$ rpki-client -vvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft File: FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft (raw, json) Hash identifier: NWT3rJAtV3RgZVWIQJL/ZWIxAwyM7NDKf5U2mQ72ZMo= Subject key identifier: 37:52:DD:F3:9E:FD:92:95:57:5F:C2:12:FB:03:63:08:9A:60:A3:BE Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 Certificate issuer: /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29 Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft Manifest number: 01AC Signing time: Sun 01 Mar 2026 04:47:02 +0000 Manifest this update: Sun 01 Mar 2026 04:47:02 +0000 Manifest next update: Sun 08 Mar 2026 04:47:02 +0000 Files and hashes: 1: FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl (hash: kYtUgoURYirNOBuNLRSnlpR2xd6WaSKtCEQaw09Iea0=) 2: 91FC411C836411EE80C08641C4F9AE02.roa (hash: wBNq6qKZKki1MEW6RuBHHAWRuhM23JZZju/jw5M2+o0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121188, serialNumber=1466407758A8D7B935694896D50275280679AF29 Validity Not Before: Mar 1 04:47:02 2026 GMT Not After : Mar 8 04:47:02 2026 GMT Subject: CN=69a3c4c6-c841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fe:7d:c1:08:54:32:b5:bf:39:cc:c0:e2:f3: 7e:a4:31:32:12:ec:9f:fd:09:80:66:82:12:5a:50: 98:a9:0d:3f:e1:ec:b9:63:74:cb:b4:95:33:c6:49: 26:e6:ca:ca:07:d3:7a:ac:79:93:a4:39:ef:42:f3: 82:77:41:bf:3d:c5:f1:2a:ae:99:ab:88:c5:33:6f: 6a:04:a7:c0:78:63:4f:47:a2:f2:68:ab:66:1c:5f: 3c:6f:fc:ba:45:28:82:7c:79:59:0b:62:ac:27:da: b4:c8:93:aa:aa:10:67:47:02:b5:9e:55:68:78:42: ef:d2:90:ff:21:0a:8c:3b:fa:5f:15:66:5a:8b:68: 14:9a:08:9c:74:cb:fd:c9:ce:85:d9:5f:55:30:e8: a9:a5:d5:21:f7:1e:cb:97:f2:68:7f:05:9b:a1:d8: 54:31:ff:28:26:df:32:a8:a2:f7:cb:47:08:5b:02: e3:5b:a8:6a:0a:6e:7b:a4:66:39:aa:9a:76:bf:34: 44:b1:e1:76:0b:47:22:1b:a6:71:5b:02:d9:e1:b4: 4d:e0:7a:99:c4:2a:7f:39:25:02:f4:5e:d1:5b:a8: 04:7a:fb:1e:e4:10:54:ff:1c:bd:5f:1a:6f:e1:00: 3f:ed:42:ae:7b:6b:f8:db:05:0f:89:14:5a:c8:da: d7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:52:DD:F3:9E:FD:92:95:57:5F:C2:12:FB:03:63:08:9A:60:A3:BE X509v3 Authority Key Identifier: keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:35:19:e1:57:7d:77:52:97:da:fa:65:9b:be:08:70:8c:82: 3d:4b:5f:85:9c:d6:0b:ee:47:ad:4f:5e:fd:57:10:be:40:8f: 71:d8:8c:57:7c:85:2f:25:76:01:9e:e9:10:cc:1c:91:a1:ab: 3f:58:1e:bd:2e:7a:26:b3:dc:76:49:8a:05:93:fc:22:4e:17: ef:4c:0a:51:c9:fd:63:26:fa:16:db:1e:ce:72:a4:ea:b8:fe: 30:fb:37:a6:16:94:0e:88:2a:9d:13:88:fe:3b:a2:1f:0d:9e: 41:bb:6d:a8:db:c0:a9:51:d0:08:8c:89:0f:f7:57:fb:d9:fc: da:08:9e:05:ac:9a:c6:02:c7:66:55:b9:0a:9f:58:5f:c8:02: 1e:c4:68:28:65:2c:49:58:97:b2:24:02:26:80:d3:a7:42:a0: 86:82:4a:1d:3d:1a:4d:f5:fc:bb:6d:fe:ce:91:9a:47:45:f3: c1:1d:84:d2:80:37:17:04:f3:08:9b:94:f0:b9:b4:04:69:53: 72:06:f0:21:0b:53:62:77:8d:23:4a:93:15:6a:f0:9e:6f:9f: 79:67:db:2e:13:cc:10:a8:88:08:44:b1:9e:16:6a:c7:0b:56: 49:9c:bc:ea:b5:81:84:56:7a:aa:c0:c8:d1:51:28:c4:8d:d1: 7e:9d:93:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExODgxMTAvBgNVBAUTKDE0NjY0MDc3NThBOEQ3QjkzNTY5NDg5NkQ1MDI3NTI4 MDY3OUFGMjkwHhcNMjYwMzAxMDQ0NzAyWhcNMjYwMzA4MDQ0NzAyWjAYMRYwFAYD VQQDDA02OWEzYzRjNi1jODQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3f59wQhUMrW/OczA4vN+pDEyEuyf/QmAZoISWlCYqQ0/4ey5Y3TLtJUzxkkm 5srKB9N6rHmTpDnvQvOCd0G/PcXxKq6Zq4jFM29qBKfAeGNPR6LyaKtmHF88b/y6 RSiCfHlZC2KsJ9q0yJOqqhBnRwK1nlVoeELv0pD/IQqMO/pfFWZai2gUmgicdMv9 yc6F2V9VMOippdUh9x7Ll/JofwWbodhUMf8oJt8yqKL3y0cIWwLjW6hqCm57pGY5 qpp2vzREseF2C0ciG6ZxWwLZ4bRN4HqZxCp/OSUC9F7RW6gEevse5BBU/xy9Xxpv 4QA/7UKue2v42wUPiRRayNrXuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDdS3fOe /ZKVV1/CEvsDYwiaYKO+MB8GA1UdIwQYMBaAFBRmQHdYqNe5NWlIltUCdSgGea8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTE4OC84NEJBQTA2Qzgz NjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3azFhVWlXMVFKMUtBWjVy eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZHWkFkMWlvMTdrMWFVaVcxUUoxS0FaNXJ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTE4OC84NEJBQTA2QzgzNjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3 azFhVWlXMVFKMUtBWjVyeWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASDUZ4Vd9d1KX2vplm74IcIyCPUtfhZzWC+5HrU9e/VcQvkCPcdiMV3yFLyV2 AZ7pEMwckaGrP1gevS56JrPcdkmKBZP8Ik4X70wKUcn9Yyb6FtseznKk6rj+MPs3 phaUDogqnROI/juiHw2eQbttqNvAqVHQCIyJD/dX+9n82gieBayaxgLHZlW5Cp9Y X8gCHsRoKGUsSViXsiQCJoDTp0KghoJKHT0aTfX8u23+zpGaR0XzwR2E0oA3FwTz CJuU8Lm0BGlTcgbwIQtTYneNI0qTFWrwnm+feWfbLhPMEKiICESxnhZqxwtWSZy8 6rWBhFZ6qsDI0VEoxI3Rfp2TKg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:36:13 2026 by rpki-client