$ rpki-client -vvf rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft File: AfrBm6ETU1D3rq6bWBqFlSisi64.mft (raw, json) Hash identifier: V8WXMUedcvDYcJRTxeoJMnSHj6ND8PoCBjz8RepT8TA= Subject key identifier: D8:D8:B8:17:5B:35:D7:7C:95:79:F2:D2:54:54:67:12:84:FB:9D:79 Authority key identifier: 01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE Certificate issuer: /CN=A916475C/serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE Certificate serial: 3546 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft Manifest number: 352C Signing time: Mon 02 Mar 2026 02:36:59 +0000 Manifest this update: Mon 02 Mar 2026 02:36:57 +0000 Manifest next update: Mon 09 Mar 2026 02:36:57 +0000 Files and hashes: 1: AfrBm6ETU1D3rq6bWBqFlSisi64.crl (hash: glL3zk2yfcO0fYtSrjV5tFNVfcvvSh3VJod7r0SlP5Q=) 2: 7D512C7EB0C611E5BDBA5065C4F9AE02.roa (hash: uZMJ3TlRJ4eTxmQnOIB7yl8ezbbbNdE0D+B0/eIsw50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13638 (0x3546) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916475C, serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE Validity Not Before: Mar 2 02:36:57 2026 GMT Not After : Mar 9 02:36:57 2026 GMT Subject: CN=69a4f7cb-68d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:05:f5:8d:c1:6d:b4:4a:e3:52:5f:c7:bd:d9: b4:00:da:d6:99:ad:b7:e3:72:9d:b2:a6:f1:2f:d4: 57:5f:4b:29:62:0a:5b:40:17:06:85:5c:b6:f8:82: 90:fe:2e:a1:78:78:b6:a2:1d:2b:db:ba:78:d3:f7: c5:a3:b7:b9:ac:33:00:63:96:59:85:34:7c:06:11: de:9d:7e:f4:86:25:4c:f5:c6:53:5b:1e:0c:b9:34: 51:a1:a8:6a:44:13:0f:79:1e:4c:0a:ba:9d:c3:88: 09:2b:d9:d8:59:50:26:a3:90:a0:dc:9d:68:e1:8e: 6e:bc:69:5c:cd:bc:35:73:04:77:f1:ab:5c:13:6c: e4:91:b2:f9:a0:94:67:15:39:b8:32:64:2c:a4:19: e6:ba:76:bb:3a:13:11:8d:94:dd:65:45:40:16:e1: 56:f4:8b:a8:e9:b0:54:58:84:6d:cd:87:4e:5f:f6: 67:e1:a5:2a:f9:25:c0:65:2a:6a:a9:72:36:d8:ea: 6f:e2:8d:65:d1:88:ac:5d:8a:3f:88:6d:bc:46:35: a3:d9:ac:ec:7d:db:9c:c9:46:f3:28:85:ab:a6:5a: 97:e6:5f:0d:37:a1:94:ee:d3:bc:1b:39:ca:07:81: 4f:be:0d:29:a6:97:a4:dc:9c:9a:4d:ee:d7:fa:d8: dc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D8:B8:17:5B:35:D7:7C:95:79:F2:D2:54:54:67:12:84:FB:9D:79 X509v3 Authority Key Identifier: keyid:01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:0a:50:72:38:30:f2:c1:41:8c:83:46:a3:b1:28:29:e1:30: ff:8f:cf:d4:15:2e:dc:7a:a1:94:c9:24:ba:1a:01:72:34:65: 82:04:32:70:9c:57:7b:74:49:7c:27:48:85:a0:e1:18:62:31: 3b:cf:70:f1:f8:af:7d:b5:70:9b:f7:0e:61:39:6e:2a:3a:73: 99:4a:90:df:9b:7f:3f:5f:79:10:56:13:83:5f:b9:82:7d:32: e6:92:5c:44:f4:d6:6e:50:9d:6d:3b:33:b7:3e:32:45:a8:48: 76:23:a9:9d:e9:80:9f:24:e4:8c:87:90:53:af:44:32:f4:95: a4:3b:e4:2f:1e:5e:e6:c7:f3:cd:49:d9:9a:63:87:8f:86:3b: 85:e5:f1:1f:5e:18:8d:38:65:bc:ab:52:ee:2d:57:28:0d:37: 4d:26:72:81:24:fd:0d:c1:a4:66:e0:84:91:8a:0f:4a:b2:82: 2e:f7:e3:ec:e0:7f:c6:eb:af:79:41:72:c4:f8:4c:55:e2:fb: a9:c8:d9:eb:7d:9c:7b:25:68:ba:32:3b:f6:18:5b:06:65:0e: e2:83:30:4c:c4:09:45:e3:ca:cf:bd:cb:2f:72:af:0e:59:a0: c8:0b:43:92:eb:5a:71:46:18:19:ec:63:8f:2f:3f:7d:bf:2d: 8e:9b:17:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ3NUMxMTAvBgNVBAUTKDAxRkFDMTlCQTExMzUzNTBGN0FFQUU5QjU4MUE4NTk1 MjhBQzhCQUUwHhcNMjYwMzAyMDIzNjU3WhcNMjYwMzA5MDIzNjU3WjAYMRYwFAYD VQQDEw02OWE0ZjdjYi02OGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wX1jcFttErjUl/Hvdm0ANrWma2343KdsqbxL9RXX0spYgpbQBcGhVy2+IKQ /i6heHi2oh0r27p40/fFo7e5rDMAY5ZZhTR8BhHenX70hiVM9cZTWx4MuTRRoahq RBMPeR5MCrqdw4gJK9nYWVAmo5Cg3J1o4Y5uvGlczbw1cwR38atcE2zkkbL5oJRn FTm4MmQspBnmuna7OhMRjZTdZUVAFuFW9Iuo6bBUWIRtzYdOX/Zn4aUq+SXAZSpq qXI22Opv4o1l0YisXYo/iG28RjWj2azsfducyUbzKIWrplqX5l8NN6GU7tO8GznK B4FPvg0pppek3JyaTe7X+tjcIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNjYuBdb Ndd8lXny0lRUZxKE+515MB8GA1UdIwQYMBaAFAH6wZuhE1NQ966um1gahZUorIuu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDc1Qy9FQUM5NUZBQzFE NkIxMUUyQUQ4MDBEQUMwOEIwMkNEMi9BZnJCbTZFVFUxRDNycTZiV0JxRmxTaXNp NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmckJtNkVUVTFEM3JxNmJXQnFGbFNpc2k2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDc1Qy9FQUM5NUZBQzFENkIxMUUyQUQ4MDBEQUMwOEIwMkNEMi9BZnJCbTZFVFUx RDNycTZiV0JxRmxTaXNpNjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiQpQcjgw8sFBjINGo7EoKeEw/4/P1BUu3HqhlMkkuhoBcjRlggQycJxXe3RJ fCdIhaDhGGIxO89w8fivfbVwm/cOYTluKjpzmUqQ35t/P195EFYTg1+5gn0y5pJc RPTWblCdbTsztz4yRahIdiOpnemAnyTkjIeQU69EMvSVpDvkLx5e5sfzzUnZmmOH j4Y7heXxH14YjThlvKtS7i1XKA03TSZygST9DcGkZuCEkYoPSrKCLvfj7OB/xuuv eUFyxPhMVeL7qcjZ632ceyVoujI79hhbBmUO4oMwTMQJRePKz73LL3KvDlmgyAtD kutacUYYGexjjy8/fb8tjpsX/A== -----END CERTIFICATE-----Generated at Mon Mar 2 09:18:28 2026 by rpki-client