$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft File: afotkTN0HoMAQ-tA5A0ivzU4684.mft (raw, json) Hash identifier: 8vX50pGV/pOJx2xrXioVOME/p+0h+2Ko6E660QhUYL0= Subject key identifier: 50:D0:83:90:CF:0C:8C:F4:04:F8:1D:E1:A8:A7:1B:E5:35:B2:BA:B8 Authority key identifier: 69:FA:2D:91:33:74:1E:83:00:43:EB:40:E4:0D:22:BF:35:38:EB:CE Certificate issuer: /CN=A91CCB81/serialNumber=69FA2D9133741E830043EB40E40D22BF3538EBCE Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft Manifest number: 33 Signing time: Fri 17 Apr 2026 08:23:27 +0000 Manifest this update: Fri 17 Apr 2026 08:23:27 +0000 Manifest next update: Fri 24 Apr 2026 08:23:27 +0000 Files and hashes: 1: afotkTN0HoMAQ-tA5A0ivzU4684.crl (hash: rNULXR0jKZO7uMhutkMCRWQ5SmO0oeEadpAhiWqgILY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.crl rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCB81, serialNumber=69FA2D9133741E830043EB40E40D22BF3538EBCE Validity Not Before: Apr 17 08:23:27 2026 GMT Not After : Apr 24 08:23:27 2026 GMT Subject: CN=69e1edff-b1b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:26:8b:b8:fb:41:8f:f0:fd:4d:3a:c9:62:a3: 1c:be:b1:dc:b6:04:98:e1:04:90:3d:c1:a4:54:ef: 66:b7:e1:a0:6a:ee:af:f7:79:b9:ea:75:a3:65:22: 6d:a9:2b:1d:d4:8a:01:49:22:c2:ff:da:75:01:3c: a4:7b:4e:6d:c2:71:30:1a:6d:94:46:a6:dd:5d:eb: 82:88:3c:5e:e8:36:0f:8e:9a:ad:fd:88:45:37:44: 71:a2:b5:62:c1:30:24:46:7a:66:cd:67:1f:5f:e4: ef:8b:9c:f5:b7:49:34:8e:84:14:e8:8a:0e:a5:ad: 49:67:50:a1:ee:a4:24:fa:52:ae:40:71:78:22:6e: f4:a1:f3:9b:d9:62:55:5e:8c:37:cc:c6:6a:e3:f5: e9:10:01:c1:36:13:73:56:48:1e:48:b7:f6:88:3d: d5:1f:b9:7c:7d:61:44:62:c3:f5:95:0c:a2:26:81: 1d:23:aa:ee:6a:db:28:ff:7a:f8:6b:7f:00:7c:e6: 89:b2:d7:cd:a0:02:e5:7a:4c:73:83:6e:12:8c:a8: eb:a1:48:b4:46:e8:5a:51:cc:8e:5c:61:76:0c:65: 06:3c:c0:ba:ff:30:ee:9b:b9:d9:9c:ee:48:54:05: 84:7f:f7:f1:ad:ef:44:7b:22:6b:00:e0:d4:74:b4: 83:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D0:83:90:CF:0C:8C:F4:04:F8:1D:E1:A8:A7:1B:E5:35:B2:BA:B8 X509v3 Authority Key Identifier: keyid:69:FA:2D:91:33:74:1E:83:00:43:EB:40:E4:0D:22:BF:35:38:EB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:83:bd:8b:aa:31:12:20:17:f2:08:2f:6f:ba:cf:27:0c:5a: 9d:50:83:4f:fe:d6:1c:ef:80:71:23:4e:47:09:12:cc:3e:6e: fb:70:2e:d3:10:2e:6f:31:a3:00:bc:02:40:ca:a3:77:06:0b: 15:15:62:77:8f:e7:3c:31:91:9f:5d:73:3b:7d:62:c5:b8:8a: 02:4b:5d:e5:07:d5:a5:a3:9e:89:8b:7e:0b:1a:0c:d0:b6:dd: 41:8e:03:6d:19:ba:c9:f4:c7:4c:f1:13:b0:e4:bb:8d:ea:e1: 1f:6e:9e:eb:e2:ef:6b:ff:95:5d:48:39:38:7a:6d:12:67:ea: 77:8c:53:00:53:0a:9b:20:52:30:f8:4f:0f:48:c1:2f:cf:00: 47:4c:b2:78:80:d5:7b:d6:11:46:b7:52:d5:1e:5e:66:89:b5: 09:bd:d1:f0:8c:c7:1a:f7:2f:cd:e5:7a:44:44:79:40:ce:b0: 82:78:35:33:7b:95:b9:78:c7:84:ba:7f:e5:e6:30:5e:6a:02: 8f:d8:ce:64:05:7a:8d:54:5e:1e:ef:46:fe:bb:69:b0:04:9b: 08:22:34:fe:42:54:63:62:69:e5:2c:31:d0:ef:2b:4f:87:c9: a1:ba:33:dc:78:b6:d0:19:1d:9a:13:b6:65:37:9a:6e:a7:3e: a6:05:37:cb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0I4MTExMC8GA1UEBRMoNjlGQTJEOTEzMzc0MUU4MzAwNDNFQjQwRTQwRDIyQkYz NTM4RUJDRTAeFw0yNjA0MTcwODIzMjdaFw0yNjA0MjQwODIzMjdaMBgxFjAUBgNV BAMTDTY5ZTFlZGZmLWIxYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCUJou4+0GP8P1NOslioxy+sdy2BJjhBJA9waRU72a34aBq7q/3ebnqdaNlIm2p Kx3UigFJIsL/2nUBPKR7Tm3CcTAabZRGpt1d64KIPF7oNg+Omq39iEU3RHGitWLB MCRGembNZx9f5O+LnPW3STSOhBToig6lrUlnUKHupCT6Uq5AcXgibvSh85vZYlVe jDfMxmrj9ekQAcE2E3NWSB5It/aIPdUfuXx9YURiw/WVDKImgR0jqu5q2yj/evhr fwB85omy182gAuV6THODbhKMqOuhSLRG6FpRzI5cYXYMZQY8wLr/MO6budmc7khU BYR/9/Gt70R7ImsA4NR0tIPpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUNCDkM8M jPQE+B3hqKcb5TWyurgwHwYDVR0jBBgwFoAUafotkTN0HoMAQ+tA5A0ivzU4684w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQjgxLzI4NjFFNDk2Rjg2 QTExRjBCNEJCQUYzQzRBNkY1NkJDL2Fmb3RrVE4wSG9NQVEtdEE1QTBpdnpVNDY4 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWZvdGtUTjBIb01BUS10QTVBMGl2elU0Njg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND QjgxLzI4NjFFNDk2Rjg2QTExRjBCNEJCQUYzQzRBNkY1NkJDL2Fmb3RrVE4wSG9N QVEtdEE1QTBpdnpVNDY4NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCLg72LqjESIBfyCC9vus8nDFqdUINP/tYc74BxI05HCRLMPm77cC7TEC5vMaMA vAJAyqN3BgsVFWJ3j+c8MZGfXXM7fWLFuIoCS13lB9Wlo56Ji34LGgzQtt1BjgNt GbrJ9MdM8ROw5LuN6uEfbp7r4u9r/5VdSDk4em0SZ+p3jFMAUwqbIFIw+E8PSMEv zwBHTLJ4gNV71hFGt1LVHl5mibUJvdHwjMca9y/N5XpERHlAzrCCeDUze5W5eMeE un/l5jBeagKP2M5kBXqNVF4e70b+u2mwBJsIIjT+QlRjYmnlLDHQ7ytPh8mhujPc eLbQGR2aE7ZlN5pupz6mBTfL -----END CERTIFICATE-----Generated at Fri Apr 17 15:58:41 2026 by rpki-client