$ rpki-client -vvf rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft File: AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft (raw, json) Hash identifier: MkfGVH1ndAnCfw1SIRV4RpIk+zv21unT0TYcd5cnEYs= Subject key identifier: 29:5F:78:34:F6:54:26:48:4A:47:08:F5:53:CD:31:27:FF:40:19:41 Authority key identifier: 01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 Certificate issuer: /CN=A91788FF/serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft Manifest number: 014B Signing time: Fri 17 Apr 2026 04:56:13 +0000 Manifest this update: Fri 17 Apr 2026 04:56:12 +0000 Manifest next update: Fri 24 Apr 2026 04:56:12 +0000 Files and hashes: 1: AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl (hash: b3VDhj72Wfh26K0WjfGWSbLuIzyhCJUXfo90JEL22cg=) 2: 726BD5E645CF11EF854E2262C4F9AE02.roa (hash: CfTiBAbUMNxFwj32+HfJiQlb+5AntCj6pEFWYr5R03U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91788FF, serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4 Validity Not Before: Apr 17 04:56:12 2026 GMT Not After : Apr 24 04:56:12 2026 GMT Subject: CN=69e1bd6d-5c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:2f:09:6a:53:09:8c:99:a4:aa:91:a3:b4:0b: b7:1d:4e:97:db:87:3f:68:11:1a:ff:1a:20:81:34: ed:58:0c:54:3b:11:ec:72:ec:b0:76:a4:5b:e2:49: 21:3f:bd:4a:4b:23:2d:9a:b7:20:59:5a:2f:e4:e4: 0b:f9:04:99:00:18:d4:01:00:4e:20:e9:fb:cf:69: 4f:c4:ae:0e:78:d9:ec:c6:7a:3c:f7:9a:3d:7b:07: f1:5a:89:b9:e4:08:07:7c:6a:76:e0:22:9e:03:93: ca:63:37:a4:59:93:1f:e4:0a:4c:76:53:1e:b9:37: 87:35:5c:f6:2c:f0:b5:1e:9f:94:0f:4f:3c:3a:4d: d7:7a:83:1f:b1:76:a3:58:a3:81:c0:39:fd:75:a6: 3d:69:96:75:d3:0e:fb:8b:57:f0:eb:fe:d2:56:2a: f6:9d:85:4c:9c:12:81:27:37:53:80:1f:77:6a:fd: fb:d2:22:2d:cc:35:d2:55:73:67:22:4d:e0:4b:9c: 74:f7:dd:d1:24:c6:b3:89:0f:b1:02:02:45:17:a3: 1a:fe:6c:44:31:ea:3e:4d:c7:29:a9:41:e4:85:a2: cd:d0:75:70:2b:06:00:10:30:0e:cf:e2:8a:ba:68: 68:bb:42:4d:97:6f:16:41:1e:d7:8f:7a:27:2e:f9: 5c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5F:78:34:F6:54:26:48:4A:47:08:F5:53:CD:31:27:FF:40:19:41 X509v3 Authority Key Identifier: keyid:01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:b9:82:35:57:b0:5d:cd:cc:a6:97:60:12:12:e8:e5:bc:8a: ef:7c:77:bd:b6:d4:a3:92:81:df:0b:4f:ef:50:78:54:c8:19: c3:90:67:79:5a:dc:38:c9:99:d3:77:97:8e:c7:02:11:09:ed: 16:19:dc:0c:06:b4:ab:87:0b:53:7d:ce:7e:b1:38:cb:18:e7: fb:2a:c6:91:6c:5e:a8:cb:76:be:b8:c8:d2:4e:14:47:c9:0d: 9b:c9:34:80:4e:f5:8f:94:97:1d:ee:cb:6e:9e:f3:a5:21:07: ea:e0:03:65:6c:a9:33:d4:da:84:10:9d:45:55:d9:55:bb:f7: e2:ad:90:a1:ff:03:8f:75:83:b8:10:9b:ad:2f:e9:82:9f:e9: a9:9a:63:7e:fc:4e:27:0e:45:7a:71:18:a6:c8:9b:ac:e4:26: 07:1a:6b:77:e3:c9:ce:da:16:3e:a7:5f:43:33:9e:df:d8:22: 58:26:3e:6e:d8:79:89:91:b6:c3:4f:4d:9f:f9:f4:a2:cf:46: 99:c9:32:e8:c9:61:95:28:18:f7:06:9e:74:15:77:b6:2c:f7: d7:75:56:4c:db:8f:76:10:fd:a6:b5:fb:84:ae:6f:ce:4e:d7: 1d:9f:be:a2:ab:af:63:5b:ab:d5:f4:a5:fc:28:75:58:9f:5d: 36:7c:04:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg4RkYxMTAvBgNVBAUTKDAxRjFFRDA4Q0RFMjcxMzZGMzk3RDA3MzRBRjJBMzVF NUQ1MjdERDQwHhcNMjYwNDE3MDQ1NjEyWhcNMjYwNDI0MDQ1NjEyWjAYMRYwFAYD VQQDEw02OWUxYmQ2ZC01YzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9C8JalMJjJmkqpGjtAu3HU6X24c/aBEa/xoggTTtWAxUOxHscuywdqRb4kkh P71KSyMtmrcgWVov5OQL+QSZABjUAQBOIOn7z2lPxK4OeNnsxno895o9ewfxWom5 5AgHfGp24CKeA5PKYzekWZMf5ApMdlMeuTeHNVz2LPC1Hp+UD088Ok3XeoMfsXaj WKOBwDn9daY9aZZ10w77i1fw6/7SVir2nYVMnBKBJzdTgB93av370iItzDXSVXNn Ik3gS5x0993RJMaziQ+xAgJFF6Ma/mxEMeo+TccpqUHkhaLN0HVwKwYAEDAOz+KK umhou0JNl28WQR7Xj3onLvlcKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFClfeDT2 VCZISkcI9VPNMSf/QBlBMB8GA1UdIwQYMBaAFAHx7QjN4nE285fQc0ryo15dUn3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODhGRi9CREVCMjk3NDQ1 Q0QxMUVGOEU4MjY0NEVDNEY5QUUwMi9BZkh0Q00zaWNUYnpsOUJ6U3ZLalhsMVNm ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmSHRDTTNpY1Riemw5QnpTdktqWGwxU2ZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODhGRi9CREVCMjk3NDQ1Q0QxMUVGOEU4MjY0NEVDNEY5QUUwMi9BZkh0Q00zaWNU YnpsOUJ6U3ZLalhsMVNmZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxbmCNVewXc3MppdgEhLo5byK73x3vbbUo5KB3wtP71B4VMgZw5BneVrcOMmZ 03eXjscCEQntFhncDAa0q4cLU33OfrE4yxjn+yrGkWxeqMt2vrjI0k4UR8kNm8k0 gE71j5SXHe7Lbp7zpSEH6uADZWypM9TahBCdRVXZVbv34q2Qof8Dj3WDuBCbrS/p gp/pqZpjfvxOJw5FenEYpsibrOQmBxprd+PJztoWPqdfQzOe39giWCY+bth5iZG2 w09Nn/n0os9Gmcky6MlhlSgY9waedBV3tiz313VWTNuPdhD9prX7hK5vzk7XHZ++ oquvY1ur1fSl/Ch1WJ9dNnwE3A== -----END CERTIFICATE-----Generated at Fri Apr 17 20:34:26 2026 by rpki-client