$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft File: AaQS70FsiE9vY38b2oAOtu9nttY.mft (raw, json) Hash identifier: OSHAJ+RD+gxjif9D9mQVx+X22+JFGSTOCKyWEjm8Ea8= Subject key identifier: D5:2A:71:65:55:0A:17:F7:6E:86:32:68:C5:87:7E:14:3C:AD:D3:2F Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Certificate serial: 22F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft Manifest number: 22A4 Signing time: Tue 24 Mar 2026 15:47:54 +0000 Manifest this update: Tue 24 Mar 2026 15:47:54 +0000 Manifest next update: Tue 31 Mar 2026 15:47:54 +0000 Files and hashes: 1: AaQS70FsiE9vY38b2oAOtu9nttY.crl (hash: q2GivoUp6jUtVJgEY09vG3QIsHRcfXzaEVdxBaYd9m4=) 2: 11D9E3F865DB11F0A01C3E60C4F9AE02.roa (hash: fekDwvX/Pg2YZ9Fe3QZAnU92TpFpbncEnNKE83KMH+M=) 3: 114016CE65DB11F0A01C3E60C4F9AE02.roa (hash: qG9igdUpXB7wk8yx/k2tOuq/gYueDRGW4t5eH6cDkms=) 4: 083D60F0EFC311F0ADB9FC6F726F56BC.roa (hash: fF8JE+CeDWGa0Zd7+3JcEIODMXv324fSErOhGifycP8=) 5: 05302944D38811F096791A31C4F9AE02.roa (hash: 0TpazCbbP+eq5jbcmOC+QEukwM8XRQa407MbLaS5Vso=) 6: 0ECE3EC6F36011F0BF2DB960646F56BC.roa (hash: QtoNirbotX7R4qD1r9ev9ywMdIdpJySoQAcu/MYpiqg=) 7: F4B9363CD97C11F0998DA3C49DD3641D.roa (hash: VfJC1uL3SDtxI0jb1ThMloxDt/b6TXqC47eyeyvo+WI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8951 (0x22f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Validity Not Before: Mar 24 15:47:54 2026 GMT Not After : Mar 31 15:47:54 2026 GMT Subject: CN=69c2b22a-9a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ce:7a:91:b5:2a:5c:fe:a6:13:80:35:0e:cf: da:e7:00:be:2d:c4:07:ff:d8:76:a5:7c:2c:8e:b1: 6a:3e:4f:f5:c9:67:32:db:dd:e4:c3:32:e7:5e:d1: 75:2f:d9:89:df:21:c4:9e:c0:e1:33:c8:62:f4:aa: 07:09:2a:1f:57:c9:2e:f4:47:7c:5a:86:5b:94:60: 31:2a:91:b6:2e:07:da:4c:b0:6e:28:ab:a8:18:5c: 11:42:84:d8:07:69:c3:4b:3d:23:b7:af:04:02:73: 49:0b:58:1d:32:87:7a:23:e4:8b:96:81:e8:ac:e0: 78:78:6a:56:2e:0e:36:b7:a0:0e:79:b9:63:19:22: 6d:95:bf:6f:44:c0:f6:74:ac:a7:2a:b5:0c:91:6e: 02:8f:22:1f:1c:4e:f4:e6:cb:e4:33:09:d6:3b:89: a4:48:f8:d4:57:da:5f:5a:c6:14:98:21:8b:a8:10: 0e:6f:80:6c:06:87:2a:d1:9f:37:f5:f7:43:be:65: ad:aa:df:87:3b:74:ad:f8:0a:d5:92:6c:10:01:2d: 26:8d:32:cf:de:01:a7:e6:ff:96:f1:81:3b:02:61: 83:33:39:db:42:f0:9e:31:2d:4f:9a:a4:1c:73:1e: e2:3b:88:7a:67:e2:52:ee:85:34:c7:03:f2:17:8b: ad:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2A:71:65:55:0A:17:F7:6E:86:32:68:C5:87:7E:14:3C:AD:D3:2F X509v3 Authority Key Identifier: keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:1b:bf:27:50:54:50:d0:8b:28:33:9c:3d:5e:bf:19:3f:9e: 93:03:94:86:04:70:6f:e0:58:02:3f:b8:58:6c:19:41:92:82: 19:74:98:ee:91:a1:e3:dd:fd:59:6d:a8:44:9b:e6:64:aa:bd: 4b:a5:36:b6:03:1f:3a:1b:a4:ed:c2:93:41:0f:26:af:94:53: b7:be:1b:2c:1a:27:01:c0:8d:6e:76:2c:fd:cf:51:92:f4:17: 49:74:c3:87:57:10:18:3b:26:ca:57:2b:2d:af:b4:cd:90:a1: 3f:9d:0e:c8:e8:89:df:ab:0c:45:b4:1f:d7:95:71:0d:b7:ec: 2e:35:8e:93:39:e7:05:8c:63:cd:07:94:95:53:0c:b4:6d:af: ca:d0:f2:84:43:56:b8:07:fc:ec:d3:89:ba:84:de:a4:bd:e9: 05:2a:80:21:ed:33:39:04:79:a8:29:f1:87:cb:e3:2a:29:fc: 3f:a9:99:b7:cb:26:f0:f2:e2:fc:06:b6:45:fa:ee:97:3a:ae: ca:b6:76:b0:01:d0:59:a8:9b:49:fa:54:05:af:ac:8c:2b:51: b8:71:20:2d:49:30:fa:77:be:03:18:ce:64:8d:23:a4:d2:54: 70:ed:2f:c5:16:1b:cb:d9:c8:3f:2d:dc:5c:b9:51:06:4a:00: e0:66:d0:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ4NDUxMTAvBgNVBAUTKDAxQTQxMkVGNDE2Qzg4NEY2RjYzN0YxQkRBODAwRUI2 RUY2N0I2RDYwHhcNMjYwMzI0MTU0NzU0WhcNMjYwMzMxMTU0NzU0WjAYMRYwFAYD VQQDEw02OWMyYjIyYS05YTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuM56kbUqXP6mE4A1Ds/a5wC+LcQH/9h2pXwsjrFqPk/1yWcy293kwzLnXtF1 L9mJ3yHEnsDhM8hi9KoHCSofV8ku9Ed8WoZblGAxKpG2LgfaTLBuKKuoGFwRQoTY B2nDSz0jt68EAnNJC1gdMod6I+SLloHorOB4eGpWLg42t6AOebljGSJtlb9vRMD2 dKynKrUMkW4CjyIfHE705svkMwnWO4mkSPjUV9pfWsYUmCGLqBAOb4BsBocq0Z83 9fdDvmWtqt+HO3St+ArVkmwQAS0mjTLP3gGn5v+W8YE7AmGDMznbQvCeMS1PmqQc cx7iO4h6Z+JS7oU0xwPyF4utuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNUqcWVV Chf3boYyaMWHfhQ8rdMvMB8GA1UdIwQYMBaAFAGkEu9BbIhPb2N/G9qADrbvZ7bW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDg0NS80MDAxNTNCNkQy RUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lFOXZZMzhiMm9BT3R1OW50 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FhUVM3MEZzaUU5dlkzOGIyb0FPdHU5bnR0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDg0NS80MDAxNTNCNkQyRUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lF OXZZMzhiMm9BT3R1OW50dFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkBu/J1BUUNCLKDOcPV6/GT+ekwOUhgRwb+BYAj+4WGwZQZKCGXSY7pGh4939 WW2oRJvmZKq9S6U2tgMfOhuk7cKTQQ8mr5RTt74bLBonAcCNbnYs/c9RkvQXSXTD h1cQGDsmylcrLa+0zZChP50OyOiJ36sMRbQf15VxDbfsLjWOkznnBYxjzQeUlVMM tG2vytDyhENWuAf87NOJuoTepL3pBSqAIe0zOQR5qCnxh8vjKin8P6mZt8sm8PLi /Aa2RfrulzquyrZ2sAHQWaibSfpUBa+sjCtRuHEgLUkw+ne+AxjOZI0jpNJUcO0v xRYby9nIPy3cXLlRBkoA4GbQ8A== -----END CERTIFICATE-----Generated at Thu Mar 26 07:29:38 2026 by rpki-client