$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft File: MAeESqoZm6nIjWQEw9_oduHjn8Y.mft (raw, json) Hash identifier: E9GbrNZdReC8ifwLCp/fPhmcrdOl3P6dx/cmYyDggw8= Subject key identifier: 5D:F5:C3:FE:D4:AE:98:02:F1:B1:D2:33:7A:23:36:47:21:3B:35:CB Authority key identifier: 30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6 Certificate issuer: /CN=A91E46B1/serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6 Certificate serial: 1530 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft Manifest number: 151A Signing time: Tue 24 Mar 2026 16:43:31 +0000 Manifest this update: Tue 24 Mar 2026 16:43:31 +0000 Manifest next update: Tue 31 Mar 2026 16:43:31 +0000 Files and hashes: 1: MAeESqoZm6nIjWQEw9_oduHjn8Y.crl (hash: y87ggkNeMzJXI4efU+AMB5nBgZwul5V4i0T9OKNAUv4=) 2: D0D94718CB8111E89EDE697DC4F9AE02.roa (hash: cIxtJWgcXzpekN854h+Gn0iT4S0YYTFuZrY9rIh4a6M=) 3: 391E6EDE679B11E886728650C4F9AE02.roa (hash: 0s446asxUq4TUjj3iz0ZGInEQ2S3Qugk+pBUyrJhQAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5424 (0x1530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46B1, serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6 Validity Not Before: Mar 24 16:43:31 2026 GMT Not After : Mar 31 16:43:31 2026 GMT Subject: CN=69c2bf33-3e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d0:3b:b7:e0:af:ea:a4:b3:02:2d:49:9a:07: 17:39:f9:7d:7d:8b:c9:3d:94:90:8b:60:72:35:f8: a1:e6:44:3a:56:85:f1:19:fb:6a:58:23:a1:b1:df: 17:ae:da:74:9d:43:a8:49:93:59:17:68:f2:d5:65: b0:00:cf:ef:74:82:8b:14:5c:4f:25:95:34:10:6d: 59:8b:39:76:da:b7:37:18:98:15:8f:17:83:0f:07: 95:9a:53:00:7f:9a:6b:47:cc:54:a8:21:67:e7:8d: 86:ef:8c:06:9a:c6:4e:37:2b:80:82:0e:ba:b2:44: d5:30:0b:02:a8:9a:74:dc:59:40:76:d6:d7:78:21: 5c:b7:f1:1e:f8:9e:62:bc:b2:9d:e9:2d:7d:97:3d: 35:ea:6d:a7:5c:9d:f9:87:d4:aa:ed:cd:c2:c1:dc: ab:b8:71:49:8c:25:36:f2:4c:2a:ff:b8:2c:d2:9b: dd:ac:9d:eb:55:c7:b0:d9:5a:bc:52:08:4a:aa:20: 37:70:1f:0a:0d:54:63:36:01:69:c0:b5:1f:3b:88: 94:b2:22:08:e0:80:2f:ab:6d:3b:06:14:3c:40:91: 9f:b2:f7:7d:a6:8b:fe:f8:07:5b:b7:84:13:4e:4b: 32:5e:48:d3:b7:64:32:2a:d0:b4:ac:0e:03:2b:b3: 34:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F5:C3:FE:D4:AE:98:02:F1:B1:D2:33:7A:23:36:47:21:3B:35:CB X509v3 Authority Key Identifier: keyid:30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f1:ff:b6:70:90:b4:81:ae:9b:82:dd:49:4d:92:4a:fc:b9: f1:cb:a1:19:fb:61:8e:26:94:a0:17:71:09:67:d4:3c:16:ae: ae:f3:49:9b:af:cf:bd:72:55:6b:73:c0:21:d2:fb:66:b3:7c: c8:9f:20:15:4d:12:53:e8:b7:2c:82:6b:2d:bb:06:04:45:0c: a4:61:60:9f:21:12:6e:8c:fe:7c:6c:f5:79:f0:6f:fd:52:11: cf:ff:c0:65:c0:3d:bf:3c:f3:7f:18:5d:0d:45:eb:c2:ab:25: b3:b2:1b:c9:b8:41:66:a3:57:a7:ef:17:52:97:f2:d5:ee:99: 26:ff:89:c2:77:27:c4:5e:ee:6f:68:e9:e2:42:af:23:68:98: 3c:9f:9b:cc:ff:6d:5c:6b:d5:0e:ee:21:c1:7a:e7:01:30:fb: 5d:b5:2f:c7:2b:cd:86:8e:70:3e:43:43:53:4e:4e:d5:54:c7: 29:b1:68:58:7f:b0:c0:18:25:c3:22:fb:96:8a:18:bb:50:ab: f9:2d:b8:f8:40:2c:bc:99:e5:45:a7:1d:4b:59:63:54:5a:2e: 18:e1:25:94:53:e7:b5:57:7e:29:69:7c:4f:37:c3:fd:d3:1e: b9:df:de:f3:54:6f:bf:65:fb:e0:60:4e:9f:f4:b0:18:84:c2: 19:47:42:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2QjExMTAvBgNVBAUTKDMwMDc4NDRBQUExOTlCQTlDODhENjQwNEMzREZFODc2 RTFFMzlGQzYwHhcNMjYwMzI0MTY0MzMxWhcNMjYwMzMxMTY0MzMxWjAYMRYwFAYD VQQDEw02OWMyYmYzMy0zZTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dA7t+Cv6qSzAi1JmgcXOfl9fYvJPZSQi2ByNfih5kQ6VoXxGftqWCOhsd8X rtp0nUOoSZNZF2jy1WWwAM/vdIKLFFxPJZU0EG1Zizl22rc3GJgVjxeDDweVmlMA f5prR8xUqCFn542G74wGmsZONyuAgg66skTVMAsCqJp03FlAdtbXeCFct/Ee+J5i vLKd6S19lz016m2nXJ35h9Sq7c3CwdyruHFJjCU28kwq/7gs0pvdrJ3rVcew2Vq8 UghKqiA3cB8KDVRjNgFpwLUfO4iUsiII4IAvq207BhQ8QJGfsvd9pov++Adbt4QT TksyXkjTt2QyKtC0rA4DK7M0TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF31w/7U rpgC8bHSM3ojNkchOzXLMB8GA1UdIwQYMBaAFDAHhEqqGZupyI1kBMPf6Hbh45/G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZCMS9GMDBERjM2NjY3 OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9NQWVFU3FvWm02bklqV1FFdzlfb2R1SGpu OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01BZUVTcW9abTZuSWpXUUV3OV9vZHVIam44WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZCMS9GMDBERjM2NjY3OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9NQWVFU3FvWm02 bklqV1FFdzlfb2R1SGpuOFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjfH/tnCQtIGum4LdSU2SSvy58cuhGfthjiaUoBdxCWfUPBaurvNJm6/PvXJV a3PAIdL7ZrN8yJ8gFU0SU+i3LIJrLbsGBEUMpGFgnyESboz+fGz1efBv/VIRz//A ZcA9vzzzfxhdDUXrwqsls7IbybhBZqNXp+8XUpfy1e6ZJv+JwncnxF7ub2jp4kKv I2iYPJ+bzP9tXGvVDu4hwXrnATD7XbUvxyvNho5wPkNDU05O1VTHKbFoWH+wwBgl wyL7looYu1Cr+S24+EAsvJnlRacdS1ljVFouGOEllFPntVd+KWl8TzfD/dMeud/e 81Rvv2X74GBOn/SwGITCGUdCIg== -----END CERTIFICATE-----Generated at Thu Mar 26 14:33:15 2026 by rpki-client