$ rpki-client -vvf rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft File: aMK1iNFoWlh0LYouGIhl2zEQPPc.mft (raw, json) Hash identifier: IeD5Vnd499Q9sN8c3Hd5radWfP3P6/ndWEIrNfchoFw= Subject key identifier: A2:C1:BC:C0:E4:C1:28:BC:82:1E:A8:69:BE:CB:22:53:5A:8D:5A:05 Authority key identifier: 68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7 Certificate issuer: /CN=A91AADAF/serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft Manifest number: 0112 Signing time: Wed 25 Mar 2026 05:11:00 +0000 Manifest this update: Wed 25 Mar 2026 05:11:00 +0000 Manifest next update: Wed 01 Apr 2026 05:11:00 +0000 Files and hashes: 1: aMK1iNFoWlh0LYouGIhl2zEQPPc.crl (hash: SUgme1q33QA9H868npJwrKMVcWyg1y99eWH67Cr0IRI=) 2: 01BA52A28CF411EFAE6F7F10C4F9AE02.roa (hash: EUtWxQAE1BFRn9M5BHJ1aea0TybMQyltaStUs+wgA48=) 3: B2D0D768766011F08F4AF05AC4F9AE02.roa (hash: AFwVZfcUHzwe9j0UrSqlyKnxLzWcBfDiYKBuQr8Nbjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AADAF, serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7 Validity Not Before: Mar 25 05:11:00 2026 GMT Not After : Apr 1 05:11:00 2026 GMT Subject: CN=69c36e64-ab10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:50:55:3b:67:88:28:73:17:1e:f7:d8:df:82: dd:2d:51:d8:4f:66:80:f2:79:0b:09:09:34:36:e7: b9:bb:de:bb:8a:f7:9d:8d:26:f8:17:0d:f9:82:15: 7b:e0:e1:dd:c2:60:2a:47:9e:c9:bf:ed:b3:74:c9: 52:c0:a0:79:69:74:60:7c:2f:37:33:95:b3:1e:89: c4:67:fb:14:46:ed:cc:42:1d:51:60:d9:a1:55:7f: 09:55:c9:53:86:e9:55:90:05:a2:c9:aa:ad:93:67: 7c:7c:45:45:7d:2f:f2:ca:54:72:c2:df:b7:a3:7a: 98:07:d5:f4:cb:cf:5f:01:1c:75:12:f8:5d:74:67: 6f:85:2f:6c:08:c0:45:0a:d0:f5:86:95:10:aa:78: cc:66:64:61:4f:de:ea:2a:ae:42:15:2e:7b:f4:ab: 2c:0f:12:01:b1:fb:b3:3b:40:41:1b:ce:d9:6b:b6: e9:77:96:64:23:ff:f7:c4:d1:ee:b1:3f:fd:70:ef: f0:3a:fc:7b:ce:cf:3b:d3:bf:28:da:1c:14:bf:75: 77:29:32:00:ee:80:48:5d:2c:e6:06:98:be:a6:07: a7:76:a6:90:cd:2c:a3:d0:c9:5b:50:75:ee:5b:1d: 0f:58:b8:1a:6f:53:af:9a:48:67:f4:dc:72:40:0d: 96:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C1:BC:C0:E4:C1:28:BC:82:1E:A8:69:BE:CB:22:53:5A:8D:5A:05 X509v3 Authority Key Identifier: keyid:68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:c0:ff:a8:d5:a7:a2:00:85:e6:7d:0b:e8:31:5f:f1:29:6b: 9d:35:8e:4b:b1:a4:be:0c:9b:25:23:22:cd:cb:0c:17:07:d1: 3b:94:43:61:bf:fe:26:6f:2d:83:98:27:da:0b:f8:67:c0:09: d0:25:e0:4b:32:04:f4:39:14:6b:35:28:cd:0d:fe:e8:0a:52: 9b:7a:ef:8d:60:ae:0f:b5:03:b5:f2:3f:3c:7f:74:cf:b4:d6: 46:35:30:c2:ef:26:a2:b0:aa:93:77:dc:44:cc:40:a4:23:08: 7b:6b:b4:16:dc:7a:8d:38:2a:c0:e1:a6:4c:26:cb:31:83:8b: 54:b3:0b:b9:3b:1b:f8:d1:b6:dd:be:05:ae:44:02:2e:0b:cf: ce:07:05:51:69:fd:2d:7f:ee:f7:c1:aa:25:57:16:38:cb:99: 3f:6b:0f:46:45:43:18:4c:84:09:74:34:0b:03:45:a9:1b:3b: c4:02:18:51:2c:f5:da:1a:1c:ec:fd:e4:b3:91:30:89:19:5f: d5:e5:3f:2c:c0:b6:b5:48:5f:06:17:05:d9:a2:b6:4f:8c:ed: 8f:99:c6:11:f5:df:b7:41:23:33:bc:e7:32:43:6e:a9:59:7a: f1:7e:dd:fa:2e:fe:14:76:35:64:b0:1b:da:46:d6:c2:b3:a5: 9b:0a:28:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFEQUYxMTAvBgNVBAUTKDY4QzJCNTg4RDE2ODVBNTg3NDJEOEEyRTE4ODg2NURC MzExMDNDRjcwHhcNMjYwMzI1MDUxMTAwWhcNMjYwNDAxMDUxMTAwWjAYMRYwFAYD VQQDEw02OWMzNmU2NC1hYjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAklBVO2eIKHMXHvfY34LdLVHYT2aA8nkLCQk0Nue5u967ivedjSb4Fw35ghV7 4OHdwmAqR57Jv+2zdMlSwKB5aXRgfC83M5WzHonEZ/sURu3MQh1RYNmhVX8JVclT hulVkAWiyaqtk2d8fEVFfS/yylRywt+3o3qYB9X0y89fARx1EvhddGdvhS9sCMBF CtD1hpUQqnjMZmRhT97qKq5CFS579KssDxIBsfuzO0BBG87Za7bpd5ZkI//3xNHu sT/9cO/wOvx7zs87078o2hwUv3V3KTIA7oBIXSzmBpi+pgendqaQzSyj0MlbUHXu Wx0PWLgab1Ovmkhn9NxyQA2W7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKLBvMDk wSi8gh6oab7LIlNajVoFMB8GA1UdIwQYMBaAFGjCtYjRaFpYdC2KLhiIZdsxEDz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQURBRi84NzE1OUM5NjhD RjMxMUVGOUYzRUE0MEZDNEY5QUUwMi9hTUsxaU5Gb1dsaDBMWW91R0lobDJ6RVFQ UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FNSzFpTkZvV2xoMExZb3VHSWhsMnpFUVBQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QURBRi84NzE1OUM5NjhDRjMxMUVGOUYzRUE0MEZDNEY5QUUwMi9hTUsxaU5Gb1ds aDBMWW91R0lobDJ6RVFQUGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAw8D/qNWnogCF5n0L6DFf8SlrnTWOS7GkvgybJSMizcsMFwfRO5RDYb/+Jm8t g5gn2gv4Z8AJ0CXgSzIE9DkUazUozQ3+6ApSm3rvjWCuD7UDtfI/PH90z7TWRjUw wu8morCqk3fcRMxApCMIe2u0Ftx6jTgqwOGmTCbLMYOLVLMLuTsb+NG23b4FrkQC LgvPzgcFUWn9LX/u98GqJVcWOMuZP2sPRkVDGEyECXQ0CwNFqRs7xAIYUSz12hoc 7P3ks5EwiRlf1eU/LMC2tUhfBhcF2aK2T4ztj5nGEfXft0EjM7znMkNuqVl68X7d +i7+FHY1ZLAb2kbWwrOlmwoomw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:33:07 2026 by rpki-client