$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft File: aIUqt_JxT89U118KrjBorcOLNcw.mft (raw, json) Hash identifier: ojyAi90TyEbtG0ME22OEzvgHIEzEXZQePHqFjhwJ8aA= Subject key identifier: 85:E2:1D:D0:4E:87:0A:4B:01:40:98:ED:5E:9C:45:BB:F7:58:DA:7E Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC Certificate issuer: /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Certificate serial: 0274 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft Manifest number: 0238 Signing time: Mon 02 Mar 2026 00:25:27 +0000 Manifest this update: Mon 02 Mar 2026 00:25:26 +0000 Manifest next update: Mon 09 Mar 2026 00:25:26 +0000 Files and hashes: 1: aIUqt_JxT89U118KrjBorcOLNcw.crl (hash: cDu/yuxVqhFBHnS6HDFemhCxHDRT/lIQ4LyMkJEtEWo=) 2: 0EE376F8BF7111EEA53E4981C4F9AE02.roa (hash: wtaIxTF17d8IiemG3sWgy0ofBOn5zvPTqbrlTJWPses=) 3: F8D5DC60BF7111EE806CB182C4F9AE02.roa (hash: hy3xSvTP7O3mbzfHFNsYWB6zvGiymVdeaKb6AgSQN3E=) 4: F9CB1E5ABF7111EE806CB182C4F9AE02.roa (hash: Oi3EWJoEgd9DWmEEG+iX3qCZVJDhp6GEs5+/XmAJvSc=) 5: 2F03F3FCB3AF11F0B9165B5BC4F9AE02.roa (hash: 4RuwvlEUfIsojOEJPNkdcqMMKDfzfms7bbjFDB3xQI0=) 6: AF2D50BE562B11F0A2095579C4F9AE02.roa (hash: GKfJ2kB3yXKiTx70mXKirnJ5shWw+x/l7CpoEVzirXk=) 7: F16963D8B3AE11F0A879E65AC4F9AE02.roa (hash: t3iwawjGJ56AujlNR7I280077YB+jhEWT3pLtX6G6h0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 628 (0x274) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Validity Not Before: Mar 2 00:25:26 2026 GMT Not After : Mar 9 00:25:26 2026 GMT Subject: CN=69a4d8f7-e0ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:37:9a:e5:1e:39:dd:d0:01:83:d1:11:61:8b: ed:ee:ce:1e:35:e4:27:9d:bf:93:26:f0:9b:29:ef: de:fd:1a:5c:bb:e4:3b:e3:95:98:d2:15:6d:36:66: f5:8e:5f:78:85:b0:4a:ab:f8:0d:e7:c7:67:56:16: 58:f7:84:ed:f1:ef:5f:d2:7e:fa:23:e7:55:1e:e7: 82:bc:80:9e:69:5e:86:bd:db:a5:84:72:b0:04:59: e0:2e:7b:b7:8d:c7:ec:8b:5a:2e:e9:15:df:67:06: 56:bb:aa:7f:b8:76:dc:0a:03:d6:77:91:9e:58:f4: 7d:b1:25:dc:d0:5d:58:79:0a:c6:aa:06:30:78:ac: 35:ee:85:2d:d8:1d:d4:56:a1:88:0e:c5:0a:4f:a4: 87:95:ba:4a:e9:03:7c:00:38:20:7e:25:e6:93:94: 86:31:4c:28:35:6d:51:83:df:76:f9:5e:19:87:57: 91:79:74:f1:40:e1:40:b0:bf:06:db:f5:a5:eb:88: 72:54:d2:ef:f0:e7:f2:ba:01:30:a5:f6:f1:a9:fe: 8d:04:d1:f6:18:da:6b:94:f7:07:8f:61:40:d6:fc: 95:9f:c1:22:da:cc:3e:f6:82:4e:fa:25:b8:74:71: 33:c2:ca:51:09:20:74:a3:24:4b:d0:89:82:8c:45: ae:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E2:1D:D0:4E:87:0A:4B:01:40:98:ED:5E:9C:45:BB:F7:58:DA:7E X509v3 Authority Key Identifier: keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:a9:2f:b2:40:f4:e2:0a:f7:ad:e0:0a:ea:e3:e2:23:ee:b7: 46:fe:a5:49:2e:a0:8a:53:9b:64:8f:3c:13:9f:ca:12:50:d2: b4:0c:59:2e:a4:04:df:55:b7:e0:1f:b9:67:a4:fb:33:47:c3: db:46:cc:6d:55:c7:a5:90:de:d8:4f:ec:87:72:57:a7:38:e5: 63:d2:17:d1:01:9f:31:11:08:c1:8b:cd:d8:36:fe:f2:00:d7: a7:29:55:1c:14:4a:ec:37:99:f9:19:a2:f9:5c:11:54:31:7c: a2:f5:61:50:05:41:25:61:b0:ba:2f:b4:70:6d:9f:0b:b8:a2: 99:2b:c6:66:3c:12:49:9e:d0:9d:3f:01:46:b3:8b:fc:6d:16: 53:14:da:ee:60:01:4d:be:7b:d7:c0:5a:bb:24:59:76:f0:b6: 6a:7d:88:18:26:e0:65:07:94:f1:d2:a6:00:83:65:9d:77:b4: 60:50:42:cf:f6:98:09:dd:4f:02:46:27:75:d6:79:a2:e6:e1: 49:b1:fe:77:ee:30:cf:65:1e:81:61:6e:71:1c:1b:e7:83:b6: a3:19:16:7f:1b:f8:af:79:cc:ab:c7:80:b3:c6:84:24:bc:45: cb:a7:22:d6:f0:89:e4:82:10:b9:7f:c0:c5:2b:4e:76:b1:94: 73:9f:8b:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3RkQxMTAvBgNVBAUTKDY4ODUyQUI3RjI3MTRGQ0Y1NEQ3NUYwQUFFMzA2OEFE QzM4QjM1Q0MwHhcNMjYwMzAyMDAyNTI2WhcNMjYwMzA5MDAyNTI2WjAYMRYwFAYD VQQDEw02OWE0ZDhmNy1lMGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjea5R453dABg9ERYYvt7s4eNeQnnb+TJvCbKe/e/Rpcu+Q745WY0hVtNmb1 jl94hbBKq/gN58dnVhZY94Tt8e9f0n76I+dVHueCvICeaV6GvdulhHKwBFngLnu3 jcfsi1ou6RXfZwZWu6p/uHbcCgPWd5GeWPR9sSXc0F1YeQrGqgYweKw17oUt2B3U VqGIDsUKT6SHlbpK6QN8ADggfiXmk5SGMUwoNW1Rg992+V4Zh1eReXTxQOFAsL8G 2/Wl64hyVNLv8OfyugEwpfbxqf6NBNH2GNprlPcHj2FA1vyVn8Ei2sw+9oJO+iW4 dHEzwspRCSB0oyRL0ImCjEWuGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIXiHdBO hwpLAUCY7V6cRbv3WNp+MB8GA1UdIwQYMBaAFGiFKrfycU/PVNdfCq4waK3DizXM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODdGRC81NUVENkExNjEw QTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4OVUxMThLcmpCb3JjT0xO Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJVXF0X0p4VDg5VTExOEtyakJvcmNPTE5jdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODdGRC81NUVENkExNjEwQTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4 OVUxMThLcmpCb3JjT0xOY3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIKkvskD04gr3reAK6uPiI+63Rv6lSS6gilObZI88E5/KElDStAxZLqQE31W3 4B+5Z6T7M0fD20bMbVXHpZDe2E/sh3JXpzjlY9IX0QGfMREIwYvN2Db+8gDXpylV HBRK7DeZ+Rmi+VwRVDF8ovVhUAVBJWGwui+0cG2fC7iimSvGZjwSSZ7QnT8BRrOL /G0WUxTa7mABTb5718BauyRZdvC2an2IGCbgZQeU8dKmAINlnXe0YFBCz/aYCd1P AkYnddZ5oubhSbH+d+4wz2UegWFucRwb54O2oxkWfxv4r3nMq8eAs8aEJLxFy6ci 1vCJ5IIQuX/AxStOdrGUc5+LRQ== -----END CERTIFICATE-----Generated at Mon Mar 2 04:41:55 2026 by rpki-client