$ rpki-client -vvf rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft File: aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft (raw, json) Hash identifier: KiYps7ABIA/wfU/wOLpFNR0W8z1dxx5ARNtok79qfYQ= Subject key identifier: 79:E8:B4:F3:90:BA:25:74:3B:98:1B:79:92:0A:01:0A:80:11:7F:37 Authority key identifier: 69:EC:F0:E2:A1:ED:8F:05:CC:27:8B:3E:13:F6:62:ED:0B:35:48:8C Certificate issuer: /CN=A9131CF4/serialNumber=69ECF0E2A1ED8F05CC278B3E13F662ED0B35488C Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft Manifest number: 41 Signing time: Sun 01 Mar 2026 09:50:23 +0000 Manifest this update: Sun 01 Mar 2026 09:50:23 +0000 Manifest next update: Sun 08 Mar 2026 09:50:23 +0000 Files and hashes: 1: aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.crl (hash: RGGMiHuDkY+bsCSmiqLIfghJKxICMoHiEBrGBF0lMnM=) 2: 4B2379BEB71911F0AAA11D51C4F9AE02.roa (hash: ym/P1+PLUpEQKVLi2u6tem8jb0mTZASUmnMv8PJgl7k=) 3: F11E4CE6B71811F0B6A0AF50C4F9AE02.roa (hash: 91XVnfqDvuubQ63399MOb9g9RyzRumGsmN3T5NY63OE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.crl rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131CF4, serialNumber=69ECF0E2A1ED8F05CC278B3E13F662ED0B35488C Validity Not Before: Mar 1 09:50:23 2026 GMT Not After : Mar 8 09:50:23 2026 GMT Subject: CN=69a40bdf-0a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4e:a4:70:80:50:e0:26:57:18:2e:87:bc:c8: 78:31:27:d4:73:05:7e:5b:12:ed:fe:9c:59:ee:28: f7:8e:dd:d3:0f:fb:36:6f:38:1e:e9:c6:6a:b3:29: 4d:f6:de:02:cd:6c:e4:25:e4:50:38:a2:82:30:00: 08:9d:f9:c2:97:1c:4b:87:50:c0:05:06:1f:a5:d1: d9:9d:c1:93:6d:52:43:bd:14:0c:e8:45:b2:e7:ce: 78:07:9f:f7:f8:f3:d1:e1:b2:e3:60:45:4e:cf:39: 59:9d:35:18:cd:68:31:06:44:6b:c0:21:66:ab:3e: 5f:75:26:31:f1:ab:3a:5d:b7:d9:ba:fd:f7:be:76: 97:95:ee:2c:f7:51:cd:5c:45:cc:16:1f:39:13:3a: 99:ba:a7:f0:72:53:2d:09:a4:9d:c8:1b:b5:af:8e: 2a:d6:2a:7f:a1:de:70:fe:a7:ff:8d:07:f8:11:86: f7:a4:cf:f2:d3:4d:75:6c:5f:e6:a0:7a:5b:ff:ee: 79:e5:3a:b1:96:11:7d:2d:0a:45:cd:b3:a9:f3:35: 1f:79:90:58:8c:e2:1e:c0:58:19:5e:f9:1f:89:e2: ae:6f:cc:98:ce:95:05:6b:d9:97:f9:3f:6b:23:ff: 68:5b:fa:38:01:46:39:23:b1:4d:7a:a3:ed:7b:46: 31:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E8:B4:F3:90:BA:25:74:3B:98:1B:79:92:0A:01:0A:80:11:7F:37 X509v3 Authority Key Identifier: keyid:69:EC:F0:E2:A1:ED:8F:05:CC:27:8B:3E:13:F6:62:ED:0B:35:48:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131CF4/3EA638C8B71111F0A5C28073C4F9AE02/aezw4qHtjwXMJ4s-E_Zi7Qs1SIw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:7e:49:fb:0b:5a:07:c7:46:fe:fc:11:c5:e0:7d:4f:a7:aa: e8:d8:73:e3:fa:0c:49:a9:b0:f4:83:fd:80:7c:69:c0:7d:1f: 73:18:6f:b8:3f:d2:44:4c:9f:94:f0:f1:34:45:40:e3:a7:0c: 43:f4:50:74:a7:2e:61:55:db:5a:2d:81:af:7b:4d:8e:d6:13: ef:53:2a:d8:03:31:d6:fa:d8:ec:33:19:d6:01:73:4e:42:53: eb:2e:e3:2c:ee:15:96:a8:0c:ae:68:93:35:54:7c:4d:f9:a5: 2e:f6:fd:1b:00:05:2d:55:4e:4a:a7:ef:18:aa:c1:a2:6f:19: bc:1d:71:f7:8e:16:ea:aa:84:e7:a0:a4:57:a1:64:78:08:e7: cc:2b:96:bc:69:0b:af:f9:4d:74:76:ec:66:6f:3e:8e:23:7c: 9e:01:b2:62:9c:a2:6b:4e:a4:da:cc:1b:62:ab:d0:c0:39:57: e9:50:16:41:7a:d8:43:a0:ce:d6:aa:0f:33:00:1b:37:c3:56: 07:d0:e0:60:dd:8d:24:a0:43:6b:77:22:8e:76:e3:00:8b:23: e0:29:ff:47:ac:3c:c9:71:c1:26:a6:75:d4:91:6e:77:60:7f: 3a:b4:f2:73:11:3f:66:c6:f1:ba:6c:22:11:9e:af:52:35:77: 55:73:43:56 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MUNGNDExMC8GA1UEBRMoNjlFQ0YwRTJBMUVEOEYwNUNDMjc4QjNFMTNGNjYyRUQw QjM1NDg4QzAeFw0yNjAzMDEwOTUwMjNaFw0yNjAzMDgwOTUwMjNaMBgxFjAUBgNV BAMTDTY5YTQwYmRmLTBhNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoTqRwgFDgJlcYLoe8yHgxJ9RzBX5bEu3+nFnuKPeO3dMP+zZvOB7pxmqzKU32 3gLNbOQl5FA4ooIwAAid+cKXHEuHUMAFBh+l0dmdwZNtUkO9FAzoRbLnzngHn/f4 89HhsuNgRU7POVmdNRjNaDEGRGvAIWarPl91JjHxqzpdt9m6/fe+dpeV7iz3Uc1c RcwWHzkTOpm6p/ByUy0JpJ3IG7WvjirWKn+h3nD+p/+NB/gRhvekz/LTTXVsX+ag elv/7nnlOrGWEX0tCkXNs6nzNR95kFiM4h7AWBle+R+J4q5vzJjOlQVr2Zf5P2sj /2hb+jgBRjkjsU16o+17RjGpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUeei085C6 JXQ7mBt5kgoBCoARfzcwHwYDVR0jBBgwFoAUaezw4qHtjwXMJ4s+E/Zi7Qs1SIww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxQ0Y0LzNFQTYzOEM4Qjcx MTExRjBBNUMyODA3M0M0RjlBRTAyL2Flenc0cUh0andYTUo0cy1FX1ppN1FzMVNJ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYWV6dzRxSHRqd1hNSjRzLUVfWmk3UXMxU0l3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx Q0Y0LzNFQTYzOEM4QjcxMTExRjBBNUMyODA3M0M0RjlBRTAyL2Flenc0cUh0andY TUo0cy1FX1ppN1FzMVNJdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB5fkn7C1oHx0b+/BHF4H1Pp6ro2HPj+gxJqbD0g/2AfGnAfR9zGG+4P9JETJ+U 8PE0RUDjpwxD9FB0py5hVdtaLYGve02O1hPvUyrYAzHW+tjsMxnWAXNOQlPrLuMs 7hWWqAyuaJM1VHxN+aUu9v0bAAUtVU5Kp+8YqsGibxm8HXH3jhbqqoTnoKRXoWR4 COfMK5a8aQuv+U10duxmbz6OI3yeAbJinKJrTqTazBtiq9DAOVfpUBZBethDoM7W qg8zABs3w1YH0OBg3Y0koENrdyKOduMAiyPgKf9HrDzJccEmpnXUkW53YH86tPJz ET9mxvG6bCIRnq9SNXdVc0NW -----END CERTIFICATE-----Generated at Mon Mar 2 17:12:26 2026 by rpki-client