$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft File: af9o05rBdz4oqFeFx5G0qNmzhIY.mft (raw, json) Hash identifier: JCffxJdTX/V0ujaehpadVSTGHFRONBUH0dLTQSVmWuI= Subject key identifier: 75:0D:57:77:79:9D:D8:90:5F:A3:0F:16:76:A2:3E:3B:70:ED:25:8C Authority key identifier: 69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86 Certificate issuer: /CN=A9148D61/serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486 Certificate serial: 02A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft Manifest number: 028B Signing time: Fri 17 Apr 2026 01:34:10 +0000 Manifest this update: Fri 17 Apr 2026 01:34:10 +0000 Manifest next update: Fri 24 Apr 2026 01:34:10 +0000 Files and hashes: 1: af9o05rBdz4oqFeFx5G0qNmzhIY.crl (hash: 0Bu2jod4u9NT7LCtTVyAJNpUDpsG3z/0YRFvjmHc5Dg=) 2: 34386BAAB90A11EF97D24653C4F9AE02.roa (hash: 8a9pl0B9WRoV/I8zbYuLrKWiJVi0iu0Y5myQD63MtCk=) 3: 35ADE898B90A11EF97D24653C4F9AE02.roa (hash: j4HW8v+J9rL2PkNopASjMuegUlrtdhRwhQv/dAW6LJM=) 4: 349D4A7AB90A11EF97D24653C4F9AE02.roa (hash: gj01DmJfEaGsSpp5tjGsusN7Thz10FKLT4wU37QzljM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148D61, serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486 Validity Not Before: Apr 17 01:34:10 2026 GMT Not After : Apr 24 01:34:10 2026 GMT Subject: CN=69e18e12-5ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5d:4c:53:3c:95:00:a5:f0:d0:86:fc:36:0a: d3:d0:cc:9f:3b:88:37:35:24:21:70:6e:f0:49:96: 6d:3d:ab:69:fa:66:fe:1c:7c:51:77:12:a3:1d:eb: 91:ff:85:58:55:80:d3:04:69:aa:5e:f0:df:11:0c: 13:a2:2c:fa:2d:08:18:3b:1a:a8:69:81:03:05:cd: 16:ad:0b:48:0e:8b:18:80:77:40:9a:38:d0:b7:3b: ce:f8:92:d8:24:2c:6c:22:e4:27:16:82:cc:95:e9: 6b:f0:72:c5:98:5f:29:94:8a:71:aa:20:65:a2:ce: b2:39:5c:53:40:db:eb:98:80:a6:28:9e:1b:52:c0: e9:48:19:b3:45:55:9e:4b:99:05:ce:11:c3:2f:b8: 28:24:4e:64:bc:74:d0:b8:04:aa:42:23:6d:6a:70: 3c:7e:37:4e:36:a7:45:6b:1c:0d:78:47:76:73:09: 89:ed:c7:1f:8d:4a:ae:a4:9d:93:2a:95:5b:4a:75: e0:62:26:c4:62:38:d1:b3:15:90:eb:e6:22:1a:90: 98:d5:c8:b1:9e:1d:73:11:26:a7:ca:c3:f3:ef:11: 17:61:2d:05:19:14:b8:c8:80:df:23:31:63:70:dd: 3f:d2:68:90:5b:6a:80:7f:c4:8d:8f:d4:e6:f6:62: b3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0D:57:77:79:9D:D8:90:5F:A3:0F:16:76:A2:3E:3B:70:ED:25:8C X509v3 Authority Key Identifier: keyid:69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:87:d0:11:eb:06:a9:fb:42:07:50:66:03:95:dc:5f:01:90: 3a:31:a2:32:ee:45:53:b1:b7:28:03:43:af:cd:74:8d:48:e0: 5c:5a:5c:60:d6:54:d8:67:29:37:52:83:1e:95:3e:88:c8:e1: d0:c0:56:d5:5a:17:68:bd:10:da:d0:c6:b6:46:f2:e7:8b:11: 76:b2:d8:88:d1:a0:ef:ac:91:32:92:a1:c9:e8:e2:a1:59:62: d7:bd:c9:bc:8c:f0:ca:23:f0:54:c0:10:e0:92:3c:44:52:46: 7f:ee:25:ab:5c:a8:56:a4:dd:27:31:49:a2:52:41:93:31:90: 24:77:87:41:3b:01:6a:10:08:99:e5:b2:0f:6f:e4:8d:62:00: 61:c9:2d:13:1e:31:c7:54:7a:1b:ee:61:8c:5b:c6:c0:11:b0: 9a:3d:49:b0:2c:fd:a3:7a:ee:7d:b7:2e:0d:6a:1b:f9:d5:09: 1a:4e:5d:8f:eb:6d:ca:c5:cc:87:8e:78:64:bd:04:72:ff:19: cb:8c:c4:db:12:5f:e2:80:dc:19:6d:c5:57:fe:72:e9:e7:5a: 11:d6:01:bd:de:48:78:25:59:f2:cb:d6:82:69:db:dc:d1:be: b0:c4:40:87:10:11:12:7a:83:bf:47:69:f3:73:72:27:b5:e9: 79:d0:79:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhENjExMTAvBgNVBAUTKDY5RkY2OEQzOUFDMTc3M0UyOEE4NTc4NUM3OTFCNEE4 RDlCMzg0ODYwHhcNMjYwNDE3MDEzNDEwWhcNMjYwNDI0MDEzNDEwWjAYMRYwFAYD VQQDEw02OWUxOGUxMi01ZmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAol1MUzyVAKXw0Ib8NgrT0MyfO4g3NSQhcG7wSZZtPatp+mb+HHxRdxKjHeuR /4VYVYDTBGmqXvDfEQwToiz6LQgYOxqoaYEDBc0WrQtIDosYgHdAmjjQtzvO+JLY JCxsIuQnFoLMlelr8HLFmF8plIpxqiBlos6yOVxTQNvrmICmKJ4bUsDpSBmzRVWe S5kFzhHDL7goJE5kvHTQuASqQiNtanA8fjdONqdFaxwNeEd2cwmJ7ccfjUqupJ2T KpVbSnXgYibEYjjRsxWQ6+YiGpCY1cixnh1zESanysPz7xEXYS0FGRS4yIDfIzFj cN0/0miQW2qAf8SNj9Tm9mKz8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHUNV3d5 ndiQX6MPFnaiPjtw7SWMMB8GA1UdIwQYMBaAFGn/aNOawXc+KKhXhceRtKjZs4SG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQ2MS8yOTVFNEM3NjYw MUIxMUVEQTVDNzI3NkVDNEY5QUUwMi9hZjlvMDVyQmR6NG9xRmVGeDVHMHFObXpo SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FmOW8wNXJCZHo0b3FGZUZ4NUcwcU5temhJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEQ2MS8yOTVFNEM3NjYwMUIxMUVEQTVDNzI3NkVDNEY5QUUwMi9hZjlvMDVyQmR6 NG9xRmVGeDVHMHFObXpoSVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeIfQEesGqftCB1BmA5XcXwGQOjGiMu5FU7G3KANDr810jUjgXFpcYNZU2Gcp N1KDHpU+iMjh0MBW1VoXaL0Q2tDGtkby54sRdrLYiNGg76yRMpKhyejioVli173J vIzwyiPwVMAQ4JI8RFJGf+4lq1yoVqTdJzFJolJBkzGQJHeHQTsBahAImeWyD2/k jWIAYcktEx4xx1R6G+5hjFvGwBGwmj1JsCz9o3rufbcuDWob+dUJGk5dj+ttysXM h454ZL0Ecv8Zy4zE2xJf4oDcGW3FV/5y6edaEdYBvd5IeCVZ8svWgmnb3NG+sMRA hxAREnqDv0dp83NyJ7XpedB5YA== -----END CERTIFICATE-----Generated at Fri Apr 17 17:14:19 2026 by rpki-client