$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft File: Aqo6dsRZSXsbRfJukESsxvLoBE8.mft (raw, json) Hash identifier: xHOSe/6snCFHZRdHgMvlwAavlUgm9hxmyHiOIFYiHWw= Subject key identifier: 07:D9:D4:67:B5:3A:19:D2:6F:52:C0:8F:00:39:48:FF:09:CC:68:0C Authority key identifier: 02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F Certificate issuer: /CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Certificate serial: 0404 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft Manifest number: 03F1 Signing time: Sun 01 Mar 2026 01:22:28 +0000 Manifest this update: Sun 01 Mar 2026 01:22:27 +0000 Manifest next update: Sun 08 Mar 2026 01:22:27 +0000 Files and hashes: 1: Aqo6dsRZSXsbRfJukESsxvLoBE8.crl (hash: P94GHLXWfDLR+YpO++AyXQrYYr23zayP0sECHJ9Lca4=) 2: 87F2D334F2D811EC8F663D52C4F9AE02.roa (hash: 2CusgDeod/GNoY/LuvI1PPosNLPCfcqPbyc433D/0Uw=) 3: 5FFA5548B5A311EEA95C5732C4F9AE02.roa (hash: Qo8S4vnL8vk6lsjFg8E5pxu1jHSHJhkqcg0rzkOHusw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1028 (0x404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA5BA, serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Validity Not Before: Mar 1 01:22:27 2026 GMT Not After : Mar 8 01:22:27 2026 GMT Subject: CN=69a394d3-4ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f7:17:ac:89:cf:7b:8a:d1:f8:db:b5:fb:84: 4b:9c:f6:ee:7a:d5:cd:82:94:be:e4:c9:0d:15:dd: 07:7e:c0:9a:b1:25:13:6e:3a:eb:c6:e4:51:74:b9: 2a:da:55:49:7d:eb:33:38:1a:66:0e:74:ed:1c:7b: 77:09:61:50:07:fd:3f:dc:d3:ea:67:77:47:b2:5e: 87:26:3f:58:8b:08:de:8c:6e:4d:b1:a6:63:05:55: 02:d5:a3:c7:ce:be:a8:87:3e:44:a0:83:af:6a:2e: 84:56:94:9c:39:1f:0d:99:97:8a:4d:51:cc:ec:cd: fb:b1:49:44:34:3f:bc:f4:b4:18:b0:88:9b:68:3c: 01:18:9c:7d:71:c0:9d:b9:62:67:5b:58:8d:79:62: cb:0b:43:6a:de:1e:66:78:56:27:fb:f6:2f:18:dc: d7:96:cc:02:2f:8e:80:49:29:5f:23:51:99:77:9b: 56:f0:f2:05:9c:99:dd:2f:1a:e8:71:45:a1:d3:9d: 9a:fd:a4:10:04:e3:73:43:a0:33:10:a8:8c:d3:d9: 46:59:b6:20:c5:ca:64:60:ad:15:82:27:54:49:7f: f3:81:3c:c7:3e:12:80:86:fe:27:38:60:95:b3:27: bf:93:6f:12:b8:0e:b6:63:02:d3:22:e7:16:f6:1e: ac:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D9:D4:67:B5:3A:19:D2:6F:52:C0:8F:00:39:48:FF:09:CC:68:0C X509v3 Authority Key Identifier: keyid:02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:0f:9f:65:5d:a7:e3:21:fb:24:95:29:c3:6d:46:21:74:f9: e8:59:f3:95:b8:9c:e0:5e:42:01:5b:d7:6d:79:b1:73:79:f4: 29:83:4d:b6:32:5e:05:0c:01:f3:b9:ad:e2:6d:f5:f0:b7:67: 50:9c:e6:aa:3d:63:92:3b:72:c0:39:2e:bd:43:85:da:75:40: f1:17:b9:ba:22:f7:de:9e:11:62:79:cb:88:cb:a8:f5:f2:b2: cc:76:69:f3:4d:a0:7c:a0:3a:c0:cd:21:20:41:96:3c:91:5f: 4e:6b:97:fc:c4:8d:a4:dc:3b:d8:36:6a:75:80:2d:1c:61:65: 79:b4:82:d8:fb:0d:b6:97:2a:33:94:6d:c8:9e:f4:59:17:b3: 51:65:92:98:7b:29:eb:d0:8b:eb:c4:29:c8:0b:22:5a:d1:50: dd:83:bd:9f:f2:9e:e6:07:17:9c:f8:38:e8:ae:9f:08:25:df: 9e:73:42:05:5d:4e:4b:2f:06:b7:bd:4a:81:c0:32:47:d2:c9: 47:fc:31:ab:64:cc:bd:77:ee:e6:62:eb:b0:33:09:47:ed:5b: 5d:71:dc:10:88:9a:54:03:6b:9e:e1:1b:1e:d9:7c:b6:3c:35: 17:47:20:3a:ff:82:8b:6b:e0:7b:17:2b:85:de:15:4d:8c:c6: 39:b7:65:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1QkExMTAvBgNVBAUTKDAyQUEzQTc2QzQ1OTQ5N0IxQjQ1RjI2RTkwNDRBQ0M2 RjJFODA0NEYwHhcNMjYwMzAxMDEyMjI3WhcNMjYwMzA4MDEyMjI3WjAYMRYwFAYD VQQDDA02OWEzOTRkMy00YWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfcXrInPe4rR+Nu1+4RLnPbuetXNgpS+5MkNFd0HfsCasSUTbjrrxuRRdLkq 2lVJfeszOBpmDnTtHHt3CWFQB/0/3NPqZ3dHsl6HJj9YiwjejG5NsaZjBVUC1aPH zr6ohz5EoIOvai6EVpScOR8NmZeKTVHM7M37sUlEND+89LQYsIibaDwBGJx9ccCd uWJnW1iNeWLLC0Nq3h5meFYn+/YvGNzXlswCL46ASSlfI1GZd5tW8PIFnJndLxro cUWh052a/aQQBONzQ6AzEKiM09lGWbYgxcpkYK0VgidUSX/zgTzHPhKAhv4nOGCV sye/k28SuA62YwLTIucW9h6s9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAfZ1Ge1 OhnSb1LAjwA5SP8JzGgMMB8GA1UdIwQYMBaAFAKqOnbEWUl7G0XybpBErMby6ARP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTVCQS80MzI2Q0JDMEI3 Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNYc2JSZkp1a0VTc3h2TG9C RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxbzZkc1JaU1hzYlJmSnVrRVNzeHZMb0JFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTVCQS80MzI2Q0JDMEI3Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNY c2JSZkp1a0VTc3h2TG9CRTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyg+fZV2n4yH7JJUpw21GIXT56Fnzlbic4F5CAVvXbXmxc3n0KYNNtjJeBQwB 87mt4m318LdnUJzmqj1jkjtywDkuvUOF2nVA8Re5uiL33p4RYnnLiMuo9fKyzHZp 802gfKA6wM0hIEGWPJFfTmuX/MSNpNw72DZqdYAtHGFlebSC2PsNtpcqM5RtyJ70 WRezUWWSmHsp69CL68QpyAsiWtFQ3YO9n/Ke5gcXnPg46K6fCCXfnnNCBV1OSy8G t71KgcAyR9LJR/wxq2TMvXfu5mLrsDMJR+1bXXHcEIiaVANrnuEbHtl8tjw1F0cg Ov+Ci2vgexcrhd4VTYzGObdlFg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:21:43 2026 by rpki-client