$ rpki-client -vvf rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft File: aUCPaxygKBZoPM5MCOAEkyUZRLI.mft (raw, json) Hash identifier: QegB6o5/xrh0iu7t+0jXAJ9DLVseC8xUQhoY/eKEGIo= Subject key identifier: 85:29:AE:39:B6:5D:46:F2:3F:63:8D:59:64:69:7C:CC:0A:03:21:C2 Authority key identifier: 69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2 Certificate issuer: /CN=A91166FC/serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2 Certificate serial: 0AE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft Manifest number: 0AD1 Signing time: Sat 04 Apr 2026 19:17:21 +0000 Manifest this update: Sat 04 Apr 2026 19:17:21 +0000 Manifest next update: Sat 11 Apr 2026 19:17:21 +0000 Files and hashes: 1: aUCPaxygKBZoPM5MCOAEkyUZRLI.crl (hash: lzznUCJ4Kw0ru7mvquEQhDb2/cdMxyG7aHMGtpZqXHc=) 2: 834C938A12C711F09998A234C4F9AE02.roa (hash: FGFCUH8ClLANdklj2bZ58cKTnItHntcutDN30p2U93k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2793 (0xae9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91166FC, serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2 Validity Not Before: Apr 4 19:17:21 2026 GMT Not After : Apr 11 19:17:21 2026 GMT Subject: CN=69d163c1-dc10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f8:94:9f:82:c5:54:dd:f6:a1:8d:12:21:25: 6b:4b:74:7f:f9:48:5f:ad:57:18:43:77:bc:12:eb: 83:ee:c0:66:e6:28:e4:84:45:74:4b:85:51:7f:6f: 6f:5f:9c:5b:75:ff:de:f3:1e:61:0d:15:50:a9:44: 8b:df:bd:df:6e:3b:c1:38:91:d1:11:fe:c7:eb:21: 1d:2f:11:3d:b2:95:f4:79:04:f9:11:75:60:43:b6: 92:00:dd:be:6f:8b:23:75:63:1c:d7:27:3c:1d:37: b1:b8:98:fd:f1:7b:b8:92:f6:0d:13:1f:4a:0e:92: 9b:8b:51:a2:4f:24:00:a6:72:d4:af:0f:78:b1:c2: d2:b3:c3:a2:99:15:57:0a:88:c0:f5:9a:86:e3:99: 7c:2b:d4:91:c9:fa:49:42:cf:1c:ef:69:b1:00:7e: 9b:e5:ee:a0:d2:2a:f6:e2:0c:cd:02:5c:34:33:7b: 02:31:2c:8a:e5:d0:e2:31:ab:3e:1f:9e:b7:19:05: c7:73:55:aa:65:a6:c0:b7:d7:12:7d:d3:b8:01:86: a1:99:0f:60:dd:c7:f5:d4:17:a7:82:92:bb:75:03: 24:f6:89:ea:50:e2:5b:b9:97:11:43:dd:27:a6:ad: 9a:52:59:75:b4:1c:d3:d9:c0:70:ce:1d:58:4a:c5: fa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:29:AE:39:B6:5D:46:F2:3F:63:8D:59:64:69:7C:CC:0A:03:21:C2 X509v3 Authority Key Identifier: keyid:69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a3:bf:4a:17:4d:2c:0e:cd:1f:3e:6e:89:98:06:2b:a7:14: 91:c1:96:c1:2a:5d:36:38:b4:dd:26:3c:ac:39:d6:ce:95:8d: df:dc:c2:f4:b1:50:2d:e1:f0:8a:74:d0:64:e4:67:35:e2:ef: 5d:11:ef:ca:76:cd:3d:5a:96:fc:58:9a:98:a9:7a:0f:9b:31: f9:6d:99:2d:42:3c:d0:ed:fb:02:5f:4c:bd:87:32:94:ca:67: 5e:67:20:4b:0b:ed:10:a7:15:fb:1a:02:66:bf:a5:b6:14:78: 62:1c:fe:91:38:af:61:72:b6:f9:07:82:e6:5a:ec:64:ea:1f: 61:26:00:7f:d2:d0:3c:67:1a:5c:bc:27:cb:9a:b7:1e:dc:c6: 2d:bd:8a:26:46:cd:96:50:3d:23:55:2c:0b:da:95:1f:83:08: 13:02:29:0e:a7:fa:35:c0:5f:63:ee:a6:72:f7:d2:de:4f:c0: ae:83:94:25:37:ac:52:00:4a:94:8f:ad:91:b0:59:92:be:59: d9:69:8e:d6:34:38:8d:9c:2a:4d:53:ab:8d:a1:14:38:7c:61: 7f:28:22:9c:d9:14:d9:c5:21:81:67:79:13:39:ec:13:cb:bf: 3e:2e:ce:12:2c:64:97:b7:6b:97:e2:bb:1f:3f:31:cc:ed:71: fa:7e:24:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY2RkMxMTAvBgNVBAUTKDY5NDA4RjZCMUNBMDI4MTY2ODNDQ0U0QzA4RTAwNDkz MjUxOTQ0QjIwHhcNMjYwNDA0MTkxNzIxWhcNMjYwNDExMTkxNzIxWjAYMRYwFAYD VQQDEw02OWQxNjNjMS1kYzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfiUn4LFVN32oY0SISVrS3R/+UhfrVcYQ3e8EuuD7sBm5ijkhEV0S4VRf29v X5xbdf/e8x5hDRVQqUSL373fbjvBOJHREf7H6yEdLxE9spX0eQT5EXVgQ7aSAN2+ b4sjdWMc1yc8HTexuJj98Xu4kvYNEx9KDpKbi1GiTyQApnLUrw94scLSs8OimRVX CojA9ZqG45l8K9SRyfpJQs8c72mxAH6b5e6g0ir24gzNAlw0M3sCMSyK5dDiMas+ H563GQXHc1WqZabAt9cSfdO4AYahmQ9g3cf11BengpK7dQMk9onqUOJbuZcRQ90n pq2aUll1tBzT2cBwzh1YSsX61QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIUprjm2 XUbyP2ONWWRpfMwKAyHCMB8GA1UdIwQYMBaAFGlAj2scoCgWaDzOTAjgBJMlGUSy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZGQy9BQjFGNEVDQTcy OUExMUVBQUJCRjkxNDFDNEY5QUUwMi9hVUNQYXh5Z0tCWm9QTTVNQ09BRWt5VVpS TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FVQ1BheHlnS0Jab1BNNU1DT0FFa3lVWlJMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjZGQy9BQjFGNEVDQTcyOUExMUVBQUJCRjkxNDFDNEY5QUUwMi9hVUNQYXh5Z0tC Wm9QTTVNQ09BRWt5VVpSTEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeqO/ShdNLA7NHz5uiZgGK6cUkcGWwSpdNji03SY8rDnWzpWN39zC9LFQLeHw inTQZORnNeLvXRHvynbNPVqW/FiamKl6D5sx+W2ZLUI80O37Al9MvYcylMpnXmcg SwvtEKcV+xoCZr+lthR4Yhz+kTivYXK2+QeC5lrsZOofYSYAf9LQPGcaXLwny5q3 HtzGLb2KJkbNllA9I1UsC9qVH4MIEwIpDqf6NcBfY+6mcvfS3k/AroOUJTesUgBK lI+tkbBZkr5Z2WmO1jQ4jZwqTVOrjaEUOHxhfyginNkU2cUhgWd5EznsE8u/Pi7O Eixkl7drl+K7Hz8xzO1x+n4k2A== -----END CERTIFICATE-----Generated at Sun Apr 5 19:39:44 2026 by rpki-client