$ rpki-client -vvf rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft File: aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft (raw, json) Hash identifier: i++5FRpXVa8CSl5Z7XpR96s4s3ufAnuaPDCOi2AAhkU= Subject key identifier: 8D:D9:80:0E:B7:32:0C:DC:BC:FE:CE:98:F8:23:9E:1C:E8:78:E4:8D Authority key identifier: 68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57 Certificate issuer: /CN=A9156751/serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057 Certificate serial: 0364 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft Manifest number: 0352 Signing time: Sun 05 Apr 2026 00:42:17 +0000 Manifest this update: Sun 05 Apr 2026 00:42:17 +0000 Manifest next update: Sun 12 Apr 2026 00:42:17 +0000 Files and hashes: 1: aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl (hash: abaO5HVCInW3tyx34cMn3JE+5QIHelKfqmQr/20oztI=) 2: 776724AAF7B711ECAE4F7935C4F9AE02.roa (hash: YaLUoS4NO6gvXeP/FB11InRUuC2v1zSJTE++6llurm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 868 (0x364) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156751, serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057 Validity Not Before: Apr 5 00:42:17 2026 GMT Not After : Apr 12 00:42:17 2026 GMT Subject: CN=69d1afe9-c600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1b:5f:27:a5:ae:b5:11:31:11:e6:ad:e0:85: 76:64:b5:ba:13:5f:d3:bf:7a:a0:2c:23:cd:09:5d: 12:43:83:bc:18:4a:d8:9b:2f:39:36:a6:cd:d1:23: db:f5:30:1b:46:64:79:3b:bd:d8:98:d3:48:4b:32: 8f:75:ba:7f:32:ac:69:e2:c2:a2:7e:23:48:d3:21: de:79:72:f1:2a:e8:6f:37:8e:97:bc:46:4e:38:72: d4:67:38:50:5f:de:a6:79:88:8a:6d:70:84:61:32: 08:f7:a9:7d:fe:7e:e8:38:60:05:3b:a7:9c:85:67: 92:3f:aa:0d:ac:36:da:fb:1e:02:8b:71:e6:c6:3c: f9:d7:07:de:07:0c:40:77:7d:92:e9:d8:51:8f:c3: 87:76:fb:2b:07:53:ac:a4:fe:7e:a5:af:a1:92:b9: f8:8f:fb:08:25:3b:a7:bc:3d:4d:20:cc:2d:d0:71: 9e:01:8c:0b:a1:5e:50:77:9c:e8:7e:52:bb:30:f8: d5:2f:24:0d:6e:9d:e4:5a:7d:ca:52:bd:1e:6f:22: 27:f1:2d:27:d5:94:37:3a:13:54:6e:d0:60:88:60: 57:22:ab:48:4d:1b:fe:d5:29:cf:03:4e:ea:7b:e8: 81:cf:cc:60:ad:7a:cf:61:c5:4b:db:fa:be:c5:1e: 6b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D9:80:0E:B7:32:0C:DC:BC:FE:CE:98:F8:23:9E:1C:E8:78:E4:8D X509v3 Authority Key Identifier: keyid:68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:dc:9e:a5:ad:35:21:84:8a:1f:48:12:55:29:cf:4f:69:2b: a1:10:02:11:65:04:5c:f8:d9:2f:bb:77:af:0c:3e:32:e7:5e: 96:0d:04:fa:fd:3f:2b:b9:b4:13:fb:af:db:78:f0:e7:4c:d6: 2a:5f:6c:ba:e2:bc:b6:87:a8:df:8e:e5:59:9f:0b:f5:6b:ce: 11:31:6a:98:ef:a2:6b:4e:ba:f5:a7:f2:c0:94:ce:97:aa:26: 80:9c:df:02:25:0a:f5:c7:87:34:b0:46:1e:38:31:a7:ab:ab: 4f:9c:fe:d0:a1:e1:cb:3d:a5:5b:be:92:23:0a:65:49:50:fd: af:b2:23:34:1a:b1:28:7a:c8:6d:ec:03:c0:3e:a0:42:e0:3e: 24:b8:cb:9d:c8:23:86:9f:56:4d:11:7b:f7:5a:f2:6f:2a:68: 66:9a:d5:3d:45:8c:05:bf:37:5d:4a:74:3e:7f:e4:fd:74:aa: ef:ee:53:24:cc:a9:b6:a2:d2:44:26:74:8a:32:bd:ae:e7:0b: 51:a3:bc:41:a6:96:e5:30:24:0a:33:c8:e6:6d:11:fd:22:a2: a4:c3:ed:19:c4:89:a2:df:7d:41:72:3d:8b:bd:fa:fd:23:80: 6e:fc:49:f2:6c:45:17:82:da:8d:c1:b6:9c:0b:bc:17:d2:d9: d0:ce:3d:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3NTExMTAvBgNVBAUTKDY4MTEwNDkwNkNGOTNEQTQzQjZDNUIyMTM1QTAyNDE0 OUE4RkMwNTcwHhcNMjYwNDA1MDA0MjE3WhcNMjYwNDEyMDA0MjE3WjAYMRYwFAYD VQQDEw02OWQxYWZlOS1jNjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhtfJ6WutRExEeat4IV2ZLW6E1/Tv3qgLCPNCV0SQ4O8GErYmy85NqbN0SPb 9TAbRmR5O73YmNNISzKPdbp/Mqxp4sKifiNI0yHeeXLxKuhvN46XvEZOOHLUZzhQ X96meYiKbXCEYTII96l9/n7oOGAFO6echWeSP6oNrDba+x4Ci3Hmxjz51wfeBwxA d32S6dhRj8OHdvsrB1OspP5+pa+hkrn4j/sIJTunvD1NIMwt0HGeAYwLoV5Qd5zo flK7MPjVLyQNbp3kWn3KUr0ebyIn8S0n1ZQ3OhNUbtBgiGBXIqtITRv+1SnPA07q e+iBz8xgrXrPYcVL2/q+xR5r8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI3ZgA63 MgzcvP7OmPgjnhzoeOSNMB8GA1UdIwQYMBaAFGgRBJBs+T2kO2xbITWgJBSaj8BX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc1MS8wRjg3MDJCQUY3 QjIxMUVDQjJBRTYzMkVDNEY5QUUwMi9hQkVFa0d6NVBhUTdiRnNoTmFBa0ZKcVB3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCRUVrR3o1UGFRN2JGc2hOYUFrRkpxUHdGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njc1MS8wRjg3MDJCQUY3QjIxMUVDQjJBRTYzMkVDNEY5QUUwMi9hQkVFa0d6NVBh UTdiRnNoTmFBa0ZKcVB3RmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbNyepa01IYSKH0gSVSnPT2kroRACEWUEXPjZL7t3rww+Mudelg0E+v0/K7m0 E/uv23jw50zWKl9suuK8toeo347lWZ8L9WvOETFqmO+ia0669afywJTOl6omgJzf AiUK9ceHNLBGHjgxp6urT5z+0KHhyz2lW76SIwplSVD9r7IjNBqxKHrIbewDwD6g QuA+JLjLncgjhp9WTRF791rybypoZprVPUWMBb83XUp0Pn/k/XSq7+5TJMyptqLS RCZ0ijK9rucLUaO8QaaW5TAkCjPI5m0R/SKipMPtGcSJot99QXI9i736/SOAbvxJ 8mxFF4LajcG2nAu8F9LZ0M49bQ== -----END CERTIFICATE-----Generated at Sun Apr 5 20:59:11 2026 by rpki-client