$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft File: AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft (raw, json) Hash identifier: lz89iJpbPmAvMNh5E55GpLlboqKlYR1u7EgPapRPObs= Subject key identifier: EE:CE:A9:DA:41:6A:35:B0:22:99:93:A9:10:7D:E4:0F:03:45:8D:71 Authority key identifier: 00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 Certificate issuer: /CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Certificate serial: 07FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft Manifest number: 07DC Signing time: Wed 20 May 2026 21:25:06 +0000 Manifest this update: Wed 20 May 2026 21:25:05 +0000 Manifest next update: Wed 27 May 2026 21:25:05 +0000 Files and hashes: 1: AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl (hash: wX4saHsWo8oDL5rhxVft4jAhvb86DaaDAErs09XxTTA=) 2: EEE4C606B5D411ECA20B840AC4F9AE02.roa (hash: EIHT9tw+jJfDxYwJoN6Zou+1GSdOeWVDmrSdgdYC9zo=) 3: 910A49AAB5CC11ECAE337E78C4F9AE02.roa (hash: AQsEjkfXYE8iJW37NiBShvRrsZAk/FjyC4xd+5A2hgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 21:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2045 (0x7fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA1A6, serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Validity Not Before: May 20 21:25:05 2026 GMT Not After : May 27 21:25:05 2026 GMT Subject: CN=6a0e26b2-0b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f5:a5:fd:20:7f:82:24:0a:28:ab:48:83:48: d2:54:a1:71:3c:75:86:fe:43:ea:be:25:86:62:4a: cb:86:21:91:9b:e8:be:55:5d:40:a8:08:e8:65:86: 21:93:38:6f:09:78:ad:d3:fa:df:ea:91:2a:6c:14: 7c:2e:95:7a:5b:dc:4e:68:bc:98:13:a4:73:24:7e: b5:d6:df:75:8c:d9:ec:6e:5d:2f:98:67:38:04:49: 02:2f:f4:81:f4:b3:bd:12:84:86:59:46:62:c1:82: 67:41:ac:e0:a5:cf:b8:89:0c:da:05:b8:30:54:f4: 20:73:ff:6f:5c:3f:63:c7:4c:6d:bc:33:e4:11:5a: f7:a8:1d:78:b5:fd:04:e6:db:5f:fd:2a:9a:32:4b: be:30:b5:0c:73:41:6b:76:fb:25:53:a3:16:f4:24: be:30:b7:2b:37:34:fa:ec:c5:6a:ce:27:8f:a7:fb: b3:b3:2e:3e:6b:bd:d5:28:96:d3:01:be:86:2f:39: db:9e:4f:71:ca:3a:6d:af:48:4b:e5:0a:78:57:16: 63:15:75:60:1d:61:d0:4e:e5:48:15:ef:7d:36:2a: a3:8b:84:2c:fa:26:ea:cc:6a:31:28:03:3b:9f:ae: f3:e6:60:6c:db:74:49:cb:f1:e4:9d:1f:48:a9:30: cc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CE:A9:DA:41:6A:35:B0:22:99:93:A9:10:7D:E4:0F:03:45:8D:71 X509v3 Authority Key Identifier: keyid:00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:1c:3b:83:7e:9c:cf:30:b1:99:1b:34:fa:54:d7:00:98:57: 97:17:23:d1:b2:ef:86:6a:4e:a9:a3:1a:bd:dd:56:fd:c4:46: 70:50:74:55:57:92:37:7d:44:62:ff:f9:a6:d4:fc:40:86:0a: b8:81:2e:50:56:6f:73:2c:22:35:2b:6a:53:d9:ec:7a:db:fd: 77:32:49:a4:86:a6:fb:f3:67:ea:db:75:cd:37:0b:bc:1c:10: a3:0a:15:aa:f9:20:d7:62:5f:ea:b8:b0:c7:4b:8e:e2:81:ad: 87:8b:6c:09:f8:f2:31:d3:1e:a9:a9:cd:af:f3:94:3d:d4:88: 33:cc:d6:4e:ad:c2:3a:5b:62:b4:9e:ad:dd:2b:dd:69:74:84: 02:ad:55:13:12:6d:2e:64:dc:e7:8b:0a:c0:8c:b0:80:08:3e: b8:8c:97:3d:91:68:0c:da:5b:2f:4c:50:a5:97:55:1f:cd:a3: ee:ed:eb:01:28:b1:c9:cb:e1:38:fa:54:cd:9b:ea:46:96:65: 3d:18:1f:56:00:51:3c:a9:04:04:90:f7:6a:7d:3f:1b:f0:96: a6:e7:03:69:0e:7e:bf:18:82:58:41:d7:5c:96:14:25:2f:34: db:10:51:88:c8:93:15:ee:39:42:69:16:5e:6c:45:29:11:93: c2:9b:bb:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ExQTYxMTAvBgNVBAUTKDAwMDI0MTQ5MEUzRjIwOThGNzlENUM5MzAzN0VCRkYy Qjk1NkNGRDcwHhcNMjYwNTIwMjEyNTA1WhcNMjYwNTI3MjEyNTA1WjAYMRYwFAYD VQQDEw02YTBlMjZiMi0wYjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/Wl/SB/giQKKKtIg0jSVKFxPHWG/kPqviWGYkrLhiGRm+i+VV1AqAjoZYYh kzhvCXit0/rf6pEqbBR8LpV6W9xOaLyYE6RzJH611t91jNnsbl0vmGc4BEkCL/SB 9LO9EoSGWUZiwYJnQazgpc+4iQzaBbgwVPQgc/9vXD9jx0xtvDPkEVr3qB14tf0E 5ttf/SqaMku+MLUMc0FrdvslU6MW9CS+MLcrNzT67MVqziePp/uzsy4+a73VKJbT Ab6GLznbnk9xyjptr0hL5Qp4VxZjFXVgHWHQTuVIFe99Niqji4Qs+ibqzGoxKAM7 n67z5mBs23RJy/HknR9IqTDMOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO7OqdpB ajWwIpmTqRB95A8DRY1xMB8GA1UdIwQYMBaAFAACQUkOPyCY951ckwN+v/K5Vs/X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTFBNi8zOEQ5M0UxRTNE MzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lKajNuVnlUQTM2XzhybFd6 OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FBSkJTUTRfSUpqM25WeVRBMzZfOHJsV3o5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTFBNi8zOEQ5M0UxRTNEMzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lK ajNuVnlUQTM2XzhybFd6OWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKBw7g36czzCxmRs0+lTXAJhXlxcj0bLvhmpOqaMavd1W/cRGcFB0VVeSN31E Yv/5ptT8QIYKuIEuUFZvcywiNStqU9nsetv9dzJJpIam+/Nn6tt1zTcLvBwQowoV qvkg12Jf6riwx0uO4oGth4tsCfjyMdMeqanNr/OUPdSIM8zWTq3COltitJ6t3Svd aXSEAq1VExJtLmTc54sKwIywgAg+uIyXPZFoDNpbL0xQpZdVH82j7u3rASixycvh OPpUzZvqRpZlPRgfVgBRPKkEBJD3an0/G/CWpucDaQ5+vxiCWEHXXJYUJS802xBR iMiTFe45QmkWXmxFKRGTwpu71w== -----END CERTIFICATE-----Generated at Thu May 21 12:19:24 2026 by rpki-client