$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft File: aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft (raw, json) Hash identifier: DBvIIAr8zEGlCbCXHToS9N8SmADlZUQlZTKbOm+AE1o= Subject key identifier: D9:DE:6C:DF:FA:B7:AF:51:EA:E7:E9:CC:F0:18:C8:0C:01:3D:B3:1B Authority key identifier: 68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7 Certificate issuer: /CN=A91EA9BD/serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7 Certificate serial: 3151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft Manifest number: 314A Signing time: Tue 24 Mar 2026 15:23:23 +0000 Manifest this update: Tue 24 Mar 2026 15:23:23 +0000 Manifest next update: Tue 31 Mar 2026 15:23:23 +0000 Files and hashes: 1: aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl (hash: EpSJJZJ/mavGQqPBlXJHgnzckUnGyVhbyETw1ZrdFsM=) 2: 93C0837AA52911EC9D2DAE83C4F9AE02.roa (hash: 0vDdF5Q2CBbIYCt1K0qEfBzpG6K1ble6M+V06+WiDaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12625 (0x3151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9BD, serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7 Validity Not Before: Mar 24 15:23:23 2026 GMT Not After : Mar 31 15:23:23 2026 GMT Subject: CN=69c2ac6b-0d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:24:d3:6a:9b:3c:5f:14:88:6a:15:2c:c0:be: 94:2c:73:30:aa:7c:bf:d6:c0:55:ea:1d:c2:f2:89: 6e:ce:73:06:28:84:70:9f:1a:58:2d:80:de:50:40: d1:83:d3:60:f7:1b:a5:4d:5d:92:df:59:9d:6a:61: 2f:5c:2a:25:5d:b6:69:89:1f:28:87:db:38:e9:63: 29:a3:64:9e:2c:e0:f0:27:82:f2:18:38:05:02:9e: 5a:e7:64:5d:81:3b:64:10:52:c4:6f:76:88:0c:58: c7:bf:ec:db:22:66:ad:64:2e:d4:10:9f:be:bd:9b: 98:0a:2e:e6:30:5a:f8:3d:79:d1:32:57:cd:e8:60: 78:4a:d5:20:79:fb:e1:58:5b:ba:3b:fc:7b:38:ef: 87:05:a1:a8:e5:5a:40:2c:e8:e0:dc:2a:c0:d7:de: b4:2a:91:40:4b:d8:e5:13:7a:d5:cd:59:14:92:08: 9f:41:65:1f:01:9b:b7:e8:7a:fb:cf:de:18:bf:dc: 3d:dc:84:75:8f:ac:9a:75:aa:9a:69:61:93:6d:3f: 5e:9f:17:e5:ad:2d:a5:a2:37:88:91:1f:62:fb:46: cb:9c:df:84:d6:04:db:ad:48:9a:8d:52:3e:5c:1b: 32:a0:cc:ee:87:7b:26:32:98:30:d3:ac:d6:e5:18: 18:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DE:6C:DF:FA:B7:AF:51:EA:E7:E9:CC:F0:18:C8:0C:01:3D:B3:1B X509v3 Authority Key Identifier: keyid:68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:05:9c:9f:47:56:04:55:76:c4:71:5a:5f:2b:c6:47:01:bd: a9:74:8c:8e:12:67:64:78:4e:d8:55:9a:fd:ea:1d:ea:b7:56: a9:38:0f:a8:63:44:91:be:57:1e:a9:f9:85:2c:cb:e2:cd:ee: eb:ad:97:8f:9e:14:5d:bd:f4:fc:bb:ec:5f:ce:e8:65:d9:44: f4:93:94:e9:c9:25:fc:00:d5:6a:05:c6:c5:09:d8:1b:29:29: 73:ed:6d:24:42:89:2b:a2:92:18:0c:76:22:dc:cf:51:57:27: 97:5c:cb:28:8a:fc:3f:3f:0c:f8:65:fc:0b:67:97:c8:ba:39: 57:c3:22:d3:5b:d7:88:1e:49:1c:82:45:a6:0d:c8:7e:4b:7f: 22:a0:22:8b:9d:f3:0b:32:10:fb:7b:8b:0a:85:e0:6c:cc:db: 09:e1:7d:cd:13:e9:16:0d:ed:61:dd:ed:17:5d:f8:9c:06:2f: 6e:09:6c:31:6b:fd:64:2b:13:5e:59:70:91:46:7e:4e:25:83: 92:59:3b:37:31:48:b6:1e:34:15:20:9f:bb:ee:d6:cc:f6:ae: 01:55:b8:c9:94:df:1f:37:d9:81:59:3d:8d:45:43:0a:5e:9e: 26:ab:53:cd:4f:7c:b8:72:e7:57:dc:68:13:00:b8:d1:35:50: c7:f0:dc:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5QkQxMTAvBgNVBAUTKDY4NkEwMDU3MTY0RDE0MzhFQzU5NTg2REE4QkFBNTQ2 NUZEODI5QzcwHhcNMjYwMzI0MTUyMzIzWhcNMjYwMzMxMTUyMzIzWjAYMRYwFAYD VQQDEw02OWMyYWM2Yi0wZDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwyTTaps8XxSIahUswL6ULHMwqny/1sBV6h3C8oluznMGKIRwnxpYLYDeUEDR g9Ng9xulTV2S31mdamEvXColXbZpiR8oh9s46WMpo2SeLODwJ4LyGDgFAp5a52Rd gTtkEFLEb3aIDFjHv+zbImatZC7UEJ++vZuYCi7mMFr4PXnRMlfN6GB4StUgefvh WFu6O/x7OO+HBaGo5VpALOjg3CrA1960KpFAS9jlE3rVzVkUkgifQWUfAZu36Hr7 z94Yv9w93IR1j6yadaqaaWGTbT9enxflrS2lojeIkR9i+0bLnN+E1gTbrUiajVI+ XBsyoMzuh3smMpgw06zW5RgYGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNnebN/6 t69R6ufpzPAYyAwBPbMbMB8GA1UdIwQYMBaAFGhqAFcWTRQ47FlYbai6pUZf2CnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTlCRC8wM0I4MEYzOERG NUMxMUUyOTcyQTk0Mjc1OTExRUEzMi9hR29BVnhaTkZEanNXVmh0cUxxbFJsX1lL Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FHb0FWeFpORkRqc1dWaHRxTHFsUmxfWUtjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTlCRC8wM0I4MEYzOERGNUMxMUUyOTcyQTk0Mjc1OTExRUEzMi9hR29BVnhaTkZE anNXVmh0cUxxbFJsX1lLY2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPAWcn0dWBFV2xHFaXyvGRwG9qXSMjhJnZHhO2FWa/eod6rdWqTgPqGNEkb5X Hqn5hSzL4s3u662Xj54UXb30/LvsX87oZdlE9JOU6ckl/ADVagXGxQnYGykpc+1t JEKJK6KSGAx2ItzPUVcnl1zLKIr8Pz8M+GX8C2eXyLo5V8Mi01vXiB5JHIJFpg3I fkt/IqAii53zCzIQ+3uLCoXgbMzbCeF9zRPpFg3tYd3tF134nAYvbglsMWv9ZCsT XllwkUZ+TiWDklk7NzFIth40FSCfu+7WzPauAVW4yZTfHzfZgVk9jUVDCl6eJqtT zU98uHLnV9xoEwC40TVQx/DcnA== -----END CERTIFICATE-----Generated at Thu Mar 26 14:10:30 2026 by rpki-client