$ rpki-client -vvf rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft File: W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft (raw, json) Hash identifier: F9oBIM4xVEtXLR8dOBllHesax4ZWqASRBV2JrPNu+6U= Subject key identifier: 89:E5:EE:2E:E4:70:7C:41:11:3B:34:2C:0B:6F:46:7A:BF:75:1C:A0 Authority key identifier: 5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB Certificate issuer: /CN=A9131C4B/serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft Manifest number: 68 Signing time: Sun 05 Apr 2026 07:16:10 +0000 Manifest this update: Sun 05 Apr 2026 07:16:10 +0000 Manifest next update: Sun 12 Apr 2026 07:16:10 +0000 Files and hashes: 1: W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl (hash: YuIG5IggisjyUxljpXaM79vLTHcgwL88ZDv3ZWUr45Q=) 2: D65EFE0A91F711F087341C45C4F9AE02.roa (hash: bwshEspn5Rm/jzWxQl5mOhNxhC2TqkN15wojbaQFT3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131C4B, serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB Validity Not Before: Apr 5 07:16:10 2026 GMT Not After : Apr 12 07:16:10 2026 GMT Subject: CN=69d20c3a-78cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:09:24:6b:5c:fd:4f:46:41:32:75:56:ed:fa: 21:6e:4c:aa:54:7a:c4:59:68:83:5c:60:36:7f:ad: cf:93:20:2f:9c:28:b4:cb:d2:0d:6c:dd:47:c3:6d: d3:b2:3c:8e:92:a8:2b:4d:ed:ab:8a:00:6f:85:c0: 10:77:81:08:e6:4c:e4:30:fa:3b:f5:84:ee:ff:6a: ea:72:90:db:5b:ab:cd:50:a5:1a:2b:0d:07:a0:9a: 93:d7:2d:52:de:39:dc:09:e9:d3:81:e3:75:13:33: ad:fb:bc:69:b5:99:b5:9f:6e:7a:87:5e:4a:8d:31: 03:80:ef:17:d6:68:96:de:32:f1:8c:53:02:8e:e1: c6:4c:83:ad:6e:54:0e:af:4c:ae:4a:19:67:1f:d8: 46:9d:04:8f:07:ec:62:cd:ed:8a:92:8c:46:86:75: a4:09:9c:1a:81:50:84:51:37:89:77:8c:e5:d5:7a: 28:bc:f0:52:3f:b7:68:92:25:e9:eb:24:b2:2d:84: 7d:d1:a7:16:2b:b3:29:e6:12:a0:7e:95:65:aa:68: 02:4a:11:cd:66:63:da:b9:da:76:c3:f0:7f:1f:61: c2:ae:68:f0:f0:ec:ae:88:ac:1f:b0:93:16:cf:c4: a3:ca:ea:24:64:d4:17:01:03:13:6c:a4:2a:9d:92: 39:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E5:EE:2E:E4:70:7C:41:11:3B:34:2C:0B:6F:46:7A:BF:75:1C:A0 X509v3 Authority Key Identifier: keyid:5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:de:61:88:ad:34:f0:76:d5:d3:53:64:e9:95:63:7b:b4:f3: 9e:a0:f7:65:4a:77:f4:3d:c8:2d:5a:fd:a1:d0:03:bf:e9:2c: 7f:26:17:84:bd:e0:57:8d:07:2d:4a:3e:8e:5c:fa:83:22:20: 9e:95:d5:8d:68:c0:9f:88:c2:07:56:ff:ce:f4:17:ea:98:55: 27:49:c8:d2:47:19:7b:36:7e:99:cc:d6:ce:10:c5:69:5a:6f: dc:1f:23:05:c3:18:af:b5:75:cf:5e:cf:0b:48:62:5c:2d:21: 3f:91:68:f6:92:a9:c1:1c:6b:00:50:a6:6a:e7:68:d8:ec:1a: e5:df:8b:af:51:72:f6:ae:b0:7c:69:8a:99:3d:b0:ff:f3:37: 9c:ae:44:67:53:25:72:82:f0:cf:23:d1:36:84:71:f1:da:fd: 54:18:6f:e2:9d:c2:e4:24:95:3c:84:e2:45:87:0c:1f:d0:61: 7c:f8:6a:8f:5d:e1:6d:03:9b:31:b7:91:fe:96:77:4e:8b:15: a7:b7:b2:05:f9:1d:ce:68:7c:f5:40:4d:9c:12:dd:51:6f:4f: d9:af:5d:2a:0c:06:2c:0c:6a:13:db:10:d4:6e:0c:34:b6:c1: 50:e3:91:73:0f:32:1e:51:d8:c8:64:83:4b:f4:8e:58:bd:da: 2b:33:6a:f0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MUM0QjExMC8GA1UEBRMoNUJGMDAwMTQ3MzRBRDFCNTY1QjEwODZEMTJGRkNBQjU5 MENDQjhCQjAeFw0yNjA0MDUwNzE2MTBaFw0yNjA0MTIwNzE2MTBaMBgxFjAUBgNV BAMTDTY5ZDIwYzNhLTc4Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyCSRrXP1PRkEydVbt+iFuTKpUesRZaINcYDZ/rc+TIC+cKLTL0g1s3UfDbdOy PI6SqCtN7auKAG+FwBB3gQjmTOQw+jv1hO7/aupykNtbq81QpRorDQegmpPXLVLe OdwJ6dOB43UTM637vGm1mbWfbnqHXkqNMQOA7xfWaJbeMvGMUwKO4cZMg61uVA6v TK5KGWcf2EadBI8H7GLN7YqSjEaGdaQJnBqBUIRRN4l3jOXVeii88FI/t2iSJenr JLIthH3RpxYrsynmEqB+lWWqaAJKEc1mY9q52nbD8H8fYcKuaPDw7K6IrB+wkxbP xKPK6iRk1BcBAxNspCqdkjkvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUieXuLuRw fEEROzQsC29Ger91HKAwHwYDVR0jBBgwFoAUW/AAFHNK0bVlsQhtEv/KtZDMuLsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxQzRCLzE0MDA2NjJBOTFG NTExRjA4ODM0RUIxQUM0RjlBRTAyL1dfQUFGSE5LMGJWbHNRaHRFdl9LdFpETXVM cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV19BQUZITkswYlZsc1FodEV2X0t0WkRNdUxzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx QzRCLzE0MDA2NjJBOTFGNTExRjA4ODM0RUIxQUM0RjlBRTAyL1dfQUFGSE5LMGJW bHNRaHRFdl9LdFpETXVMcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBk3mGIrTTwdtXTU2TplWN7tPOeoPdlSnf0PcgtWv2h0AO/6Sx/JheEveBXjQct Sj6OXPqDIiCeldWNaMCfiMIHVv/O9BfqmFUnScjSRxl7Nn6ZzNbOEMVpWm/cHyMF wxivtXXPXs8LSGJcLSE/kWj2kqnBHGsAUKZq52jY7Brl34uvUXL2rrB8aYqZPbD/ 8zecrkRnUyVygvDPI9E2hHHx2v1UGG/incLkJJU8hOJFhwwf0GF8+GqPXeFtA5sx t5H+lndOixWnt7IF+R3OaHz1QE2cEt1Rb0/Zr10qDAYsDGoT2xDUbgw0tsFQ45Fz DzIeUdjIZINL9I5YvdorM2rw -----END CERTIFICATE-----Generated at Sun Apr 5 19:40:18 2026 by rpki-client