Thu 16 Apr 2026 15:48:11 +0000 Manifest next update: Thu 23 Apr 2026 15:48:11 +0000 Files and hashes: 1: aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl (hash: iOjG2rWzL3H0bnmTa4r7paQcEc1mvZZnPSiKoii98z4=) 2: 1AC9199AD3CB11EF84052053C4F9AE02.roa (hash: plwWFq4k0Hgx6vP8bTzqJt9GJIcOt71z9VOfufJhc6Q=) 3: 443C3AF2D3F611EFB03C5C14C4F9AE02.roa (hash: jysPx7EDUYk/D9tf6ZfKYDMS6fp3Dr/SUMzejCX5Byw=) 4: DD73806ED3C811EF9D76942FC4F9AE02.roa (hash: EwnErXsu5NYk/vKrNa7Bl73VtntPwcy5vYXbhPAWFt0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:48:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9069 (0x236d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119333, serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Validity Not Before: Apr 16 15:48:11 2026 GMT Not After : Apr 23 15:48:11 2026 GMT Subject: CN=69e104bb-6731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:34:f8:54:42:fc:22:f5:20:90:8f:68:a8:36: 5d:fd:ac:49:3f:ea:65:c4:ca:ff:d3:9c:fe:e3:a8: 94:cf:6a:33:62:a2:5f:8e:2b:55:a3:b1:b8:72:59: 8a:bd:5d:f6:34:07:47:88:1a:5d:1e:f0:4c:c4:15: f6:3b:ec:11:04:a3:f7:50:73:25:dd:42:6e:fd:cd: 5a:bf:62:23:9e:7f:d3:b3:a0:b4:1a:74:22:37:14: d0:b1:4e:24:0e:5d:c5:ce:81:ba:17:b7:0d:8a:ff: 3a:bc:b0:53:43:93:78:6c:44:bc:d9:c9:0b:8f:2b: ba:81:9f:0e:6a:0b:0d:d7:7d:54:87:f5:7b:ec:8d: 55:43:a9:b3:a0:9f:4f:44:3f:b0:06:18:1c:e4:15: 88:28:c8:44:dc:00:41:d5:94:01:9b:77:fb:d6:c7: d2:38:12:0f:83:a8:3e:7f:04:24:28:e4:69:d3:71: 90:b4:bf:7b:73:56:55:b2:99:65:d6:10:a6:8e:89: dc:df:fb:97:88:9a:38:7b:0d:79:81:b0:52:5b:b7: b3:1f:97:0c:c7:cd:d2:63:22:43:eb:f0:55:fd:ed: d7:d5:34:41:aa:82:09:80:c2:0b:84:f3:5b:2a:13: a6:0d:87:6d:94:8e:83:38:f0:5a:ce:e3:87:86:df: 68:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E4:1F:77:A4:38:1B:5C:BE:6C:D8:28:87:F4:7D:86:E8:DF:48:18 X509v3 Authority Key Identifier: keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a8:86:c1:a6:8b:27:6c:f6:5d:90:5d:fa:d1:0d:ab:b2:04: 4c:57:e6:fc:33:f5:a9:9e:c9:8a:0d:25:2d:fc:70:fc:74:4d: 9e:bd:52:52:b0:bf:d2:cd:dc:98:24:79:11:15:92:5a:25:a5: 11:54:bd:6c:44:dd:5c:74:9e:d1:fa:e3:28:22:94:65:cc:bd: c3:77:31:38:54:9d:c5:01:83:d4:e0:2b:00:28:e6:c2:8b:bd: 02:44:5b:34:06:3e:60:03:b8:7b:e4:50:06:59:f1:f3:67:69: 06:e9:7a:54:0f:ec:d9:af:d9:b6:03:83:1a:35:ec:c2:60:01: 1f:f6:39:55:ec:09:9f:a5:e2:fa:06:92:9f:62:e1:df:57:b5: ce:10:83:1e:f0:c7:5f:52:ea:af:55:ed:29:24:9e:a7:6e:7e: f3:f3:4d:8b:9b:fc:9d:1a:2a:22:c9:fa:81:3c:61:36:bd:a8: 3f:27:ab:70:67:7c:fc:3e:36:1e:46:98:ab:bf:40:83:e6:4d: 9d:65:d3:18:b6:c7:95:23:df:91:7b:43:ce:c9:94:f7:cc:47: 0d:e8:f0:39:be:17:2e:9a:85:fe:50:96:42:b7:e5:63:4b:27: b6:99:3d:a8:dc:35:27:94:e0:50:78:ae:88:5d:d0:30:f3:0c: 8d:5e:19:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzMzMxMTAvBgNVBAUTKDY5OUU2NzQyNTY3QkU3MzI5Q0MzQTc4NkRFQjc4NTdF MkMyNDIwRjkwHhcNMjYwNDE2MTU0ODExWhcNMjYwNDIzMTU0ODExWjAYMRYwFAYD VQQDEw02OWUxMDRiYi02NzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7TT4VEL8IvUgkI9oqDZd/axJP+plxMr/05z+46iUz2ozYqJfjitVo7G4clmK vV32NAdHiBpdHvBMxBX2O+wRBKP3UHMl3UJu/c1av2Ijnn/Ts6C0GnQiNxTQsU4k Dl3FzoG6F7cNiv86vLBTQ5N4bES82ckLjyu6gZ8OagsN131Uh/V77I1VQ6mzoJ9P RD+wBhgc5BWIKMhE3ABB1ZQBm3f71sfSOBIPg6g+fwQkKORp03GQtL97c1ZVspll 1hCmjonc3/uXiJo4ew15gbBSW7ezH5cMx83SYyJD6/BV/e3X1TRBqoIJgMILhPNb KhOmDYdtlI6DOPBazuOHht9ocwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLDkH3ek OBtcvmzYKIf0fYbo30gYMB8GA1UdIwQYMBaAFGmeZ0JWe+cynMOnht63hX4sJCD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzMy8wNjVEQTNCQUI4 NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6S2N3NmVHM3JlRmZpd2tJ UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FaNW5RbFo3NXpLY3c2ZUczcmVGZml3a0lQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTMzMy8wNjVEQTNCQUI4NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6 S2N3NmVHM3JlRmZpd2tJUGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO6iGwaaLJ2z2XZBd+tENq7IETFfm/DP1qZ7Jig0lLfxw/HRNnr1SUrC/0s3c mCR5ERWSWiWlEVS9bETdXHSe0frjKCKUZcy9w3cxOFSdxQGD1OArACjmwou9AkRb NAY+YAO4e+RQBlnx82dpBul6VA/s2a/ZtgODGjXswmABH/Y5VewJn6Xi+gaSn2Lh 31e1zhCDHvDHX1Lqr1XtKSSep25+8/NNi5v8nRoqIsn6gTxhNr2oPyercGd8/D42 HkaYq79Ag+ZNnWXTGLbHlSPfkXtDzsmU98xHDejwOb4XLpqF/lCWQrflY0sntpk9 qNw1J5TgUHiuiF3QMPMMjV4Zjw== -----END CERTIFICATE-----Generated at Fri Apr 17 13:44:04 2026 by rpki-client