$ rpki-client -vvf rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft File: FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft (raw, json) Hash identifier: Km++Ldpd57h8sSjC+7CQZd2bSeN5FfWDE6ZyYMEiaAA= Subject key identifier: 0D:14:2C:AD:01:87:39:98:7F:87:AB:07:5E:86:EE:C1:D6:23:DF:58 Authority key identifier: 16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14 Certificate issuer: /CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14 Certificate serial: 02A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft Manifest number: 028F Signing time: Fri 17 Apr 2026 01:32:31 +0000 Manifest this update: Fri 17 Apr 2026 01:32:30 +0000 Manifest next update: Fri 24 Apr 2026 01:32:30 +0000 Files and hashes: 1: FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl (hash: nxWdRXS9qOuh4e82qDFz6ohN/qOeE4pTkMWC2dp/IcU=) 2: 1083BE64499711EE86AE452DC4F9AE02.roa (hash: 9LFaLc8meqLBp289mlYACBm+5v+NFT6EUQrjqf3aYig=) 3: 7DD0E8845A3211EDB637E665C4F9AE02.roa (hash: eg3pUwfwQDE+9YQzOG9BMq0Bkyet7crQzC1+mV0wngc=) 4: 7D0DFE0A5A3211EDB637E665C4F9AE02.roa (hash: EgHfoXDPWkSf9EMELvfB9wprgOdP6M6i5C22XOX+eIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 677 (0x2a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91314BC, serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14 Validity Not Before: Apr 17 01:32:30 2026 GMT Not After : Apr 24 01:32:30 2026 GMT Subject: CN=69e18daf-c40c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3e:1e:f3:2d:d0:b8:f8:92:ee:55:c7:3b:02: 4f:79:57:4a:e6:2b:32:c1:19:2f:4d:b3:1a:f2:ff: da:c8:f4:14:15:fc:ba:26:ed:a2:2e:8f:4a:d4:63: ba:03:ce:67:ad:53:4e:f3:0d:03:3f:c5:1e:30:bb: 93:94:cc:65:44:20:c7:06:d4:a5:61:0e:15:97:d4: ee:78:c7:ae:02:be:8e:8d:85:c3:9e:94:21:46:cf: d8:15:6b:2d:38:61:dc:f8:ca:64:1a:8d:d3:f9:e4: 35:51:b0:ef:5f:29:46:5a:22:97:38:bc:c6:2b:e6: 32:90:de:75:2c:83:fc:db:11:e3:21:49:3f:fc:dd: b5:a8:79:2e:02:6b:b9:d2:22:cc:3a:46:d7:0d:f8: 94:73:17:24:3f:6e:3c:ef:de:f8:5f:94:08:82:90: f0:84:54:b0:02:bd:08:4e:6a:4d:18:37:a1:e6:d5: ec:bd:93:4f:22:c6:db:61:3f:f2:18:84:a4:d5:29: 9e:86:3d:73:0f:77:cb:7c:ec:9e:cb:77:b3:73:38: d9:6c:09:ef:0f:d8:26:a0:79:11:7a:59:77:d7:15: 68:1e:7c:60:dd:22:e9:db:e8:77:91:f4:8e:ce:1b: 78:0d:d2:62:36:89:d1:8b:5a:7a:e5:6f:57:31:95: 5c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:14:2C:AD:01:87:39:98:7F:87:AB:07:5E:86:EE:C1:D6:23:DF:58 X509v3 Authority Key Identifier: keyid:16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a7:5c:54:70:a2:a2:f0:9a:ae:13:6d:9a:86:ba:8a:c6:4b: 0d:f9:e9:9c:1f:10:4b:5b:24:26:9f:f6:38:04:d3:29:96:0e: b9:4a:b9:b7:9c:3b:60:ce:1c:33:75:bc:50:f4:19:fe:ab:88: 3f:32:2a:a0:9b:5c:5a:92:6e:0d:b5:13:01:82:9b:78:15:a1: 84:aa:9c:02:f7:1e:89:09:80:ea:df:a2:61:58:36:e5:8d:ac: 38:c6:5d:db:1e:8d:f9:d8:03:3c:f0:d5:59:51:15:a7:06:b6: 26:b1:bf:5a:a1:ea:63:b6:90:aa:99:df:55:6c:87:df:75:23: fd:b5:cb:7e:77:ae:b1:da:50:ba:1a:2e:26:24:66:e0:86:72: 08:4f:17:3a:4d:0e:b5:22:c6:92:b4:43:58:4f:2c:81:c0:de: 01:b4:e0:cd:6c:64:16:42:0a:22:aa:f3:02:44:3d:f8:80:a9: e0:06:33:dc:20:a8:7d:3a:6f:8b:de:e4:98:bc:81:45:3f:83: 70:e6:58:12:fa:da:a2:c0:38:7c:0e:8a:2e:6c:e3:fa:5a:bd: 80:a1:a0:6d:e9:69:19:b4:e7:38:b5:9b:0c:51:2b:28:8b:53: f8:98:ed:d3:46:1b:44:db:52:26:4c:9a:47:ac:28:c9:2a:a9: b9:04:3a:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE0QkMxMTAvBgNVBAUTKDE2ODQxNUMwQzEzNDAxQzBENzcxNTcxREY4NkY4Q0Q1 Rjg1MDNCMTQwHhcNMjYwNDE3MDEzMjMwWhcNMjYwNDI0MDEzMjMwWjAYMRYwFAYD VQQDEw02OWUxOGRhZi1jNDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0T4e8y3QuPiS7lXHOwJPeVdK5isywRkvTbMa8v/ayPQUFfy6Ju2iLo9K1GO6 A85nrVNO8w0DP8UeMLuTlMxlRCDHBtSlYQ4Vl9TueMeuAr6OjYXDnpQhRs/YFWst OGHc+MpkGo3T+eQ1UbDvXylGWiKXOLzGK+YykN51LIP82xHjIUk//N21qHkuAmu5 0iLMOkbXDfiUcxckP2487974X5QIgpDwhFSwAr0ITmpNGDeh5tXsvZNPIsbbYT/y GISk1Smehj1zD3fLfOyey3ezczjZbAnvD9gmoHkRell31xVoHnxg3SLp2+h3kfSO zht4DdJiNonRi1p65W9XMZVcjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA0ULK0B hzmYf4erB16G7sHWI99YMB8GA1UdIwQYMBaAFBaEFcDBNAHA13FXHfhvjNX4UDsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTRCQy83RkQwMTY2QzVB MkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFjRFhjVmNkLUctTTFmaFFP eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZvUVZ3TUUwQWNEWGNWY2QtRy1NMWZoUU94US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTRCQy83RkQwMTY2QzVBMkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFj RFhjVmNkLUctTTFmaFFPeFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALadcVHCiovCarhNtmoa6isZLDfnpnB8QS1skJp/2OATTKZYOuUq5t5w7YM4c M3W8UPQZ/quIPzIqoJtcWpJuDbUTAYKbeBWhhKqcAvceiQmA6t+iYVg25Y2sOMZd 2x6N+dgDPPDVWVEVpwa2JrG/WqHqY7aQqpnfVWyH33Uj/bXLfneusdpQuhouJiRm 4IZyCE8XOk0OtSLGkrRDWE8sgcDeAbTgzWxkFkIKIqrzAkQ9+ICp4AYz3CCofTpv i97kmLyBRT+DcOZYEvraosA4fA6KLmzj+lq9gKGgbelpGbTnOLWbDFErKItT+Jjt 00YbRNtSJkyaR6woySqpuQQ6fw== -----END CERTIFICATE-----Generated at Fri Apr 17 09:46:43 2026 by rpki-client