$ rpki-client -vvf rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft File: aTtxpbXaYFTff5wNN5z1IMHI8pE.mft (raw, json) Hash identifier: 9JQBtUzxfwb6lMOstCGz53yrwgwf0KILkdWAMNZTLIY= Subject key identifier: AB:04:96:B6:3E:D2:7A:04:63:F0:7E:88:9D:5C:AA:44:A6:E0:E9:67 Authority key identifier: 69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 Certificate issuer: /CN=A917DB52/serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Certificate serial: 088A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft Manifest number: 087A Signing time: Thu 26 Mar 2026 20:33:43 +0000 Manifest this update: Thu 26 Mar 2026 20:33:42 +0000 Manifest next update: Thu 02 Apr 2026 20:33:42 +0000 Files and hashes: 1: aTtxpbXaYFTff5wNN5z1IMHI8pE.crl (hash: V2ZL+HUZs5Ooy3IOa2/MU8AfhrbvNbsH9GkeZM2dsD8=) 2: F43185921DF211F18E2EA673173D8C67.roa (hash: srrIw1L1shwtn6ty4ggxa65JRJwKoEkJgFL5J1FGVi8=) 3: FC73A04E22D611F184630225C8833773.roa (hash: tJS9rWyhxR4tRPQ8is4B5FOtrK9FChl388SXvR8zyok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 20:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2186 (0x88a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DB52, serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Validity Not Before: Mar 26 20:33:42 2026 GMT Not After : Apr 2 20:33:42 2026 GMT Subject: CN=69c59827-f6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:26:4e:5e:df:27:a9:69:a0:1e:b1:6a:05:04: 66:2c:d8:fa:7b:8b:fe:60:ae:d9:64:96:a4:dd:4d: a0:bc:d8:18:e4:94:c6:78:51:cd:24:ff:1c:ad:65: 5e:c5:92:a9:e1:04:0b:f9:47:f4:dd:33:00:e0:e8: a0:48:b5:5f:6c:fc:56:4e:f6:af:d4:81:43:5a:56: 53:5f:dd:37:7f:30:15:dd:fa:85:ed:4e:e0:55:52: e4:a1:39:04:db:11:68:3e:8a:69:ff:a4:b2:6f:10: cb:5a:1f:e1:a0:2e:66:5b:e4:2b:f3:ae:65:8a:14: b9:88:f9:43:3c:e6:ea:b5:bf:fd:bc:84:3f:fa:59: 5f:82:ae:ac:b4:5e:e6:74:1e:48:11:ca:07:e4:5f: 8f:27:88:a7:56:c1:be:80:ce:bb:98:6d:21:47:5e: fa:83:83:5a:a0:03:c4:39:20:a8:38:38:63:b2:20: ab:b0:06:65:b2:60:96:bc:9a:db:b3:7f:ad:c1:ff: 10:45:f4:02:26:68:38:2e:4d:d8:26:c6:53:7c:2d: e8:14:c4:ee:e1:f9:4d:57:cb:38:6c:e1:62:0b:44: f0:e7:c8:b8:13:1c:aa:c4:07:86:68:9c:5c:a4:83: f2:9b:9c:ef:d1:b8:39:5a:ae:79:b6:a3:ea:27:13: b1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:04:96:B6:3E:D2:7A:04:63:F0:7E:88:9D:5C:AA:44:A6:E0:E9:67 X509v3 Authority Key Identifier: keyid:69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:22:d9:09:d5:31:dc:1e:8f:0f:ea:5e:1a:3b:8c:45:5c:79: 71:16:f1:6f:10:a2:55:72:51:ae:a5:6b:49:10:c0:95:67:ac: 53:ce:20:5d:63:0c:75:74:a3:2d:de:d7:13:a2:0c:14:dc:52: e7:2e:82:fb:14:41:c5:96:e7:97:a3:db:d8:12:c9:7e:69:54: 69:e0:cc:7a:bb:d4:2a:a8:db:f6:fb:31:70:88:51:9a:fe:2a: 96:b6:06:8a:9d:c1:57:89:e6:c4:bf:6d:e3:56:a1:3d:ca:e0: c7:4c:af:b4:20:54:eb:9a:d6:40:47:f1:d7:d3:34:ee:5c:84: fc:c9:b3:0e:45:71:3a:73:0c:3a:89:5c:34:45:f6:98:f6:13: 55:f6:31:f6:98:3f:f6:19:62:37:08:64:32:c8:09:73:3c:46: 69:fc:f7:8d:cd:14:98:cd:d7:f8:9d:28:ac:35:55:a1:46:48: b1:d5:b7:d7:7b:d2:42:04:3b:17:78:7a:a2:48:94:22:54:da: f5:a5:c0:a2:1e:f0:6c:8b:dd:a6:41:6c:be:d3:13:a4:fa:13: 56:f6:cb:d9:c2:e5:d4:7e:2a:94:7e:2c:22:f4:7d:fe:7a:a1: fb:44:36:a7:57:22:89:2b:ae:36:03:3f:2b:ca:5a:9b:ae:e6: 9a:b1:6d:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RCNTIxMTAvBgNVBAUTKDY5M0I3MUE1QjVEQTYwNTRERjdGOUMwRDM3OUNGNTIw QzFDOEYyOTEwHhcNMjYwMzI2MjAzMzQyWhcNMjYwNDAyMjAzMzQyWjAYMRYwFAYD VQQDEw02OWM1OTgyNy1mNmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmCZOXt8nqWmgHrFqBQRmLNj6e4v+YK7ZZJak3U2gvNgY5JTGeFHNJP8crWVe xZKp4QQL+Uf03TMA4OigSLVfbPxWTvav1IFDWlZTX903fzAV3fqF7U7gVVLkoTkE 2xFoPopp/6SybxDLWh/hoC5mW+Qr865lihS5iPlDPObqtb/9vIQ/+llfgq6stF7m dB5IEcoH5F+PJ4inVsG+gM67mG0hR176g4NaoAPEOSCoODhjsiCrsAZlsmCWvJrb s3+twf8QRfQCJmg4Lk3YJsZTfC3oFMTu4flNV8s4bOFiC0Tw58i4ExyqxAeGaJxc pIPym5zv0bg5Wq55tqPqJxOxaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKsElrY+ 0noEY/B+iJ1cqkSm4OlnMB8GA1UdIwQYMBaAFGk7caW12mBU33+cDTec9SDByPKR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REI1Mi80NUY1NTZCRUYy ODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlGVGZmNXdOTjV6MUlNSEk4 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUdHhwYlhhWUZUZmY1d05ONXoxSU1ISThwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REI1Mi80NUY1NTZCRUYyODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlG VGZmNXdOTjV6MUlNSEk4cEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuCLZCdUx3B6PD+peGjuMRVx5cRbxbxCiVXJRrqVrSRDAlWesU84gXWMMdXSj Ld7XE6IMFNxS5y6C+xRBxZbnl6Pb2BLJfmlUaeDMervUKqjb9vsxcIhRmv4qlrYG ip3BV4nmxL9t41ahPcrgx0yvtCBU65rWQEfx19M07lyE/MmzDkVxOnMMOolcNEX2 mPYTVfYx9pg/9hliNwhkMsgJczxGafz3jc0UmM3X+J0orDVVoUZIsdW313vSQgQ7 F3h6okiUIlTa9aXAoh7wbIvdpkFsvtMTpPoTVvbL2cLl1H4qlH4sIvR9/nqh+0Q2 p1ciiSuuNgM/K8pam67mmrFtzQ== -----END CERTIFICATE-----Generated at Sat Mar 28 10:43:31 2026 by rpki-client