$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft File: aFVDc0Du-d9CM6owWYMBIXsKHFU.mft (raw, json) Hash identifier: nvRtJMf9ANDPK8gDNPHT3ZsQ8v2BrtD5fOKfUK2lf9Q= Subject key identifier: 95:79:9C:1A:B7:35:CE:38:4A:12:4F:7B:DA:D5:1B:B0:C0:15:81:10 Authority key identifier: 68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55 Certificate issuer: /CN=A9110C8B/serialNumber=6855437340EEF9DF4233AA30598301217B0A1C55 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft Manifest number: 18 Signing time: Sun 01 Mar 2026 10:27:38 +0000 Manifest this update: Sun 01 Mar 2026 10:27:38 +0000 Manifest next update: Sun 08 Mar 2026 10:27:38 +0000 Files and hashes: 1: aFVDc0Du-d9CM6owWYMBIXsKHFU.crl (hash: 8C4Sda+7M2pT0KCii29vKN95tETm3RhDqLpYMd9qxHk=) 2: 069AADE4F66B11F0A47B438A6F6F56BC.roa (hash: TWzuzM5wtFo01MWyTRGBS+4PovirNG3yt3IyJZZ9w74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.crl rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C8B, serialNumber=6855437340EEF9DF4233AA30598301217B0A1C55 Validity Not Before: Mar 1 10:27:38 2026 GMT Not After : Mar 8 10:27:38 2026 GMT Subject: CN=69a4149a-27c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:55:fc:7b:8b:f3:2e:21:cb:2d:7e:1c:2a:83: 3a:28:36:dc:90:c6:66:90:e3:75:f2:0f:51:6a:12: 2f:2d:af:80:1e:68:25:0b:8f:84:b6:6d:52:9f:6a: 2e:1f:44:0a:69:f9:c0:0a:0b:92:08:5b:e6:f8:9d: 9b:94:ef:91:0d:9a:55:68:04:7f:86:a1:b3:ff:fd: 23:2d:c1:da:e4:54:44:0b:79:e2:b5:f7:f0:76:66: 37:f1:a5:97:37:ea:d3:16:c1:37:e3:26:67:e9:2c: 8a:17:86:c2:42:3f:b5:0f:82:a0:b3:13:d6:75:ee: 2b:3d:9d:19:40:7e:5c:74:d0:c2:60:9c:73:b3:d6: 87:a0:33:86:cd:43:54:ed:16:ea:69:31:ca:0f:22: 06:ab:6a:cb:33:82:6b:2c:1b:cf:83:a5:f1:f0:b5: 9c:ff:28:9b:09:4b:c6:96:02:64:9b:04:2d:33:c3: ca:ba:90:1e:a9:4e:77:b2:c0:33:c8:52:57:17:fd: 43:61:74:8b:48:0c:ac:96:85:d5:3f:d0:26:ff:d9: eb:e7:4d:34:1a:ac:43:6a:63:59:8f:6f:be:95:dc: 40:5f:9e:f0:78:bb:9a:f1:ed:ba:85:56:ee:71:b4: 98:4c:7e:ef:a2:65:be:6b:b5:9c:3f:b4:65:35:0d: 78:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:79:9C:1A:B7:35:CE:38:4A:12:4F:7B:DA:D5:1B:B0:C0:15:81:10 X509v3 Authority Key Identifier: keyid:68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:3f:42:05:53:60:e2:9b:33:9c:bf:ec:7f:3a:95:8b:a7:9e: 56:57:98:a4:81:1b:8d:1f:77:d2:9f:11:e9:79:81:aa:27:6d: bc:97:74:9b:37:b9:d7:5b:eb:4c:51:32:64:71:e6:f3:13:08: 91:97:3d:11:0e:7a:a0:2b:70:97:6b:02:82:6f:e9:7b:2f:27: fa:fb:26:d6:3f:4f:90:b1:42:7a:2f:c4:34:02:cd:29:fe:a6: 28:4b:d5:73:db:d8:8e:a6:0b:d3:4b:12:58:de:16:db:81:40: b3:a5:c9:5c:64:ee:23:80:a9:ad:b0:b5:db:c0:a2:ce:5d:72: 03:2f:57:b0:36:de:af:c3:30:b1:e1:31:df:16:e6:6e:2b:91: 9e:74:1d:34:b5:81:a8:15:ed:5c:7b:72:0a:1b:4f:cb:37:61: 9b:96:3b:a6:2a:7f:0f:b7:b9:e5:3f:e1:29:b2:6f:c9:80:58: 43:f0:30:2d:a9:67:87:f7:46:6b:65:2b:32:29:7c:91:82:0b: 76:e4:36:04:11:45:35:16:f0:6d:ed:16:d1:73:74:7c:6f:93: a9:c6:11:41:d0:4d:90:5a:98:e1:13:01:5d:44:36:8d:d5:ac: 6a:fa:f9:2f:07:0e:b5:ea:c6:b0:43:7b:a5:16:4d:48:e4:ab: 87:73:33:f5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MEM4QjExMC8GA1UEBRMoNjg1NTQzNzM0MEVFRjlERjQyMzNBQTMwNTk4MzAxMjE3 QjBBMUM1NTAeFw0yNjAzMDExMDI3MzhaFw0yNjAzMDgxMDI3MzhaMBgxFjAUBgNV BAMTDTY5YTQxNDlhLTI3YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkVfx7i/MuIcstfhwqgzooNtyQxmaQ43XyD1FqEi8tr4AeaCULj4S2bVKfai4f RApp+cAKC5IIW+b4nZuU75ENmlVoBH+GobP//SMtwdrkVEQLeeK19/B2ZjfxpZc3 6tMWwTfjJmfpLIoXhsJCP7UPgqCzE9Z17is9nRlAflx00MJgnHOz1oegM4bNQ1Tt FuppMcoPIgarasszgmssG8+DpfHwtZz/KJsJS8aWAmSbBC0zw8q6kB6pTneywDPI UlcX/UNhdItIDKyWhdU/0Cb/2evnTTQarENqY1mPb76V3EBfnvB4u5rx7bqFVu5x tJhMfu+iZb5rtZw/tGU1DXgDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUlXmcGrc1 zjhKEk972tUbsMAVgRAwHwYDVR0jBBgwFoAUaFVDc0Du+d9CM6owWYMBIXsKHFUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwQzhCLzk0NjAyNzRBRjY2 QTExRjBBM0ZCOTA4ODZGNkY1NkJDL2FGVkRjMER1LWQ5Q002b3dXWU1CSVhzS0hG VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYUZWRGMwRHUtZDlDTTZvd1dZTUJJWHNLSEZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw QzhCLzk0NjAyNzRBRjY2QTExRjBBM0ZCOTA4ODZGNkY1NkJDL2FGVkRjMER1LWQ5 Q002b3dXWU1CSVhzS0hGVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB7P0IFU2DimzOcv+x/OpWLp55WV5ikgRuNH3fSnxHpeYGqJ228l3SbN7nXW+tM UTJkcebzEwiRlz0RDnqgK3CXawKCb+l7Lyf6+ybWP0+QsUJ6L8Q0As0p/qYoS9Vz 29iOpgvTSxJY3hbbgUCzpclcZO4jgKmtsLXbwKLOXXIDL1ewNt6vwzCx4THfFuZu K5GedB00tYGoFe1ce3IKG0/LN2GbljumKn8Pt7nlP+Epsm/JgFhD8DAtqWeH90Zr ZSsyKXyRggt25DYEEUU1FvBt7RbRc3R8b5OpxhFB0E2QWpjhEwFdRDaN1axq+vkv Bw616sawQ3ulFk1I5KuHczP1 -----END CERTIFICATE-----Generated at Sun Mar 1 23:45:25 2026 by rpki-client