$ rpki-client -vvf rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft File: AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft (raw, json) Hash identifier: fKRelLm36B4BZLpKRP00bP9a/sHwcorwciD6DSRbsNo= Subject key identifier: 56:0A:24:17:44:4D:CB:E2:DE:5A:C0:51:65:A2:27:DD:5D:E3:BF:D6 Authority key identifier: 01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 Certificate issuer: /CN=A91788FF/serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft Manifest number: 013F Signing time: Wed 25 Mar 2026 04:36:54 +0000 Manifest this update: Wed 25 Mar 2026 04:36:54 +0000 Manifest next update: Wed 01 Apr 2026 04:36:54 +0000 Files and hashes: 1: AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl (hash: yn6XWEC3/U+GRQc+9nZFzC4G37FbE/AbWmmBDZ4h3yc=) 2: 726BD5E645CF11EF854E2262C4F9AE02.roa (hash: CfTiBAbUMNxFwj32+HfJiQlb+5AntCj6pEFWYr5R03U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91788FF, serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4 Validity Not Before: Mar 25 04:36:54 2026 GMT Not After : Apr 1 04:36:54 2026 GMT Subject: CN=69c36666-c63d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1b:56:92:73:03:c4:96:4f:9e:b8:b8:38:6c: db:06:6b:79:02:d6:b3:55:3c:0c:a0:e5:11:0f:a3: 34:6c:55:0d:fb:7e:cd:62:a2:68:57:a8:fb:58:2a: 81:2c:a5:85:42:12:92:a1:5e:70:80:6d:25:02:43: ef:50:c2:c5:c2:56:e8:d3:cf:2b:8c:fc:b2:32:35: 32:33:4b:19:23:f0:6f:f8:e0:1d:a0:a0:f8:dd:8e: 4e:52:b2:d3:c7:72:7b:64:31:93:f6:c1:f1:f5:df: a6:f7:0a:ef:05:8e:08:2a:65:4c:8a:26:17:c7:30: 86:ec:b8:14:ea:78:00:be:2d:f8:5f:6e:72:3d:f1: 44:94:1b:4f:25:a8:13:c3:a3:4e:22:88:06:8f:02: c7:55:ce:00:5d:24:10:c1:9f:7d:68:67:75:53:5a: 74:a4:0c:f4:fc:7d:a5:4f:b5:4d:07:1b:6c:2e:13: db:06:17:16:9b:e3:2e:8b:cb:fa:91:66:50:81:fd: ce:21:38:f6:f9:14:c0:23:60:e9:91:85:88:97:0c: 12:89:31:7d:f8:34:67:48:ae:0d:bc:fd:ba:d8:99: 5d:02:59:f7:d7:a2:9b:d6:d8:57:18:5d:ba:d4:b6: e7:63:bc:89:5e:3f:77:41:09:9e:81:d9:3c:31:6c: 37:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0A:24:17:44:4D:CB:E2:DE:5A:C0:51:65:A2:27:DD:5D:E3:BF:D6 X509v3 Authority Key Identifier: keyid:01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:4a:ba:1c:28:79:bb:4c:fb:5b:c2:b9:6b:6a:87:31:e7:e2: a4:1e:8c:86:a2:2a:0d:bb:2a:d1:f9:93:00:b8:8c:ce:41:82: ed:69:ff:95:c4:c1:dd:6f:c8:d2:e0:8c:37:ff:b9:14:95:14: a2:8e:19:0b:0d:f6:72:e6:e5:19:4c:9c:db:62:9a:26:e5:ed: f6:5a:d3:5f:ce:27:44:66:54:a4:37:16:2e:20:21:c5:57:f5: 2d:35:7b:d3:42:4b:e9:cd:f7:34:41:a4:50:1a:5e:8d:ce:00: 7d:e0:0b:ff:ee:30:c8:04:7b:d6:84:49:d4:b7:d4:c3:8d:59: 07:73:a0:fe:c7:09:43:bf:ed:72:49:69:7f:89:54:c7:c3:fa: 5f:f8:53:1d:97:34:1a:fd:97:fb:3b:f3:2f:d0:bc:c7:1d:48: 56:f8:49:56:4f:cc:b6:11:64:f8:49:ab:b3:57:f7:16:aa:64: ac:60:ee:54:70:17:29:66:ef:ae:46:64:b2:77:0f:b0:42:5b: 13:13:e2:30:42:19:8f:49:8a:02:56:30:cf:53:d1:3a:ea:fc: 9c:f0:7d:a5:a1:7a:2c:79:7b:ca:d1:d2:6c:0e:2a:97:62:93: a7:6f:8b:33:ef:07:c0:27:a1:ac:08:28:15:2a:0b:5a:77:d6: ed:46:0a:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg4RkYxMTAvBgNVBAUTKDAxRjFFRDA4Q0RFMjcxMzZGMzk3RDA3MzRBRjJBMzVF NUQ1MjdERDQwHhcNMjYwMzI1MDQzNjU0WhcNMjYwNDAxMDQzNjU0WjAYMRYwFAYD VQQDEw02OWMzNjY2Ni1jNjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xtWknMDxJZPnri4OGzbBmt5AtazVTwMoOURD6M0bFUN+37NYqJoV6j7WCqB LKWFQhKSoV5wgG0lAkPvUMLFwlbo088rjPyyMjUyM0sZI/Bv+OAdoKD43Y5OUrLT x3J7ZDGT9sHx9d+m9wrvBY4IKmVMiiYXxzCG7LgU6ngAvi34X25yPfFElBtPJagT w6NOIogGjwLHVc4AXSQQwZ99aGd1U1p0pAz0/H2lT7VNBxtsLhPbBhcWm+Mui8v6 kWZQgf3OITj2+RTAI2DpkYWIlwwSiTF9+DRnSK4NvP262JldAln316Kb1thXGF26 1LbnY7yJXj93QQmegdk8MWw3WwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFYKJBdE Tcvi3lrAUWWiJ91d47/WMB8GA1UdIwQYMBaAFAHx7QjN4nE285fQc0ryo15dUn3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODhGRi9CREVCMjk3NDQ1 Q0QxMUVGOEU4MjY0NEVDNEY5QUUwMi9BZkh0Q00zaWNUYnpsOUJ6U3ZLalhsMVNm ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmSHRDTTNpY1Riemw5QnpTdktqWGwxU2ZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODhGRi9CREVCMjk3NDQ1Q0QxMUVGOEU4MjY0NEVDNEY5QUUwMi9BZkh0Q00zaWNU YnpsOUJ6U3ZLalhsMVNmZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXUq6HCh5u0z7W8K5a2qHMefipB6MhqIqDbsq0fmTALiMzkGC7Wn/lcTB3W/I 0uCMN/+5FJUUoo4ZCw32cublGUyc22KaJuXt9lrTX84nRGZUpDcWLiAhxVf1LTV7 00JL6c33NEGkUBpejc4AfeAL/+4wyAR71oRJ1LfUw41ZB3Og/scJQ7/tcklpf4lU x8P6X/hTHZc0Gv2X+zvzL9C8xx1IVvhJVk/MthFk+Emrs1f3FqpkrGDuVHAXKWbv rkZksncPsEJbExPiMEIZj0mKAlYwz1PROur8nPB9paF6LHl7ytHSbA4ql2KTp2+L M+8HwCehrAgoFSoLWnfW7UYKOg== -----END CERTIFICATE-----Generated at Fri Mar 27 03:30:38 2026 by rpki-client