$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft File: aaMtc-A4ow1HrKzrgc1zEq91Ork.mft (raw, json) Hash identifier: XLB2uG6UM1QQO3zgUtOqCnBd5KByxIbTzsWJ+RZu0Vk= Subject key identifier: FE:CD:8C:CE:29:AD:FC:82:01:6D:98:CB:74:14:1A:03:50:A9:B1:D3 Authority key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 Certificate issuer: /CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft Manifest number: 0195 Signing time: Fri 17 Apr 2026 04:10:11 +0000 Manifest this update: Fri 17 Apr 2026 04:10:10 +0000 Manifest next update: Fri 24 Apr 2026 04:10:10 +0000 Files and hashes: 1: aaMtc-A4ow1HrKzrgc1zEq91Ork.crl (hash: 8hISeq0kP2yqL/1o49QD3Cssrdy8H5tavhcQdmTp0m4=) 2: AAFEACF0500311F0A7E46C33C4F9AE02.roa (hash: KAsjZTGjxlT8d6AMDd8zXBUGI6TylpSkB+FkLto9kGs=) 3: 2F734D2E860111EFB49EB20DC4F9AE02.roa (hash: AXziCFMFYEtBXdtY9dmpKm88jTn6EGy7D69LF+swI3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1F31, serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Validity Not Before: Apr 17 04:10:10 2026 GMT Not After : Apr 24 04:10:10 2026 GMT Subject: CN=69e1b2a3-c4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bc:ea:b5:8d:f0:0e:eb:9e:d5:70:3c:62:81: f8:38:86:22:5a:5b:ba:f4:12:9d:a3:70:aa:74:4e: 43:13:ee:3b:8d:0d:a3:60:23:07:40:72:36:f2:14: 3d:e1:8d:6a:cf:eb:76:7f:69:07:08:7e:37:b0:04: da:a9:ca:f8:bf:2e:9f:34:39:61:24:76:45:7c:d4: bb:94:92:61:57:35:2c:70:46:b4:61:61:50:2c:ed: 6e:08:d9:23:23:c6:20:dc:6c:32:fb:c8:5d:24:d1: 1d:2f:e3:8b:b9:8c:34:63:dd:1b:06:8b:1f:f9:40: 38:03:32:84:0a:26:9c:7f:4f:2d:c2:f9:b7:41:c0: 0a:45:62:6f:d0:71:84:b9:f2:b4:32:11:25:f0:63: d8:89:a7:c4:24:0b:1f:b0:0a:f5:e4:66:6d:86:f1: 2f:74:0e:b1:ad:0a:05:43:ff:8d:f9:e5:b4:5a:37: f2:0f:3a:f6:e8:97:82:96:cb:fd:cb:0b:30:bb:2d: ea:e0:99:c4:09:67:b5:32:a9:e0:eb:55:4a:bb:f0: 41:34:6d:5c:22:2c:77:00:13:65:6a:43:a3:06:84: fb:ff:5a:c7:08:51:e1:fc:ad:04:ac:b6:1a:05:f7: 2a:7f:cb:59:ca:4b:d5:77:5a:1b:6d:2d:bc:ff:34: 29:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CD:8C:CE:29:AD:FC:82:01:6D:98:CB:74:14:1A:03:50:A9:B1:D3 X509v3 Authority Key Identifier: keyid:69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:df:b3:47:48:72:8b:22:ab:76:9d:ba:c0:94:a2:c0:e3:18: 82:fb:27:98:be:7d:59:3f:6e:86:e5:e4:5e:07:c1:70:1f:d7: 20:3e:00:96:8e:ad:80:8f:14:7e:74:fd:bf:13:93:36:02:e7: dd:c2:48:c6:b1:5e:f6:4a:05:fd:91:f5:c0:99:b3:f2:e9:e3: b3:35:74:95:38:2c:b1:53:62:da:6a:69:1d:ef:fd:b6:b3:69: 34:09:5c:c0:d8:40:02:3a:e3:7b:db:77:80:f8:97:e6:15:f3: 7c:8d:0f:87:5c:f7:e1:fb:5b:e8:e7:d2:49:3a:2d:e9:f1:46: 34:be:23:7d:92:83:bc:bb:a2:9c:34:05:c8:0d:44:f5:02:b0: ac:97:2b:c9:41:2e:90:de:63:87:69:05:6e:b9:a6:07:77:6a: 70:a9:42:9e:68:56:8f:08:42:91:15:1a:11:27:4c:12:20:3a: 69:f7:1d:fe:bf:71:bb:0e:44:6f:3c:c5:36:ab:f3:57:ec:8f: 87:d1:1e:fe:2f:c8:ad:ce:40:4b:04:b9:e1:dc:9b:9a:ac:f6: f4:5a:5f:c6:38:95:bc:da:68:68:b7:cf:34:45:37:4c:4b:74: 7f:95:52:dd:b3:f7:39:af:83:67:cc:bb:e1:1f:58:89:42:5a: 4d:80:57:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFGMzExMTAvBgNVBAUTKDY5QTMyRDczRTAzOEEzMEQ0N0FDQUNFQjgxQ0Q3MzEy QUY3NTNBQjkwHhcNMjYwNDE3MDQxMDEwWhcNMjYwNDI0MDQxMDEwWjAYMRYwFAYD VQQDEw02OWUxYjJhMy1jNGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbzqtY3wDuue1XA8YoH4OIYiWlu69BKdo3CqdE5DE+47jQ2jYCMHQHI28hQ9 4Y1qz+t2f2kHCH43sATaqcr4vy6fNDlhJHZFfNS7lJJhVzUscEa0YWFQLO1uCNkj I8Yg3Gwy+8hdJNEdL+OLuYw0Y90bBosf+UA4AzKECiacf08twvm3QcAKRWJv0HGE ufK0MhEl8GPYiafEJAsfsAr15GZthvEvdA6xrQoFQ/+N+eW0WjfyDzr26JeClsv9 ywswuy3q4JnECWe1Mqng61VKu/BBNG1cIix3ABNlakOjBoT7/1rHCFHh/K0ErLYa Bfcqf8tZykvVd1obbS28/zQplwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP7NjM4p rfyCAW2Yy3QUGgNQqbHTMB8GA1UdIwQYMBaAFGmjLXPgOKMNR6ys64HNcxKvdTq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUYzMS9BMEY0RTBEMEUx QkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93MUhyS3pyZ2MxekVxOTFP cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhTXRjLUE0b3cxSHJLenJnYzF6RXE5MU9yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUYzMS9BMEY0RTBEMEUxQkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93 MUhyS3pyZ2MxekVxOTFPcmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALt+zR0hyiyKrdp26wJSiwOMYgvsnmL59WT9uhuXkXgfBcB/XID4Alo6tgI8U fnT9vxOTNgLn3cJIxrFe9koF/ZH1wJmz8unjszV0lTgssVNi2mppHe/9trNpNAlc wNhAAjrje9t3gPiX5hXzfI0Ph1z34ftb6OfSSTot6fFGNL4jfZKDvLuinDQFyA1E 9QKwrJcryUEukN5jh2kFbrmmB3dqcKlCnmhWjwhCkRUaESdMEiA6afcd/r9xuw5E bzzFNqvzV+yPh9Ee/i/Irc5ASwS54dybmqz29FpfxjiVvNpoaLfPNEU3TEt0f5VS 3bP3Oa+DZ8y74R9YiUJaTYBXQw== -----END CERTIFICATE-----Generated at Fri Apr 17 20:45:22 2026 by rpki-client