$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft File: Ak2PFao5dyF1iDou3BZQFOGSiho.mft (raw, json) Hash identifier: TAmk0Fz74d5S1LlMrAkr7hwECPU46/wSyAf144QSq6E= Subject key identifier: 77:45:12:71:67:EA:73:C0:BC:3B:30:E1:6C:10:8A:F3:30:FB:EC:2E Authority key identifier: 02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A Certificate issuer: /CN=A917B520/serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft Manifest number: 74 Signing time: Wed 25 Mar 2026 02:07:26 +0000 Manifest this update: Wed 25 Mar 2026 02:07:26 +0000 Manifest next update: Wed 01 Apr 2026 02:07:26 +0000 Files and hashes: 1: Ak2PFao5dyF1iDou3BZQFOGSiho.crl (hash: 0zMhRt+5MdMW3YlAt6XcIXpBipWu10zpaBbOkk5ApBc=) 2: 007686A0D3DD11F08C79D853C4F9AE02.roa (hash: snafex4e2SJ4Z7RULXkopBIE0X2g6JmA9mTt3bV4/r4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A Validity Not Before: Mar 25 02:07:26 2026 GMT Not After : Apr 1 02:07:26 2026 GMT Subject: CN=69c3435e-11a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5b:85:97:7d:bd:3b:63:0f:26:70:9f:a4:14: 70:6c:10:a1:c5:db:73:f6:7b:7c:41:f6:bc:16:35: 92:4b:43:e1:a9:4d:dc:53:f8:b1:18:6c:33:aa:46: 22:24:99:15:53:ea:95:ee:be:fa:26:0c:99:e0:e8: 35:20:49:36:33:08:02:df:41:72:01:d4:93:b0:f7: b3:80:52:01:98:2c:ae:27:fe:28:9d:cb:f9:59:2b: 09:cc:aa:d5:22:da:bf:03:a5:45:87:06:bc:60:80: d9:2d:2b:19:0a:ad:cb:b3:44:90:2b:2f:0b:bd:6a: 9c:21:4e:29:56:ac:ba:af:9c:a3:50:63:5a:c9:2a: 83:4d:7d:49:e8:0e:d1:5c:e8:9a:03:db:38:d5:24: f1:f0:92:fb:e8:92:cb:ad:83:2e:d0:3e:50:7b:09: 70:6d:c2:f6:24:6d:6a:9a:92:1b:f6:c7:92:3a:ac: 1e:2e:cd:06:83:ac:fc:e5:dd:bb:91:d1:57:43:ec: 53:cf:52:94:f8:c9:95:ca:a0:6a:d6:d2:c2:39:b0: 65:83:24:12:e3:b4:19:01:9a:62:38:52:cf:c8:d2: 84:01:de:60:f0:f8:63:ac:35:10:fc:b3:cc:30:4e: c4:bb:f9:fb:ff:99:fe:7a:17:72:88:c7:d2:1b:0e: 3d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:45:12:71:67:EA:73:C0:BC:3B:30:E1:6C:10:8A:F3:30:FB:EC:2E X509v3 Authority Key Identifier: keyid:02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:4f:0d:78:8e:61:8e:84:8f:81:5c:fc:8b:27:d8:3e:0e:03: 67:00:ca:a3:e2:37:89:e8:24:c8:1f:cc:a8:62:fb:0b:b9:01: 82:f1:e9:ff:0a:00:50:ea:f5:89:f2:85:5a:cb:77:1a:48:c2: a4:f7:82:69:e2:02:3c:5b:b7:46:48:c8:04:84:ae:f8:a4:36: 0b:39:c8:2b:7c:4b:cf:74:ef:95:d6:cd:b5:f5:60:9c:20:f4: 9b:13:a5:9f:f4:8f:4f:bc:48:6b:17:b5:c8:a5:ad:ed:33:70: 5c:f6:40:c1:9b:53:9c:b4:f1:84:99:97:5b:c0:d3:30:ee:1c: 48:b4:e8:65:22:fe:b4:ee:62:4a:25:1f:c1:96:15:50:e4:d3: e1:fb:b1:f2:f7:c8:e7:64:f8:57:dd:2b:83:6d:e6:55:24:51: 05:b3:8a:a1:eb:47:e3:1b:f5:f2:75:df:e3:f4:df:36:4a:9d: 49:2b:e0:8a:5d:74:23:02:8f:0f:52:4d:63:63:4c:46:2d:3c: 31:28:b3:38:91:3e:84:f3:95:ce:e3:1e:f6:16:b1:d1:4e:34: ab:5c:a9:d1:2a:8b:25:c8:f0:f9:78:a9:19:1b:60:63:73:9b: e2:2e:cf:13:34:26:fa:e5:fe:e6:fb:35:18:32:19:a0:18:95: a0:1e:5b:54 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjUyMDExMC8GA1UEBRMoMDI0RDhGMTVBQTM5NzcyMTc1ODgzQTJFREMxNjUwMTRF MTkyOEExQTAeFw0yNjAzMjUwMjA3MjZaFw0yNjA0MDEwMjA3MjZaMBgxFjAUBgNV BAMTDTY5YzM0MzVlLTExYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdW4WXfb07Yw8mcJ+kFHBsEKHF23P2e3xB9rwWNZJLQ+GpTdxT+LEYbDOqRiIk mRVT6pXuvvomDJng6DUgSTYzCALfQXIB1JOw97OAUgGYLK4n/iidy/lZKwnMqtUi 2r8DpUWHBrxggNktKxkKrcuzRJArLwu9apwhTilWrLqvnKNQY1rJKoNNfUnoDtFc 6JoD2zjVJPHwkvvoksutgy7QPlB7CXBtwvYkbWqakhv2x5I6rB4uzQaDrPzl3buR 0VdD7FPPUpT4yZXKoGrW0sI5sGWDJBLjtBkBmmI4Us/I0oQB3mDw+GOsNRD8s8ww TsS7+fv/mf56F3KIx9IbDj1/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUd0UScWfq c8C8OzDhbBCK8zD77C4wHwYDVR0jBBgwFoAUAk2PFao5dyF1iDou3BZQFOGSihow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCNTIwLzRBMTJBMzNDODJG NDExRjA5Qjc0MzU0RUM0RjlBRTAyL0FrMlBGYW81ZHlGMWlEb3UzQlpRRk9HU2lo by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG RDFGRjIvQWsyUEZhbzVkeUYxaURvdTNCWlFGT0dTaWhvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC NTIwLzRBMTJBMzNDODJGNDExRjA5Qjc0MzU0RUM0RjlBRTAyL0FrMlBGYW81ZHlG MWlEb3UzQlpRRk9HU2loby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB4Tw14jmGOhI+BXPyLJ9g+DgNnAMqj4jeJ6CTIH8yoYvsLuQGC8en/CgBQ6vWJ 8oVay3caSMKk94Jp4gI8W7dGSMgEhK74pDYLOcgrfEvPdO+V1s219WCcIPSbE6Wf 9I9PvEhrF7XIpa3tM3Bc9kDBm1OctPGEmZdbwNMw7hxItOhlIv607mJKJR/BlhVQ 5NPh+7Hy98jnZPhX3SuDbeZVJFEFs4qh60fjG/Xydd/j9N82Sp1JK+CKXXQjAo8P Uk1jY0xGLTwxKLM4kT6E85XO4x72FrHRTjSrXKnRKoslyPD5eKkZG2Bjc5viLs8T NCb65f7m+zUYMhmgGJWgHltU -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:29 2026 by rpki-client