$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft File: Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft (raw, json) Hash identifier: xLU43ZckaP1uQ7GyEg/Ni6aXGUjwjHw/CXBXx5TOxCU= Subject key identifier: CD:14:EE:37:F2:F7:36:B6:9D:E2:63:59:BE:53:C4:26:C9:AB:E1:82 Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 Certificate issuer: /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Certificate serial: 0D72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft Manifest number: 0D47 Signing time: Tue 24 Mar 2026 17:55:19 +0000 Manifest this update: Tue 24 Mar 2026 17:55:19 +0000 Manifest next update: Tue 31 Mar 2026 17:55:19 +0000 Files and hashes: 1: Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl (hash: UAcounmHi3VKyz8KKvM0ht1XgpUxN5r8nSPjrX/OqeE=) 2: B0B70006B19211EC9EAAD44EC4F9AE02.roa (hash: pM/wYVZoWKaTJJScYphZbwJ5Nkt7/U8DgGnMWTJmOkU=) 3: AFB0FFCCB19211EC9EAAD44EC4F9AE02.roa (hash: Q7KENmdDsJuGfmoppCYs9Ac9pRDOPNUkJM7G9SEV/XE=) 4: 0EF0E842839E11EEA1892A12C4F9AE02.roa (hash: 2YJwdUdy0UMPDQ220zi/wAAhUHmTMOkvVthXMtGqtBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3442 (0xd72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91642A0, serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Validity Not Before: Mar 24 17:55:19 2026 GMT Not After : Mar 31 17:55:19 2026 GMT Subject: CN=69c2d007-c0bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:63:0e:61:d6:1d:2e:fb:ea:8c:c9:07:00:30: 12:fb:e5:97:68:89:bc:40:da:fd:50:eb:1a:34:c4: 91:78:5c:21:52:4b:88:2e:dd:df:12:7a:ec:52:8a: 64:d5:a6:91:00:fa:15:d0:98:de:4b:f3:4b:ed:75: ee:6a:e6:87:7a:86:3d:b2:f2:27:79:32:07:6e:34: 67:54:ef:53:0f:dc:91:58:03:46:d5:1c:de:bb:b5: 6a:eb:d0:7a:31:e9:f1:07:ef:e7:07:3d:b2:38:79: 16:cb:c8:28:dc:75:f5:7d:29:fd:11:b5:60:c1:16: 58:91:76:97:9f:8b:02:9e:12:10:2b:c6:c3:84:92: 95:c5:b1:ba:b0:f3:1a:a3:23:5f:9a:9c:e0:ae:63: f0:83:18:c4:57:15:fb:fe:37:95:bb:3a:f9:2d:f2: af:dc:56:e5:3a:bd:91:a5:4c:ce:cc:a4:a9:17:52: 1d:aa:6c:e7:42:ae:00:ef:69:63:31:40:da:65:db: d2:fe:72:de:f1:4f:51:87:1f:8f:58:42:11:48:5f: a1:70:2c:97:fc:67:b1:27:0f:26:06:b1:3e:f1:e3: 40:4d:60:38:d9:6e:a1:44:2e:9a:09:d0:e8:f9:5b: 8f:89:29:dc:a2:57:87:7d:52:4a:c7:74:ec:73:17: 04:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:14:EE:37:F2:F7:36:B6:9D:E2:63:59:BE:53:C4:26:C9:AB:E1:82 X509v3 Authority Key Identifier: keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:6f:c0:f7:12:75:05:3e:55:48:00:71:00:76:53:10:3a:be: dc:0e:60:24:6b:b9:ec:64:7e:c2:60:d0:b4:93:73:d2:0d:ff: d7:f2:42:df:c2:32:d8:93:05:6f:ab:9a:9c:1b:80:53:fd:bf: dc:f9:23:11:eb:39:0a:99:40:c4:4a:a8:08:99:b8:38:dd:5d: 58:fa:0e:6c:a4:ae:f8:77:ee:6d:86:93:75:1e:15:61:48:dc: 85:0a:58:c8:3d:49:da:32:90:2c:0d:ea:a4:99:27:81:32:3e: 0a:cb:b2:95:18:79:e5:5f:a6:0b:68:83:59:7e:53:1a:1f:61: 28:ed:75:3a:42:2d:16:eb:3d:8b:68:84:d4:ce:31:ec:00:93: a2:94:d5:3d:48:87:2a:d1:cc:16:7d:72:0e:a5:bd:04:fe:9d: ed:17:fa:33:af:53:7a:6d:aa:5c:a9:9f:e0:47:5e:38:20:18: dd:1e:03:20:aa:d7:f8:46:87:e4:ee:7a:99:6b:c6:d6:9b:09: b6:d5:41:e7:7e:dc:df:2c:0f:b6:b4:9a:4f:7e:12:33:1d:03: 65:50:4f:a9:9f:39:a6:c0:8e:e1:a1:6d:8f:51:6f:9c:a2:11: 7e:38:6a:0e:f5:2a:cf:51:ee:42:7b:c3:d2:67:c3:f7:9d:6e: 5b:21:6b:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyQTAxMTAvBgNVBAUTKDAyQUU4NEY2MTFCN0U4MkZEN0Q2RkY4RjQ1MkQ4NzI1 RUY0ODkwODgwHhcNMjYwMzI0MTc1NTE5WhcNMjYwMzMxMTc1NTE5WjAYMRYwFAYD VQQDEw02OWMyZDAwNy1jMGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2MOYdYdLvvqjMkHADAS++WXaIm8QNr9UOsaNMSReFwhUkuILt3fEnrsUopk 1aaRAPoV0JjeS/NL7XXuauaHeoY9svIneTIHbjRnVO9TD9yRWANG1Rzeu7Vq69B6 MenxB+/nBz2yOHkWy8go3HX1fSn9EbVgwRZYkXaXn4sCnhIQK8bDhJKVxbG6sPMa oyNfmpzgrmPwgxjEVxX7/jeVuzr5LfKv3FblOr2RpUzOzKSpF1IdqmznQq4A72lj MUDaZdvS/nLe8U9Rhx+PWEIRSF+hcCyX/GexJw8mBrE+8eNATWA42W6hRC6aCdDo +VuPiSncoleHfVJKx3TscxcE0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM0U7jfy 9za2neJjWb5TxCbJq+GCMB8GA1UdIwQYMBaAFAKuhPYRt+gv19b/j0UthyXvSJCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDJBMC9DQTdEMTE2MkY2 NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZDX1gxdi1QUlMySEplOUlr SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxNkU5aEczNkNfWDF2LVBSUzJISmU5SWtJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDJBMC9DQTdEMTE2MkY2NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZD X1gxdi1QUlMySEplOUlrSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYW/A9xJ1BT5VSABxAHZTEDq+3A5gJGu57GR+wmDQtJNz0g3/1/JC38Iy2JMF b6uanBuAU/2/3PkjEes5CplAxEqoCJm4ON1dWPoObKSu+HfubYaTdR4VYUjchQpY yD1J2jKQLA3qpJkngTI+CsuylRh55V+mC2iDWX5TGh9hKO11OkItFus9i2iE1M4x 7ACTopTVPUiHKtHMFn1yDqW9BP6d7Rf6M69Tem2qXKmf4EdeOCAY3R4DIKrX+EaH 5O56mWvG1psJttVB537c3ywPtrSaT34SMx0DZVBPqZ85psCO4aFtj1FvnKIRfjhq DvUqz1HuQnvD0mfD951uWyFriw== -----END CERTIFICATE-----Generated at Thu Mar 26 06:03:44 2026 by rpki-client