$ rpki-client -vvf rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft File: AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft (raw, json) Hash identifier: aGCZ7m+Byoap762D+iH6gWKekY/BKcCkhupPonluPRA= Subject key identifier: DF:4A:F0:A3:36:4C:1D:28:23:DC:18:FF:CE:C4:5F:F1:AD:E6:2D:83 Authority key identifier: 01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 Certificate issuer: /CN=A91788FF/serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft Manifest number: 0133 Signing time: Mon 02 Mar 2026 13:43:19 +0000 Manifest this update: Mon 02 Mar 2026 13:43:19 +0000 Manifest next update: Mon 09 Mar 2026 13:43:19 +0000 Files and hashes: 1: AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl (hash: 8kqe8zr/53Iti5DXdn3QNUK5bXYURcAdFmzADpulaDY=) 2: 726BD5E645CF11EF854E2262C4F9AE02.roa (hash: CfTiBAbUMNxFwj32+HfJiQlb+5AntCj6pEFWYr5R03U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:43:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91788FF, serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4 Validity Not Before: Mar 2 13:43:19 2026 GMT Not After : Mar 9 13:43:19 2026 GMT Subject: CN=69a593f7-348d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:45:d3:be:b5:25:43:9f:e2:a8:6c:c3:5f:97: e6:ca:18:de:a9:54:6d:a7:59:92:da:4b:cb:27:2e: 61:53:90:bf:99:04:90:7c:ac:89:43:be:de:70:3f: 4c:09:89:44:57:07:82:5e:f4:8f:76:a7:24:ca:73: e4:90:76:60:b3:31:ce:c0:20:38:b3:b9:61:f2:08: 7f:83:ee:20:e8:b7:c8:cf:e2:2b:68:0b:d5:01:bd: 25:5c:2a:1c:db:fa:44:3a:ce:1e:9d:22:f8:fc:53: d3:95:7d:65:e9:4b:21:52:9a:01:6a:36:bc:9a:49: d7:3d:b0:ee:62:e5:f1:98:f8:ce:79:f4:88:cd:75: 27:ca:a9:d5:4c:81:97:94:e0:a6:c8:27:64:da:97: 8c:fb:2e:40:c4:12:18:65:f5:e1:10:3d:40:2d:57: 4f:75:40:d4:1d:98:59:9d:80:72:af:c6:39:d0:cf: 01:98:6b:4d:d7:ee:6f:cd:f2:ee:92:25:17:ad:0f: c4:22:61:1d:8b:50:0f:9a:ec:f9:5e:08:55:4e:db: 60:f7:26:f4:db:fc:0b:0e:9e:56:c8:be:c4:d5:a7: 28:d6:22:ee:73:34:d1:0b:a9:80:40:32:94:45:44: 23:31:5b:55:b0:b5:fe:ea:04:3e:17:bb:1e:2a:6e: 18:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4A:F0:A3:36:4C:1D:28:23:DC:18:FF:CE:C4:5F:F1:AD:E6:2D:83 X509v3 Authority Key Identifier: keyid:01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:67:62:08:25:a8:39:c2:10:ac:84:bf:14:16:9a:2a:cb:eb: 64:fc:c5:9c:25:6d:84:4f:5f:fb:8d:d0:19:97:d3:64:f3:0b: b3:bb:67:06:79:e9:57:5a:ca:97:a2:13:b9:8f:6e:ae:68:67: 57:51:b9:85:55:24:7e:b2:88:b1:82:25:50:3c:ff:65:b4:57: 06:2c:ec:87:44:1a:31:5c:ab:c7:8f:f0:82:f8:60:ab:96:85: 50:7f:48:31:8f:64:39:40:1f:c4:17:d7:a4:70:3e:cd:42:a2: 74:96:7a:f0:fe:2c:1b:c6:66:4a:26:08:77:3a:83:a9:2e:15: e2:92:77:b1:14:7c:29:94:7e:a4:00:1f:49:e5:a5:cd:ff:45: 52:21:d2:e1:05:9a:36:3c:de:df:68:37:f7:f5:29:30:31:b4: 8d:24:fd:4c:83:20:9c:56:3d:41:cb:51:5d:bf:aa:dc:46:90: 94:66:de:c5:1f:73:10:61:96:bd:8b:1b:1f:0b:b0:10:28:b5: 62:f8:dc:34:1d:30:11:e6:41:01:bc:4c:4e:c9:88:41:fc:cc: 47:51:b6:cb:2e:2f:a9:36:12:a3:f5:0e:e0:4e:4b:16:37:a3: a4:85:29:b3:13:a7:f5:4e:b8:48:5b:cf:a4:a7:2d:62:e7:38: 1f:4f:3f:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg4RkYxMTAvBgNVBAUTKDAxRjFFRDA4Q0RFMjcxMzZGMzk3RDA3MzRBRjJBMzVF NUQ1MjdERDQwHhcNMjYwMzAyMTM0MzE5WhcNMjYwMzA5MTM0MzE5WjAYMRYwFAYD VQQDEw02OWE1OTNmNy0zNDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUXTvrUlQ5/iqGzDX5fmyhjeqVRtp1mS2kvLJy5hU5C/mQSQfKyJQ77ecD9M CYlEVweCXvSPdqckynPkkHZgszHOwCA4s7lh8gh/g+4g6LfIz+IraAvVAb0lXCoc 2/pEOs4enSL4/FPTlX1l6UshUpoBaja8mknXPbDuYuXxmPjOefSIzXUnyqnVTIGX lOCmyCdk2peM+y5AxBIYZfXhED1ALVdPdUDUHZhZnYByr8Y50M8BmGtN1+5vzfLu kiUXrQ/EImEdi1APmuz5XghVTttg9yb02/wLDp5WyL7E1aco1iLuczTRC6mAQDKU RUQjMVtVsLX+6gQ+F7seKm4YywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN9K8KM2 TB0oI9wY/87EX/Gt5i2DMB8GA1UdIwQYMBaAFAHx7QjN4nE285fQc0ryo15dUn3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODhGRi9CREVCMjk3NDQ1 Q0QxMUVGOEU4MjY0NEVDNEY5QUUwMi9BZkh0Q00zaWNUYnpsOUJ6U3ZLalhsMVNm ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmSHRDTTNpY1Riemw5QnpTdktqWGwxU2ZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODhGRi9CREVCMjk3NDQ1Q0QxMUVGOEU4MjY0NEVDNEY5QUUwMi9BZkh0Q00zaWNU YnpsOUJ6U3ZLalhsMVNmZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAumdiCCWoOcIQrIS/FBaaKsvrZPzFnCVthE9f+43QGZfTZPMLs7tnBnnpV1rK l6ITuY9urmhnV1G5hVUkfrKIsYIlUDz/ZbRXBizsh0QaMVyrx4/wgvhgq5aFUH9I MY9kOUAfxBfXpHA+zUKidJZ68P4sG8ZmSiYIdzqDqS4V4pJ3sRR8KZR+pAAfSeWl zf9FUiHS4QWaNjze32g39/UpMDG0jST9TIMgnFY9QctRXb+q3EaQlGbexR9zEGGW vYsbHwuwECi1YvjcNB0wEeZBAbxMTsmIQfzMR1G2yy4vqTYSo/UO4E5LFjejpIUp sxOn9U64SFvPpKctYuc4H08/gw== -----END CERTIFICATE-----Generated at Mon Mar 2 19:09:27 2026 by rpki-client