$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft File: 9AFXH04P6PgNV80CfNnuFdc4jyQ.mft (raw, json) Hash identifier: b+5jfBwp5pEGz2i5Y0zTNvBEW+2V2DX8hKSwlxDkSdQ= Subject key identifier: 96:CA:0D:FB:8C:05:4E:9B:93:54:21:E7:57:D6:2F:72:D2:C9:EB:11 Authority key identifier: F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 Certificate issuer: /CN=A91EA54A/serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft Manifest number: 0120 Signing time: Wed 25 Mar 2026 04:57:04 +0000 Manifest this update: Wed 25 Mar 2026 04:57:03 +0000 Manifest next update: Wed 01 Apr 2026 04:57:03 +0000 Files and hashes: 1: 9AFXH04P6PgNV80CfNnuFdc4jyQ.crl (hash: +zo4BX04UnUL6UOL+79BQ1C9pe+L4nCExA1MXW+ufCY=) 2: 8D52A23871A611EF8F5B9755C4F9AE02.roa (hash: Y4eMPkfyTXrtKvA+X6u1unLZ0mgOp+sFenl0Spk8Log=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA54A, serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Validity Not Before: Mar 25 04:57:03 2026 GMT Not After : Apr 1 04:57:03 2026 GMT Subject: CN=69c36b20-ecce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8b:fa:52:b4:eb:bd:e0:7a:fa:d9:93:0f:23: ce:2c:31:58:b9:4e:4e:4d:72:22:0e:23:fa:99:19: 6c:3e:52:fe:9a:8b:e0:6b:85:fb:09:b7:bf:5e:51: 59:c1:00:89:16:cb:2d:96:5d:5e:d7:73:fb:a9:7a: 60:17:95:92:8b:0b:38:85:f7:87:06:e2:55:ca:18: a8:be:e4:89:ff:70:f5:ea:84:e9:66:08:a6:11:08: f5:dc:44:2f:4c:ad:11:ef:c8:2f:05:ee:3a:72:c6: fe:92:f4:27:34:ad:39:3b:c2:bc:d5:bc:37:ef:0f: df:6b:74:f5:ad:7b:27:ac:6d:9e:ce:6d:81:a2:61: 76:7b:ac:40:66:30:ff:1f:d0:90:37:87:29:d0:7c: 47:c3:aa:4e:ef:29:cd:9f:48:2c:ee:0a:e4:82:3f: af:94:dd:9f:68:e9:ea:23:9b:65:07:10:b9:42:8d: e7:41:f0:5e:6c:b4:0a:65:df:ca:ea:b6:e6:b6:9d: 9c:6a:16:01:f9:d6:69:6c:db:94:a1:4e:20:66:5e: 4f:31:80:3a:89:34:71:e9:f1:73:63:55:e5:4c:ff: ba:10:f4:1f:f6:42:bc:4b:b4:4e:1e:01:1a:56:c0: df:ae:56:46:1a:b6:7f:c9:f9:5f:de:f8:7c:91:42: 10:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CA:0D:FB:8C:05:4E:9B:93:54:21:E7:57:D6:2F:72:D2:C9:EB:11 X509v3 Authority Key Identifier: keyid:F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c2:3f:9e:88:a8:b0:1c:ca:80:86:bb:89:da:01:82:e9:ba: 13:cf:69:f0:e0:5c:91:5c:31:03:52:a4:60:f6:df:36:d4:49: 81:d1:7a:c4:f4:76:fa:c1:cf:55:2b:50:45:8f:76:28:ea:93: b9:d1:be:fa:08:91:3a:48:29:b6:37:cf:e3:aa:d1:8e:c1:9f: 19:8f:ad:b6:16:e5:96:ef:55:90:e7:de:62:6b:8c:db:af:c1: 3a:0b:1a:37:1c:e6:f8:61:3d:72:86:c0:25:9f:49:45:82:48: e4:d7:02:4d:06:72:cc:d5:41:81:10:0a:2b:03:a8:19:1e:5b: 56:0d:f2:b2:9c:ef:ea:c4:51:61:7b:81:09:d7:02:b8:ad:65: 1f:c3:69:2a:1d:dc:aa:de:ba:eb:cf:b4:30:e4:b6:90:5e:45: 86:f8:0d:c5:f5:65:5f:6f:a5:31:83:c1:89:cb:69:8c:5d:cb: 2c:0c:bf:97:8b:86:20:f3:39:a9:02:0e:b3:b1:9f:b3:d1:06: 0b:9b:d9:bf:3f:39:be:f5:a5:8f:21:91:8a:55:77:0d:00:e3: 48:11:ba:09:f5:c8:74:7c:1f:1a:45:bb:2d:a9:09:be:3a:0d: ea:25:32:4d:84:e6:30:3f:ab:b8:75:9c:fc:ba:f4:59:31:60: a0:b1:b4:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1NEExMTAvBgNVBAUTKEY0MDE1NzFGNEUwRkU4RjgwRDU3Q0QwMjdDRDlFRTE1 RDczODhGMjQwHhcNMjYwMzI1MDQ1NzAzWhcNMjYwNDAxMDQ1NzAzWjAYMRYwFAYD VQQDEw02OWMzNmIyMC1lY2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjIv6UrTrveB6+tmTDyPOLDFYuU5OTXIiDiP6mRlsPlL+movga4X7Cbe/XlFZ wQCJFsstll1e13P7qXpgF5WSiws4hfeHBuJVyhiovuSJ/3D16oTpZgimEQj13EQv TK0R78gvBe46csb+kvQnNK05O8K81bw37w/fa3T1rXsnrG2ezm2BomF2e6xAZjD/ H9CQN4cp0HxHw6pO7ynNn0gs7grkgj+vlN2faOnqI5tlBxC5Qo3nQfBebLQKZd/K 6rbmtp2cahYB+dZpbNuUoU4gZl5PMYA6iTRx6fFzY1XlTP+6EPQf9kK8S7ROHgEa VsDfrlZGGrZ/yflf3vh8kUIQSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJbKDfuM BU6bk1Qh51fWL3LSyesRMB8GA1UdIwQYMBaAFPQBVx9OD+j4DVfNAnzZ7hXXOI8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU0QS9CRTg0QTgyMDcx QTUxMUVGOEQ4MDVDNzhDNEY5QUUwMi85QUZYSDA0UDZQZ05WODBDZk5udUZkYzRq eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlBRlhIMDRQNlBnTlY4MENmTm51RmRjNGp5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTU0QS9CRTg0QTgyMDcxQTUxMUVGOEQ4MDVDNzhDNEY5QUUwMi85QUZYSDA0UDZQ Z05WODBDZk5udUZkYzRqeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALcI/noiosBzKgIa7idoBgum6E89p8OBckVwxA1KkYPbfNtRJgdF6xPR2+sHP VStQRY92KOqTudG++giROkgptjfP46rRjsGfGY+tthbllu9VkOfeYmuM26/BOgsa Nxzm+GE9cobAJZ9JRYJI5NcCTQZyzNVBgRAKKwOoGR5bVg3yspzv6sRRYXuBCdcC uK1lH8NpKh3cqt6668+0MOS2kF5FhvgNxfVlX2+lMYPBictpjF3LLAy/l4uGIPM5 qQIOs7Gfs9EGC5vZvz85vvWljyGRilV3DQDjSBG6CfXIdHwfGkW7LakJvjoN6iUy TYTmMD+ruHWc/Lr0WTFgoLG0eQ== -----END CERTIFICATE-----Generated at Thu Mar 26 08:48:17 2026 by rpki-client