$ rpki-client -vvf rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft File: aFlbmOTCezC6ozHOqscmF2fLkus.mft (raw, json) Hash identifier: oKp0BZISPGgrFeKVwZ+BRix8Y9lY9tvPCwux/Swed8g= Subject key identifier: 17:58:DF:6C:E8:BB:E5:F3:B3:64:ED:F0:E8:84:39:1B:FC:47:40:3B Authority key identifier: 68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB Certificate issuer: /CN=A9119AE2/serialNumber=68595B98E4C27B30BAA331CEAAC7261767CB92EB Certificate serial: 0707 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft Manifest number: 06F7 Signing time: Sat 04 Apr 2026 21:52:08 +0000 Manifest this update: Sat 04 Apr 2026 21:52:07 +0000 Manifest next update: Sat 11 Apr 2026 21:52:07 +0000 Files and hashes: 1: aFlbmOTCezC6ozHOqscmF2fLkus.crl (hash: g6NrccjbGf+p5zbxn0qPItHOFSZL3v8TJYVzuCUj9uc=) 2: 8D20F290411811ECA0929516C4F9AE02.roa (hash: fjAS87Fa2KTDfIBPfFBgVc4CwHe6EqcmmF1tEiz37Qc=) 3: 8D23BDE287C611EB8C8DDB70C4F9AE02.roa (hash: /5wXx4cmTVQVdguvfntlB2W6kj2rZMU7vB1692wCKvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.crl rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1799 (0x707) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119AE2, serialNumber=68595B98E4C27B30BAA331CEAAC7261767CB92EB Validity Not Before: Apr 4 21:52:07 2026 GMT Not After : Apr 11 21:52:07 2026 GMT Subject: CN=69d18808-b7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:98:5b:9e:37:0c:a2:6c:3a:2c:60:0c:7e:2e: 6f:0a:f0:3f:ea:c5:7d:40:07:fe:54:3b:3a:0c:f9: fd:64:74:3a:17:d6:9c:ba:c7:0a:91:cd:22:c5:6e: c3:2d:0f:cb:86:c2:77:10:f1:f0:a4:8a:9b:4a:ca: 62:ad:03:15:ee:1e:58:70:7b:9a:6b:a4:a5:f6:2c: a5:1b:0b:23:a4:a4:07:16:23:96:2b:5d:a8:d2:62: 65:f1:2c:db:f1:c6:b0:11:11:66:10:e3:1b:e2:b7: 1f:ba:b4:72:04:62:c2:55:b7:55:2e:f3:6c:22:45: 0e:33:bd:a5:62:19:68:03:a7:a8:21:69:5f:e0:0a: 08:69:4a:53:db:b8:70:c2:8f:38:92:ea:f5:19:3d: 98:0e:eb:15:2b:7b:9a:65:2a:46:9b:11:1a:ab:fa: 78:52:72:48:47:ed:86:d0:b3:11:1d:8e:5e:38:a6: ee:eb:4d:f4:36:db:77:c7:d4:a1:96:18:de:1d:be: 43:9c:04:ce:30:98:14:72:c4:e8:e0:6f:9b:ab:31: 0d:d9:d4:1d:c8:8e:ba:0b:76:97:d7:e5:10:64:e3: 8d:91:96:ed:e7:7b:95:ba:22:60:6c:ee:0c:40:78: a4:e5:10:51:e1:8a:f4:6a:0e:d3:78:b1:df:3f:4c: 1a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:58:DF:6C:E8:BB:E5:F3:B3:64:ED:F0:E8:84:39:1B:FC:47:40:3B X509v3 Authority Key Identifier: keyid:68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:54:45:51:70:29:7e:7b:c2:fe:ae:ab:4c:a9:14:91:15:01: e4:cd:2c:43:17:62:a7:ea:a5:b5:cb:95:d1:e2:4c:9e:b2:97: 9a:d4:49:29:b4:35:f5:02:64:a7:34:57:aa:9e:bf:d5:44:09: 3d:84:5e:73:0b:53:e1:88:fa:a2:bb:ca:9c:36:b7:ff:55:f5: 39:48:40:58:bb:28:8d:c6:8c:9b:c8:8a:24:f7:a5:5f:7b:4e: 40:59:94:b8:01:cb:c6:7b:3e:cb:00:81:6c:bf:5f:15:2b:4a: 68:fa:c5:fc:84:fa:3a:5c:95:94:4d:8f:b2:c3:48:0e:9a:f4: 9b:1a:f0:e0:04:1a:16:ee:9b:8d:d9:39:58:6f:ff:68:6f:6c: f0:dd:d4:7d:9f:47:18:b6:10:ea:84:05:d2:6b:4d:e8:71:e8: ce:7d:d7:7b:e6:d0:30:b8:c7:80:4b:e4:11:3b:3b:03:5a:28: 3e:ed:80:45:8d:b9:72:1c:e5:25:23:96:be:e7:51:71:07:3a: ec:3e:27:33:cb:c7:58:a0:76:52:50:46:24:ba:1e:c2:9f:6b: 39:c1:d1:aa:ce:29:e3:3e:e2:b7:2d:cb:d5:bd:d0:16:44:b2: fd:e3:a9:35:15:8c:2f:d7:89:d3:99:24:0f:75:9a:db:87:c3: fe:e5:22:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlBRTIxMTAvBgNVBAUTKDY4NTk1Qjk4RTRDMjdCMzBCQUEzMzFDRUFBQzcyNjE3 NjdDQjkyRUIwHhcNMjYwNDA0MjE1MjA3WhcNMjYwNDExMjE1MjA3WjAYMRYwFAYD VQQDEw02OWQxODgwOC1iN2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlZhbnjcMomw6LGAMfi5vCvA/6sV9QAf+VDs6DPn9ZHQ6F9acuscKkc0ixW7D LQ/LhsJ3EPHwpIqbSspirQMV7h5YcHuaa6Sl9iylGwsjpKQHFiOWK12o0mJl8Szb 8cawERFmEOMb4rcfurRyBGLCVbdVLvNsIkUOM72lYhloA6eoIWlf4AoIaUpT27hw wo84kur1GT2YDusVK3uaZSpGmxEaq/p4UnJIR+2G0LMRHY5eOKbu6030Ntt3x9Sh lhjeHb5DnATOMJgUcsTo4G+bqzEN2dQdyI66C3aX1+UQZOONkZbt53uVuiJgbO4M QHik5RBR4Yr0ag7TeLHfP0waOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBdY32zo u+Xzs2Tt8OiEORv8R0A7MB8GA1UdIwQYMBaAFGhZW5jkwnswuqMxzqrHJhdny5Lr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUFFMi84QUI4QzE4QTg3 QzQxMUVCQTFGREQ4NkJDNEY5QUUwMi9hRmxibU9UQ2V6QzZvekhPcXNjbUYyZkxr dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FGbGJtT1RDZXpDNm96SE9xc2NtRjJmTGt1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUFFMi84QUI4QzE4QTg3QzQxMUVCQTFGREQ4NkJDNEY5QUUwMi9hRmxibU9UQ2V6 QzZvekhPcXNjbUYyZkxrdXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1lRFUXApfnvC/q6rTKkUkRUB5M0sQxdip+qltcuV0eJMnrKXmtRJKbQ19QJk pzRXqp6/1UQJPYRecwtT4Yj6orvKnDa3/1X1OUhAWLsojcaMm8iKJPelX3tOQFmU uAHLxns+ywCBbL9fFStKaPrF/IT6OlyVlE2PssNIDpr0mxrw4AQaFu6bjdk5WG// aG9s8N3UfZ9HGLYQ6oQF0mtN6HHozn3Xe+bQMLjHgEvkETs7A1ooPu2ARY25chzl JSOWvudRcQc67D4nM8vHWKB2UlBGJLoewp9rOcHRqs4p4z7ity3L1b3QFkSy/eOp NRWML9eJ05kkD3Wa24fD/uUiHQ== -----END CERTIFICATE-----Generated at Mon Apr 6 09:00:29 2026 by rpki-client