$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json) Hash identifier: x3sCb6vAvd4u4OdM741wYBARKw81UoaeBfaenei+f50= Subject key identifier: 74:F3:72:B6:EC:7D:E4:98:91:17:31:76:4F:7C:A2:2B:F7:D6:63:AD Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Certificate serial: 0291 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft Manifest number: 0271 Signing time: Wed 25 Mar 2026 01:36:53 +0000 Manifest this update: Wed 25 Mar 2026 01:36:52 +0000 Manifest next update: Wed 01 Apr 2026 01:36:52 +0000 Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: zPOtmF1kOXF2xwgFdA7qznx8aqCulU4OOvNjnvSTjQY=) 2: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: 40EGBMsbpMDMqk64oIlNxvPswRIVzMQ9vAqZ+9/aJ30=) 3: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: +jjzQDT4VXtfOv7UHvs6KHzX+DKS/3je1TxZKSVKupY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 657 (0x291) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Validity Not Before: Mar 25 01:36:52 2026 GMT Not After : Apr 1 01:36:52 2026 GMT Subject: CN=69c33c35-4fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b3:37:61:04:47:dd:fb:4b:77:9b:bd:5e:50: c7:9d:3c:8c:0d:9c:d7:28:76:05:e3:54:97:c7:8a: 0d:e7:bf:97:ec:9c:09:64:2b:0b:a8:f7:73:79:7a: 8d:76:61:d3:c4:51:b4:85:c8:3a:08:b8:92:b7:d9: 8a:43:0c:78:18:1e:12:80:01:32:36:74:68:e4:ad: d2:69:f2:36:78:10:03:76:e0:a1:94:59:03:42:bd: dc:24:31:43:76:49:04:00:e1:30:45:85:42:dc:16: b0:0c:06:02:ef:d9:b3:33:f8:8a:b0:e2:e8:b1:1c: 69:df:8d:b2:fb:63:47:e7:00:08:12:1a:4b:e8:51: d9:8e:5c:e2:6f:22:5f:2f:a9:ff:07:c8:27:76:52: c1:16:ee:d8:b0:fd:27:ac:bf:e5:55:31:81:0b:17: 1c:b9:81:42:71:3a:18:4b:ad:39:08:9b:90:87:72: 5b:4b:84:28:ed:97:df:f2:ea:f2:ca:c1:3a:a8:d2: fe:4b:6d:df:34:2e:59:9e:4d:9e:0c:fb:90:be:0e: 1b:df:2d:65:02:f9:e4:50:f0:70:ca:14:dd:4c:5f: 5f:33:f4:9e:a5:32:1e:0e:35:8c:11:ba:91:bc:0d: f8:46:44:08:20:73:e9:25:6a:4a:6a:4f:e8:84:d4: dc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F3:72:B6:EC:7D:E4:98:91:17:31:76:4F:7C:A2:2B:F7:D6:63:AD X509v3 Authority Key Identifier: keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:dd:a1:b5:c3:94:5a:99:a3:5a:91:2a:e1:e9:b7:30:9c:13: 93:13:bb:fd:6c:bc:91:c6:3d:cc:df:6a:d6:19:21:77:00:2d: 13:c3:ff:96:58:b2:fe:a3:33:a4:4a:b3:e6:c0:a8:88:7d:35: a8:1b:07:e5:4c:c1:9f:f1:2d:47:4f:10:09:ef:38:12:09:76: 6f:cb:0e:b3:37:95:27:cc:11:ea:03:2e:52:d0:82:65:82:0e: 68:7a:e8:af:24:59:5c:18:83:a2:cd:0d:f7:b8:8f:06:c9:34: cf:14:02:69:b0:21:a6:e8:f1:6d:3d:40:f7:82:cb:29:7e:2a: 17:29:a9:0b:12:2f:3c:c1:ab:e7:e1:eb:d5:aa:fd:22:5a:2b: d8:28:20:d7:93:2a:fe:e7:a7:09:ef:16:09:80:d8:d8:a8:dd: 92:cc:41:91:8c:ff:14:b2:a8:d9:46:c2:c5:bd:22:96:56:46: d9:b1:dc:8a:f5:9f:d8:f4:2b:dd:03:33:56:44:87:dc:35:f4: 72:37:b5:97:03:21:26:18:e0:b7:bb:67:ea:fc:13:05:64:f6: 1b:71:5d:0a:f5:fd:f7:5d:50:5b:bb:3c:09:f6:9a:53:e6:77: 81:9f:c9:91:dd:c4:72:bf:cd:4c:21:77:6b:7e:9e:ce:45:e8: 37:61:45:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB NjJDNEVEQTkwHhcNMjYwMzI1MDEzNjUyWhcNMjYwNDAxMDEzNjUyWjAYMRYwFAYD VQQDEw02OWMzM2MzNS00ZmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LM3YQRH3ftLd5u9XlDHnTyMDZzXKHYF41SXx4oN57+X7JwJZCsLqPdzeXqN dmHTxFG0hcg6CLiSt9mKQwx4GB4SgAEyNnRo5K3SafI2eBADduChlFkDQr3cJDFD dkkEAOEwRYVC3BawDAYC79mzM/iKsOLosRxp342y+2NH5wAIEhpL6FHZjlzibyJf L6n/B8gndlLBFu7YsP0nrL/lVTGBCxccuYFCcToYS605CJuQh3JbS4Qo7Zff8ury ysE6qNL+S23fNC5Znk2eDPuQvg4b3y1lAvnkUPBwyhTdTF9fM/SepTIeDjWMEbqR vA34RkQIIHPpJWpKak/ohNTcCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHTzcrbs feSYkRcxdk98oiv31mOtMB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJBRS9DNzBGRUEyQThDMjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1 aXNmejl0RTc2dXVtTEU3YWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADd2htcOUWpmjWpEq4em3MJwTkxO7/Wy8kcY9zN9q1hkhdwAtE8P/lliy/qMz pEqz5sCoiH01qBsH5UzBn/EtR08QCe84Egl2b8sOszeVJ8wR6gMuUtCCZYIOaHro ryRZXBiDos0N97iPBsk0zxQCabAhpujxbT1A94LLKX4qFympCxIvPMGr5+Hr1ar9 Ilor2Cgg15Mq/uenCe8WCYDY2KjdksxBkYz/FLKo2UbCxb0illZG2bHcivWf2PQr 3QMzVkSH3DX0cje1lwMhJhjgt7tn6vwTBWT2G3FdCvX9911QW7s8CfaaU+Z3gZ/J kd3Ecr/NTCF3a36ezkXoN2FF9w== -----END CERTIFICATE-----Generated at Thu Mar 26 12:00:02 2026 by rpki-client