$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft File: AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft (raw, json) Hash identifier: tlQi5CQXgwm7QdKsYW/MNpPsi/JFafbYVz7OVnqamO8= Subject key identifier: 49:22:9E:29:26:07:6E:25:A4:CE:A8:30:22:70:00:AF:7F:E6:8F:42 Authority key identifier: 00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 Certificate issuer: /CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Certificate serial: 07E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft Manifest number: 07C0 Signing time: Thu 26 Mar 2026 21:19:09 +0000 Manifest this update: Thu 26 Mar 2026 21:19:08 +0000 Manifest next update: Thu 02 Apr 2026 21:19:08 +0000 Files and hashes: 1: AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl (hash: 7OuKDUyhs6q1LvcXRQrlWQXVnB7E6yIC1n82G/HfGJ8=) 2: 910A49AAB5CC11ECAE337E78C4F9AE02.roa (hash: AQsEjkfXYE8iJW37NiBShvRrsZAk/FjyC4xd+5A2hgs=) 3: EEE4C606B5D411ECA20B840AC4F9AE02.roa (hash: EIHT9tw+jJfDxYwJoN6Zou+1GSdOeWVDmrSdgdYC9zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 21:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2017 (0x7e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA1A6, serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7 Validity Not Before: Mar 26 21:19:08 2026 GMT Not After : Apr 2 21:19:08 2026 GMT Subject: CN=69c5a2cd-0054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5a:61:2a:66:9d:62:d0:9a:7d:78:ab:88:1f: 7c:19:e0:f5:16:f5:49:ae:95:a2:1d:e3:73:05:0c: 90:c8:72:9a:48:12:03:19:88:1e:3a:5a:af:2f:2d: f9:57:ed:f3:40:d3:cd:c3:4a:f2:2b:9f:cc:f4:8f: 5e:7c:6f:59:fc:5d:c9:8c:7f:9f:43:13:a5:09:07: 38:6d:d0:80:08:a3:65:87:2a:18:10:b5:38:b2:f3: 82:e2:cb:89:da:99:ff:fa:85:c8:85:b0:f9:83:19: 80:50:90:7d:0b:eb:70:4a:66:cb:f9:26:24:19:15: b4:34:1e:e6:6d:3d:91:d9:f5:c9:cc:a0:2c:f3:3f: 5d:a8:41:88:c2:7f:d4:95:a6:b2:6c:dd:46:4a:8a: 61:11:1d:53:a2:d8:0a:4d:7e:bb:72:89:cb:d0:8f: 84:df:33:45:02:73:9e:60:3d:90:7a:7e:f6:74:16: f4:41:34:9f:12:eb:d3:e3:2b:6f:f3:dc:6f:cf:30: 90:bf:6b:55:aa:90:d8:55:4b:dc:28:09:90:96:9d: 26:bc:01:2e:e8:ff:53:02:e8:25:7f:66:a6:59:04: 36:f9:08:55:5c:70:07:e7:ba:0f:49:3e:de:ce:db: 22:d0:f5:e0:06:74:c8:f6:d1:42:77:9e:eb:f8:5c: 1e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:22:9E:29:26:07:6E:25:A4:CE:A8:30:22:70:00:AF:7F:E6:8F:42 X509v3 Authority Key Identifier: keyid:00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:c4:dd:d8:6f:fd:f1:cc:67:84:9c:cb:2f:7c:77:1f:42:05: 22:17:ec:e4:7d:43:18:ae:23:65:ad:09:91:3d:a8:97:c4:b8: 6f:47:5a:44:36:4b:0e:dc:6c:da:3d:67:15:c9:e7:ed:63:64: 69:5f:6c:72:5c:e8:db:fb:ab:74:25:e9:12:6e:1f:3c:61:bd: f9:e8:b6:7e:e4:0e:c0:9e:fa:31:26:45:6d:5d:9a:fd:30:56: 61:ba:b5:5b:0a:e1:1c:4b:a1:2b:2a:da:0d:23:a7:f8:8e:9f: 9c:a4:bb:46:a1:72:2f:3b:7b:c2:a2:18:f3:8f:ab:f9:e6:ba: e8:fe:01:99:93:6c:65:a6:05:3c:52:0a:42:36:d1:f9:36:a9: 9c:20:2f:18:20:3c:ef:a5:98:e3:8b:9d:15:32:c2:e9:a2:4c: d8:1e:63:d9:b4:98:25:99:cc:43:de:c0:8c:12:41:71:81:8e: f1:59:ca:b1:07:c9:db:ca:48:e5:f0:2c:09:69:73:f0:98:a0: fb:f7:08:a4:b7:5f:5f:34:ca:77:62:19:a2:7b:bd:c2:3f:c9: ba:66:4b:51:47:da:a4:0b:51:f5:4e:ff:e7:7d:8d:d9:1d:33: fe:ed:5c:b8:da:c5:0d:ec:6d:87:58:31:f5:b4:95:9a:bb:d2: 02:36:9b:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ExQTYxMTAvBgNVBAUTKDAwMDI0MTQ5MEUzRjIwOThGNzlENUM5MzAzN0VCRkYy Qjk1NkNGRDcwHhcNMjYwMzI2MjExOTA4WhcNMjYwNDAyMjExOTA4WjAYMRYwFAYD VQQDEw02OWM1YTJjZC0wMDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlphKmadYtCafXiriB98GeD1FvVJrpWiHeNzBQyQyHKaSBIDGYgeOlqvLy35 V+3zQNPNw0ryK5/M9I9efG9Z/F3JjH+fQxOlCQc4bdCACKNlhyoYELU4svOC4suJ 2pn/+oXIhbD5gxmAUJB9C+twSmbL+SYkGRW0NB7mbT2R2fXJzKAs8z9dqEGIwn/U laaybN1GSophER1TotgKTX67conL0I+E3zNFAnOeYD2Qen72dBb0QTSfEuvT4ytv 89xvzzCQv2tVqpDYVUvcKAmQlp0mvAEu6P9TAuglf2amWQQ2+QhVXHAH57oPST7e ztsi0PXgBnTI9tFCd57r+FweswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEkinikm B24lpM6oMCJwAK9/5o9CMB8GA1UdIwQYMBaAFAACQUkOPyCY951ckwN+v/K5Vs/X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTFBNi8zOEQ5M0UxRTNE MzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lKajNuVnlUQTM2XzhybFd6 OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FBSkJTUTRfSUpqM25WeVRBMzZfOHJsV3o5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTFBNi8zOEQ5M0UxRTNEMzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lK ajNuVnlUQTM2XzhybFd6OWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANMTd2G/98cxnhJzLL3x3H0IFIhfs5H1DGK4jZa0JkT2ol8S4b0daRDZLDtxs 2j1nFcnn7WNkaV9sclzo2/urdCXpEm4fPGG9+ei2fuQOwJ76MSZFbV2a/TBWYbq1 WwrhHEuhKyraDSOn+I6fnKS7RqFyLzt7wqIY84+r+ea66P4BmZNsZaYFPFIKQjbR +TapnCAvGCA876WY44udFTLC6aJM2B5j2bSYJZnMQ97AjBJBcYGO8VnKsQfJ28pI 5fAsCWlz8Jig+/cIpLdfXzTKd2IZonu9wj/JumZLUUfapAtR9U7/532N2R0z/u1c uNrFDexth1gx9bSVmrvSAjab7g== -----END CERTIFICATE-----Generated at Fri Mar 27 04:49:56 2026 by rpki-client