$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft File: ajK9E9_Nd-8bXAUr427YmtIScNs.mft (raw, json) Hash identifier: ZEmngXR7kc0+llpjjge8SV+1HkP/aSFiaUly3Ibjivk= Subject key identifier: 0D:55:25:E4:C4:41:B8:A1:F0:24:7D:FA:50:D3:15:91:B9:00:E7:BB Authority key identifier: 6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB Certificate issuer: /CN=A911C812/serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB Certificate serial: 0898 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft Manifest number: 0890 Signing time: Sat 04 Apr 2026 20:22:16 +0000 Manifest this update: Sat 04 Apr 2026 20:22:15 +0000 Manifest next update: Sat 11 Apr 2026 20:22:15 +0000 Files and hashes: 1: ajK9E9_Nd-8bXAUr427YmtIScNs.crl (hash: F5RG3Pk4GYJwCCsvvzgy6S9TI7C9o5bM+MXOmpEHEpk=) 2: 477192ACF3FA11EAB9D11D26C4F9AE02.roa (hash: Lubg1etHnAX3Eexr1F6RZ/V0j32jER/ID7u87KtGroA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2200 (0x898) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C812, serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB Validity Not Before: Apr 4 20:22:15 2026 GMT Not After : Apr 11 20:22:15 2026 GMT Subject: CN=69d172f8-587a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fa:73:21:b0:76:6e:2f:5c:00:9a:08:5c:2f: df:19:bf:ec:8f:cf:74:eb:bb:40:0b:76:39:29:6e: b9:9a:59:32:f2:1c:32:84:a4:2b:76:b7:a6:6f:51: e1:7b:8d:85:75:4e:8d:b1:9b:19:6c:f3:9d:e0:7d: 76:ea:b5:aa:69:c5:1a:82:fa:70:b1:a3:76:62:b2: 74:8e:65:f9:d5:5f:bc:67:31:ad:c2:55:71:d6:c0: be:08:ed:18:dd:24:32:56:2f:0a:9b:f2:3b:e8:74: 18:12:a0:ad:e0:dd:54:8b:53:e9:28:dc:72:7b:36: 6a:ad:3a:e6:6f:88:6a:ff:46:e2:9e:ec:78:86:8c: f2:44:52:e2:d5:d7:9b:24:21:e4:1b:77:46:a7:55: 57:c2:90:69:c7:1f:86:c0:e5:3d:aa:9a:42:14:2d: 55:59:d7:a1:02:81:11:05:ad:82:8b:48:f1:22:e1: 4b:c8:f8:91:10:34:42:09:4a:00:a1:b5:fb:9e:63: c5:33:c0:fd:24:7c:dd:df:ff:74:ad:4b:f3:29:81: a0:dd:69:5b:12:ff:7d:a8:ff:8c:7e:b8:f9:f8:df: c2:94:1d:ac:4c:a8:3f:6f:73:b8:f9:dd:55:47:d8: f2:f4:cf:26:4c:ab:b7:a0:8d:4b:25:e2:94:ef:c7: 9b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:55:25:E4:C4:41:B8:A1:F0:24:7D:FA:50:D3:15:91:B9:00:E7:BB X509v3 Authority Key Identifier: keyid:6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:e6:ee:70:ae:90:0a:98:96:f5:9c:9c:7f:13:85:b2:6e:9a: b2:78:1c:fd:6c:23:1a:c9:8f:91:24:32:3e:55:c0:46:e2:f1: 24:9b:1f:b6:38:5e:a5:f8:11:df:e3:d2:be:b0:55:90:d7:93: 2e:32:e4:a3:92:a3:7e:b9:b5:4e:4f:dc:bb:dd:c7:0a:c9:32: 84:6d:18:b0:be:bd:9d:3c:be:0c:ee:4a:48:cd:23:8c:3a:75: ba:0c:10:7c:57:f9:e2:bb:39:f6:66:2d:23:4f:88:1f:19:82: 4d:3f:76:fb:6b:9c:c6:fc:6a:5a:94:a3:ac:9c:3b:d1:8e:a4: cf:08:31:b8:d9:11:1a:16:3f:77:3b:ed:32:af:25:49:8a:e1: 60:b8:b1:03:ed:6b:a2:38:e6:54:26:4b:af:f9:6b:59:a6:c3: 12:86:20:a1:b3:54:c2:a3:a0:e0:76:dd:d8:e5:66:19:d3:7a: 8b:8f:66:21:fe:2b:e3:56:42:99:fc:06:77:f3:f7:4c:2c:57: 20:07:a2:7f:81:78:9b:22:ef:08:51:dc:c2:90:2b:75:f2:39: 05:fa:3d:e1:98:6e:97:23:92:e0:e3:e0:a9:fc:b3:0d:4b:c5: fd:fb:db:27:e0:e5:35:e1:f1:14:7a:bd:7e:ce:5c:96:29:8a: 20:c1:7d:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM4MTIxMTAvBgNVBAUTKDZBMzJCRDEzREZDRDc3RUYxQjVDMDUyQkUzNkVEODlB RDIxMjcwREIwHhcNMjYwNDA0MjAyMjE1WhcNMjYwNDExMjAyMjE1WjAYMRYwFAYD VQQDEw02OWQxNzJmOC01ODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fpzIbB2bi9cAJoIXC/fGb/sj89067tAC3Y5KW65mlky8hwyhKQrdremb1Hh e42FdU6NsZsZbPOd4H126rWqacUagvpwsaN2YrJ0jmX51V+8ZzGtwlVx1sC+CO0Y 3SQyVi8Km/I76HQYEqCt4N1Ui1PpKNxyezZqrTrmb4hq/0binux4hozyRFLi1deb JCHkG3dGp1VXwpBpxx+GwOU9qppCFC1VWdehAoERBa2Ci0jxIuFLyPiREDRCCUoA obX7nmPFM8D9JHzd3/90rUvzKYGg3WlbEv99qP+Mfrj5+N/ClB2sTKg/b3O4+d1V R9jy9M8mTKu3oI1LJeKU78ebKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA1VJeTE Qbih8CR9+lDTFZG5AOe7MB8GA1UdIwQYMBaAFGoyvRPfzXfvG1wFK+Nu2JrSEnDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzgxMi9CMjVFRjk5MEU5 MTYxMUVBQTcwNUQ4NEZDNEY5QUUwMi9haks5RTlfTmQtOGJYQVVyNDI3WW10SVNj TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FqSzlFOV9OZC04YlhBVXI0MjdZbXRJU2NOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzgxMi9CMjVFRjk5MEU5MTYxMUVBQTcwNUQ4NEZDNEY5QUUwMi9haks5RTlfTmQt OGJYQVVyNDI3WW10SVNjTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQObucK6QCpiW9ZycfxOFsm6asngc/WwjGsmPkSQyPlXARuLxJJsftjhepfgR 3+PSvrBVkNeTLjLko5Kjfrm1Tk/cu93HCskyhG0YsL69nTy+DO5KSM0jjDp1ugwQ fFf54rs59mYtI0+IHxmCTT92+2ucxvxqWpSjrJw70Y6kzwgxuNkRGhY/dzvtMq8l SYrhYLixA+1rojjmVCZLr/lrWabDEoYgobNUwqOg4Hbd2OVmGdN6i49mIf4r41ZC mfwGd/P3TCxXIAeif4F4myLvCFHcwpArdfI5Bfo94ZhulyOS4OPgqfyzDUvF/fvb J+DlNeHxFHq9fs5climKIMF9KQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:32:06 2026 by rpki-client