$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft File: aj72cYLbsPbM88pBN4wBGYBq6b0.mft (raw, json) Hash identifier: 6wWl/ldWCLedd9XySr8ekjO1ZZrpOKhcGT27Nrwhkl8= Subject key identifier: 9B:F3:07:43:92:B4:A5:06:0F:15:14:1C:A9:06:6D:06:D1:54:BF:40 Authority key identifier: 6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD Certificate issuer: /CN=A91A0A2E/serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft Manifest number: D6 Signing time: Wed 25 Mar 2026 05:55:14 +0000 Manifest this update: Wed 25 Mar 2026 05:55:14 +0000 Manifest next update: Wed 01 Apr 2026 05:55:14 +0000 Files and hashes: 1: aj72cYLbsPbM88pBN4wBGYBq6b0.crl (hash: KJYcwKI+RNXrfsC21eYngouzi97eQdJ8QhjxFdD2V6c=) 2: FDE6938CE90C11EFB9D98326C4F9AE02.roa (hash: uOYxYsUyV5d201wkHKNC5KliU1I0MfAZOgIjo4393UM=) 3: FD63D5BEE90C11EFB9D98326C4F9AE02.roa (hash: VJiboECQcz4EPJ3s89go0nGoquID30lt86NixvuBLSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0A2E, serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD Validity Not Before: Mar 25 05:55:14 2026 GMT Not After : Apr 1 05:55:14 2026 GMT Subject: CN=69c378c2-6e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:be:43:0a:99:52:8c:f5:bf:90:f8:1a:b0:22: 15:84:76:be:e1:d2:9b:1c:4d:e5:ea:88:89:cb:ce: 2b:14:c2:42:65:02:b1:bf:00:c9:00:d0:81:98:99: 77:2d:0c:18:af:a2:0c:a8:26:08:b1:b6:4d:17:9a: fc:5c:fb:87:8f:ce:88:c7:52:06:1d:cd:05:c4:58: e4:44:8f:90:90:ee:e2:60:9d:93:34:15:98:62:ab: 88:9a:61:09:8f:f8:76:ad:97:fd:e4:3b:a6:17:3c: 0b:83:b2:ae:a8:dd:72:5a:cc:a5:31:c0:a8:3a:c7: e9:c0:98:b5:3b:57:44:11:ba:ac:8c:03:de:cc:31: 8e:33:72:cd:5b:ec:0a:9c:1e:95:cc:c9:d9:81:eb: 16:cc:df:e3:7b:35:53:a2:a0:a5:3d:18:44:da:62: 7a:9c:dd:67:b8:af:e2:59:99:f0:90:30:61:34:fd: f5:58:ca:3a:d6:fc:1a:ee:8b:f9:2c:b7:e4:a5:69: 46:a0:74:8a:6f:d6:85:69:e2:d6:56:65:04:aa:8d: 1b:54:19:d2:ec:a5:37:d2:9e:65:19:71:1a:f2:7e: 07:8e:3e:88:ad:92:37:36:65:3d:e9:a4:82:88:ec: a1:27:f4:4d:60:92:e6:ad:ad:4f:c9:e2:d4:30:29: cc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F3:07:43:92:B4:A5:06:0F:15:14:1C:A9:06:6D:06:D1:54:BF:40 X509v3 Authority Key Identifier: keyid:6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:bc:c7:6d:6c:c9:42:b5:68:61:9b:68:b4:70:69:07:8b:6f: 12:21:db:d1:6d:3d:77:3c:b2:8c:ee:7c:f2:bf:a8:06:37:42: c6:93:36:b8:b8:63:df:5b:63:db:fa:47:c0:62:15:ba:2f:0a: 73:5c:b0:7a:e1:d1:2b:a0:9f:34:fb:ba:07:90:c8:a8:e1:9e: 74:e8:96:a2:ff:17:ec:2a:16:c1:14:67:da:31:d8:42:da:e0: c9:7d:47:3c:d9:af:83:7f:dd:30:03:e5:d0:4f:7c:4f:48:c8: d5:07:5f:e7:fc:17:36:a6:9a:2c:d1:34:da:d6:f3:1e:c2:da: 48:cb:7f:5d:cc:25:ee:c1:0f:1b:7c:2d:8a:0f:0b:80:fb:2f: 82:3c:fc:82:1a:70:4b:4f:b0:d8:3e:03:e2:d5:47:43:25:5b: 58:3e:21:ff:c0:bf:00:c8:62:68:8d:19:59:c6:b0:3c:7c:4d: c4:f6:5e:26:3b:b4:11:ba:0e:2d:c6:3b:db:3e:91:e8:59:22: 94:2e:ea:a1:4f:42:22:34:0a:02:8f:a1:1e:3e:91:9a:d5:63: df:b5:1f:0e:7e:3c:3d:97:ee:ca:d1:8e:f2:68:dd:47:0a:e7: cc:ff:8b:a0:98:66:fb:01:c7:17:ca:1f:95:c5:bf:43:e6:0d: 09:a8:40:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBBMkUxMTAvBgNVBAUTKDZBM0VGNjcxODJEQkIwRjZDQ0YzQ0E0MTM3OEMwMTE5 ODA2QUU5QkQwHhcNMjYwMzI1MDU1NTE0WhcNMjYwNDAxMDU1NTE0WjAYMRYwFAYD VQQDEw02OWMzNzhjMi02ZTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA275DCplSjPW/kPgasCIVhHa+4dKbHE3l6oiJy84rFMJCZQKxvwDJANCBmJl3 LQwYr6IMqCYIsbZNF5r8XPuHj86Ix1IGHc0FxFjkRI+QkO7iYJ2TNBWYYquImmEJ j/h2rZf95DumFzwLg7KuqN1yWsylMcCoOsfpwJi1O1dEEbqsjAPezDGOM3LNW+wK nB6VzMnZgesWzN/jezVToqClPRhE2mJ6nN1nuK/iWZnwkDBhNP31WMo61vwa7ov5 LLfkpWlGoHSKb9aFaeLWVmUEqo0bVBnS7KU30p5lGXEa8n4Hjj6IrZI3NmU96aSC iOyhJ/RNYJLmra1PyeLUMCnM6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJvzB0OS tKUGDxUUHKkGbQbRVL9AMB8GA1UdIwQYMBaAFGo+9nGC27D2zPPKQTeMARmAaum9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEEyRS9DODM2QzdCMkU5 MEIxMUVGODIxODU4MjRDNEY5QUUwMi9hajcyY1lMYnNQYk04OHBCTjR3QkdZQnE2 YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FqNzJjWUxic1BiTTg4cEJONHdCR1lCcTZiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEEyRS9DODM2QzdCMkU5MEIxMUVGODIxODU4MjRDNEY5QUUwMi9hajcyY1lMYnNQ Yk04OHBCTjR3QkdZQnE2YjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHLzHbWzJQrVoYZtotHBpB4tvEiHb0W09dzyyjO588r+oBjdCxpM2uLhj31tj 2/pHwGIVui8Kc1yweuHRK6CfNPu6B5DIqOGedOiWov8X7CoWwRRn2jHYQtrgyX1H PNmvg3/dMAPl0E98T0jI1Qdf5/wXNqaaLNE02tbzHsLaSMt/Xcwl7sEPG3wtig8L gPsvgjz8ghpwS0+w2D4D4tVHQyVbWD4h/8C/AMhiaI0ZWcawPHxNxPZeJju0EboO LcY72z6R6FkilC7qoU9CIjQKAo+hHj6RmtVj37UfDn48PZfuytGO8mjdRwrnzP+L oJhm+wHHF8oflcW/Q+YNCahAZg== -----END CERTIFICATE-----Generated at Thu Mar 26 07:04:30 2026 by rpki-client