$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft File: aAYK77v8wH1z211yeLyPJJxX9RU.mft (raw, json) Hash identifier: XcxPzklpnA8mhK9oVdv6I3DShDFGgTK8CeqolNbvV24= Subject key identifier: D7:AB:20:95:D8:B6:17:AD:7B:6A:5D:02:9A:A7:A1:FD:F5:0C:A3:35 Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 Certificate issuer: /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Certificate serial: 0436 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft Manifest number: 0427 Signing time: Mon 02 Mar 2026 01:23:56 +0000 Manifest this update: Mon 02 Mar 2026 01:23:54 +0000 Manifest next update: Mon 09 Mar 2026 01:23:54 +0000 Files and hashes: 1: aAYK77v8wH1z211yeLyPJJxX9RU.crl (hash: SoxEuyfrAq12y+4/y6wLSU6slss49pYyBO/RFtH+u4M=) 2: 5B639C667CEB11EDA3D10364C4F9AE02.roa (hash: jOpgFFCS/1CmFmMq11LzMDo5QLDmdjyDxLZ4T6TyavY=) 3: ADBB651E043411ED9F02B325C4F9AE02.roa (hash: I+A6jU5dzLuzTjRDJLWlUAhXYmfB0fXHWslyFxviwpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1078 (0x436) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912859A, serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Validity Not Before: Mar 2 01:23:54 2026 GMT Not After : Mar 9 01:23:54 2026 GMT Subject: CN=69a4e6ac-063b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:27:d5:6b:ba:70:e1:3b:ff:2b:cc:a1:b3:8f: 7a:21:8f:f1:c5:e4:26:56:9f:ca:3b:0c:42:fa:a0: c9:dd:b5:25:49:08:25:3c:c9:96:e4:d2:e7:d2:af: b1:cd:8f:26:a2:de:a7:08:d0:fc:02:7a:99:a7:7d: 74:09:c8:f9:5a:8b:7b:fe:80:77:74:36:26:9b:2b: 5c:38:9c:f5:9e:1a:e1:48:2b:7d:32:35:65:c1:58: e5:33:c0:68:a8:cf:ca:27:ba:75:b2:e1:4a:69:ef: 6f:24:0c:41:74:85:99:69:e9:73:88:9a:f5:10:0a: 4a:b7:c9:8f:be:e8:cd:15:9e:37:5b:6a:52:2d:0b: 0b:de:d5:d9:a9:24:f6:0f:53:34:bb:75:e9:f5:d0: f8:ae:c5:b6:74:cb:aa:2a:c5:6b:05:70:2c:a8:b2: 6b:b8:72:ce:31:8d:fa:fe:95:47:34:82:29:29:85: ef:2d:4c:06:a3:bf:e6:1f:6e:b1:4a:88:47:38:8d: 37:61:50:b4:a8:15:c5:e3:07:0e:09:7d:15:5a:d6: 8d:3a:e6:e3:e2:3e:a3:2e:76:4d:24:ab:ca:9d:7d: 7e:35:d2:d0:90:eb:03:4d:22:4f:44:cd:1e:e6:2f: e1:e1:5c:d6:c4:dd:12:0c:86:5b:30:ea:9b:eb:01: b0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AB:20:95:D8:B6:17:AD:7B:6A:5D:02:9A:A7:A1:FD:F5:0C:A3:35 X509v3 Authority Key Identifier: keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e4:27:b6:0a:3a:cd:6e:48:79:e3:ec:ec:a6:1a:0c:5c:ed: 50:cb:27:9c:06:44:07:d6:96:06:54:48:51:85:9b:2e:dd:7e: 17:e7:72:69:76:a0:db:4f:67:37:4a:be:96:54:eb:f9:09:6b: 4c:13:46:3c:5e:ff:e6:14:5d:57:65:ae:75:ee:ab:58:be:cb: f8:f9:35:2b:fa:77:af:71:d9:5d:7d:82:df:e8:72:a8:c4:67: 0a:09:37:f9:df:64:32:5f:6b:7e:e7:e6:04:b3:79:3a:51:b1: 87:b8:94:70:24:3d:3b:a9:5c:38:1a:13:74:63:48:ed:20:b7: c4:72:47:61:d5:90:6f:84:23:7e:02:db:d2:2a:31:7a:97:97: 6c:8a:ae:c9:36:56:77:88:7b:4c:d7:e3:a4:e5:84:62:81:f0: af:e1:b0:f8:d8:2d:06:a3:23:72:d5:68:ce:17:ab:ca:68:ef: 95:4d:81:20:88:ec:4c:40:b6:35:0d:ce:dd:71:1d:db:7a:41: fd:00:4e:58:c9:19:f0:4f:10:21:51:29:6d:e8:e1:7d:63:97: 8b:e7:62:61:b8:06:36:63:bf:7a:fa:d8:fa:29:90:ab:f5:2c: f3:f0:40:34:2f:a9:4a:6e:bb:f3:7c:35:60:89:7e:07:fe:b1: 87:43:98:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1OUExMTAvBgNVBAUTKDY4MDYwQUVGQkJGQ0MwN0Q3M0RCNUQ3Mjc4QkM4RjI0 OUM1N0Y1MTUwHhcNMjYwMzAyMDEyMzU0WhcNMjYwMzA5MDEyMzU0WjAYMRYwFAYD VQQDEw02OWE0ZTZhYy0wNjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvifVa7pw4Tv/K8yhs496IY/xxeQmVp/KOwxC+qDJ3bUlSQglPMmW5NLn0q+x zY8mot6nCND8AnqZp310Ccj5Wot7/oB3dDYmmytcOJz1nhrhSCt9MjVlwVjlM8Bo qM/KJ7p1suFKae9vJAxBdIWZaelziJr1EApKt8mPvujNFZ43W2pSLQsL3tXZqST2 D1M0u3Xp9dD4rsW2dMuqKsVrBXAsqLJruHLOMY36/pVHNIIpKYXvLUwGo7/mH26x SohHOI03YVC0qBXF4wcOCX0VWtaNOubj4j6jLnZNJKvKnX1+NdLQkOsDTSJPRM0e 5i/h4VzWxN0SDIZbMOqb6wGwfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNerIJXY thete2pdApqnof31DKM1MB8GA1UdIwQYMBaAFGgGCu+7/MB9c9tdcni8jyScV/UV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU5QS9CQUNBQjdFQzlE RkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdIMXoyMTF5ZUx5UEpKeFg5 UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FBWUs3N3Y4d0gxejIxMXllTHlQSkp4WDlSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODU5QS9CQUNBQjdFQzlERkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdI MXoyMTF5ZUx5UEpKeFg5UlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW+Qntgo6zW5IeePs7KYaDFztUMsnnAZEB9aWBlRIUYWbLt1+F+dyaXag209n N0q+llTr+QlrTBNGPF7/5hRdV2Wude6rWL7L+Pk1K/p3r3HZXX2C3+hyqMRnCgk3 +d9kMl9rfufmBLN5OlGxh7iUcCQ9O6lcOBoTdGNI7SC3xHJHYdWQb4QjfgLb0iox epeXbIquyTZWd4h7TNfjpOWEYoHwr+Gw+NgtBqMjctVozherymjvlU2BIIjsTEC2 NQ3O3XEd23pB/QBOWMkZ8E8QIVEpbejhfWOXi+diYbgGNmO/evrY+imQq/Us8/BA NC+pSm6783w1YIl+B/6xh0OY2A== -----END CERTIFICATE-----Generated at Mon Mar 2 05:50:30 2026 by rpki-client