$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft File: aaSG-_IUhPFBL7ioCieKJIzvvrI.mft (raw, json) Hash identifier: ogAG3msRP8P3y3drdWKkUHAO3vbg4TOX1VBOQIT02NU= Subject key identifier: 85:83:F6:A2:06:1C:DC:3D:C3:BE:E9:31:D6:0E:9C:B1:29:8F:84:51 Authority key identifier: 69:A4:86:FB:F2:14:84:F1:41:2F:B8:A8:0A:27:8A:24:8C:EF:BE:B2 Certificate issuer: /CN=A91B4713/serialNumber=69A486FBF21484F1412FB8A80A278A248CEFBEB2 Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft Manifest number: 01DC Signing time: Thu 21 May 2026 03:38:35 +0000 Manifest this update: Thu 21 May 2026 03:38:35 +0000 Manifest next update: Thu 28 May 2026 03:38:35 +0000 Files and hashes: 1: aaSG-_IUhPFBL7ioCieKJIzvvrI.crl (hash: 9nVi56eg7m2tCBkB8K92SfhRl0IzWxOhNT8bnNBDG9g=) 2: A5656D2E892B11EE94747D6BC4F9AE02.roa (hash: /k9F9UoMVvvC6p1jgV3pWpP4PVT7CPpxGz+wVVYMTRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.crl rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4713, serialNumber=69A486FBF21484F1412FB8A80A278A248CEFBEB2 Validity Not Before: May 21 03:38:35 2026 GMT Not After : May 28 03:38:35 2026 GMT Subject: CN=6a0e7e3b-90e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:32:f4:aa:df:65:15:7c:6a:b8:11:62:2b:0f: b9:bd:7d:9d:25:71:6b:e0:09:9f:89:dc:43:7e:ec: f1:cb:04:9c:f8:de:33:ba:e1:1f:a1:29:2d:01:4f: a7:6f:b2:85:90:ee:4b:08:3c:3e:c0:e0:23:4d:ab: f9:57:75:33:43:cc:da:45:53:a0:e3:85:78:69:25: 4b:e4:3b:c9:b4:78:04:89:ea:70:03:b9:46:f3:69: 09:59:a4:89:5b:da:69:43:f0:cb:24:aa:4c:3f:d9: 71:63:48:85:75:1e:fa:17:cd:97:ed:d4:b7:28:30: 65:e3:f5:0a:1d:41:1c:ae:dc:01:87:4c:ed:fd:d2: ef:8d:4f:25:14:bd:c2:cf:89:64:0e:e3:34:b1:5d: 66:61:39:0c:5c:56:0b:07:23:c7:60:7f:cd:6c:3d: a9:72:3b:6c:4e:8b:f7:47:34:f5:28:f0:92:88:98: 2f:1d:ad:f9:b3:5b:ff:2b:db:f8:ff:33:0b:5f:0e: 77:8e:bc:52:22:04:cb:26:d0:03:0f:2e:78:92:10: 5b:05:13:ce:8f:99:e0:14:14:6d:2d:35:13:2f:f4: 3e:2e:48:93:e6:ce:11:ef:a1:03:e1:5c:01:c8:d2: fc:c5:08:4d:6d:dd:49:0e:d6:75:8e:58:36:50:d1: 2a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:83:F6:A2:06:1C:DC:3D:C3:BE:E9:31:D6:0E:9C:B1:29:8F:84:51 X509v3 Authority Key Identifier: keyid:69:A4:86:FB:F2:14:84:F1:41:2F:B8:A8:0A:27:8A:24:8C:EF:BE:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:80:64:11:b8:43:1a:a6:00:a1:85:1f:d5:e4:d3:36:1d:40: e5:91:c3:b1:54:13:d5:37:5e:b2:a4:98:4c:51:7e:04:b7:9b: 39:e3:2a:81:d0:c4:b8:b5:58:8a:ed:37:96:3b:28:1c:79:93: a5:90:63:ab:67:50:26:04:ed:fc:e0:2b:aa:20:64:15:e8:96: 37:76:92:42:5c:0e:a1:0f:48:1a:36:8f:cf:64:88:b9:bb:0d: 56:ce:ce:cd:c5:e0:4d:09:b4:73:1d:37:61:33:ef:e6:47:cc: e0:87:68:cb:7f:22:14:5f:0b:34:96:05:f1:04:39:eb:77:61: be:43:75:37:77:b6:4b:b3:0a:51:d2:15:f4:cf:4b:d8:e6:cb: 16:3f:3a:6e:4a:50:f2:32:0c:5a:20:64:d0:42:d9:2c:49:95: 9c:41:ac:29:b1:00:ab:f0:1b:1b:2e:22:8f:c5:6c:b4:6a:68: 6a:85:cb:8a:00:31:dd:e3:18:e0:36:c2:8c:f6:82:a3:9d:aa: 62:9f:52:b8:bc:ec:e6:8e:06:3f:1e:2f:1a:eb:6e:be:9d:95: 0b:da:c0:32:2d:d1:7d:11:fc:d5:97:36:5a:2d:1f:46:df:a0: d7:c9:31:90:31:05:e6:81:51:80:39:64:05:49:d2:68:56:f6: a4:76:f0:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ3MTMxMTAvBgNVBAUTKDY5QTQ4NkZCRjIxNDg0RjE0MTJGQjhBODBBMjc4QTI0 OENFRkJFQjIwHhcNMjYwNTIxMDMzODM1WhcNMjYwNTI4MDMzODM1WjAYMRYwFAYD VQQDEw02YTBlN2UzYi05MGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8jL0qt9lFXxquBFiKw+5vX2dJXFr4AmfidxDfuzxywSc+N4zuuEfoSktAU+n b7KFkO5LCDw+wOAjTav5V3UzQ8zaRVOg44V4aSVL5DvJtHgEiepwA7lG82kJWaSJ W9ppQ/DLJKpMP9lxY0iFdR76F82X7dS3KDBl4/UKHUEcrtwBh0zt/dLvjU8lFL3C z4lkDuM0sV1mYTkMXFYLByPHYH/NbD2pcjtsTov3RzT1KPCSiJgvHa35s1v/K9v4 /zMLXw53jrxSIgTLJtADDy54khBbBRPOj5ngFBRtLTUTL/Q+LkiT5s4R76ED4VwB yNL8xQhNbd1JDtZ1jlg2UNEqfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIWD9qIG HNw9w77pMdYOnLEpj4RRMB8GA1UdIwQYMBaAFGmkhvvyFITxQS+4qAoniiSM776y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDcxMy9GRTFCRDk3Qzg5 MkExMUVFQjYxNDgyNkFDNEY5QUUwMi9hYVNHLV9JVWhQRkJMN2lvQ2llS0pJenZ2 ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhU0ctX0lVaFBGQkw3aW9DaWVLSkl6dnZySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDcxMy9GRTFCRDk3Qzg5MkExMUVFQjYxNDgyNkFDNEY5QUUwMi9hYVNHLV9JVWhQ RkJMN2lvQ2llS0pJenZ2ckkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXIBkEbhDGqYAoYUf1eTTNh1A5ZHDsVQT1TdesqSYTFF+BLebOeMqgdDEuLVY iu03ljsoHHmTpZBjq2dQJgTt/OArqiBkFeiWN3aSQlwOoQ9IGjaPz2SIubsNVs7O zcXgTQm0cx03YTPv5kfM4Idoy38iFF8LNJYF8QQ563dhvkN1N3e2S7MKUdIV9M9L 2ObLFj86bkpQ8jIMWiBk0ELZLEmVnEGsKbEAq/AbGy4ij8VstGpoaoXLigAx3eMY 4DbCjPaCo52qYp9SuLzs5o4GPx4vGutuvp2VC9rAMi3RfRH81Zc2Wi0fRt+g18kx kDEF5oFRgDlkBUnSaFb2pHbw6g== -----END CERTIFICATE-----Generated at Thu May 21 10:23:34 2026 by rpki-client