$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft File: aFVDc0Du-d9CM6owWYMBIXsKHFU.mft (raw, json) Hash identifier: E7NqSte016sxkZZ3fcaCe56iR9D+/+Y3u9MlXS74UEQ= Subject key identifier: 3E:BD:B4:E0:1D:ED:1C:BE:EC:57:AF:C2:93:A3:86:16:A1:9E:89:7D Authority key identifier: 68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55 Certificate issuer: /CN=A9110C8B/serialNumber=6855437340EEF9DF4233AA30598301217B0A1C55 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft Manifest number: 24 Signing time: Wed 25 Mar 2026 08:00:29 +0000 Manifest this update: Wed 25 Mar 2026 08:00:29 +0000 Manifest next update: Wed 01 Apr 2026 08:00:29 +0000 Files and hashes: 1: aFVDc0Du-d9CM6owWYMBIXsKHFU.crl (hash: nJkBI4pkP4kO2kCHcwLJLOhqdusb7angn997Oc6hcJA=) 2: 069AADE4F66B11F0A47B438A6F6F56BC.roa (hash: TWzuzM5wtFo01MWyTRGBS+4PovirNG3yt3IyJZZ9w74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.crl rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C8B, serialNumber=6855437340EEF9DF4233AA30598301217B0A1C55 Validity Not Before: Mar 25 08:00:29 2026 GMT Not After : Apr 1 08:00:29 2026 GMT Subject: CN=69c3961d-5b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:80:8d:dc:3d:3b:c7:8b:be:16:00:60:2f:aa: 97:17:e5:0a:38:0b:78:93:02:6f:49:db:06:74:92: b1:0b:50:a4:04:6e:e1:18:72:21:dd:f0:1c:83:a7: 16:9e:22:4d:35:3c:bb:2d:bd:cb:83:52:76:86:06: 87:fc:f1:c3:c0:7e:86:87:87:65:20:2b:64:12:2a: 53:b5:ce:b3:68:5e:e6:9c:41:df:38:9b:b5:19:47: 02:21:9e:74:96:cc:dd:ca:82:1d:3b:e0:8b:07:25: ac:ad:44:85:d2:98:06:2d:98:96:f8:ab:40:07:d8: dd:43:b1:6e:cd:54:a6:f5:3e:58:df:03:61:7c:89: 84:19:2d:a3:09:d9:14:81:68:bd:96:e5:a6:15:c0: e8:cd:94:a8:4c:38:14:ad:43:ca:9a:f8:54:88:94: 30:f3:d3:17:0c:5d:83:de:41:e4:be:c7:b1:a6:3f: 2e:2c:ef:48:97:e2:fe:af:be:ec:1b:e1:26:6a:8a: 0a:ab:53:59:f9:86:2c:2c:fd:58:ec:23:02:3d:c3: 68:b4:a4:ee:39:7a:7c:2b:bb:54:a0:58:e0:f3:28: 46:e6:e1:7c:f4:86:e3:33:ea:4e:21:88:fd:75:5a: 47:04:05:67:bb:2c:b9:3a:53:6f:22:e5:b2:15:71: f8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:BD:B4:E0:1D:ED:1C:BE:EC:57:AF:C2:93:A3:86:16:A1:9E:89:7D X509v3 Authority Key Identifier: keyid:68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:b8:5c:12:98:6d:b9:06:f7:e4:57:23:14:64:b7:42:61:8f: e6:2e:14:d7:52:49:19:1a:dc:56:ef:07:8e:41:a9:f5:23:f4: 5e:4e:21:bb:38:54:39:2e:0b:83:0c:dc:40:ac:f8:ba:5a:28: db:88:c2:30:68:ed:5a:64:c2:eb:df:4e:31:73:f0:7b:f0:39: 32:ee:58:fe:c9:db:2c:a4:61:fa:4e:c5:45:7d:6a:80:da:7a: d0:e8:f6:34:bb:28:02:00:91:35:99:01:af:ca:44:f3:01:c1: db:ed:d2:87:27:11:33:d2:03:4d:71:c6:d5:7e:c4:b3:3a:2c: 59:88:af:77:64:a3:5e:79:69:1c:62:2f:b3:9e:41:26:71:47: a9:87:08:5c:e4:ef:60:0d:cd:93:97:58:97:85:85:95:63:c5: f9:74:8c:2a:59:f4:4b:81:e2:99:59:5d:47:0e:fc:fb:40:a3: 75:bb:fc:9e:d2:c8:fd:d8:9e:89:f4:02:1e:af:e7:59:5f:07: cf:d7:11:35:43:cb:63:40:42:76:03:29:b6:4f:74:fc:1d:fe: 78:82:86:f1:75:4f:bf:7b:d8:dd:99:93:49:60:b1:da:39:b2: 96:6d:85:01:97:ec:fa:42:1f:33:32:28:71:00:55:f0:f8:55: 9b:df:92:4a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MEM4QjExMC8GA1UEBRMoNjg1NTQzNzM0MEVFRjlERjQyMzNBQTMwNTk4MzAxMjE3 QjBBMUM1NTAeFw0yNjAzMjUwODAwMjlaFw0yNjA0MDEwODAwMjlaMBgxFjAUBgNV BAMTDTY5YzM5NjFkLTViMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlgI3cPTvHi74WAGAvqpcX5Qo4C3iTAm9J2wZ0krELUKQEbuEYciHd8ByDpxae Ik01PLstvcuDUnaGBof88cPAfoaHh2UgK2QSKlO1zrNoXuacQd84m7UZRwIhnnSW zN3Kgh074IsHJaytRIXSmAYtmJb4q0AH2N1DsW7NVKb1PljfA2F8iYQZLaMJ2RSB aL2W5aYVwOjNlKhMOBStQ8qa+FSIlDDz0xcMXYPeQeS+x7GmPy4s70iX4v6vvuwb 4SZqigqrU1n5hiws/VjsIwI9w2i0pO45enwru1SgWODzKEbm4Xz0huMz6k4hiP11 WkcEBWe7LLk6U28i5bIVcfgNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPr204B3t HL7sV6/Ck6OGFqGeiX0wHwYDVR0jBBgwFoAUaFVDc0Du+d9CM6owWYMBIXsKHFUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwQzhCLzk0NjAyNzRBRjY2 QTExRjBBM0ZCOTA4ODZGNkY1NkJDL2FGVkRjMER1LWQ5Q002b3dXWU1CSVhzS0hG VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYUZWRGMwRHUtZDlDTTZvd1dZTUJJWHNLSEZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw QzhCLzk0NjAyNzRBRjY2QTExRjBBM0ZCOTA4ODZGNkY1NkJDL2FGVkRjMER1LWQ5 Q002b3dXWU1CSVhzS0hGVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBjuFwSmG25BvfkVyMUZLdCYY/mLhTXUkkZGtxW7weOQan1I/ReTiG7OFQ5LguD DNxArPi6WijbiMIwaO1aZMLr304xc/B78Dky7lj+ydsspGH6TsVFfWqA2nrQ6PY0 uygCAJE1mQGvykTzAcHb7dKHJxEz0gNNccbVfsSzOixZiK93ZKNeeWkcYi+znkEm cUephwhc5O9gDc2Tl1iXhYWVY8X5dIwqWfRLgeKZWV1HDvz7QKN1u/ye0sj92J6J 9AIer+dZXwfP1xE1Q8tjQEJ2Aym2T3T8Hf54gobxdU+/e9jdmZNJYLHaObKWbYUB l+z6Qh8zMihxAFXw+FWb35JK -----END CERTIFICATE-----Generated at Thu Mar 26 17:21:12 2026 by rpki-client