$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft File: Ae4IndSGeyyydlgqqXsxj1Cepu4.mft (raw, json) Hash identifier: pBBp6lbVMORuJQReGMFu0yYU43kl4xFZEgWWNEdJvPk= Subject key identifier: BF:8D:5C:D0:AC:48:65:91:4C:46:0B:D2:E0:DF:F0:4C:B1:DA:C6:CB Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Certificate serial: 0C39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft Manifest number: 0BDD Signing time: Tue 24 Mar 2026 18:49:07 +0000 Manifest this update: Tue 24 Mar 2026 18:49:07 +0000 Manifest next update: Tue 31 Mar 2026 18:49:07 +0000 Files and hashes: 1: Ae4IndSGeyyydlgqqXsxj1Cepu4.crl (hash: kccMPAVXCnJ1uXT/5TNRaOfQ8xZND2ey5uhrJaGuRMo=) 2: E551CBD2BDCF11F0B085BE82C4F9AE02.roa (hash: IIBSEhSGWvOtD18zZJ+qeiGEnoieLx/pQzi9soqlUGk=) 3: F6722FA6822411F088762570C4F9AE02.roa (hash: FYa4vN/cUGv4uAuMbz/mOKfD6eVvy62iEPGrtmeoWO0=) 4: 3A883F284B3E11F0817E3C31C4F9AE02.roa (hash: iHncQlzb704Umur42ElwW4bGPSOVnnYc0muryAxJjrc=) 5: 80C33BD4227811F190F6266DA4833773.roa (hash: 3v+B4tCUwpOF2mkM4uEJ/dje8PYL5k+BkV2Dze67PRM=) 6: 0CCA3D6CBAC811F0A07AB13AC4F9AE02.roa (hash: Ny314IGo19wl8MjOcZI74Zy4zGs2+uD6dX7RODZKGgw=) 7: 701DFED0219D11F1B09B7EBF113D8C67.roa (hash: r4oSPpLOC+zTSQdO29VIuJjmSp9GOYHxsJRsRgYar5Y=) 8: F5E1478E822411F088762570C4F9AE02.roa (hash: XOOFVhR+X9ay6WkgnJIVnO7Un1zvha+xlStC4yqXXU4=) 9: BB46A670849811F08EA6E444C4F9AE02.roa (hash: gZhASpUdS2kKZkIDGyUcYVa0JbfP6X8oZEBvcGxjMeM=) 10: 7147D9D69D9811F09B4CDC3EC4F9AE02.roa (hash: xUDY8fa7BGcrzHTy/hrdZE1BbzUbC3rseR2XxjoP1gs=) 11: 541716E2B95411F0B8E2D868C4F9AE02.roa (hash: 1nUtY951jqRrI+dTCVWXi0cSf76Zz6olI1+fh+4G7wY=) 12: 09534036847011F0A17FCE63C4F9AE02.roa (hash: +SKfbNfmSVnwo+JjcAhmtvWvJTXw2W/IvgQmMr371Zc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3129 (0xc39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Validity Not Before: Mar 24 18:49:07 2026 GMT Not After : Mar 31 18:49:07 2026 GMT Subject: CN=69c2dca3-0f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:71:66:eb:86:bc:b9:86:ea:b4:18:84:65:74: 6d:13:ac:b5:a8:37:7e:ec:25:cf:e8:cf:9c:d5:75: 7c:25:06:6b:5c:ba:e4:fd:23:f5:a9:01:70:cc:70: 54:73:8a:16:74:b5:d0:9b:11:e5:40:de:ac:30:f9: ae:ed:c7:1d:0b:cd:03:52:a7:95:9f:96:f6:db:0f: da:fe:74:39:a6:b8:c4:ef:f4:5c:75:69:4b:09:21: c2:9f:51:51:5e:8b:bd:b5:e7:8e:dd:f3:ab:f2:6e: 22:4b:e0:f6:5d:3f:22:59:39:5f:64:0f:d7:71:98: f4:11:ac:c1:a0:e7:fa:21:58:a0:ac:36:e8:c6:5b: 67:8e:90:48:f7:30:11:7b:46:80:ea:73:54:38:3a: 60:56:cd:b4:8f:f8:df:31:85:51:d8:bf:9c:2b:d4: ce:2b:db:c8:48:4c:93:1b:ee:21:e1:00:e7:73:92: 21:d8:d7:9e:87:93:09:17:6d:7c:97:36:f7:f8:4b: 68:bb:75:9d:c6:99:62:c0:90:ee:31:29:8f:6d:3d: 92:2f:4d:ae:93:c5:85:be:db:9c:e4:d9:4a:2c:51: b6:8e:09:1b:8b:2b:03:ee:9d:67:4c:74:be:60:07: f7:e2:50:55:23:0c:ba:c1:97:ae:40:98:34:2a:6f: 0f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8D:5C:D0:AC:48:65:91:4C:46:0B:D2:E0:DF:F0:4C:B1:DA:C6:CB X509v3 Authority Key Identifier: keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:2e:ee:b9:93:5c:ea:c6:b2:28:01:4b:98:ce:90:19:2c:34: 4e:80:6d:65:f6:4a:25:64:a2:f1:72:a6:35:40:5a:be:f9:67: 87:68:df:a1:86:48:01:21:5f:c1:c1:35:9c:9c:57:b2:45:5e: 60:52:6e:19:86:98:83:96:e2:7f:b9:ca:f9:8d:92:fe:2f:41: 39:25:88:a8:1a:9e:e5:45:81:47:18:30:2f:14:cc:8c:9a:be: 7f:74:4d:87:c9:48:bc:a7:be:00:e7:dd:90:28:43:c4:85:fd: d8:ba:bb:38:60:52:26:c2:e3:68:39:00:ad:22:91:09:71:cc: 6c:4d:9e:df:87:b3:cd:c5:81:08:f0:b4:e4:e4:92:ce:a7:fc: 70:81:53:52:53:3f:1d:ce:5e:a4:41:2d:23:3d:12:a7:e2:48: cc:44:cf:aa:0b:eb:63:a7:c1:d6:bd:b1:df:08:81:13:eb:87: c2:39:7e:bd:30:85:20:46:6e:d9:39:e4:40:cf:6f:af:d9:6d: 45:43:a4:c1:ae:00:c8:84:f8:d1:82:a2:08:a7:e8:78:78:aa: 26:58:eb:a6:36:8d:48:9b:5d:4e:90:dd:8d:55:b9:7d:90:ed: ee:2b:c8:a3:5e:4f:f7:05:97:39:00:b9:db:03:33:55:76:d9: 84:b0:bb:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNEMzAxMTAvBgNVBAUTKDAxRUUwODlERDQ4NjdCMkNCMjc2NTgyQUE5N0IzMThG NTA5RUE2RUUwHhcNMjYwMzI0MTg0OTA3WhcNMjYwMzMxMTg0OTA3WjAYMRYwFAYD VQQDEw02OWMyZGNhMy0wZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33Fm64a8uYbqtBiEZXRtE6y1qDd+7CXP6M+c1XV8JQZrXLrk/SP1qQFwzHBU c4oWdLXQmxHlQN6sMPmu7ccdC80DUqeVn5b22w/a/nQ5prjE7/RcdWlLCSHCn1FR Xou9teeO3fOr8m4iS+D2XT8iWTlfZA/XcZj0EazBoOf6IVigrDboxltnjpBI9zAR e0aA6nNUODpgVs20j/jfMYVR2L+cK9TOK9vISEyTG+4h4QDnc5Ih2Neeh5MJF218 lzb3+Etou3WdxpliwJDuMSmPbT2SL02uk8WFvtuc5NlKLFG2jgkbiysD7p1nTHS+ YAf34lBVIwy6wZeuQJg0Km8PIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL+NXNCs SGWRTEYL0uDf8Eyx2sbLMB8GA1UdIwQYMBaAFAHuCJ3UhnsssnZYKql7MY9Qnqbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0QzMC9FM0RGNDY5QzQx NjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5eXlkbGdxcVhzeGoxQ2Vw dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FlNEluZFNHZXl5eWRsZ3FxWHN4ajFDZXB1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0QzMC9FM0RGNDY5QzQxNjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5 eXlkbGdxcVhzeGoxQ2VwdTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAry7uuZNc6sayKAFLmM6QGSw0ToBtZfZKJWSi8XKmNUBavvlnh2jfoYZIASFf wcE1nJxXskVeYFJuGYaYg5bif7nK+Y2S/i9BOSWIqBqe5UWBRxgwLxTMjJq+f3RN h8lIvKe+AOfdkChDxIX92Lq7OGBSJsLjaDkArSKRCXHMbE2e34ezzcWBCPC05OSS zqf8cIFTUlM/Hc5epEEtIz0Sp+JIzETPqgvrY6fB1r2x3wiBE+uHwjl+vTCFIEZu 2TnkQM9vr9ltRUOkwa4AyIT40YKiCKfoeHiqJljrpjaNSJtdTpDdjVW5fZDt7ivI o15P9wWXOQC52wMzVXbZhLC7HA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:50:43 2026 by rpki-client