$ rpki-client -vvf rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft File: pAislKDTNvRzJJBakYrySQLw3os.mft (raw, json) Hash identifier: Yl7HUg3r/nlNnuLyhAIp5deW/hBhP6BExHPv4wzZHvg= Subject key identifier: 94:40:C9:3D:69:5E:53:9F:A8:BD:44:B4:3B:1E:23:02:72:D5:B6:2E Authority key identifier: A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B Certificate issuer: /CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft Manifest number: 01BF Signing time: Mon 02 Mar 2026 00:50:09 +0000 Manifest this update: Mon 02 Mar 2026 00:50:08 +0000 Manifest next update: Mon 09 Mar 2026 00:50:08 +0000 Files and hashes: 1: pAislKDTNvRzJJBakYrySQLw3os.crl (hash: dzm4kWzKNc4qI8S1kUWpglykxjJM860qtsTBtECLSKU=) 2: 62258D42C93A11EEA1A4CA4FC4F9AE02.roa (hash: NrIYNnpiRgoM0pEu2ChgWZkIBgkpnd90Qm1TMb1PFZI=) 3: 62C61398C93A11EEA1A4CA4FC4F9AE02.roa (hash: I40Mjxu1ZcWd2eWAmdNiVDMFDrp/6Wro4hhomYDrrYU=) 4: 31A1996898F711EEB7B27877C4F9AE02.roa (hash: hHCyyzGsEC8V5KG9Wg3TJOVPDzSEhYHLIpTWQTIziHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158620, serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B Validity Not Before: Mar 2 00:50:08 2026 GMT Not After : Mar 9 00:50:08 2026 GMT Subject: CN=69a4dec1-d72f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b8:8c:6f:88:63:58:1b:05:c6:78:76:cf:89: 80:ee:33:fa:6a:08:6e:5e:b8:bc:15:ea:26:75:8d: ad:0b:95:70:6f:33:06:4d:49:79:75:3f:c7:d6:92: 84:29:c4:94:1d:86:bc:ee:1f:6c:b6:c8:aa:64:01: f2:94:4b:a3:67:8d:a1:9f:3f:22:aa:b1:72:0d:6c: 0b:4e:15:67:53:b1:b9:44:ef:80:d0:0d:7a:68:ae: 55:00:53:8e:31:57:af:6e:77:41:81:9f:2b:a7:b3: 5b:ab:b8:33:f6:80:2b:ad:57:07:07:3f:31:bd:9a: c8:ae:10:49:f3:47:c5:f2:2e:46:5d:46:53:8a:71: 9d:e6:d7:b2:98:8d:9a:fa:6b:fb:4c:ba:e2:cb:af: 71:1a:17:98:09:51:5c:8a:85:d0:95:f5:9f:d5:48: 39:83:ac:bb:23:d1:c4:63:1f:11:5d:ed:be:b0:0b: bf:b0:85:e8:ef:cd:82:20:55:c1:2d:ab:ab:84:62: 62:0e:a4:1c:bb:fd:a5:fc:ed:2c:e1:ae:42:04:d5: 52:2e:a3:5a:de:90:5e:25:67:10:28:3f:7a:89:b9: 61:32:03:f4:49:36:af:7d:c1:cf:3f:12:35:05:b9: a4:8c:00:73:54:f3:88:a5:a9:43:ac:a8:4c:37:36: 91:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:40:C9:3D:69:5E:53:9F:A8:BD:44:B4:3B:1E:23:02:72:D5:B6:2E X509v3 Authority Key Identifier: keyid:A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:1b:97:a8:a5:a1:8d:d1:ec:e1:f6:9d:14:12:8d:f9:d5:a0: 2b:ad:d6:f6:92:88:a3:02:df:02:53:90:c5:e5:d0:15:6d:4c: 2b:84:50:3b:d2:97:18:c1:fc:53:d4:ed:be:fe:5c:29:8b:9d: 0d:a4:a1:33:76:c5:fe:35:dc:53:d3:32:dc:59:37:12:3e:e8: 72:ff:b5:3d:57:fb:81:e4:b7:0d:28:9b:6b:ae:56:a8:24:fe: 37:1b:40:98:e2:15:00:5a:83:02:44:76:cf:7c:08:62:c3:d8: 33:d1:70:b1:cb:31:83:5e:6e:0e:58:18:78:5f:e5:db:8e:df: 1d:cc:e6:4e:cd:24:e4:68:70:1e:5f:44:7f:b2:d9:98:a6:e1: ae:46:3a:8f:3c:32:25:67:d0:f0:74:c4:07:a9:57:77:a8:5e: 4a:9a:c8:2d:e1:ae:eb:fd:3e:b6:85:e6:e9:df:25:50:c7:98: 79:f2:b9:c6:38:13:c0:03:32:c0:11:4e:88:0b:a6:df:12:b2: 57:29:d0:e0:59:2b:b0:18:d9:cc:55:b7:1d:9d:cf:f4:57:9a: 91:8a:a8:c0:de:70:4a:d3:02:24:20:de:ee:48:7b:5f:55:da: ab:23:4f:06:10:b3:fa:62:ec:29:92:f0:58:20:39:5a:65:78: cc:21:09:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2MjAxMTAvBgNVBAUTKEE0MDhBQzk0QTBEMzM2RjQ3MzI0OTA1QTkxOEFGMjQ5 MDJGMERFOEIwHhcNMjYwMzAyMDA1MDA4WhcNMjYwMzA5MDA1MDA4WjAYMRYwFAYD VQQDEw02OWE0ZGVjMS1kNzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybiMb4hjWBsFxnh2z4mA7jP6aghuXri8FeomdY2tC5VwbzMGTUl5dT/H1pKE KcSUHYa87h9stsiqZAHylEujZ42hnz8iqrFyDWwLThVnU7G5RO+A0A16aK5VAFOO MVevbndBgZ8rp7Nbq7gz9oArrVcHBz8xvZrIrhBJ80fF8i5GXUZTinGd5teymI2a +mv7TLriy69xGheYCVFcioXQlfWf1Ug5g6y7I9HEYx8RXe2+sAu/sIXo782CIFXB LaurhGJiDqQcu/2l/O0s4a5CBNVSLqNa3pBeJWcQKD96iblhMgP0STavfcHPPxI1 BbmkjABzVPOIpalDrKhMNzaR5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJRAyT1p XlOfqL1EtDseIwJy1bYuMB8GA1UdIwQYMBaAFKQIrJSg0zb0cySQWpGK8kkC8N6L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODYyMC8wRTkxOTkzNDg4 NDIxMUVFQTdEOEM4MTRDNEY5QUUwMi9wQWlzbEtEVE52UnpKSkJha1lyeVNRTHcz b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BBaXNsS0RUTnZSekpKQmFrWXJ5U1FMdzNvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODYyMC8wRTkxOTkzNDg4NDIxMUVFQTdEOEM4MTRDNEY5QUUwMi9wQWlzbEtEVE52 UnpKSkJha1lyeVNRTHczb3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqhuXqKWhjdHs4fadFBKN+dWgK63W9pKIowLfAlOQxeXQFW1MK4RQO9KXGMH8 U9Ttvv5cKYudDaShM3bF/jXcU9My3Fk3Ej7ocv+1PVf7geS3DSiba65WqCT+NxtA mOIVAFqDAkR2z3wIYsPYM9Fwscsxg15uDlgYeF/l247fHczmTs0k5GhwHl9Ef7LZ mKbhrkY6jzwyJWfQ8HTEB6lXd6heSprILeGu6/0+toXm6d8lUMeYefK5xjgTwAMy wBFOiAum3xKyVynQ4FkrsBjZzFW3HZ3P9FeakYqowN5wStMCJCDe7kh7X1XaqyNP BhCz+mLsKZLwWCA5WmV4zCEJ3A== -----END CERTIFICATE-----Generated at Mon Mar 2 03:43:51 2026 by rpki-client