$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft File: fFO_avST0kw7fGuiFrOCsMf3_CQ.mft (raw, json) Hash identifier: wn0/bomc1buVlc61W+trMV+HEk5/5/CWdLfRQmZAVbc= Subject key identifier: 5E:0F:A7:7F:0F:B1:A2:CE:77:B6:81:3A:6F:10:A1:CE:6E:F5:73:88 Authority key identifier: 7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 Certificate issuer: /CN=A913FA1D/serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Certificate serial: 093F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft Manifest number: 092D Signing time: Thu 16 Apr 2026 20:07:45 +0000 Manifest this update: Thu 16 Apr 2026 20:07:45 +0000 Manifest next update: Thu 23 Apr 2026 20:07:45 +0000 Files and hashes: 1: fFO_avST0kw7fGuiFrOCsMf3_CQ.crl (hash: BQmnTmlX55S4K8WW3VmQzNkKoHymqPKZxkP/d3KciHY=) 2: F86B8216BFED11EABE972E5AC4F9AE02.roa (hash: gfpq5Vgb/YI4qo4hAIBsJzMcZgPK7w4lTbQ0JqnYdL0=) 3: F902E016BFED11EABE972E5AC4F9AE02.roa (hash: d+fGr61yoNUPXzaLf+BeZ6kemTLVO0y8GsU/1fIouFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2367 (0x93f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA1D, serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Validity Not Before: Apr 16 20:07:45 2026 GMT Not After : Apr 23 20:07:45 2026 GMT Subject: CN=69e14191-eb49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f9:26:2d:4c:90:3c:5b:12:da:42:db:79:ca: 5e:81:bf:3a:2d:44:1b:48:17:ee:23:7a:88:40:8e: e7:b7:ad:ff:e2:f4:9b:a7:86:2f:82:01:0d:e9:65: 67:dd:73:45:c4:15:00:c2:7b:32:9a:9a:30:e2:2e: 73:49:e4:4a:18:21:0b:b9:49:4f:07:33:7a:ab:d2: 2b:ab:7b:8c:c2:49:b4:be:3a:c3:7f:b9:96:e1:8b: 11:3d:4b:af:aa:0f:23:b2:72:17:1d:ad:a4:61:3b: 08:64:9a:3e:7f:0b:82:aa:ad:6f:6a:4b:d6:1e:56: 66:83:ca:2b:19:4d:da:63:37:38:6d:3c:1f:90:4c: 7c:49:1d:2c:12:50:24:8e:d4:55:a9:31:81:e8:5e: 44:8a:73:5a:04:27:1a:d8:96:04:05:df:e6:9e:06: 52:94:0d:4f:9e:b8:04:3a:bf:cc:5c:f9:22:43:70: ca:94:11:20:9b:1e:3a:c2:2d:ab:19:00:f9:60:e6: 10:f4:ba:d0:b1:33:f9:56:02:3f:11:db:e7:1c:a8: 2c:e0:6d:c0:b6:5a:bc:20:cb:fe:d9:84:99:ac:a3: 2d:55:6c:a7:4b:97:38:e8:3d:f4:23:aa:81:e5:35: 5b:2a:d0:8d:f0:82:8a:cf:70:cf:c9:0e:4e:80:32: 23:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:0F:A7:7F:0F:B1:A2:CE:77:B6:81:3A:6F:10:A1:CE:6E:F5:73:88 X509v3 Authority Key Identifier: keyid:7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:84:73:4b:35:63:3f:0f:39:32:26:d3:6b:34:21:aa:ba:c7: c5:cb:b9:94:22:43:ca:e1:6c:73:b8:17:b9:07:bd:7d:8c:72: 29:e7:ef:b2:d3:69:1a:6a:89:82:27:c1:19:b1:33:a9:ee:1b: 38:88:c9:7d:98:8b:85:c1:37:24:fb:37:20:13:e8:88:c4:52: e0:68:c4:bc:57:7c:0e:0d:ff:6a:78:7c:fe:0e:df:15:07:a1: e2:cb:33:6b:27:84:3a:69:33:d9:92:0a:c8:2f:72:68:f8:48: ef:0f:c5:79:b0:4e:e9:53:b8:03:8e:08:5e:6b:d8:e9:a2:54: 18:e8:0c:1b:d5:62:85:53:c8:a4:cc:c5:5e:66:f9:5e:c0:00: c2:a5:49:13:0a:e2:09:3f:21:0f:4c:b3:ba:44:50:4f:d6:d1: 84:23:e1:2e:a4:51:69:75:91:e5:0c:c7:bb:d0:4b:a9:fb:9e: 88:43:ae:db:b1:16:16:fe:14:e7:9c:6d:28:21:94:71:62:68: 79:6b:50:d1:2b:68:14:6e:8c:17:dc:c0:7d:3b:0e:61:fe:e9: 2a:0b:6a:0e:9b:fa:8f:39:90:1d:95:62:b8:7c:de:4a:bf:1d: 04:f0:5d:e6:4f:7c:6e:b5:f9:13:7d:b8:fe:bc:26:ad:a5:ea: b0:8d:23:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZBMUQxMTAvBgNVBAUTKDdDNTNCRjZBRjQ5M0QyNEMzQjdDNkJBMjE2QjM4MkIw QzdGN0ZDMjQwHhcNMjYwNDE2MjAwNzQ1WhcNMjYwNDIzMjAwNzQ1WjAYMRYwFAYD VQQDEw02OWUxNDE5MS1lYjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fkmLUyQPFsS2kLbecpegb86LUQbSBfuI3qIQI7nt63/4vSbp4YvggEN6WVn 3XNFxBUAwnsympow4i5zSeRKGCELuUlPBzN6q9Irq3uMwkm0vjrDf7mW4YsRPUuv qg8jsnIXHa2kYTsIZJo+fwuCqq1vakvWHlZmg8orGU3aYzc4bTwfkEx8SR0sElAk jtRVqTGB6F5EinNaBCca2JYEBd/mngZSlA1PnrgEOr/MXPkiQ3DKlBEgmx46wi2r GQD5YOYQ9LrQsTP5VgI/EdvnHKgs4G3Atlq8IMv+2YSZrKMtVWynS5c46D30I6qB 5TVbKtCN8IKKz3DPyQ5OgDIjtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF4Pp38P saLOd7aBOm8Qoc5u9XOIMB8GA1UdIwQYMBaAFHxTv2r0k9JMO3xrohazgrDH9/wk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkExRC85RUVBNEQ2OEJG RUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBrdzdmR3VpRnJPQ3NNZjNf Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGT19hdlNUMGt3N2ZHdWlGck9Dc01mM19DUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkExRC85RUVBNEQ2OEJGRUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBr dzdmR3VpRnJPQ3NNZjNfQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK4RzSzVjPw85MibTazQhqrrHxcu5lCJDyuFsc7gXuQe9fYxyKefvstNpGmqJ gifBGbEzqe4bOIjJfZiLhcE3JPs3IBPoiMRS4GjEvFd8Dg3/anh8/g7fFQeh4ssz ayeEOmkz2ZIKyC9yaPhI7w/FebBO6VO4A44IXmvY6aJUGOgMG9VihVPIpMzFXmb5 XsAAwqVJEwriCT8hD0yzukRQT9bRhCPhLqRRaXWR5QzHu9BLqfueiEOu27EWFv4U 55xtKCGUcWJoeWtQ0StoFG6MF9zAfTsOYf7pKgtqDpv6jzmQHZViuHzeSr8dBPBd 5k98brX5E324/rwmraXqsI0jzw== -----END CERTIFICATE-----Generated at Fri Apr 17 10:43:27 2026 by rpki-client