$ rpki-client -vvf rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft File: aecBsfM0KSOA56u5AcNCYzLGqlo.mft (raw, json) Hash identifier: 4OXuoRUQt9PszMJsEWioDRTTojZ3CPyi4oMjzj+xAxk= Subject key identifier: 07:2A:EC:59:BA:49:C1:C9:1E:E2:17:D4:11:B3:34:64:B9:95:95:6B Authority key identifier: 69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A Certificate issuer: /CN=A91F44EA/serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A Certificate serial: 16AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft Manifest number: 169C Signing time: Tue 28 Jul 2026 16:46:42 +0000 Manifest this update: Tue 28 Jul 2026 16:46:41 +0000 Manifest next update: Tue 04 Aug 2026 16:46:41 +0000 Files and hashes: 1: aecBsfM0KSOA56u5AcNCYzLGqlo.crl (hash: cFxMlH4JlAU9GkEpY6YwLGalzb91tF/Mj/Sn0ELozUI=) 2: F6CE4EEC56F911E997D5B40AC4F9AE02.roa (hash: KmhukKmF5EOvpy7I16yjXo0PVUDB0PQfpBY9iUTxeeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:46:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5806 (0x16ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F44EA, serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A Validity Not Before: Jul 28 16:46:41 2026 GMT Not After : Aug 4 16:46:41 2026 GMT Subject: CN=6a68dcf2-f24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:05:56:74:3d:1a:d6:72:1d:0b:d9:56:f0:95: 9b:62:65:65:6a:0d:e0:12:5d:38:ed:e0:ca:38:c3: 83:ba:33:58:b8:3d:2a:8b:f0:90:50:30:99:c3:c6: d4:0f:7e:18:f9:43:e1:6b:5f:f3:ba:4d:2c:06:97: 25:43:ee:54:38:9e:97:7a:6d:ea:f7:63:28:9a:a3: 79:24:e8:20:62:e3:8b:da:53:17:27:71:5e:9e:e4: 6e:61:2c:6e:13:3d:40:f7:49:9e:b7:50:39:87:54: 71:67:da:85:1b:20:bf:7a:bc:dd:f0:dd:87:9d:44: 76:bb:d1:fc:6d:2a:f8:60:ab:79:d4:2a:d0:91:04: da:5e:c8:e6:be:e4:cc:6b:84:97:a0:30:33:b1:99: aa:f3:25:33:62:d9:50:00:2e:6d:98:45:19:dc:77: 4a:6c:73:16:47:11:20:67:5d:8c:2b:c0:98:6b:80: 68:9d:da:36:d2:5d:ae:ff:83:60:db:01:84:bd:c5: 41:b1:b7:33:66:f6:2a:28:ce:f9:5d:a2:0f:f9:f2: e4:d2:ea:5a:97:0a:40:1e:32:ff:07:e4:c8:e0:24: ec:90:b2:43:93:97:86:af:3a:34:38:a4:f2:97:15: 52:46:cd:68:89:16:a5:9f:77:eb:78:e8:51:06:3f: 11:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2A:EC:59:BA:49:C1:C9:1E:E2:17:D4:11:B3:34:64:B9:95:95:6B X509v3 Authority Key Identifier: keyid:69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:c0:fa:29:0f:d5:73:00:ec:08:8d:8e:e1:88:09:85:ae:6f: 0a:da:fc:be:35:70:63:10:ea:ae:b8:61:1a:1c:ba:b4:b4:8f: 11:89:a8:99:23:b1:49:1a:6f:f6:dc:a5:b8:ea:84:66:5f:19: 5a:95:39:ad:ce:bf:b8:ef:af:3d:49:50:46:cb:ea:2c:d9:93: c2:0c:f8:cc:0a:6f:e2:69:2b:be:b5:74:f4:2c:3a:9a:22:f8: 85:5e:42:26:37:be:67:d3:dc:ac:06:5f:8f:da:97:bb:66:f3: 2f:71:eb:ef:c0:1d:af:b5:20:a7:3b:f5:91:65:30:a5:56:2d: 6e:18:18:c7:ee:1a:1c:48:74:7e:5d:7a:0d:8a:5f:53:ff:39: a3:e0:06:08:7a:3f:24:82:37:16:10:e0:a4:bc:08:62:41:8f: 32:f7:9d:fd:1d:4b:1c:fc:0f:54:03:5a:ad:a9:10:23:cf:e5: fa:bd:5d:6f:40:6a:e0:ff:53:fb:a1:b7:c7:07:cf:2d:f2:7a: f9:83:54:ea:79:58:fe:97:1b:ba:61:fc:df:d7:37:43:de:b4: 59:63:ed:58:6b:80:cd:3e:af:ac:1b:74:c0:85:67:09:cc:a9: d5:96:c8:c2:97:d0:61:ce:b6:43:6c:b9:49:24:2a:49:ff:3f: 72:b0:56:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ0RUExMTAvBgNVBAUTKDY5RTcwMUIxRjMzNDI5MjM4MEU3QUJCOTAxQzM0MjYz MzJDNkFBNUEwHhcNMjYwNzI4MTY0NjQxWhcNMjYwODA0MTY0NjQxWjAYMRYwFAYD VQQDEw02YTY4ZGNmMi1mMjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQVWdD0a1nIdC9lW8JWbYmVlag3gEl047eDKOMODujNYuD0qi/CQUDCZw8bU D34Y+UPha1/zuk0sBpclQ+5UOJ6Xem3q92MomqN5JOggYuOL2lMXJ3FenuRuYSxu Ez1A90met1A5h1RxZ9qFGyC/erzd8N2HnUR2u9H8bSr4YKt51CrQkQTaXsjmvuTM a4SXoDAzsZmq8yUzYtlQAC5tmEUZ3HdKbHMWRxEgZ12MK8CYa4Bondo20l2u/4Ng 2wGEvcVBsbczZvYqKM75XaIP+fLk0upalwpAHjL/B+TI4CTskLJDk5eGrzo0OKTy lxVSRs1oiRaln3freOhRBj8RrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAcq7Fm6 ScHJHuIX1BGzNGS5lZVrMB8GA1UdIwQYMBaAFGnnAbHzNCkjgOeruQHDQmMyxqpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDRFQS82ODkwMzM5NjJC NDExMUU4ODQ1NzkzODdDNEY5QUUwMi9hZWNCc2ZNMEtTT0E1NnU1QWNOQ1l6TEdx bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlY0JzZk0wS1NPQTU2dTVBY05DWXpMR3Fsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDRFQS82ODkwMzM5NjJCNDExMUU4ODQ1NzkzODdDNEY5QUUwMi9hZWNCc2ZNMEtT T0E1NnU1QWNOQ1l6TEdxbG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlsD6KQ/VcwDsCI2O4YgJha5vCtr8vjVwYxDqrrhhGhy6tLSPEYmomSOxSRpv 9tyluOqEZl8ZWpU5rc6/uO+vPUlQRsvqLNmTwgz4zApv4mkrvrV09Cw6miL4hV5C Jje+Z9PcrAZfj9qXu2bzL3Hr78Adr7Ugpzv1kWUwpVYtbhgYx+4aHEh0fl16DYpf U/85o+AGCHo/JII3FhDgpLwIYkGPMved/R1LHPwPVANarakQI8/l+r1db0Bq4P9T +6G3xwfPLfJ6+YNU6nlY/pcbumH839c3Q960WWPtWGuAzT6vrBt0wIVnCcyp1ZbI wpfQYc62Q2y5SSQqSf8/crBWPw== -----END CERTIFICATE-----Generated at Tue Jul 28 20:23:52 2026 by rpki-client