$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft File: AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft (raw, json) Hash identifier: 4cj1sLcQ0m2HlPYWwRUOqmDWumcYtGofVii5xSf1dv8= Subject key identifier: 59:7B:BB:71:14:EB:A9:5F:C7:B7:E2:0D:56:E1:52:C3:BD:CD:29:43 Authority key identifier: 00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3 Certificate issuer: /CN=A916E9E3/serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft Manifest number: 63 Signing time: Wed 25 Mar 2026 07:18:57 +0000 Manifest this update: Wed 25 Mar 2026 07:18:56 +0000 Manifest next update: Wed 01 Apr 2026 07:18:56 +0000 Files and hashes: 1: AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl (hash: 2omUq42PvlNrnf+4bzdveb1bVQ8kT/lUGA4JuNNTQSE=) 2: 2A148C7E1D4211F1BDB413AD1B3D8C67.roa (hash: 9+eeW3fxI81UmxuXMQKdcRk52NKqKNvOzfTZtPfzt/w=) 3: 7AE952421D4211F19FBF55241C3D8C67.roa (hash: f7UWN7jQlsHW7Pox7uXkyxX9g+BJkY1p57/O1WWygtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9E3, serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3 Validity Not Before: Mar 25 07:18:56 2026 GMT Not After : Apr 1 07:18:56 2026 GMT Subject: CN=69c38c61-3822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:35:5a:d9:90:00:54:72:95:3a:3b:64:23:3d: 23:4a:aa:5c:ef:86:0b:6f:10:b8:30:cf:95:81:57: 1f:a7:ca:24:57:52:68:87:f6:30:bc:78:b7:b4:01: 3d:3a:bf:d8:39:ba:f8:af:64:c5:b1:d1:2a:c2:ba: e5:47:89:5e:19:d2:cd:76:a1:99:8d:bf:6f:42:2f: 99:73:69:6f:bc:14:e1:a4:f2:42:a6:8e:69:49:23: 0e:52:e2:82:73:4f:76:6c:b8:09:41:d9:40:70:1e: 1d:c2:2a:a3:0f:69:27:ac:17:9b:8b:c6:f6:72:0b: e4:99:64:1a:47:e5:23:fe:d7:d5:d2:58:2a:4c:f0: 7d:4d:71:be:1e:a0:db:3a:0a:60:91:3c:67:5b:8f: 56:24:dd:0e:72:b9:fe:cd:3b:1c:a7:2f:18:3b:ff: 8e:18:0d:ba:47:2c:9c:bd:cf:13:86:63:8d:99:68: d5:7f:92:44:fe:2b:67:8e:4b:59:95:76:ec:b9:70: ce:0c:a1:9d:4f:45:be:2d:a1:6b:9d:8a:0c:9e:5d: 01:e5:21:1b:0b:e1:f3:35:ee:a5:24:db:3f:24:94: 64:03:35:0f:e0:bc:6b:f8:ff:ed:57:33:de:ee:70: 3d:a7:6b:2b:92:73:f0:d2:16:5b:8c:ad:48:e9:bc: 3f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7B:BB:71:14:EB:A9:5F:C7:B7:E2:0D:56:E1:52:C3:BD:CD:29:43 X509v3 Authority Key Identifier: keyid:00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:e1:68:28:07:d7:a8:01:70:14:a0:e6:dd:05:9f:da:1b:c7: 3f:7a:e9:39:8b:ea:90:73:e7:63:24:89:ad:1d:7d:af:f9:49: 46:5a:2c:5e:ac:96:e8:89:bd:12:77:8a:86:24:d6:66:3b:4f: d2:26:8c:ea:ed:77:e5:dc:a6:55:4f:37:cb:f6:12:ad:24:5c: 50:49:b2:b3:5d:7a:86:6a:32:74:4b:7b:8a:7f:41:0c:ec:8c: 2d:8a:c6:1d:3f:a1:59:79:09:e6:c0:2b:11:8f:d8:6d:1a:5a: ea:e0:31:31:fe:3b:21:60:c4:d2:1b:27:44:a6:31:60:18:75: 47:5a:39:c2:2b:2a:19:84:1a:46:5b:c2:cf:2c:8a:06:4d:e2: 2c:24:e2:40:79:cc:ff:5f:62:d9:9a:f3:bc:78:f5:01:ac:81: 4a:0c:23:7c:24:07:85:9a:2a:9e:b9:58:c6:21:00:21:51:29: 46:f8:ca:82:c7:e6:a6:07:1a:1f:9c:6d:8d:4f:67:2e:4d:e4: d6:4c:6d:dc:ae:52:5b:14:d0:c1:24:ee:a8:d6:2c:e8:51:c9: 2e:a4:73:9f:d8:87:21:ef:05:f7:c4:d4:b4:fd:a7:4b:e8:de: 28:f7:8d:38:bf:0e:84:0a:8f:b7:72:19:f6:fb:a0:9b:10:81: 6a:d3:03:4d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RTlFMzExMC8GA1UEBRMoMDA4NEY0N0E0MzcyQzhGOEE3RDUxMTgzRDUwMzZDNTkz RDE5RTFDMzAeFw0yNjAzMjUwNzE4NTZaFw0yNjA0MDEwNzE4NTZaMBgxFjAUBgNV BAMTDTY5YzM4YzYxLTM4MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDNVrZkABUcpU6O2QjPSNKqlzvhgtvELgwz5WBVx+nyiRXUmiH9jC8eLe0AT06 v9g5uvivZMWx0SrCuuVHiV4Z0s12oZmNv29CL5lzaW+8FOGk8kKmjmlJIw5S4oJz T3ZsuAlB2UBwHh3CKqMPaSesF5uLxvZyC+SZZBpH5SP+19XSWCpM8H1Ncb4eoNs6 CmCRPGdbj1Yk3Q5yuf7NOxynLxg7/44YDbpHLJy9zxOGY42ZaNV/kkT+K2eOS1mV duy5cM4MoZ1PRb4toWudigyeXQHlIRsL4fM17qUk2z8klGQDNQ/gvGv4/+1XM97u cD2nayuSc/DSFluMrUjpvD89AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWXu7cRTr qV/Ht+INVuFSw73NKUMwHwYDVR0jBBgwFoAUAIT0ekNyyPin1RGD1QNsWT0Z4cMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFOUUzLzQ0Q0U0RUQyQTNB NDExRjA5MjAxM0UyOUM0RjlBRTAyL0FJVDBla055eVBpbjFSR0QxUU5zV1QwWjRj TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQUlUMGVrTnl5UGluMVJHRDFRTnNXVDBaNGNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZF OUUzLzQ0Q0U0RUQyQTNBNDExRjA5MjAxM0UyOUM0RjlBRTAyL0FJVDBla055eVBp bjFSR0QxUU5zV1QwWjRjTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAJ4WgoB9eoAXAUoObdBZ/aG8c/euk5i+qQc+djJImtHX2v+UlGWixerJboib0S d4qGJNZmO0/SJozq7Xfl3KZVTzfL9hKtJFxQSbKzXXqGajJ0S3uKf0EM7IwtisYd P6FZeQnmwCsRj9htGlrq4DEx/jshYMTSGydEpjFgGHVHWjnCKyoZhBpGW8LPLIoG TeIsJOJAecz/X2LZmvO8ePUBrIFKDCN8JAeFmiqeuVjGIQAhUSlG+MqCx+amBxof nG2NT2cuTeTWTG3crlJbFNDBJO6o1izoUckupHOf2Ich7wX3xNS0/adL6N4o9404 vw6ECo+3chn2+6CbEIFq0wNN -----END CERTIFICATE-----Generated at Thu Mar 26 15:41:17 2026 by rpki-client