$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft File: aaMtc-A4ow1HrKzrgc1zEq91Ork.mft (raw, json) Hash identifier: frD4E4vm0viu+pipWrUaV0ZYGTvy7bJd/sj83yQhs34= Subject key identifier: 55:6C:9D:33:32:87:93:1B:85:0E:C4:10:B8:38:88:52:81:74:BF:CF Authority key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 Certificate issuer: /CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft Manifest number: 01A2 Signing time: Wed 13 May 2026 04:22:26 +0000 Manifest this update: Wed 13 May 2026 04:22:25 +0000 Manifest next update: Wed 20 May 2026 04:22:25 +0000 Files and hashes: 1: aaMtc-A4ow1HrKzrgc1zEq91Ork.crl (hash: UgPXTdc2bIm7zugcSzH5ATmA74h8k79gxJ0VdwWcYO8=) 2: AAFEACF0500311F0A7E46C33C4F9AE02.roa (hash: KAsjZTGjxlT8d6AMDd8zXBUGI6TylpSkB+FkLto9kGs=) 3: 2F734D2E860111EFB49EB20DC4F9AE02.roa (hash: AXziCFMFYEtBXdtY9dmpKm88jTn6EGy7D69LF+swI3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 04:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1F31, serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Validity Not Before: May 13 04:22:25 2026 GMT Not After : May 20 04:22:25 2026 GMT Subject: CN=6a03fc82-ea31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:66:ac:66:9a:87:f5:1b:01:a2:5f:d4:c3:03: 09:2e:92:88:6f:96:6d:3d:9c:23:89:4d:01:41:3a: 16:df:ce:f1:65:52:89:d3:d7:bf:f7:35:da:92:7c: 01:5f:0a:e6:c9:8f:9a:74:b6:c2:05:9d:89:f0:2d: 84:d2:b8:25:9b:3d:13:24:b4:2c:39:23:be:3e:4c: 34:b4:4a:12:67:05:9e:32:57:b7:d1:c6:0a:2c:1a: 0c:80:77:f2:fe:39:89:2a:a6:73:83:25:35:f8:79: 55:ce:59:be:b3:d2:a5:9c:a5:1e:e5:d8:82:f1:98: 89:2d:a8:17:c5:3d:ef:cd:91:53:13:72:c5:a4:cf: 6c:2d:f7:75:6d:b4:2e:90:36:23:58:79:c9:03:51: 1f:44:12:79:c2:f2:f0:e2:60:28:ae:91:ba:15:b5: dd:41:ce:16:6a:2b:c2:de:bd:5d:d6:44:ba:8b:fc: 2c:a9:e3:c5:d3:82:40:6f:44:6f:95:cc:87:06:1b: bb:da:19:03:9a:67:b1:d0:4a:3a:1b:cc:f0:33:6f: c2:ad:de:97:50:36:37:3d:34:73:89:eb:48:4c:05: 58:72:5b:af:ab:12:c0:ad:c6:83:2e:c7:3e:69:1a: 78:3e:3e:38:2e:57:7e:1a:1e:41:ae:f5:40:49:16: 1b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6C:9D:33:32:87:93:1B:85:0E:C4:10:B8:38:88:52:81:74:BF:CF X509v3 Authority Key Identifier: keyid:69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:f6:16:bf:96:3d:81:7a:c0:09:b2:4f:0e:e8:01:05:66:eb: cd:58:98:58:09:00:7a:29:1d:d5:79:2d:ca:85:37:a7:fd:ef: dd:84:e9:59:f3:de:f3:fb:15:91:7c:6f:71:a7:e4:38:6d:de: 00:71:ec:8c:52:b0:55:b6:4e:80:92:a5:3d:68:31:d8:32:65: fd:32:d6:72:ce:86:ac:7c:26:97:e6:ee:e6:93:aa:b2:0f:1b: b8:48:0c:d7:e3:16:f9:f5:9e:1a:77:1b:1f:cc:e2:c4:90:37: 99:fa:dc:2b:32:14:5a:a8:39:1b:96:37:70:e5:92:5d:af:71: c0:df:92:d2:46:b9:8b:f6:5a:a4:62:02:27:3d:46:c9:11:ba: 00:3e:0a:a3:15:f6:7b:7c:da:d4:e5:3b:4c:ba:8e:51:ae:54: 3e:9f:b8:25:c9:ce:a8:2c:36:57:bd:6b:7b:a1:63:22:d2:7b: 75:a6:63:02:75:a8:f7:86:e5:40:f6:bd:5c:3b:0b:83:74:ee: d7:ce:6b:9d:bd:98:ba:ab:43:c0:66:c3:9d:8e:bc:d2:8b:37: db:2c:92:a8:03:e2:b4:c9:f4:fa:13:4e:94:9f:6d:68:33:98: ce:cd:a4:6b:82:1e:d3:02:55:bc:96:1f:1a:8a:65:d6:b8:94: fb:c8:70:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFGMzExMTAvBgNVBAUTKDY5QTMyRDczRTAzOEEzMEQ0N0FDQUNFQjgxQ0Q3MzEy QUY3NTNBQjkwHhcNMjYwNTEzMDQyMjI1WhcNMjYwNTIwMDQyMjI1WjAYMRYwFAYD VQQDEw02YTAzZmM4Mi1lYTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmasZpqH9RsBol/UwwMJLpKIb5ZtPZwjiU0BQToW387xZVKJ09e/9zXaknwB XwrmyY+adLbCBZ2J8C2E0rglmz0TJLQsOSO+Pkw0tEoSZwWeMle30cYKLBoMgHfy /jmJKqZzgyU1+HlVzlm+s9KlnKUe5diC8ZiJLagXxT3vzZFTE3LFpM9sLfd1bbQu kDYjWHnJA1EfRBJ5wvLw4mAorpG6FbXdQc4WaivC3r1d1kS6i/wsqePF04JAb0Rv lcyHBhu72hkDmmex0Eo6G8zwM2/Crd6XUDY3PTRzietITAVYcluvqxLArcaDLsc+ aRp4Pj44Lld+Gh5BrvVASRYbWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFVsnTMy h5MbhQ7EELg4iFKBdL/PMB8GA1UdIwQYMBaAFGmjLXPgOKMNR6ys64HNcxKvdTq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUYzMS9BMEY0RTBEMEUx QkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93MUhyS3pyZ2MxekVxOTFP cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhTXRjLUE0b3cxSHJLenJnYzF6RXE5MU9yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUYzMS9BMEY0RTBEMEUxQkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93 MUhyS3pyZ2MxekVxOTFPcmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZvYWv5Y9gXrACbJPDugBBWbrzViYWAkAeikd1XktyoU3p/3v3YTpWfPe8/sV kXxvcafkOG3eAHHsjFKwVbZOgJKlPWgx2DJl/TLWcs6GrHwml+bu5pOqsg8buEgM 1+MW+fWeGncbH8zixJA3mfrcKzIUWqg5G5Y3cOWSXa9xwN+S0ka5i/ZapGICJz1G yRG6AD4KoxX2e3za1OU7TLqOUa5UPp+4JcnOqCw2V71re6FjItJ7daZjAnWo94bl QPa9XDsLg3Tu185rnb2YuqtDwGbDnY680os32yySqAPitMn0+hNOlJ9taDOYzs2k a4Ie0wJVvJYfGopl1riU+8hwrw== -----END CERTIFICATE-----Generated at Wed May 13 18:08:34 2026 by rpki-client