$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft File: aaSG-_IUhPFBL7ioCieKJIzvvrI.mft (raw, json) Hash identifier: pAZXUhxj+pfRVBcvn6LhjY5GzfnniEOYSUIT8COj2gk= Subject key identifier: 8A:81:D1:15:B4:C5:73:C7:48:30:D3:D8:37:4C:EC:26:D5:39:88:5E Authority key identifier: 69:A4:86:FB:F2:14:84:F1:41:2F:B8:A8:0A:27:8A:24:8C:EF:BE:B2 Certificate issuer: /CN=A91B4713/serialNumber=69A486FBF21484F1412FB8A80A278A248CEFBEB2 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft Manifest number: 01CB Signing time: Fri 17 Apr 2026 03:31:13 +0000 Manifest this update: Fri 17 Apr 2026 03:31:13 +0000 Manifest next update: Fri 24 Apr 2026 03:31:13 +0000 Files and hashes: 1: aaSG-_IUhPFBL7ioCieKJIzvvrI.crl (hash: fotFTYpKpNtpHy2qD45P0sFGNr/wdISyxPAXjyoZrh4=) 2: A5656D2E892B11EE94747D6BC4F9AE02.roa (hash: /k9F9UoMVvvC6p1jgV3pWpP4PVT7CPpxGz+wVVYMTRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.crl rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4713, serialNumber=69A486FBF21484F1412FB8A80A278A248CEFBEB2 Validity Not Before: Apr 17 03:31:13 2026 GMT Not After : Apr 24 03:31:13 2026 GMT Subject: CN=69e1a981-4262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c3:1c:e7:73:f8:86:b1:e5:87:e1:0e:7e:3c: 8b:11:30:1b:49:d6:33:2f:e8:eb:8b:94:5a:c5:67: 75:fe:21:fa:f2:51:76:06:b6:ce:a7:92:5c:e9:a0: a7:5c:bf:d9:50:7f:b4:5e:24:dc:a0:e5:ff:48:95: 8d:6e:a6:29:13:2c:e3:04:e9:dd:fb:ed:07:b4:ba: a2:6d:16:79:7f:d1:3d:fe:da:d0:24:ab:e1:39:95: eb:48:e9:f1:a1:49:ad:8c:b3:12:9e:b3:71:ac:05: f3:71:12:21:c3:5a:1a:41:ed:4b:f4:d3:e4:a8:f6: ef:b5:0f:34:8b:ac:a7:3e:76:7c:c0:2b:2f:37:ec: 03:03:d0:67:a4:ba:86:92:26:71:d9:c6:cf:f5:1b: cc:68:28:da:7c:13:47:98:c9:3b:fd:b3:a0:7a:21: 48:2d:39:69:1e:6b:3e:19:45:3a:ac:66:6f:c2:dd: da:42:b2:fc:e9:d1:fa:7e:55:3a:e5:eb:2c:e7:0a: 9c:38:f5:be:45:88:3c:5f:9c:f6:ff:fe:90:27:b3: 3f:ad:41:c6:74:79:28:b5:00:e3:e7:18:62:cf:b4: b3:f9:70:db:52:a8:6e:53:5f:fa:2a:fc:56:38:cc: 7b:b5:32:a5:7a:f8:6d:e4:c7:1d:cb:91:9f:ff:02: fb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:81:D1:15:B4:C5:73:C7:48:30:D3:D8:37:4C:EC:26:D5:39:88:5E X509v3 Authority Key Identifier: keyid:69:A4:86:FB:F2:14:84:F1:41:2F:B8:A8:0A:27:8A:24:8C:EF:BE:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:af:db:33:73:7d:75:84:88:af:3d:a7:53:bc:77:5b:b3:d6: 1d:5a:fd:c2:2d:5e:f6:8c:9d:4c:b9:e1:2e:0a:b1:ca:4f:4f: 1e:46:b0:ce:42:a1:e7:ff:fb:b4:a1:00:3b:16:79:8a:93:33: 84:8e:71:65:44:d5:e0:ab:36:e8:46:82:c3:3b:b4:60:47:0f: de:be:58:5e:dd:cb:fc:b9:cb:ce:f7:bc:e7:e4:ea:fb:f9:cd: b1:f5:d6:14:11:bb:00:9d:3f:4a:9a:b5:fc:86:b7:e5:b0:c2: fb:87:7b:7f:10:1f:ac:0b:e4:7a:55:fa:30:c6:44:f4:88:6c: 76:3a:1b:ca:a3:0e:23:03:00:6c:8e:03:b3:1c:d6:b6:a1:50: 0e:48:c4:d6:69:a4:b8:a8:f9:4f:12:95:c2:95:1e:31:b2:61: 64:e9:f1:cd:f0:4c:0a:d1:8d:5d:26:d9:cb:6a:69:5f:81:4b: 7e:f1:b1:95:20:8a:35:e7:60:d5:ee:d8:a4:4e:c5:fd:56:4c: da:47:ff:c5:6b:a0:64:c7:ea:af:15:9f:33:fb:07:85:9c:19: 83:b1:ad:2c:9b:e2:63:15:03:b4:7c:ad:93:1d:42:07:52:58: 15:91:6e:10:e8:66:6f:f3:1e:35:b4:10:bf:f3:cb:de:d0:0a: 66:3d:a1:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ3MTMxMTAvBgNVBAUTKDY5QTQ4NkZCRjIxNDg0RjE0MTJGQjhBODBBMjc4QTI0 OENFRkJFQjIwHhcNMjYwNDE3MDMzMTEzWhcNMjYwNDI0MDMzMTEzWjAYMRYwFAYD VQQDEw02OWUxYTk4MS00MjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusMc53P4hrHlh+EOfjyLETAbSdYzL+jri5RaxWd1/iH68lF2BrbOp5Jc6aCn XL/ZUH+0XiTcoOX/SJWNbqYpEyzjBOnd++0HtLqibRZ5f9E9/trQJKvhOZXrSOnx oUmtjLMSnrNxrAXzcRIhw1oaQe1L9NPkqPbvtQ80i6ynPnZ8wCsvN+wDA9BnpLqG kiZx2cbP9RvMaCjafBNHmMk7/bOgeiFILTlpHms+GUU6rGZvwt3aQrL86dH6flU6 5ess5wqcOPW+RYg8X5z2//6QJ7M/rUHGdHkotQDj5xhiz7Sz+XDbUqhuU1/6KvxW OMx7tTKlevht5Mcdy5Gf/wL7WwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIqB0RW0 xXPHSDDT2DdM7CbVOYheMB8GA1UdIwQYMBaAFGmkhvvyFITxQS+4qAoniiSM776y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDcxMy9GRTFCRDk3Qzg5 MkExMUVFQjYxNDgyNkFDNEY5QUUwMi9hYVNHLV9JVWhQRkJMN2lvQ2llS0pJenZ2 ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhU0ctX0lVaFBGQkw3aW9DaWVLSkl6dnZySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDcxMy9GRTFCRDk3Qzg5MkExMUVFQjYxNDgyNkFDNEY5QUUwMi9hYVNHLV9JVWhQ RkJMN2lvQ2llS0pJenZ2ckkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbK/bM3N9dYSIrz2nU7x3W7PWHVr9wi1e9oydTLnhLgqxyk9PHkawzkKh5//7 tKEAOxZ5ipMzhI5xZUTV4Ks26EaCwzu0YEcP3r5YXt3L/LnLzve85+Tq+/nNsfXW FBG7AJ0/Spq1/Ia35bDC+4d7fxAfrAvkelX6MMZE9IhsdjobyqMOIwMAbI4DsxzW tqFQDkjE1mmkuKj5TxKVwpUeMbJhZOnxzfBMCtGNXSbZy2ppX4FLfvGxlSCKNedg 1e7YpE7F/VZM2kf/xWugZMfqrxWfM/sHhZwZg7GtLJviYxUDtHytkx1CB1JYFZFu EOhmb/MeNbQQv/PL3tAKZj2h4w== -----END CERTIFICATE-----Generated at Fri Apr 17 15:42:17 2026 by rpki-client