$ rpki-client -vvvf rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft File: AfrBm6ETU1D3rq6bWBqFlSisi64.mft (raw, json) Hash identifier: 4DxW6ER6xmXtfqSJYcA4jhRx4xuzm/BTdRyhWSw6VzY= Subject key identifier: F5:37:14:7E:DA:8D:E8:FE:D7:AA:E7:11:80:18:6C:59:FD:7F:F0:12 Authority key identifier: 01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE Certificate issuer: /CN=A916475C/serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE Certificate serial: 35B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft Manifest number: 3596 Signing time: Sun 20 Sep 2026 14:16:59 +0000 Manifest this update: Sun 20 Sep 2026 14:16:58 +0000 Manifest next update: Sun 27 Sep 2026 14:16:58 +0000 Files and hashes: 1: AfrBm6ETU1D3rq6bWBqFlSisi64.crl (hash: ar4EBCzzeWz+9adAe2Wlu0kFrFB2H4oSBxjdpsTSyow=) 2: 7D512C7EB0C611E5BDBA5065C4F9AE02.roa (hash: 6bA6+oTEJwdKjRMLs3DZDmUiHzIoGUQ6ClY8dXUWKgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13745 (0x35b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916475C, serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE Validity Not Before: Sep 20 14:16:58 2026 GMT Not After : Sep 27 14:16:58 2026 GMT Subject: CN=6aafeadb-0357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bb:6b:31:cd:0f:1c:0a:16:6f:c1:ff:cf:c7: 4c:8d:56:32:e3:33:d3:43:d1:1a:b2:dd:1e:49:4b: 92:0e:0e:14:ef:57:49:5b:70:91:0c:79:23:69:47: cf:6c:d8:3b:c0:90:25:2a:0b:7d:6b:a0:58:46:b5: f8:78:8c:66:ee:2b:3b:9a:63:6d:05:35:35:ee:25: 3c:c7:26:48:44:b2:6f:23:c4:4e:24:91:d9:ec:c5: c9:c7:c0:94:26:01:40:05:3a:ba:dc:ed:c1:23:14: f9:87:0c:fd:71:2e:79:e9:03:fd:3d:ff:06:ec:d0: bb:a2:11:b2:19:76:54:8d:96:82:8c:a9:27:68:74: 07:98:e0:69:51:9a:24:86:f9:78:1d:c2:74:fa:76: 01:75:b2:f6:a6:d9:38:cd:69:83:4f:7b:75:4a:31: c3:ab:78:d1:de:be:08:56:d6:f0:bc:fa:aa:75:88: b3:fb:20:60:3a:6d:e0:58:39:14:3f:c0:32:83:91: 1f:c2:a2:c2:8f:e0:6c:e2:be:b8:b9:54:12:dd:82: 01:58:c4:79:06:ae:98:4e:90:b4:9d:36:7c:04:ee: 08:35:f0:c2:b1:74:25:77:5f:7f:ae:55:ff:ef:a0: 22:1a:f2:44:f2:39:fb:d4:42:a7:36:b4:4f:e7:18: a8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:37:14:7E:DA:8D:E8:FE:D7:AA:E7:11:80:18:6C:59:FD:7F:F0:12 X509v3 Authority Key Identifier: keyid:01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:70:f5:78:3e:9a:cf:8b:cf:4a:52:98:4d:ed:5d:3d:d1:a3: 9b:6a:bc:9c:2e:f2:95:7d:de:cf:64:58:12:5f:1d:ee:e1:52: 8c:bb:d9:46:ee:59:9a:17:7c:88:90:2f:de:50:74:5d:77:11: 25:93:44:76:b1:4c:2a:97:62:a7:eb:86:c8:ee:b4:21:cb:4f: 22:a4:30:c4:a4:92:d8:79:9b:31:bc:de:06:4f:2c:d6:fe:9e: ca:24:5b:57:ac:02:a3:c6:b9:9a:49:e9:c3:6e:e4:5b:43:37: c4:1a:73:ac:bf:30:62:1f:fc:e9:55:8b:7e:19:cc:23:f5:80: 96:0a:77:a1:4d:d1:36:17:f9:60:b4:38:2f:71:b9:d5:5f:d9: bb:b4:61:b7:09:3c:26:f0:af:7d:15:10:3c:aa:b8:53:43:1d: 3e:07:ea:31:90:0b:50:80:fa:7c:90:e0:d1:1c:e3:6e:fd:63: bb:53:b4:7e:ca:99:b4:a5:c7:2a:7d:52:26:55:11:5e:87:66: c7:ba:51:aa:d9:24:ab:7d:bd:b6:0d:c0:e3:46:aa:3a:43:c3: 65:86:87:5f:97:2a:c4:35:04:ff:2a:07:24:41:ce:3d:42:e6: 5f:d7:0d:90:34:68:da:16:1a:5e:f5:37:86:e4:c2:5b:59:3e: 16:2d:63:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ3NUMxMTAvBgNVBAUTKDAxRkFDMTlCQTExMzUzNTBGN0FFQUU5QjU4MUE4NTk1 MjhBQzhCQUUwHhcNMjYwOTIwMTQxNjU4WhcNMjYwOTI3MTQxNjU4WjAYMRYwFAYD VQQDEw02YWFmZWFkYi0wMzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7trMc0PHAoWb8H/z8dMjVYy4zPTQ9East0eSUuSDg4U71dJW3CRDHkjaUfP bNg7wJAlKgt9a6BYRrX4eIxm7is7mmNtBTU17iU8xyZIRLJvI8ROJJHZ7MXJx8CU JgFABTq63O3BIxT5hwz9cS556QP9Pf8G7NC7ohGyGXZUjZaCjKknaHQHmOBpUZok hvl4HcJ0+nYBdbL2ptk4zWmDT3t1SjHDq3jR3r4IVtbwvPqqdYiz+yBgOm3gWDkU P8Ayg5EfwqLCj+Bs4r64uVQS3YIBWMR5Bq6YTpC0nTZ8BO4INfDCsXQld19/rlX/ 76AiGvJE8jn71EKnNrRP5xioXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPU3FH7a jej+16rnEYAYbFn9f/ASMB8GA1UdIwQYMBaAFAH6wZuhE1NQ966um1gahZUorIuu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDc1Qy9FQUM5NUZBQzFE NkIxMUUyQUQ4MDBEQUMwOEIwMkNEMi9BZnJCbTZFVFUxRDNycTZiV0JxRmxTaXNp NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmckJtNkVUVTFEM3JxNmJXQnFGbFNpc2k2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDc1Qy9FQUM5NUZBQzFENkIxMUUyQUQ4MDBEQUMwOEIwMkNEMi9BZnJCbTZFVFUx RDNycTZiV0JxRmxTaXNpNjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK3D1eD6az4vPSlKYTe1dPdGjm2q8nC7ylX3ez2RYEl8d7uFSjLvZRu5Zmhd8 iJAv3lB0XXcRJZNEdrFMKpdip+uGyO60IctPIqQwxKSS2HmbMbzeBk8s1v6eyiRb V6wCo8a5mknpw27kW0M3xBpzrL8wYh/86VWLfhnMI/WAlgp3oU3RNhf5YLQ4L3G5 1V/Zu7Rhtwk8JvCvfRUQPKq4U0MdPgfqMZALUID6fJDg0Rzjbv1ju1O0fsqZtKXH Kn1SJlURXodmx7pRqtkkq329tg3A40aqOkPDZYaHX5cqxDUE/yoHJEHOPULmX9cN kDRo2hYaXvU3huTCW1k+Fi1jDw== -----END CERTIFICATE-----Generated at Sun Sep 20 21:58:10 2026 by rpki-client