$ rpki-client -vvf rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft File: AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft (raw, json) Hash identifier: XiyrAVa7o8MUoH3B+6sG4bpLaw7FWK3TKoOfQeSn+vM= Subject key identifier: B0:36:2A:A1:6A:85:5F:AF:16:D6:AF:19:B3:D5:C1:7C:8C:AF:14:27 Authority key identifier: 02:81:1C:31:D5:0C:91:FF:FD:5E:DA:68:B9:EF:81:C3:F9:E9:FB:12 Certificate issuer: /CN=A919188A/serialNumber=02811C31D50C91FFFD5EDA68B9EF81C3F9E9FB12 Certificate serial: 0253 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft Manifest number: 024A Signing time: Wed 25 Mar 2026 01:46:01 +0000 Manifest this update: Wed 25 Mar 2026 01:46:01 +0000 Manifest next update: Wed 01 Apr 2026 01:46:01 +0000 Files and hashes: 1: AoEcMdUMkf_9Xtpoue-Bw_np-xI.crl (hash: tzesdbVFnFsq8GW+8op+IYez36BZSzVVJu6iZ70ge88=) 2: 12AE9E92AA9711EDAAEB8345C4F9AE02.roa (hash: 2Xqzh+rTwYXPYYxdW2hn2g9r8XVFEIBmIU4XnPBMqWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.crl rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 595 (0x253) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919188A, serialNumber=02811C31D50C91FFFD5EDA68B9EF81C3F9E9FB12 Validity Not Before: Mar 25 01:46:01 2026 GMT Not After : Apr 1 01:46:01 2026 GMT Subject: CN=69c33e59-6002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:20:9c:78:b4:f1:b4:f0:d2:ab:a0:21:03:e4: 78:a3:b7:e9:fd:dd:30:20:7c:d0:39:5f:11:d9:b8: ff:03:0c:2e:5f:67:a0:d5:10:b6:ed:c5:14:6e:6a: e0:19:71:8e:cc:f5:71:79:ca:b8:0c:c0:bd:0b:57: cf:62:1f:b0:09:84:f3:1e:df:d6:b0:4e:5c:24:fb: fb:73:9c:eb:21:03:90:86:5d:2f:33:55:7f:ae:7a: 98:1b:49:de:0f:1c:1c:01:cd:1b:35:87:8c:bf:a3: f3:63:41:e2:07:d9:16:7e:7b:24:37:36:37:0a:1e: 53:7f:0b:0a:26:bf:61:83:4a:bf:4c:ee:5c:69:29: ce:d2:e5:cb:ff:ea:1e:81:e8:ec:a1:a2:bc:dd:09: c7:1e:ce:c5:84:a8:71:96:e2:c6:e0:6f:f6:8e:3c: f0:4c:d4:88:64:c3:bb:d7:4d:d8:f5:d2:42:88:2a: 05:a6:0b:36:e5:06:1f:66:3d:35:03:1c:48:3a:8f: f3:50:9d:ea:05:78:5f:e6:aa:9c:85:1d:7f:da:cd: fb:e3:ed:52:37:6d:c3:31:e7:09:e8:62:3a:2c:01: 03:17:c6:7a:65:51:4c:a7:f6:60:88:68:d1:7c:0b: 12:3d:c1:f5:3c:42:c5:d9:ba:62:e5:65:88:74:b8: 8c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:36:2A:A1:6A:85:5F:AF:16:D6:AF:19:B3:D5:C1:7C:8C:AF:14:27 X509v3 Authority Key Identifier: keyid:02:81:1C:31:D5:0C:91:FF:FD:5E:DA:68:B9:EF:81:C3:F9:E9:FB:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:bc:97:83:5c:72:10:29:1c:84:81:54:c6:7c:b5:bd:43:9f: e7:0e:e1:a4:13:75:4b:e3:ea:44:78:ca:7a:d0:f5:27:a8:60: 30:f5:02:f0:bb:db:d4:d6:65:92:ef:dd:7e:65:1b:df:82:00: 8c:93:04:95:40:a0:ac:76:21:e6:8a:e7:b6:94:af:77:d5:98: 95:4b:df:f7:72:bc:25:9a:74:46:20:7a:e6:1b:12:f9:f5:6c: 17:c5:b3:df:8b:1a:55:c8:bb:68:0c:f1:16:1b:dc:38:b3:ca: 73:e1:93:ae:44:29:56:3b:1d:c3:11:fb:15:27:40:06:4c:f0: 88:42:9c:cb:8f:2e:5b:1d:e1:a2:f3:1c:0b:b9:9c:70:2a:61: 58:68:48:f2:ab:79:1a:07:c4:14:93:cf:53:62:57:aa:c8:ba: 38:93:9f:a2:f2:08:f9:97:a4:1c:e6:f1:94:7d:a9:ed:36:98: cd:ab:c1:3c:f0:f6:11:d2:7e:4e:91:c1:df:7f:b0:6a:b0:a7: d8:97:f0:b3:fe:93:de:9d:93:16:e7:d2:9c:8f:85:ae:6b:67: 50:b2:c6:06:13:e5:5b:57:9e:32:f3:6b:dd:f0:c7:48:a0:91: fe:fa:e3:b5:bf:3b:4a:90:22:81:ad:2e:d2:69:cb:66:b2:dc: b6:2b:1e:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE4OEExMTAvBgNVBAUTKDAyODExQzMxRDUwQzkxRkZGRDVFREE2OEI5RUY4MUMz RjlFOUZCMTIwHhcNMjYwMzI1MDE0NjAxWhcNMjYwNDAxMDE0NjAxWjAYMRYwFAYD VQQDEw02OWMzM2U1OS02MDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyCceLTxtPDSq6AhA+R4o7fp/d0wIHzQOV8R2bj/AwwuX2eg1RC27cUUbmrg GXGOzPVxecq4DMC9C1fPYh+wCYTzHt/WsE5cJPv7c5zrIQOQhl0vM1V/rnqYG0ne DxwcAc0bNYeMv6PzY0HiB9kWfnskNzY3Ch5TfwsKJr9hg0q/TO5caSnO0uXL/+oe gejsoaK83QnHHs7FhKhxluLG4G/2jjzwTNSIZMO7103Y9dJCiCoFpgs25QYfZj01 AxxIOo/zUJ3qBXhf5qqchR1/2s374+1SN23DMecJ6GI6LAEDF8Z6ZVFMp/ZgiGjR fAsSPcH1PELF2bpi5WWIdLiMTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLA2KqFq hV+vFtavGbPVwXyMrxQnMB8GA1UdIwQYMBaAFAKBHDHVDJH//V7aaLnvgcP56fsS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTg4QS9DOTYzNTdDQUFB OTQxMUVEQjA3NzRGNDVDNEY5QUUwMi9Bb0VjTWRVTWtmXzlYdHBvdWUtQndfbnAt eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FvRWNNZFVNa2ZfOVh0cG91ZS1Cd19ucC14SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTg4QS9DOTYzNTdDQUFBOTQxMUVEQjA3NzRGNDVDNEY5QUUwMi9Bb0VjTWRVTWtm XzlYdHBvdWUtQndfbnAteEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAELyXg1xyECkchIFUxny1vUOf5w7hpBN1S+PqRHjKetD1J6hgMPUC8Lvb1NZl ku/dfmUb34IAjJMElUCgrHYh5orntpSvd9WYlUvf93K8JZp0RiB65hsS+fVsF8Wz 34saVci7aAzxFhvcOLPKc+GTrkQpVjsdwxH7FSdABkzwiEKcy48uWx3hovMcC7mc cCphWGhI8qt5GgfEFJPPU2JXqsi6OJOfovII+ZekHObxlH2p7TaYzavBPPD2EdJ+ TpHB33+warCn2Jfws/6T3p2TFufSnI+FrmtnULLGBhPlW1eeMvNr3fDHSKCR/vrj tb87SpAiga0u0mnLZrLctiseWQ== -----END CERTIFICATE-----Generated at Thu Mar 26 08:54:11 2026 by rpki-client