$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft File: aeHOy4gdpslouq4HMjfCZglaRc0.mft (raw, json) Hash identifier: OmBIoeJHQbteZTAdt8wXOFAmLrC7XKB/6pUUHFu7arA= Subject key identifier: 36:55:07:01:C8:D3:FD:A3:65:C0:13:EC:BA:9E:B4:2D:69:CD:07:2B Authority key identifier: 69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD Certificate issuer: /CN=A9172CB5/serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD Certificate serial: 042E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft Manifest number: 0425 Signing time: Sun 01 Mar 2026 01:07:24 +0000 Manifest this update: Sun 01 Mar 2026 01:07:24 +0000 Manifest next update: Sun 08 Mar 2026 01:07:24 +0000 Files and hashes: 1: aeHOy4gdpslouq4HMjfCZglaRc0.crl (hash: zWlegFCJHxEyACKyVJI7tj4UeuKcfnYh8o2jIqxSVp4=) 2: 9F2E362C9B6E11ECA489542DC4F9AE02.roa (hash: ASwdm1L9Wn+Rz2UEXw3LVXx6V8cb6bPFge6o2YPGGR8=) 3: DD2DD3489F9111ECB958FF25C4F9AE02.roa (hash: ge5i/gUk2rLl8NFshkx3QLIeml4hinyetB2nMALgvq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1070 (0x42e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172CB5, serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD Validity Not Before: Mar 1 01:07:24 2026 GMT Not After : Mar 8 01:07:24 2026 GMT Subject: CN=69a3914c-9da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f1:4e:72:76:82:c8:2c:c5:62:07:50:fd:2e: 71:2c:9e:a7:c9:ab:78:73:bf:49:67:03:8e:db:47: 8b:5d:a5:60:fd:b7:9a:b3:b0:91:ca:5a:26:57:b8: 49:e7:19:ec:21:10:6e:6b:35:c6:f3:e5:29:d7:6c: ec:ae:83:15:de:f3:cc:23:2d:4b:bc:26:69:38:a0: c6:3b:9b:ab:e1:98:45:c1:9f:d3:38:48:1e:48:b2: 38:af:3a:e8:01:ac:ba:ef:f8:5e:15:45:57:31:b3: e5:93:1e:2d:76:73:f0:c2:0c:6d:8e:c5:91:b0:71: 72:b3:22:66:be:6f:57:e3:fa:1a:e8:8e:b1:24:bf: 1c:10:2e:c8:4c:56:2a:d1:06:3b:23:f3:bd:6a:65: 5b:9f:e5:d7:9b:8a:d4:f1:ff:aa:79:ad:20:18:88: 1b:12:ef:1e:19:bc:60:a9:ba:d1:3f:93:21:7f:9b: de:26:00:7d:98:60:d8:cb:90:ae:0e:99:6c:97:71: d1:53:13:d9:a8:5f:72:2b:3e:cc:dc:a3:00:27:61: 92:d5:3f:2d:81:14:39:eb:9f:26:3d:16:8b:c7:d7: fe:42:06:5e:d1:c9:f4:5e:c0:e7:f0:88:b4:5e:02: 30:52:65:88:fb:91:2e:29:19:7c:f1:26:82:bb:b4: 5a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:55:07:01:C8:D3:FD:A3:65:C0:13:EC:BA:9E:B4:2D:69:CD:07:2B X509v3 Authority Key Identifier: keyid:69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:85:fa:31:b7:f2:4f:55:28:02:fb:e7:65:c1:dd:4d:73:ae: 1c:50:f2:c9:44:43:96:7d:e5:10:bb:aa:4f:96:6b:54:05:58: 68:0c:0e:18:83:9f:b3:30:6a:35:eb:9a:97:7b:0d:3d:60:df: c6:b2:5e:c2:de:bf:55:fa:8a:ce:78:c7:8e:8d:4b:53:9a:34: b9:18:0a:81:1b:6d:26:5f:15:e3:68:8f:15:54:51:47:e0:cd: 60:b3:a1:c5:3e:5a:78:57:da:e8:3e:c9:02:61:d7:0f:1c:c3: 88:24:cd:48:35:d6:d2:05:c8:03:c5:af:14:b7:10:44:ed:fe: 5f:d8:fd:68:0a:40:b8:83:3c:16:50:58:fd:9d:c8:68:52:96: 47:0f:f7:44:ec:ec:10:6e:c5:0b:de:26:60:53:0d:d3:a3:61: 7b:ca:a0:e1:72:b8:88:43:8d:e1:72:5e:1e:0d:e8:67:70:9c: 2a:f9:b1:89:55:51:55:ac:39:1d:4a:8c:b9:65:3e:5f:f5:c9: 40:17:61:09:ea:7c:75:14:a6:1b:3b:ce:a9:b1:df:17:29:94: eb:46:49:33:d3:24:4c:bc:c2:39:f5:ff:92:8e:f1:e9:1c:c1: 6e:b1:0a:91:fc:25:62:f1:4e:ac:95:79:d9:91:c5:8f:3a:e2: d3:e5:70:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDQjUxMTAvBgNVBAUTKDY5RTFDRUNCODgxREE2Qzk2OEJBQUUwNzMyMzdDMjY2 MDk1QTQ1Q0QwHhcNMjYwMzAxMDEwNzI0WhcNMjYwMzA4MDEwNzI0WjAYMRYwFAYD VQQDDA02OWEzOTE0Yy05ZGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvFOcnaCyCzFYgdQ/S5xLJ6nyat4c79JZwOO20eLXaVg/beas7CRylomV7hJ 5xnsIRBuazXG8+Up12zsroMV3vPMIy1LvCZpOKDGO5ur4ZhFwZ/TOEgeSLI4rzro Aay67/heFUVXMbPlkx4tdnPwwgxtjsWRsHFysyJmvm9X4/oa6I6xJL8cEC7ITFYq 0QY7I/O9amVbn+XXm4rU8f+qea0gGIgbEu8eGbxgqbrRP5Mhf5veJgB9mGDYy5Cu Dplsl3HRUxPZqF9yKz7M3KMAJ2GS1T8tgRQ5658mPRaLx9f+QgZe0cn0XsDn8Ii0 XgIwUmWI+5EuKRl88SaCu7RaHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZVBwHI 0/2jZcAT7LqetC1pzQcrMB8GA1UdIwQYMBaAFGnhzsuIHabJaLquBzI3wmYJWkXN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkNCNS8zOUQ3NjcyMDlC NkExMUVDQTY4MjM1MjJDNEY5QUUwMi9hZUhPeTRnZHBzbG91cTRITWpmQ1pnbGFS YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlSE95NGdkcHNsb3VxNEhNamZDWmdsYVJjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkNCNS8zOUQ3NjcyMDlCNkExMUVDQTY4MjM1MjJDNEY5QUUwMi9hZUhPeTRnZHBz bG91cTRITWpmQ1pnbGFSYzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArYX6MbfyT1UoAvvnZcHdTXOuHFDyyURDln3lELuqT5ZrVAVYaAwOGIOfszBq Neual3sNPWDfxrJewt6/VfqKznjHjo1LU5o0uRgKgRttJl8V42iPFVRRR+DNYLOh xT5aeFfa6D7JAmHXDxzDiCTNSDXW0gXIA8WvFLcQRO3+X9j9aApAuIM8FlBY/Z3I aFKWRw/3ROzsEG7FC94mYFMN06Nhe8qg4XK4iEON4XJeHg3oZ3CcKvmxiVVRVaw5 HUqMuWU+X/XJQBdhCep8dRSmGzvOqbHfFymU60ZJM9MkTLzCOfX/ko7x6RzBbrEK kfwlYvFOrJV52ZHFjzri0+Vw8Q== -----END CERTIFICATE-----Generated at Sun Mar 1 23:06:29 2026 by rpki-client