$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft File: Aqo6dsRZSXsbRfJukESsxvLoBE8.mft (raw, json) Hash identifier: dsMteMmfuhz6nV6O4NltCzeMijiLnXdHK9wqT3AN0TY= Subject key identifier: 5D:45:EB:1C:9E:DA:34:9D:72:5E:0A:65:8B:58:1A:F6:C5:A8:30:48 Authority key identifier: 02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F Certificate issuer: /CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Certificate serial: 0417 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft Manifest number: 0400 Signing time: Fri 27 Mar 2026 00:16:23 +0000 Manifest this update: Fri 27 Mar 2026 00:16:23 +0000 Manifest next update: Fri 03 Apr 2026 00:16:23 +0000 Files and hashes: 1: Aqo6dsRZSXsbRfJukESsxvLoBE8.crl (hash: JKylSMx0fCeokH/PvO49x6fD+dzk2fwnZs6+Z45N9DE=) 2: 5FFA5548B5A311EEA95C5732C4F9AE02.roa (hash: 2Yw2VLmkAKkVffOJoK4BP4cvhiQPwiNPf/uzPwBmVbQ=) 3: 87F2D334F2D811EC8F663D52C4F9AE02.roa (hash: 5k3DQfhGz/SABytY61becc5MlxRt/8ivV4iotQ7Zt+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 00:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1047 (0x417) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA5BA, serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Validity Not Before: Mar 27 00:16:23 2026 GMT Not After : Apr 3 00:16:23 2026 GMT Subject: CN=69c5cc57-14dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:03:fd:91:44:ed:d8:b8:f8:15:3d:12:ce:a8: 03:f7:a2:0a:f7:e8:cc:89:1a:37:9f:e0:86:27:72: f1:47:07:0b:c4:5e:3c:81:78:a3:7c:d7:47:4e:ae: f4:a5:2b:42:b4:3f:3b:6c:1a:da:72:f9:03:4f:68: b0:21:ac:99:27:ef:7b:ce:04:8a:2f:a0:4a:ce:9c: d9:e7:88:9b:df:1a:0a:32:e5:3a:16:1e:58:08:e5: 78:0e:c5:3e:db:20:c4:7e:14:50:1d:34:cb:7a:78: 6d:3d:e3:dd:81:b6:1b:66:17:63:ca:af:ee:4c:a9: d0:45:52:16:5e:67:af:6a:58:ce:7f:98:b7:df:3e: 7e:9a:6d:13:d9:64:2b:7c:44:12:ed:27:26:fc:03: e4:51:1b:32:75:ad:b8:72:16:95:4b:6d:f7:c5:d5: e9:f5:52:41:76:69:61:a8:a4:94:1c:1b:98:32:1c: 97:30:6e:3c:6a:2d:61:1c:22:36:17:8e:52:66:7a: 1e:d5:2b:67:68:50:1f:c1:9b:51:52:a5:5b:74:5f: 9b:d2:d9:db:40:cd:59:80:b7:b5:aa:48:4a:e4:6c: c0:85:85:20:45:cc:06:44:e4:e3:97:15:00:d8:cb: 12:96:89:54:0d:9b:d5:6d:c3:70:51:10:c9:ac:36: 51:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:45:EB:1C:9E:DA:34:9D:72:5E:0A:65:8B:58:1A:F6:C5:A8:30:48 X509v3 Authority Key Identifier: keyid:02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:21:fb:19:5e:26:72:3d:dc:40:dd:8d:dc:ae:0a:ff:e2:45: 85:c1:f0:3a:04:9f:1e:86:be:3a:b2:b6:a0:b3:42:a5:11:54: 8f:69:d4:59:24:bc:0d:ba:27:bd:9d:20:51:34:0e:bc:79:e2: 3f:1c:10:10:1c:20:d7:ee:d0:83:21:26:2e:ec:a2:e0:34:2a: 10:51:4e:d3:e0:05:78:34:79:a0:58:ff:1f:fc:22:67:87:4a: ae:5b:d0:5a:7f:49:8a:ef:cc:8d:c8:7e:08:7f:80:cc:be:49: 7b:c2:e9:2e:40:38:24:48:1c:8e:96:99:64:e1:b8:49:27:87: 74:71:cd:9d:de:59:90:2c:43:e8:40:c6:b6:34:c1:fe:e9:fd: 52:8c:76:49:6f:19:61:a6:2e:04:4f:2b:a8:17:49:3f:24:48: ae:46:7d:bf:60:2f:de:48:c4:fa:b1:51:2e:5e:14:e3:dc:1c: fd:9b:35:63:b8:dc:ed:79:31:c6:e9:83:66:03:fe:96:45:33: 27:78:23:41:78:7f:a4:cb:f2:fc:ca:50:a3:ab:99:40:62:ae: f5:22:de:ed:93:5f:e3:a5:f8:df:27:27:75:9a:6c:f1:6c:5c: 6a:88:e2:8e:93:95:4d:b2:ad:56:25:7d:49:96:3c:29:ae:59: ba:71:48:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1QkExMTAvBgNVBAUTKDAyQUEzQTc2QzQ1OTQ5N0IxQjQ1RjI2RTkwNDRBQ0M2 RjJFODA0NEYwHhcNMjYwMzI3MDAxNjIzWhcNMjYwNDAzMDAxNjIzWjAYMRYwFAYD VQQDEw02OWM1Y2M1Ny0xNGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAP9kUTt2Lj4FT0SzqgD96IK9+jMiRo3n+CGJ3LxRwcLxF48gXijfNdHTq70 pStCtD87bBracvkDT2iwIayZJ+97zgSKL6BKzpzZ54ib3xoKMuU6Fh5YCOV4DsU+ 2yDEfhRQHTTLenhtPePdgbYbZhdjyq/uTKnQRVIWXmevaljOf5i33z5+mm0T2WQr fEQS7Scm/APkURsyda24chaVS233xdXp9VJBdmlhqKSUHBuYMhyXMG48ai1hHCI2 F45SZnoe1StnaFAfwZtRUqVbdF+b0tnbQM1ZgLe1qkhK5GzAhYUgRcwGROTjlxUA 2MsSlolUDZvVbcNwURDJrDZRZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF1F6xye 2jSdcl4KZYtYGvbFqDBIMB8GA1UdIwQYMBaAFAKqOnbEWUl7G0XybpBErMby6ARP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTVCQS80MzI2Q0JDMEI3 Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNYc2JSZkp1a0VTc3h2TG9C RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxbzZkc1JaU1hzYlJmSnVrRVNzeHZMb0JFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTVCQS80MzI2Q0JDMEI3Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNY c2JSZkp1a0VTc3h2TG9CRTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXiH7GV4mcj3cQN2N3K4K/+JFhcHwOgSfHoa+OrK2oLNCpRFUj2nUWSS8Dbon vZ0gUTQOvHniPxwQEBwg1+7QgyEmLuyi4DQqEFFO0+AFeDR5oFj/H/wiZ4dKrlvQ Wn9Jiu/Mjch+CH+AzL5Je8LpLkA4JEgcjpaZZOG4SSeHdHHNnd5ZkCxD6EDGtjTB /un9Uox2SW8ZYaYuBE8rqBdJPyRIrkZ9v2Av3kjE+rFRLl4U49wc/Zs1Y7jc7Xkx xumDZgP+lkUzJ3gjQXh/pMvy/MpQo6uZQGKu9SLe7ZNf46X43ycndZps8Wxcaoji jpOVTbKtViV9SZY8Ka5ZunFInA== -----END CERTIFICATE-----Generated at Sat Mar 28 10:27:59 2026 by rpki-client