$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft File: af6XO37r6w_4mym5y1vrq9DjHWs.mft (raw, json) Hash identifier: eTrHRVPROuyIuhGcrGjsyn1jpZ9NrHhuGzUFUXeRjms= Subject key identifier: D5:AC:DB:C5:C7:18:C9:CD:1E:12:80:40:9C:F9:ED:95:F5:03:26:AC Authority key identifier: 69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B Certificate issuer: /CN=A9144CD3/serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft Manifest number: AF Signing time: Wed 25 Mar 2026 06:20:39 +0000 Manifest this update: Wed 25 Mar 2026 06:20:39 +0000 Manifest next update: Wed 01 Apr 2026 06:20:39 +0000 Files and hashes: 1: af6XO37r6w_4mym5y1vrq9DjHWs.crl (hash: pn4yhyQ3dG0XILzgTf5GnqGFdvXGcIkAdqqszMvmzNU=) 2: B51F229E1BC611F08FE24C2CC4F9AE02.roa (hash: QZXloWUQ7ddz+/KBWMrxv7U+rSs8GnWshPY4O7WqH3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CD3, serialNumber=69FE973B7EEBEB0FF89B29B9CB5BEBABD0E31D6B Validity Not Before: Mar 25 06:20:39 2026 GMT Not After : Apr 1 06:20:39 2026 GMT Subject: CN=69c37eb7-6aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ba:aa:23:c1:fd:00:22:2e:d4:c4:19:88:aa: 13:b2:e9:12:2b:0b:c8:e3:44:b2:70:01:f9:1e:05: 5e:ed:a9:50:f9:27:0e:36:77:e0:eb:3e:e1:e3:b9: 45:31:16:4a:91:e2:dd:32:30:91:5d:65:a1:2d:58: ea:d5:09:99:0e:29:f2:50:e4:e8:2f:2e:91:f5:07: 51:81:7e:30:a8:7b:f7:b9:c2:34:99:c6:2c:69:ec: 21:91:03:bf:2e:9d:65:60:f4:7f:35:22:26:d1:d5: b5:51:ae:fe:17:5f:2f:c3:f5:fa:60:ac:d2:c1:8c: 7c:ca:59:7f:5d:e6:cf:65:a9:4e:53:53:2e:90:31: 1d:71:7e:c6:e2:0f:ce:19:88:ba:a6:b5:53:31:e2: 66:3f:22:55:ef:40:88:47:c4:da:7c:f7:a0:e7:79: ee:dd:b1:39:2e:29:79:dc:f6:0c:a7:e5:58:2e:4e: c4:66:48:2c:3f:7d:08:80:99:45:73:f8:d0:f9:82: 07:3d:2f:6b:da:82:c0:ec:31:7d:93:fd:a8:dc:4d: 01:a0:d2:21:11:f7:9b:69:0a:ff:cb:9f:ba:75:62: 90:84:1c:c1:cd:88:ec:a9:67:0a:13:35:c3:96:dd: 62:e6:ec:44:b4:87:e9:68:c9:f5:3c:02:52:60:d8: b9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AC:DB:C5:C7:18:C9:CD:1E:12:80:40:9C:F9:ED:95:F5:03:26:AC X509v3 Authority Key Identifier: keyid:69:FE:97:3B:7E:EB:EB:0F:F8:9B:29:B9:CB:5B:EB:AB:D0:E3:1D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af6XO37r6w_4mym5y1vrq9DjHWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CD3/F0A65C3E1B6611F0A05CB529C4F9AE02/af6XO37r6w_4mym5y1vrq9DjHWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:57:ae:f7:53:9b:e5:fe:57:24:de:10:6a:14:bc:ea:21:ff: 4c:89:2b:29:c5:70:2d:b9:4e:38:dc:79:f5:75:62:03:b1:64: 5f:65:94:ef:9f:cc:8b:59:3b:74:7f:55:4c:26:40:a9:b2:d3: 97:a5:28:f9:a2:24:cd:ae:90:07:51:33:f8:5c:c9:82:30:df: 04:05:87:d2:75:df:4f:56:00:0b:68:07:47:28:49:e6:a5:be: 39:72:f5:9d:12:ee:80:17:32:17:ba:f0:ed:6a:5c:9d:7b:81: 7e:fd:24:29:3a:bf:3d:1b:96:6c:6a:02:17:72:0b:9e:cf:49: 24:5a:7d:ec:a2:cb:e6:d9:64:ea:a4:08:7c:08:59:d1:7e:a2: ab:a3:33:a1:c7:e4:b8:0c:a5:0e:32:c6:b4:e2:3f:33:98:4d: 5c:eb:44:18:58:e6:d8:24:f5:1b:31:7b:0e:b4:65:18:b9:78: c9:b5:d4:da:04:62:ee:14:39:ad:bd:9e:bb:4f:d4:d1:de:28: c3:ed:81:20:2a:e1:77:6d:68:54:d5:c0:b3:77:7a:95:3f:74: 38:07:56:73:88:3f:4b:f3:33:34:7b:7c:5e:ef:93:db:57:08: 18:35:ad:3b:07:62:b8:08:dc:62:ac:4c:26:e2:10:18:61:73: c3:70:aa:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRDRDMxMTAvBgNVBAUTKDY5RkU5NzNCN0VFQkVCMEZGODlCMjlCOUNCNUJFQkFC RDBFMzFENkIwHhcNMjYwMzI1MDYyMDM5WhcNMjYwNDAxMDYyMDM5WjAYMRYwFAYD VQQDEw02OWMzN2ViNy02YWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo7qqI8H9ACIu1MQZiKoTsukSKwvI40SycAH5HgVe7alQ+ScONnfg6z7h47lF MRZKkeLdMjCRXWWhLVjq1QmZDinyUOToLy6R9QdRgX4wqHv3ucI0mcYsaewhkQO/ Lp1lYPR/NSIm0dW1Ua7+F18vw/X6YKzSwYx8yll/XebPZalOU1MukDEdcX7G4g/O GYi6prVTMeJmPyJV70CIR8TafPeg53nu3bE5Lil53PYMp+VYLk7EZkgsP30IgJlF c/jQ+YIHPS9r2oLA7DF9k/2o3E0BoNIhEfebaQr/y5+6dWKQhBzBzYjsqWcKEzXD lt1i5uxEtIfpaMn1PAJSYNi5EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNWs28XH GMnNHhKAQJz57ZX1AyasMB8GA1UdIwQYMBaAFGn+lzt+6+sP+Jspuctb66vQ4x1r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NENEMy9GMEE2NUMzRTFC NjYxMUYwQTA1Q0I1MjlDNEY5QUUwMi9hZjZYTzM3cjZ3XzRteW01eTF2cnE5RGpI V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FmNlhPMzdyNndfNG15bTV5MXZycTlEakhXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NENEMy9GMEE2NUMzRTFCNjYxMUYwQTA1Q0I1MjlDNEY5QUUwMi9hZjZYTzM3cjZ3 XzRteW01eTF2cnE5RGpIV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtleu91Ob5f5XJN4QahS86iH/TIkrKcVwLblOONx59XViA7FkX2WU75/Mi1k7 dH9VTCZAqbLTl6Uo+aIkza6QB1Ez+FzJgjDfBAWH0nXfT1YAC2gHRyhJ5qW+OXL1 nRLugBcyF7rw7WpcnXuBfv0kKTq/PRuWbGoCF3ILns9JJFp97KLL5tlk6qQIfAhZ 0X6iq6MzocfkuAylDjLGtOI/M5hNXOtEGFjm2CT1GzF7DrRlGLl4ybXU2gRi7hQ5 rb2eu0/U0d4ow+2BICrhd21oVNXAs3d6lT90OAdWc4g/S/MzNHt8Xu+T21cIGDWt OwdiuAjcYqxMJuIQGGFzw3CqgQ== -----END CERTIFICATE-----Generated at Thu Mar 26 09:04:12 2026 by rpki-client