$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft File: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft (raw, json) Hash identifier: 51HAlWJAfj4qxYaS3gon9keOlVs/WyQXd0+F8W34Qt4= Subject key identifier: 1D:FE:31:EB:F5:92:F2:6F:DB:3E:F0:EA:EF:23:6E:F8:49:3C:AD:AE Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Certificate serial: 0BFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft Manifest number: 0BCA Signing time: Thu 16 Apr 2026 18:53:28 +0000 Manifest this update: Thu 16 Apr 2026 18:53:27 +0000 Manifest next update: Thu 23 Apr 2026 18:53:27 +0000 Files and hashes: 1: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl (hash: Sk6Qnczxuq7c8+591wmifM3nG6vz5bSQs69uPs2m7YI=) 2: 49E05638EA0B11F09069D0EA6F6F56BC.roa (hash: 5lCa0uM9qsyo4Ls9OwY1shMD+q998RLPGqM4GruFZ8A=) 3: 4BB2BBFEEA0B11F09069D0EA6F6F56BC.roa (hash: 2xZ7k/voMKzDAbPl0iSayXcIKNq/l+8uvtLON3JZksk=) 4: 4AD53F9AEA0B11F09069D0EA6F6F56BC.roa (hash: naputKDT4YFCuDBkowHlF1Y5kTitkWFz9voR8iEVFrQ=) 5: D9C0AD2EF44811F08A68E332626F56BC.roa (hash: RzHBWYWw5IHkZGciQV9CfmaSyQYYH4ManuyCrGOl3Iw=) 6: 8137CEBC07E911F18CE8BD7B223D8C67.roa (hash: wHgEjCXqndOJLXZ9J6FfS2MgjM1Wq0AwJ0Oymtfq0bs=) 7: E4C4CC72EB8411F09FAB30C6536F56BC.roa (hash: m6A5k7GrCQsQt6UQStLqk4vDI2cF1RjOvSbk8wVUoVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3068 (0xbfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Validity Not Before: Apr 16 18:53:27 2026 GMT Not After : Apr 23 18:53:27 2026 GMT Subject: CN=69e13027-c148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d1:28:57:ce:37:08:50:b2:80:94:63:a3:8e: e7:d4:14:3b:62:8d:1c:32:3e:19:93:ee:c2:7d:bf: 9d:84:a0:3f:da:16:62:50:c4:19:16:e9:aa:55:34: 7f:60:bd:88:ce:f0:fd:a8:ec:63:0d:6a:dd:6b:94: a3:9c:c5:12:be:65:fd:21:19:fe:b8:74:d0:4d:62: c9:0a:45:71:a2:e2:13:9a:88:59:f8:e6:83:0f:7b: b8:c5:45:83:d2:ee:38:9f:a4:1f:61:fb:cf:a6:f4: ed:c4:c3:a2:23:24:c8:b4:9f:6f:da:5e:5f:a6:d1: 73:41:91:b9:0a:5f:e8:9f:58:bd:62:26:11:7d:9e: cc:1f:5b:58:71:e2:a8:4d:36:50:f0:d3:66:2b:1e: c0:9b:c3:b1:11:2a:95:33:2e:09:af:26:9c:e7:ac: 59:bf:1b:ad:81:28:cb:56:63:62:5c:57:08:ec:2e: cf:01:ea:0f:f1:e4:3f:0b:4b:ae:f4:a1:8f:37:ba: ff:33:77:9d:08:fc:42:b7:e6:1e:98:f1:10:9e:fd: d3:a1:e0:63:c1:11:6b:e7:61:5c:85:ab:61:46:be: 3c:ee:0e:80:82:9a:5b:9e:af:5c:47:53:7d:de:4a: e5:de:8b:34:b0:14:84:e0:bf:f2:f6:71:d6:01:96: cb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FE:31:EB:F5:92:F2:6F:DB:3E:F0:EA:EF:23:6E:F8:49:3C:AD:AE X509v3 Authority Key Identifier: keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:1c:c4:05:da:05:3f:40:04:3e:09:c0:dd:db:b4:e5:c9:a3: a7:a0:d6:f6:46:74:07:26:3d:dc:0f:1e:12:c0:83:c0:ef:70: f8:8d:a2:59:ec:6f:5a:33:5f:83:38:71:73:e6:de:99:94:95: 81:3d:53:6a:aa:5d:3b:b0:f4:81:45:2f:3e:7e:fd:38:78:52: fa:24:9c:d9:56:ae:cd:49:f4:43:ab:47:a0:cf:d3:96:46:34: be:31:90:87:34:69:1c:ab:8a:b5:35:ff:41:b1:6c:ff:0e:07: 79:ad:5a:74:e8:9e:8d:e1:70:ad:d7:61:b8:e2:53:bb:a2:a7: 09:c8:aa:e2:7a:e0:de:8d:97:ac:25:97:1d:7d:bf:9c:dd:15: b1:57:a9:e0:53:08:35:58:af:f1:a0:ac:a6:3c:95:56:c8:54: 8b:de:2b:82:0e:fb:e0:90:4c:dd:54:33:e9:f5:5a:18:f7:2f: 5c:49:fc:a0:45:05:26:a3:b4:9f:02:b8:42:b3:b6:e8:a4:2e: f6:89:5b:94:e4:94:56:60:00:5d:41:9d:dc:c0:d5:f3:41:1e: 00:50:2f:95:5c:57:35:c0:2c:51:67:f0:6c:69:cd:38:61:27: 12:5b:3b:61:55:f3:aa:ee:df:b6:3b:07:16:1f:f5:12:b3:f7: 5e:46:a8:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNDAxMTAvBgNVBAUTKDE2MDFEODY1MERENTU2QjJBRkIwODNCMjMzRkY2NUFF M0RBRDE1NzEwHhcNMjYwNDE2MTg1MzI3WhcNMjYwNDIzMTg1MzI3WjAYMRYwFAYD VQQDEw02OWUxMzAyNy1jMTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9EoV843CFCygJRjo47n1BQ7Yo0cMj4Zk+7Cfb+dhKA/2hZiUMQZFumqVTR/ YL2IzvD9qOxjDWrda5SjnMUSvmX9IRn+uHTQTWLJCkVxouITmohZ+OaDD3u4xUWD 0u44n6QfYfvPpvTtxMOiIyTItJ9v2l5fptFzQZG5Cl/on1i9YiYRfZ7MH1tYceKo TTZQ8NNmKx7Am8OxESqVMy4Jryac56xZvxutgSjLVmNiXFcI7C7PAeoP8eQ/C0uu 9KGPN7r/M3edCPxCt+YemPEQnv3ToeBjwRFr52FchathRr487g6Agppbnq9cR1N9 3krl3os0sBSE4L/y9nHWAZbL2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB3+Mev1 kvJv2z7w6u8jbvhJPK2uMB8GA1UdIwQYMBaAFBYB2GUN1Vayr7CDsjP/Za49rRVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM0MC82MTdGMzUzNjQw RTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZyS3ZzSU95TV85bHJqMnRG WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSFlaUTNWVnJLdnNJT3lNXzlscmoydEZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkM0MC82MTdGMzUzNjQwRTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZy S3ZzSU95TV85bHJqMnRGWEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaxzEBdoFP0AEPgnA3du05cmjp6DW9kZ0ByY93A8eEsCDwO9w+I2iWexvWjNf gzhxc+bemZSVgT1TaqpdO7D0gUUvPn79OHhS+iSc2VauzUn0Q6tHoM/TlkY0vjGQ hzRpHKuKtTX/QbFs/w4Hea1adOiejeFwrddhuOJTu6KnCciq4nrg3o2XrCWXHX2/ nN0VsVep4FMINViv8aCspjyVVshUi94rgg774JBM3VQz6fVaGPcvXEn8oEUFJqO0 nwK4QrO26KQu9olblOSUVmAAXUGd3MDV80EeAFAvlVxXNcAsUWfwbGnNOGEnEls7 YVXzqu7ftjsHFh/1ErP3Xkao5A== -----END CERTIFICATE-----Generated at Fri Apr 17 05:28:59 2026 by rpki-client