$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft File: af9o05rBdz4oqFeFx5G0qNmzhIY.mft (raw, json) Hash identifier: SQhEv47iqNq10WRY9MuUHyLU+t0QAvMlkDYlsqAhX30= Subject key identifier: E5:74:C8:D8:31:25:C8:36:59:33:2D:5B:32:24:8F:94:FE:7C:F4:2D Authority key identifier: 69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86 Certificate issuer: /CN=A9148D61/serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486 Certificate serial: 02AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft Manifest number: 0298 Signing time: Wed 13 May 2026 01:44:50 +0000 Manifest this update: Wed 13 May 2026 01:44:49 +0000 Manifest next update: Wed 20 May 2026 01:44:49 +0000 Files and hashes: 1: af9o05rBdz4oqFeFx5G0qNmzhIY.crl (hash: NjLBXVh9ktb69Yls/DyJNHhPg0TUnKj+KcmFPkJeAGE=) 2: 349D4A7AB90A11EF97D24653C4F9AE02.roa (hash: gj01DmJfEaGsSpp5tjGsusN7Thz10FKLT4wU37QzljM=) 3: 34386BAAB90A11EF97D24653C4F9AE02.roa (hash: 8a9pl0B9WRoV/I8zbYuLrKWiJVi0iu0Y5myQD63MtCk=) 4: 35ADE898B90A11EF97D24653C4F9AE02.roa (hash: j4HW8v+J9rL2PkNopASjMuegUlrtdhRwhQv/dAW6LJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 687 (0x2af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148D61, serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486 Validity Not Before: May 13 01:44:49 2026 GMT Not After : May 20 01:44:49 2026 GMT Subject: CN=6a03d792-7ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:df:7e:27:53:0c:b5:47:6d:91:fd:17:9c:84: fe:b0:d0:06:96:db:f5:ba:ec:39:49:75:7b:aa:23: 4f:31:65:fa:5d:a3:44:80:7e:b6:63:4a:96:4b:0b: a7:e3:39:32:37:e7:d1:72:48:50:62:a0:b7:2e:ce: 6c:27:8d:1d:21:39:43:b5:3a:a3:50:8f:19:d0:bb: c7:8c:6b:7e:72:9b:64:e6:4e:66:95:51:19:2a:b7: 95:6b:58:22:fd:76:1b:53:7f:05:e5:9b:43:3a:27: 03:8e:8c:8c:ed:3e:c9:be:17:82:82:6a:bd:51:ee: 42:48:fa:7f:3c:c7:9f:28:ce:20:da:4d:ef:b8:86: dc:27:91:8d:79:d2:bd:c2:35:f6:89:a6:a9:ed:9c: 47:e4:3e:50:f3:4d:4e:5a:b0:40:3f:59:bf:f7:38: f6:e4:05:a9:84:d3:65:16:87:eb:73:16:54:ba:96: 5b:fb:24:15:2f:d8:d9:9d:c3:7f:24:df:b5:47:08: 8e:fb:af:80:e1:0c:32:da:b8:35:b3:6b:55:07:69: 0a:e1:4f:f8:3b:4d:71:a4:f2:30:08:5f:49:13:86: 1e:b0:c3:8f:0c:31:59:1f:58:82:b9:07:db:50:3d: 84:8d:bb:05:3f:04:6b:de:15:ad:71:57:2d:b7:dc: 65:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:74:C8:D8:31:25:C8:36:59:33:2D:5B:32:24:8F:94:FE:7C:F4:2D X509v3 Authority Key Identifier: keyid:69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:dc:80:d4:d1:3e:1b:a4:44:fb:fb:a4:79:f9:6e:22:3f:c1: 19:92:9f:a5:e6:31:1c:f3:07:b0:c4:b9:76:7a:93:8d:d4:83: d1:df:46:ac:70:7b:f3:79:cf:6d:9e:9d:b3:cf:1b:a7:f4:90: fa:ac:6f:18:eb:39:29:0e:5e:7a:1d:8f:99:8f:7a:4a:64:bc: a4:e0:a4:4b:74:45:f3:2e:9b:4b:39:18:60:02:ab:d5:e4:a9: 1f:62:37:22:c6:a5:38:39:16:d5:bc:35:0f:cf:8b:2e:10:0d: 93:04:be:2d:fa:d0:e5:7f:ff:67:75:4c:c6:49:29:7a:6a:87: ae:6d:7d:2d:31:fe:2a:89:96:9c:14:8a:f6:1a:a5:76:62:d2: 07:08:eb:9f:34:8a:db:34:f8:ec:38:4f:56:54:76:57:1b:e5: 0c:16:0e:92:1d:3f:78:7d:77:13:99:52:3d:b8:73:15:3b:e9: 23:99:0b:06:f2:06:0c:13:9b:0d:b5:a3:aa:57:c2:56:ec:a6: 8e:62:90:7e:e4:95:48:c8:f9:5f:7c:64:43:13:bd:41:6a:5f: dc:48:3e:c3:c6:02:77:f4:a5:42:57:b9:39:33:62:ce:c6:c6: 0d:47:01:ac:83:70:87:64:c9:75:d2:cb:10:e9:2a:8e:6c:85: 19:c1:e6:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhENjExMTAvBgNVBAUTKDY5RkY2OEQzOUFDMTc3M0UyOEE4NTc4NUM3OTFCNEE4 RDlCMzg0ODYwHhcNMjYwNTEzMDE0NDQ5WhcNMjYwNTIwMDE0NDQ5WjAYMRYwFAYD VQQDEw02YTAzZDc5Mi03ZWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp99+J1MMtUdtkf0XnIT+sNAGltv1uuw5SXV7qiNPMWX6XaNEgH62Y0qWSwun 4zkyN+fRckhQYqC3Ls5sJ40dITlDtTqjUI8Z0LvHjGt+cptk5k5mlVEZKreVa1gi /XYbU38F5ZtDOicDjoyM7T7JvheCgmq9Ue5CSPp/PMefKM4g2k3vuIbcJ5GNedK9 wjX2iaap7ZxH5D5Q801OWrBAP1m/9zj25AWphNNlFofrcxZUupZb+yQVL9jZncN/ JN+1RwiO+6+A4Qwy2rg1s2tVB2kK4U/4O01xpPIwCF9JE4YesMOPDDFZH1iCuQfb UD2EjbsFPwRr3hWtcVctt9xlQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOV0yNgx Jcg2WTMtWzIkj5T+fPQtMB8GA1UdIwQYMBaAFGn/aNOawXc+KKhXhceRtKjZs4SG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQ2MS8yOTVFNEM3NjYw MUIxMUVEQTVDNzI3NkVDNEY5QUUwMi9hZjlvMDVyQmR6NG9xRmVGeDVHMHFObXpo SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FmOW8wNXJCZHo0b3FGZUZ4NUcwcU5temhJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEQ2MS8yOTVFNEM3NjYwMUIxMUVEQTVDNzI3NkVDNEY5QUUwMi9hZjlvMDVyQmR6 NG9xRmVGeDVHMHFObXpoSVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAldyA1NE+G6RE+/ukefluIj/BGZKfpeYxHPMHsMS5dnqTjdSD0d9GrHB783nP bZ6ds88bp/SQ+qxvGOs5KQ5eeh2PmY96SmS8pOCkS3RF8y6bSzkYYAKr1eSpH2I3 IsalODkW1bw1D8+LLhANkwS+LfrQ5X//Z3VMxkkpemqHrm19LTH+KomWnBSK9hql dmLSBwjrnzSK2zT47DhPVlR2VxvlDBYOkh0/eH13E5lSPbhzFTvpI5kLBvIGDBOb DbWjqlfCVuymjmKQfuSVSMj5X3xkQxO9QWpf3Eg+w8YCd/SlQle5OTNizsbGDUcB rINwh2TJddLLEOkqjmyFGcHmDw== -----END CERTIFICATE-----Generated at Wed May 13 11:37:27 2026 by rpki-client