$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft File: aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft (raw, json) Hash identifier: XRztZLprpsFtCQf+V+RHhLsHSpuLfxTefQZZI42CU4w= Subject key identifier: F9:CA:36:CD:84:93:67:CA:D1:45:32:55:A8:FC:5D:E8:AF:FB:29:A7 Authority key identifier: 68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52 Certificate issuer: /CN=A91DCAE8/serialNumber=684597E998A3A0C6987361B7C572043A816C1C52 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft Manifest number: 4D Signing time: Tue 24 Mar 2026 14:45:17 +0000 Manifest this update: Tue 24 Mar 2026 14:45:16 +0000 Manifest next update: Tue 31 Mar 2026 14:45:16 +0000 Files and hashes: 1: aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl (hash: GD8PbTttG3Yzjk7z8HYEH26eWDc7DjWc9hIBV1y2mhY=) 2: 12E8FD5CBECC11F098CFE015C4F9AE02.roa (hash: 2fuL5HR83y1lHVu02OBTTtqwAHQ9hwGuikZsXGexJqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8, serialNumber=684597E998A3A0C6987361B7C572043A816C1C52 Validity Not Before: Mar 24 14:45:16 2026 GMT Not After : Mar 31 14:45:16 2026 GMT Subject: CN=69c2a37d-5470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:0c:b1:98:c6:96:1c:23:02:ae:b2:bf:a4: 37:08:6b:1f:20:c7:88:5e:a8:2a:4a:f7:4f:7a:fe: 90:8c:1a:79:ad:9a:10:cf:78:90:1b:07:48:ad:c5: 3a:cd:a1:63:58:2a:f6:69:57:d5:5b:55:05:5a:bb: 43:90:ed:ef:76:b5:5f:a9:78:f0:3f:43:a1:a9:f0: b9:9a:01:86:f4:d5:ed:41:b6:53:27:f5:ac:3c:b0: 99:3c:ed:95:28:b3:54:04:5c:4b:98:91:0e:ef:b2: 75:12:8b:05:bf:a7:8a:a5:cb:30:ac:cc:7b:2d:c7: 00:a0:f1:0c:46:9c:cc:ac:8b:41:93:4f:fa:9c:f3: 41:d5:7e:81:c4:4b:20:0e:fd:5d:34:ee:b3:3c:98: 33:28:a8:f2:5d:35:01:43:1e:cc:f3:a1:e4:31:02: 08:7c:cf:57:8a:14:08:b5:c6:86:93:b1:ab:16:ca: b5:54:ff:b5:c0:dd:f3:29:b9:6c:47:4e:3b:ba:d2: f4:e2:e5:31:18:5d:ac:4c:40:f5:01:55:0f:51:d6: 02:19:53:9b:f9:6f:f8:d1:0f:5a:36:e1:02:d2:0f: 72:df:08:37:05:3c:1a:ea:1a:4e:c9:31:eb:2f:d6: 87:f9:74:f2:a8:91:a4:44:e8:9f:05:f9:01:c2:87: ed:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CA:36:CD:84:93:67:CA:D1:45:32:55:A8:FC:5D:E8:AF:FB:29:A7 X509v3 Authority Key Identifier: keyid:68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:ed:be:7f:f5:a4:fb:c8:b6:31:ea:30:17:eb:8e:78:85:c6: 5b:ac:3f:4e:8a:95:9b:87:b6:71:35:0c:74:39:80:de:be:5d: b2:93:82:d5:a8:3e:ae:1a:59:e3:71:25:8f:d9:b1:96:35:24: f9:c2:ce:24:04:a3:33:da:9a:47:20:c3:2a:3a:90:ac:af:47: 32:2a:42:9b:22:1c:5d:28:2b:a7:c4:37:2a:9a:04:df:56:92: 65:8d:c4:76:97:57:55:6f:83:ce:85:2e:f2:23:a9:10:ad:f1: 66:9d:ea:ae:95:52:7f:91:11:b5:05:97:67:70:e0:64:4c:71: a1:c9:7a:d3:21:d9:91:9e:b5:fc:30:fb:25:09:6c:a7:8c:d5: 90:eb:54:6b:f3:39:8d:c2:15:77:7a:82:bb:b8:4d:cd:21:b3: b6:19:b1:b5:ae:e6:70:7f:63:55:55:18:bb:9a:01:7c:6b:d9: b6:55:49:34:b2:73:f2:2e:52:72:d8:94:f4:27:51:4a:29:5a: 40:96:8f:78:31:33:6c:8c:63:0c:7a:dd:e2:be:a4:53:1c:e2: 1d:db:da:94:ed:61:a8:5b:75:4d:28:68:5d:a8:0d:41:3c:e0: 5f:86:b2:67:d5:0c:c1:29:be:15:50:86:d5:22:78:64:30:88: 5a:2c:30:16 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Q0FFODExMC8GA1UEBRMoNjg0NTk3RTk5OEEzQTBDNjk4NzM2MUI3QzU3MjA0M0E4 MTZDMUM1MjAeFw0yNjAzMjQxNDQ1MTZaFw0yNjAzMzExNDQ1MTZaMBgxFjAUBgNV BAMTDTY5YzJhMzdkLTU0NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7MwyxmMaWHCMCrrK/pDcIax8gx4heqCpK9096/pCMGnmtmhDPeJAbB0itxTrN oWNYKvZpV9VbVQVau0OQ7e92tV+pePA/Q6Gp8LmaAYb01e1BtlMn9aw8sJk87ZUo s1QEXEuYkQ7vsnUSiwW/p4qlyzCszHstxwCg8QxGnMysi0GTT/qc80HVfoHESyAO /V007rM8mDMoqPJdNQFDHszzoeQxAgh8z1eKFAi1xoaTsasWyrVU/7XA3fMpuWxH Tju60vTi5TEYXaxMQPUBVQ9R1gIZU5v5b/jRD1o24QLSD3LfCDcFPBrqGk7JMesv 1of5dPKokaRE6J8F+QHCh+0zAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+co2zYST Z8rRRTJVqPxd6K/7KacwHwYDVR0jBBgwFoAUaEWX6ZijoMaYc2G3xXIEOoFsHFIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDQUU4LzNGN0UyNTc0QkUw NzExRjA5RkYwNDQ2OUM0RjlBRTAyL2FFV1g2Wmlqb01hWWMyRzN4WElFT29Gc0hG SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYUVXWDZaaWpvTWFZYzJHM3hYSUVPb0ZzSEZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD QUU4LzNGN0UyNTc0QkUwNzExRjA5RkYwNDQ2OUM0RjlBRTAyL2FFV1g2Wmlqb01h WWMyRzN4WElFT29Gc0hGSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBH7b5/9aT7yLYx6jAX6454hcZbrD9OipWbh7ZxNQx0OYDevl2yk4LVqD6uGlnj cSWP2bGWNST5ws4kBKMz2ppHIMMqOpCsr0cyKkKbIhxdKCunxDcqmgTfVpJljcR2 l1dVb4POhS7yI6kQrfFmnequlVJ/kRG1BZdncOBkTHGhyXrTIdmRnrX8MPslCWyn jNWQ61Rr8zmNwhV3eoK7uE3NIbO2GbG1ruZwf2NVVRi7mgF8a9m2VUk0snPyLlJy 2JT0J1FKKVpAlo94MTNsjGMMet3ivqRTHOId29qU7WGoW3VNKGhdqA1BPOBfhrJn 1QzBKb4VUIbVInhkMIhaLDAW -----END CERTIFICATE-----Generated at Thu Mar 26 06:12:43 2026 by rpki-client