$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft File: aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft (raw, json) Hash identifier: hvH3MuBfluAvOm62Al8YBzycv+sMk8JfB6kXaGPzUlo= Subject key identifier: DD:C8:C0:65:BB:E3:AF:25:B9:50:BC:10:9F:7D:AF:7B:AB:D3:78:23 Authority key identifier: 68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52 Certificate issuer: /CN=A91DCAE8/serialNumber=684597E998A3A0C6987361B7C572043A816C1C52 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft Manifest number: 40 Signing time: Sun 01 Mar 2026 23:25:57 +0000 Manifest this update: Sun 01 Mar 2026 23:25:55 +0000 Manifest next update: Sun 08 Mar 2026 23:25:55 +0000 Files and hashes: 1: aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl (hash: ze3gUYsAhU9xM9aqUl6M+tZGvEHUHgIClxHuQDTYkEI=) 2: 12E8FD5CBECC11F098CFE015C4F9AE02.roa (hash: ZnOlNoLSibfq3/qIsrDbM5RZVyIuk7cWs+48nm4czSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:25:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8, serialNumber=684597E998A3A0C6987361B7C572043A816C1C52 Validity Not Before: Mar 1 23:25:55 2026 GMT Not After : Mar 8 23:25:55 2026 GMT Subject: CN=69a4cb04-cf09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:04:62:e6:dd:c9:4d:48:a6:ba:5d:91:78:e5: dd:9a:be:74:6e:56:57:af:8e:54:5b:c8:53:7e:5d: 02:06:c1:cb:d3:56:1c:7e:08:41:3a:37:3e:55:5a: c1:7f:8f:43:c5:97:aa:f1:8f:7b:78:41:f0:8a:e4: b8:29:05:ac:a6:34:6f:89:f9:87:05:98:24:2f:4c: 0f:4a:e6:be:7d:63:6a:07:b4:c6:36:ad:cd:af:28: a9:7e:44:37:7c:be:6d:8a:7f:81:89:60:b3:c6:28: 0a:d5:e5:1a:68:a3:3c:5e:1e:65:dc:a9:e4:ff:ed: 9f:23:79:7d:b4:f6:f9:57:83:b5:b9:54:10:ad:6e: ac:07:63:93:50:50:1c:2b:39:65:4c:c2:7b:9a:6f: d1:75:2c:7a:bc:5a:0c:8f:43:68:bd:26:bb:d3:88: 8a:bd:3b:5c:f6:18:5d:63:40:95:42:6f:13:36:51: 2b:a2:ad:07:e2:a1:21:31:73:d4:fa:0c:00:79:d8: 49:a4:b1:b3:72:3e:a3:98:74:1d:04:80:0f:e6:4b: 41:7d:f4:d0:a9:69:55:08:8b:49:00:44:06:6e:72: e0:d2:75:44:7f:d6:6f:bd:b3:35:00:3e:54:be:5e: cb:45:f6:7e:62:5a:2e:bf:85:2f:1c:03:40:98:21: e7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C8:C0:65:BB:E3:AF:25:B9:50:BC:10:9F:7D:AF:7B:AB:D3:78:23 X509v3 Authority Key Identifier: keyid:68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:4c:47:45:01:16:7c:31:04:4a:b8:be:a9:ac:d0:cd:4f:3f: 7e:1c:90:e9:53:31:04:1c:89:0c:e2:31:0a:50:0e:cf:c0:b2: 71:0b:e0:9d:8c:ad:67:c6:7d:de:f7:3e:2a:6f:93:ca:03:7a: 27:a9:0d:d6:ff:d0:d3:61:91:fc:e5:89:ac:53:f0:c5:96:a4: b9:63:31:56:43:16:47:05:b8:be:ac:1d:a1:16:bc:0a:5d:38: 6d:f9:7c:d5:2b:38:ab:e1:1d:02:6b:04:bd:b3:ee:95:5c:e9: 4a:08:74:3b:af:ca:24:0b:67:d1:36:81:16:ed:cb:c8:de:68: df:f9:89:f7:16:c7:05:a4:bb:8e:94:40:79:79:45:8a:dd:a1: 37:03:aa:5c:a7:50:3f:bc:b1:7c:9d:9f:b4:ca:a4:a5:98:2e: 2d:83:d8:d3:20:0a:d5:df:50:b0:0a:e3:7e:ce:23:ed:fc:9f: 3b:9c:db:69:52:de:9b:66:cd:70:dc:69:56:ed:67:d2:6f:78: fd:8b:85:ea:b4:85:42:c7:8a:fb:99:c0:e2:b4:1a:8d:fd:0b: 0b:a1:7e:a9:68:cb:2d:9f:93:37:d3:72:e4:2b:bb:f8:55:a6: 53:cf:44:c6:ff:b0:48:8b:ce:c8:80:14:b8:18:a8:4f:bb:f1: a5:33:e9:c1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Q0FFODExMC8GA1UEBRMoNjg0NTk3RTk5OEEzQTBDNjk4NzM2MUI3QzU3MjA0M0E4 MTZDMUM1MjAeFw0yNjAzMDEyMzI1NTVaFw0yNjAzMDgyMzI1NTVaMBgxFjAUBgNV BAMTDTY5YTRjYjA0LWNmMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWBGLm3clNSKa6XZF45d2avnRuVlevjlRbyFN+XQIGwcvTVhx+CEE6Nz5VWsF/ j0PFl6rxj3t4QfCK5LgpBaymNG+J+YcFmCQvTA9K5r59Y2oHtMY2rc2vKKl+RDd8 vm2Kf4GJYLPGKArV5RpoozxeHmXcqeT/7Z8jeX209vlXg7W5VBCtbqwHY5NQUBwr OWVMwnuab9F1LHq8WgyPQ2i9JrvTiIq9O1z2GF1jQJVCbxM2USuirQfioSExc9T6 DAB52EmksbNyPqOYdB0EgA/mS0F99NCpaVUIi0kARAZucuDSdUR/1m+9szUAPlS+ XstF9n5iWi6/hS8cA0CYIedFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3cjAZbvj ryW5ULwQn32ve6vTeCMwHwYDVR0jBBgwFoAUaEWX6ZijoMaYc2G3xXIEOoFsHFIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDQUU4LzNGN0UyNTc0QkUw NzExRjA5RkYwNDQ2OUM0RjlBRTAyL2FFV1g2Wmlqb01hWWMyRzN4WElFT29Gc0hG SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYUVXWDZaaWpvTWFZYzJHM3hYSUVPb0ZzSEZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD QUU4LzNGN0UyNTc0QkUwNzExRjA5RkYwNDQ2OUM0RjlBRTAyL2FFV1g2Wmlqb01h WWMyRzN4WElFT29Gc0hGSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCqTEdFARZ8MQRKuL6prNDNTz9+HJDpUzEEHIkM4jEKUA7PwLJxC+CdjK1nxn3e 9z4qb5PKA3onqQ3W/9DTYZH85YmsU/DFlqS5YzFWQxZHBbi+rB2hFrwKXTht+XzV Kzir4R0CawS9s+6VXOlKCHQ7r8okC2fRNoEW7cvI3mjf+Yn3FscFpLuOlEB5eUWK 3aE3A6pcp1A/vLF8nZ+0yqSlmC4tg9jTIArV31CwCuN+ziPt/J87nNtpUt6bZs1w 3GlW7WfSb3j9i4XqtIVCx4r7mcDitBqN/QsLoX6paMstn5M303LkK7v4VaZTz0TG /7BIi87IgBS4GKhPu/GlM+nB -----END CERTIFICATE-----Generated at Mon Mar 2 09:14:58 2026 by rpki-client