$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft File: af9o05rBdz4oqFeFx5G0qNmzhIY.mft (raw, json) Hash identifier: 1vbE2WY/DSVeyGRjpX32udEXP9D+BSCENj8I+MPfolA= Subject key identifier: 19:C1:9F:AE:2E:E3:FA:41:85:3B:17:D2:F5:70:4D:0A:3D:50:2D:95 Authority key identifier: 69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86 Certificate issuer: /CN=A9148D61/serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486 Certificate serial: 028A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft Manifest number: 0273 Signing time: Mon 02 Mar 2026 01:42:25 +0000 Manifest this update: Mon 02 Mar 2026 01:42:24 +0000 Manifest next update: Mon 09 Mar 2026 01:42:24 +0000 Files and hashes: 1: af9o05rBdz4oqFeFx5G0qNmzhIY.crl (hash: 46Bu4Xe0bwz7ZbawjYuMcbRnCnZUOMB5F3cWl6zk+bE=) 2: 349D4A7AB90A11EF97D24653C4F9AE02.roa (hash: gj01DmJfEaGsSpp5tjGsusN7Thz10FKLT4wU37QzljM=) 3: 34386BAAB90A11EF97D24653C4F9AE02.roa (hash: 8a9pl0B9WRoV/I8zbYuLrKWiJVi0iu0Y5myQD63MtCk=) 4: 35ADE898B90A11EF97D24653C4F9AE02.roa (hash: j4HW8v+J9rL2PkNopASjMuegUlrtdhRwhQv/dAW6LJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 650 (0x28a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148D61, serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486 Validity Not Before: Mar 2 01:42:24 2026 GMT Not After : Mar 9 01:42:24 2026 GMT Subject: CN=69a4eb01-7239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:60:c5:86:19:dc:9e:7b:41:28:43:f5:c4:33: 38:bc:34:be:84:f2:3d:ba:66:71:10:92:51:59:6a: af:1f:87:4f:ca:ec:a7:df:bb:f3:5e:1a:63:b5:c9: 4c:a0:7e:bd:5d:9d:1d:5f:70:f6:9b:48:47:dc:cb: 44:ed:8f:ba:65:7e:7c:39:63:39:07:5d:3e:5b:d1: 45:27:3a:c8:ba:45:4f:25:a3:60:63:6c:ab:8e:17: 13:f0:13:fa:42:ab:df:f4:d7:e1:c0:fb:13:0a:15: 3c:67:32:d6:7c:94:6d:7a:30:22:4b:01:e2:5e:16: c5:9d:1b:c2:26:a4:06:be:5c:27:c5:c1:1f:44:42: 06:df:e5:18:09:cd:97:14:0c:02:b8:ed:57:f1:c3: 75:eb:9d:74:93:db:b1:bb:4b:06:79:bf:0e:87:87: 78:78:f7:ae:c2:6a:3b:ac:48:c0:27:f2:47:62:a7: e9:b2:10:b8:6d:ec:c0:2b:5c:ba:8a:83:76:13:93: 53:02:9b:16:09:05:dc:3f:5a:9b:c7:8f:dc:6e:48: 6b:64:20:41:f0:e2:6f:bc:ca:ae:40:54:ec:79:f5: 73:ac:ac:54:be:ab:dd:5b:22:98:46:51:5a:7f:aa: 01:63:a8:ae:50:88:2a:4f:bf:ca:9b:80:8e:c4:c2: aa:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C1:9F:AE:2E:E3:FA:41:85:3B:17:D2:F5:70:4D:0A:3D:50:2D:95 X509v3 Authority Key Identifier: keyid:69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:4e:75:fb:0e:20:87:d8:69:fd:99:0b:bf:80:16:43:5d:1e: c0:38:4c:5f:8e:87:01:11:e3:ef:0a:ae:47:cd:36:a3:df:cf: 39:84:6e:be:5c:27:a9:dc:57:2d:62:1e:20:dd:93:8e:12:1b: 72:d5:86:ee:33:a5:96:4a:5a:3f:19:95:f4:a8:c1:0e:75:d0: f8:f1:4b:fc:9e:1a:a7:7d:10:ef:ae:51:44:0c:90:db:bc:a5: b1:34:f7:20:25:6b:b3:df:91:98:34:38:8b:82:06:13:f7:19: 35:24:3b:84:a5:57:69:57:ea:d6:d6:49:b2:e2:88:73:ba:f9: 62:d4:90:8a:03:ff:fb:cb:60:c9:65:a3:c5:a8:a7:eb:4b:e4: 60:c0:84:01:18:d6:0a:8a:59:bb:22:c8:64:b2:51:c7:4f:df: 27:34:40:ca:9a:a3:73:59:a6:3a:58:32:c8:1d:9a:c2:09:f4: a8:03:b3:af:25:30:d1:6b:8e:1c:fb:e2:28:41:9b:7d:5e:89: 9d:52:e0:c7:e1:f3:ad:dc:35:26:f7:ed:9d:e0:60:90:56:24: c6:c2:b4:34:19:b6:d2:9d:19:f8:7d:cf:38:0f:2b:f7:02:5e: a5:98:b7:2f:2f:fe:57:d6:e8:ae:8d:73:a2:ca:43:78:55:60: 89:b1:3d:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhENjExMTAvBgNVBAUTKDY5RkY2OEQzOUFDMTc3M0UyOEE4NTc4NUM3OTFCNEE4 RDlCMzg0ODYwHhcNMjYwMzAyMDE0MjI0WhcNMjYwMzA5MDE0MjI0WjAYMRYwFAYD VQQDEw02OWE0ZWIwMS03MjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3WDFhhncnntBKEP1xDM4vDS+hPI9umZxEJJRWWqvH4dPyuyn37vzXhpjtclM oH69XZ0dX3D2m0hH3MtE7Y+6ZX58OWM5B10+W9FFJzrIukVPJaNgY2yrjhcT8BP6 Qqvf9NfhwPsTChU8ZzLWfJRtejAiSwHiXhbFnRvCJqQGvlwnxcEfREIG3+UYCc2X FAwCuO1X8cN16510k9uxu0sGeb8Oh4d4ePeuwmo7rEjAJ/JHYqfpshC4bezAK1y6 ioN2E5NTApsWCQXcP1qbx4/cbkhrZCBB8OJvvMquQFTsefVzrKxUvqvdWyKYRlFa f6oBY6iuUIgqT7/Km4COxMKq3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBnBn64u 4/pBhTsX0vVwTQo9UC2VMB8GA1UdIwQYMBaAFGn/aNOawXc+KKhXhceRtKjZs4SG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQ2MS8yOTVFNEM3NjYw MUIxMUVEQTVDNzI3NkVDNEY5QUUwMi9hZjlvMDVyQmR6NG9xRmVGeDVHMHFObXpo SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FmOW8wNXJCZHo0b3FGZUZ4NUcwcU5temhJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEQ2MS8yOTVFNEM3NjYwMUIxMUVEQTVDNzI3NkVDNEY5QUUwMi9hZjlvMDVyQmR6 NG9xRmVGeDVHMHFObXpoSVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlU51+w4gh9hp/ZkLv4AWQ10ewDhMX46HARHj7wquR802o9/POYRuvlwnqdxX LWIeIN2TjhIbctWG7jOllkpaPxmV9KjBDnXQ+PFL/J4ap30Q765RRAyQ27ylsTT3 ICVrs9+RmDQ4i4IGE/cZNSQ7hKVXaVfq1tZJsuKIc7r5YtSQigP/+8tgyWWjxain 60vkYMCEARjWCopZuyLIZLJRx0/fJzRAypqjc1mmOlgyyB2awgn0qAOzryUw0WuO HPviKEGbfV6JnVLgx+Hzrdw1JvftneBgkFYkxsK0NBm20p0Z+H3POA8r9wJepZi3 Ly/+V9boro1zospDeFVgibE9gA== -----END CERTIFICATE-----Generated at Mon Mar 2 12:43:34 2026 by rpki-client