$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft File: aaSG-_IUhPFBL7ioCieKJIzvvrI.mft (raw, json) Hash identifier: y2KFpCquOxkOPNWsgg262nJeXz4v2zgrdz7FAGPY+Cs= Subject key identifier: 83:CF:10:7F:D2:E7:DE:57:75:3C:4B:E2:D2:61:E0:29:B6:A3:2F:1D Authority key identifier: 69:A4:86:FB:F2:14:84:F1:41:2F:B8:A8:0A:27:8A:24:8C:EF:BE:B2 Certificate issuer: /CN=A91B4713/serialNumber=69A486FBF21484F1412FB8A80A278A248CEFBEB2 Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft Manifest number: 01B3 Signing time: Mon 02 Mar 2026 00:10:09 +0000 Manifest this update: Mon 02 Mar 2026 00:10:07 +0000 Manifest next update: Mon 09 Mar 2026 00:10:07 +0000 Files and hashes: 1: aaSG-_IUhPFBL7ioCieKJIzvvrI.crl (hash: 4HH74VRfwQQ3LL2PBDwB2AZ/x51Fl2n0KA37XWBZqd0=) 2: A5656D2E892B11EE94747D6BC4F9AE02.roa (hash: /k9F9UoMVvvC6p1jgV3pWpP4PVT7CPpxGz+wVVYMTRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.crl rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4713, serialNumber=69A486FBF21484F1412FB8A80A278A248CEFBEB2 Validity Not Before: Mar 2 00:10:07 2026 GMT Not After : Mar 9 00:10:07 2026 GMT Subject: CN=69a4d561-0ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:74:71:1e:c6:08:64:29:d5:38:f5:18:a8:fb: db:a7:a2:9d:d5:34:5f:d3:fb:95:be:ea:1a:06:47: 0d:38:d0:a7:08:4b:99:31:19:9f:3b:84:8d:66:e9: ce:93:e3:03:69:8a:e8:e3:1d:d2:99:78:53:65:0e: 03:ed:c3:8c:be:5c:93:37:68:be:dd:72:00:14:03: 9e:66:58:30:86:31:50:96:c7:32:1c:8e:d7:b6:8e: df:19:8d:62:19:01:ad:bc:ff:94:5d:2f:9a:30:dc: f7:fe:d1:9c:3a:b8:d5:4f:32:47:32:8d:c8:2b:be: d6:24:b2:3a:6f:06:2a:81:d9:2d:e2:d0:bd:4c:af: e0:1a:cb:bd:ed:49:c0:c3:94:17:52:3f:c7:0e:db: 8e:fa:86:67:c1:54:40:2e:5c:4a:5e:56:62:e7:a1: 26:a3:eb:12:15:26:26:94:5d:b5:60:8c:47:32:f3: cf:51:d4:ad:c2:df:8b:b4:1f:de:b8:2f:1c:58:b5: bd:4d:a0:e8:98:1a:30:7a:12:98:c1:d9:e9:e9:f4: 62:7f:87:1e:60:41:87:8b:e4:d6:80:66:60:33:6d: 5d:d0:e0:fc:b2:95:a7:33:f2:4e:fe:62:57:06:d4: 3f:76:1a:b8:43:d2:f0:2d:7e:0c:6d:72:06:9b:94: 9b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CF:10:7F:D2:E7:DE:57:75:3C:4B:E2:D2:61:E0:29:B6:A3:2F:1D X509v3 Authority Key Identifier: keyid:69:A4:86:FB:F2:14:84:F1:41:2F:B8:A8:0A:27:8A:24:8C:EF:BE:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaSG-_IUhPFBL7ioCieKJIzvvrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4713/FE1BD97C892A11EEB614826AC4F9AE02/aaSG-_IUhPFBL7ioCieKJIzvvrI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:71:5e:65:12:4f:30:db:f2:82:ef:0e:30:8f:47:d6:53:56: 36:7c:d2:42:82:62:75:93:05:d6:4c:8d:74:cc:80:a6:1d:d3: 4f:3f:f3:64:50:8c:24:31:24:ff:70:32:2d:5c:af:1d:04:90: 77:67:eb:a6:15:dc:ea:36:76:30:58:ba:45:7c:ae:4c:6d:5f: 6e:eb:2b:09:a6:6a:fd:5a:b8:8d:16:f6:20:ee:a9:7a:a4:02: dc:58:e2:c3:1e:ba:8a:bf:bc:09:bd:93:36:c0:9a:5c:7f:9b: 24:67:32:03:9c:b2:d1:be:2b:f9:5f:62:43:34:e1:d5:96:af: f1:4c:1a:8f:de:13:aa:93:c2:26:5d:e2:bf:7c:17:28:52:8c: 07:50:d7:59:2c:42:b7:77:1e:61:ac:25:e9:a3:4a:61:21:81: b4:fc:d7:62:4f:47:8f:d4:e8:c9:b6:0a:25:17:58:71:35:24: d9:f0:b2:22:ed:ef:ac:a4:23:51:79:8c:9c:15:be:56:84:14: 0e:01:04:13:9f:38:01:91:38:5a:82:de:81:ce:39:50:0a:7b: 69:e6:98:3b:ce:f9:e0:31:11:24:66:b7:97:07:42:4c:0d:5b: f5:69:ba:bb:07:58:a4:16:e3:4c:4a:92:f2:7a:2c:26:e2:83: 28:fc:ab:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ3MTMxMTAvBgNVBAUTKDY5QTQ4NkZCRjIxNDg0RjE0MTJGQjhBODBBMjc4QTI0 OENFRkJFQjIwHhcNMjYwMzAyMDAxMDA3WhcNMjYwMzA5MDAxMDA3WjAYMRYwFAYD VQQDEw02OWE0ZDU2MS0wYmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HRxHsYIZCnVOPUYqPvbp6Kd1TRf0/uVvuoaBkcNONCnCEuZMRmfO4SNZunO k+MDaYro4x3SmXhTZQ4D7cOMvlyTN2i+3XIAFAOeZlgwhjFQlscyHI7Xto7fGY1i GQGtvP+UXS+aMNz3/tGcOrjVTzJHMo3IK77WJLI6bwYqgdkt4tC9TK/gGsu97UnA w5QXUj/HDtuO+oZnwVRALlxKXlZi56Emo+sSFSYmlF21YIxHMvPPUdStwt+LtB/e uC8cWLW9TaDomBowehKYwdnp6fRif4ceYEGHi+TWgGZgM21d0OD8spWnM/JO/mJX BtQ/dhq4Q9LwLX4MbXIGm5Sb5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIPPEH/S 595XdTxL4tJh4Cm2oy8dMB8GA1UdIwQYMBaAFGmkhvvyFITxQS+4qAoniiSM776y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDcxMy9GRTFCRDk3Qzg5 MkExMUVFQjYxNDgyNkFDNEY5QUUwMi9hYVNHLV9JVWhQRkJMN2lvQ2llS0pJenZ2 ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhU0ctX0lVaFBGQkw3aW9DaWVLSkl6dnZySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDcxMy9GRTFCRDk3Qzg5MkExMUVFQjYxNDgyNkFDNEY5QUUwMi9hYVNHLV9JVWhQ RkJMN2lvQ2llS0pJenZ2ckkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOHFeZRJPMNvygu8OMI9H1lNWNnzSQoJidZMF1kyNdMyAph3TTz/zZFCMJDEk /3AyLVyvHQSQd2frphXc6jZ2MFi6RXyuTG1fbusrCaZq/Vq4jRb2IO6peqQC3Fji wx66ir+8Cb2TNsCaXH+bJGcyA5yy0b4r+V9iQzTh1Zav8Uwaj94TqpPCJl3iv3wX KFKMB1DXWSxCt3ceYawl6aNKYSGBtPzXYk9Hj9ToybYKJRdYcTUk2fCyIu3vrKQj UXmMnBW+VoQUDgEEE584AZE4WoLegc45UAp7aeaYO8754DERJGa3lwdCTA1b9Wm6 uwdYpBbjTEqS8nosJuKDKPyrAA== -----END CERTIFICATE-----Generated at Mon Mar 2 12:02:03 2026 by rpki-client