$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json) Hash identifier: 8U5PxgchEQk05q9n2P5+yjqUvpQVYArMHGMfk22apGY= Subject key identifier: FB:1F:78:0E:00:72:69:E5:5C:9D:07:B3:10:CB:52:C9:57:2D:2A:5F Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Certificate serial: 028B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft Manifest number: 026B Signing time: Fri 13 Mar 2026 01:29:32 +0000 Manifest this update: Fri 13 Mar 2026 01:29:31 +0000 Manifest next update: Fri 20 Mar 2026 01:29:31 +0000 Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: xvzppRAbICZd/FUBzYDV6bkbKDgdsQfUa7sxempMClU=) 2: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: 40EGBMsbpMDMqk64oIlNxvPswRIVzMQ9vAqZ+9/aJ30=) 3: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: +jjzQDT4VXtfOv7UHvs6KHzX+DKS/3je1TxZKSVKupY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 01:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 651 (0x28b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Validity Not Before: Mar 13 01:29:31 2026 GMT Not After : Mar 20 01:29:31 2026 GMT Subject: CN=69b3687b-a3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:86:af:f8:82:ba:41:8b:0f:ff:a8:a7:e2:b1: 85:ee:42:e7:94:61:2e:87:2f:8a:08:ba:dd:e6:e3: 1c:bd:b5:6b:3f:23:8c:0c:f6:bd:4e:93:a3:a0:e5: b7:8b:2e:dc:ff:3d:5c:40:64:4a:f7:e0:ae:c4:35: 08:f7:83:f4:7b:63:18:f1:d9:79:cd:29:9a:43:7e: 12:eb:4d:a0:66:43:fd:ee:38:fe:5f:ac:d7:22:85: f1:ee:cb:68:7c:4c:31:e7:0c:38:73:2b:54:b6:da: 49:16:aa:ed:36:fa:be:d9:25:95:c0:84:c4:25:56: 4c:27:b9:50:e3:00:36:4b:7c:7d:a3:99:70:b5:5e: b4:6b:9b:f9:a5:ba:d8:8b:64:f5:68:af:36:6d:49: a4:a5:f8:4e:d3:d4:f7:f5:80:6a:c7:b7:3f:81:bc: c7:c6:89:9c:d1:e7:e3:ef:b5:98:99:a2:1b:1e:8b: 98:68:36:8f:64:26:f6:5b:bf:ba:1e:e3:2f:49:be: d3:cc:3e:05:62:d4:92:d3:91:dc:0f:93:ea:f5:71: bd:dc:c3:24:01:0f:d0:b4:5a:9e:4c:40:01:40:cc: 56:26:d5:8d:d7:ac:1f:68:ac:69:eb:05:72:82:34: a8:36:88:a6:6b:0d:a3:93:46:cc:8a:d4:fd:7b:08: 73:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1F:78:0E:00:72:69:E5:5C:9D:07:B3:10:CB:52:C9:57:2D:2A:5F X509v3 Authority Key Identifier: keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:72:04:e8:7d:42:1a:3e:fe:27:52:a8:29:fb:4a:ff:41:ed: ed:09:47:db:fe:d0:24:ec:2f:3f:9e:a9:a2:f6:00:4e:44:5d: d5:df:4c:d2:3c:67:f8:05:f1:fa:ac:c6:da:1b:89:12:b3:05: c1:90:0c:28:83:f6:38:f0:57:00:74:e3:34:be:84:bd:81:67: b2:79:49:44:e1:b1:dc:fe:8a:00:82:15:a3:82:37:d2:3b:e4: 3c:84:15:bf:0e:da:30:9e:e0:22:01:fc:42:ca:33:57:7a:48: 28:a0:0b:35:ff:0f:f9:4c:38:bf:68:45:7a:b2:21:08:e5:12: d7:da:35:e7:59:ce:f1:8e:df:3c:5c:a6:70:da:f9:a8:ea:07: 07:0a:41:78:f2:e1:2f:0d:21:1f:01:1b:ce:ed:f6:46:c7:35: 94:d0:90:e8:cc:01:c9:b5:4c:b1:e2:ae:6d:db:af:6b:5d:11: b3:16:2e:eb:b3:c0:4d:51:c4:cf:c8:c5:6f:df:c9:7a:98:e7: 5a:33:63:e2:a2:fa:01:33:1f:55:58:83:bc:8f:da:55:21:61: 61:9d:3b:89:49:06:24:19:7b:1d:ba:9c:c2:72:07:ae:70:b6: 8e:b5:cb:73:bb:be:5e:fe:1a:36:1e:89:dc:e7:5a:7a:e0:be: ce:e0:02:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB NjJDNEVEQTkwHhcNMjYwMzEzMDEyOTMxWhcNMjYwMzIwMDEyOTMxWjAYMRYwFAYD VQQDEw02OWIzNjg3Yi1hM2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnYav+IK6QYsP/6in4rGF7kLnlGEuhy+KCLrd5uMcvbVrPyOMDPa9TpOjoOW3 iy7c/z1cQGRK9+CuxDUI94P0e2MY8dl5zSmaQ34S602gZkP97jj+X6zXIoXx7sto fEwx5ww4cytUttpJFqrtNvq+2SWVwITEJVZMJ7lQ4wA2S3x9o5lwtV60a5v5pbrY i2T1aK82bUmkpfhO09T39YBqx7c/gbzHxomc0efj77WYmaIbHouYaDaPZCb2W7+6 HuMvSb7TzD4FYtSS05HcD5Pq9XG93MMkAQ/QtFqeTEABQMxWJtWN16wfaKxp6wVy gjSoNoimaw2jk0bMitT9ewhzZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPsfeA4A cmnlXJ0HsxDLUslXLSpfMB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJBRS9DNzBGRUEyQThDMjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1 aXNmejl0RTc2dXVtTEU3YWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGHIE6H1CGj7+J1KoKftK/0Ht7QlH2/7QJOwvP56povYATkRd1d9M0jxn+AXx +qzG2huJErMFwZAMKIP2OPBXAHTjNL6EvYFnsnlJROGx3P6KAIIVo4I30jvkPIQV vw7aMJ7gIgH8QsozV3pIKKALNf8P+Uw4v2hFerIhCOUS19o151nO8Y7fPFymcNr5 qOoHBwpBePLhLw0hHwEbzu32Rsc1lNCQ6MwBybVMseKubduva10RsxYu67PATVHE z8jFb9/JepjnWjNj4qL6ATMfVViDvI/aVSFhYZ07iUkGJBl7HbqcwnIHrnC2jrXL c7u+Xv4aNh6J3OdaeuC+zuAC1A== -----END CERTIFICATE-----Generated at Sat Mar 14 00:04:57 2026 by rpki-client