$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft File: aFVDc0Du-d9CM6owWYMBIXsKHFU.mft (raw, json) Hash identifier: aWw4U9COVGLXBsFJBI+iWwOQQLVA1VOZJCTxujY9TGc= Subject key identifier: FD:66:A8:2B:4B:54:44:A3:B7:FC:4C:3A:A5:A6:AE:AE:92:E2:F5:D1 Authority key identifier: 68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55 Certificate issuer: /CN=A9110C8B/serialNumber=6855437340EEF9DF4233AA30598301217B0A1C55 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft Manifest number: 47 Signing time: Mon 01 Jun 2026 09:11:47 +0000 Manifest this update: Mon 01 Jun 2026 09:11:46 +0000 Manifest next update: Mon 08 Jun 2026 09:11:46 +0000 Files and hashes: 1: aFVDc0Du-d9CM6owWYMBIXsKHFU.crl (hash: My/ku9CmOGKEfW+RcSNx1JCkPF1LLp1fBJVmAI6gqqw=) 2: 069AADE4F66B11F0A47B438A6F6F56BC.roa (hash: TWzuzM5wtFo01MWyTRGBS+4PovirNG3yt3IyJZZ9w74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.crl rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 09:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C8B, serialNumber=6855437340EEF9DF4233AA30598301217B0A1C55 Validity Not Before: Jun 1 09:11:46 2026 GMT Not After : Jun 8 09:11:46 2026 GMT Subject: CN=6a1d4cd2-dc7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:76:dc:ff:24:27:57:b5:32:9b:02:d7:fd:f3: 35:ff:5c:bf:4a:bf:de:6f:1c:f8:c0:36:f5:40:e4: 27:7c:8d:15:82:ea:2d:ab:46:97:be:b2:c5:23:ba: ab:87:bb:ef:21:1d:74:aa:01:3b:a0:ef:e3:8e:40: ae:54:74:6f:19:5d:00:8c:88:f1:7a:0e:48:22:09: dc:bb:84:fa:ff:65:8b:a7:fa:d3:64:f6:4d:36:ff: ef:fd:bf:06:5b:52:62:94:01:32:22:9e:12:d8:bf: 32:39:e6:66:f8:77:17:1f:c9:81:8f:2d:79:10:9c: 29:f4:d9:17:8f:fb:08:e4:db:cd:14:05:23:a7:58: 78:50:f9:e9:99:6d:2e:fb:5b:3c:93:d7:45:60:2f: e1:3a:9b:56:41:8c:b6:f2:e8:43:32:c8:a8:1b:4c: 70:73:30:f5:d6:5b:4b:8b:61:6e:00:4a:28:1d:f6: 5d:5c:1e:37:78:63:52:96:b4:08:fb:fb:d4:e9:bd: f3:04:a6:43:1e:5f:f8:c4:ae:d0:f5:9e:59:01:d5: 5e:46:31:46:b8:b6:99:a8:1f:41:dd:df:e8:6b:33: 45:2f:21:ee:08:08:d8:d4:39:b2:f5:2c:ad:36:26: 81:b7:da:1a:fd:2a:67:6c:85:f0:1a:45:26:08:86: 6e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:66:A8:2B:4B:54:44:A3:B7:FC:4C:3A:A5:A6:AE:AE:92:E2:F5:D1 X509v3 Authority Key Identifier: keyid:68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:44:ac:86:f4:ae:17:7a:eb:0e:ba:df:f6:5a:71:97:10:b7: a4:3e:7c:b1:3e:b1:5d:02:42:9f:02:07:6f:d7:4b:76:30:8a: cf:63:cb:5e:73:92:d7:59:01:c5:6a:fc:4f:71:8c:76:0b:54: 2f:b8:a6:41:db:53:3a:c8:d4:8b:cb:fe:ad:be:a7:4e:48:79: d5:e7:63:3e:87:64:b1:10:c4:f1:fe:96:01:c2:8c:6f:81:97: 7a:e7:e7:25:df:80:84:a7:cc:88:98:50:95:8a:56:ff:fe:c6: c9:af:f2:42:53:95:0b:d4:20:c4:df:c1:d2:bf:b7:d6:2d:8b: 3b:46:58:be:4b:16:c0:28:20:d0:48:da:8b:71:0a:20:56:57: ad:a1:a6:e6:62:5e:3b:d1:6d:d2:17:8f:aa:22:b5:20:ec:fb: b6:df:0a:99:65:6e:35:f7:e3:bb:00:35:2c:e3:66:c8:95:c6: 18:f3:f3:f0:f8:f5:2b:a7:12:3b:36:a2:af:40:4d:88:f4:ed: b9:43:ce:66:c3:7f:2c:e1:56:b0:fa:83:30:a1:95:fa:dd:82: b1:01:79:59:90:c3:44:97:89:1d:e2:c3:ce:6c:a0:75:af:71: 6d:e8:63:0d:35:32:0d:c5:ca:31:35:27:b7:84:eb:bb:da:fc: 09:32:94:f0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MEM4QjExMC8GA1UEBRMoNjg1NTQzNzM0MEVFRjlERjQyMzNBQTMwNTk4MzAxMjE3 QjBBMUM1NTAeFw0yNjA2MDEwOTExNDZaFw0yNjA2MDgwOTExNDZaMBgxFjAUBgNV BAMTDTZhMWQ0Y2QyLWRjN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVdtz/JCdXtTKbAtf98zX/XL9Kv95vHPjANvVA5Cd8jRWC6i2rRpe+ssUjuquH u+8hHXSqATug7+OOQK5UdG8ZXQCMiPF6DkgiCdy7hPr/ZYun+tNk9k02/+/9vwZb UmKUATIinhLYvzI55mb4dxcfyYGPLXkQnCn02ReP+wjk280UBSOnWHhQ+emZbS77 WzyT10VgL+E6m1ZBjLby6EMyyKgbTHBzMPXWW0uLYW4ASigd9l1cHjd4Y1KWtAj7 +9TpvfMEpkMeX/jErtD1nlkB1V5GMUa4tpmoH0Hd3+hrM0UvIe4ICNjUObL1LK02 JoG32hr9KmdshfAaRSYIhm5lAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/WaoK0tU RKO3/Ew6paaurpLi9dEwHwYDVR0jBBgwFoAUaFVDc0Du+d9CM6owWYMBIXsKHFUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwQzhCLzk0NjAyNzRBRjY2 QTExRjBBM0ZCOTA4ODZGNkY1NkJDL2FGVkRjMER1LWQ5Q002b3dXWU1CSVhzS0hG VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYUZWRGMwRHUtZDlDTTZvd1dZTUJJWHNLSEZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw QzhCLzk0NjAyNzRBRjY2QTExRjBBM0ZCOTA4ODZGNkY1NkJDL2FGVkRjMER1LWQ5 Q002b3dXWU1CSVhzS0hGVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBLRKyG9K4XeusOut/2WnGXELekPnyxPrFdAkKfAgdv10t2MIrPY8tec5LXWQHF avxPcYx2C1QvuKZB21M6yNSLy/6tvqdOSHnV52M+h2SxEMTx/pYBwoxvgZd65+cl 34CEp8yImFCVilb//sbJr/JCU5UL1CDE38HSv7fWLYs7Rli+SxbAKCDQSNqLcQog VletoabmYl470W3SF4+qIrUg7Pu23wqZZW419+O7ADUs42bIlcYY8/Pw+PUrpxI7 NqKvQE2I9O25Q85mw38s4Vaw+oMwoZX63YKxAXlZkMNEl4kd4sPObKB1r3Ft6GMN NTINxcoxNSe3hOu72vwJMpTw -----END CERTIFICATE-----Generated at Tue Jun 2 21:19:41 2026 by rpki-client