$ rpki-client -vvf rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft File: FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft (raw, json) Hash identifier: Nx9XgOW+yXYJDVw3TRGn0E2NIuMBCsqULpEnLxAww7E= Subject key identifier: BD:CC:F0:E1:0E:D4:7B:50:19:7B:46:69:8C:AD:4C:57:44:F0:18:A2 Authority key identifier: 15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1 Certificate issuer: /CN=A9195661/serialNumber=159366932ACBC2F381F81106229804A4152B35F1 Certificate serial: 03AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft Manifest number: 03AA Signing time: Fri 17 Apr 2026 00:36:33 +0000 Manifest this update: Fri 17 Apr 2026 00:36:32 +0000 Manifest next update: Fri 24 Apr 2026 00:36:32 +0000 Files and hashes: 1: FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl (hash: 3UEluDfcEMeBmMrUCpWLNntt2pjUABLlsS/7NkROKFQ=) 2: 31A11606D5D411ECA6C65869C4F9AE02.roa (hash: oKQ5D0QsoR4sy/ZYer9Zsf6ks+/g2utX7kNb8h7AI+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 943 (0x3af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195661, serialNumber=159366932ACBC2F381F81106229804A4152B35F1 Validity Not Before: Apr 17 00:36:32 2026 GMT Not After : Apr 24 00:36:32 2026 GMT Subject: CN=69e18091-b7cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:38:82:13:6c:1b:fd:c7:8b:a9:d3:f8:1c:30: 65:2c:eb:bb:78:3c:d2:5b:77:77:17:ef:0f:70:7c: b6:d4:ac:38:ba:e7:2c:19:d5:fc:76:28:4f:07:f7: 78:7a:45:4e:91:f0:46:95:8b:d4:72:4c:f7:59:65: 83:36:34:c9:01:15:30:e2:2e:9f:d9:68:6a:00:26: c5:be:a6:5a:20:94:d5:25:07:06:a6:ce:01:95:76: c1:8a:73:eb:ea:5c:01:d9:4b:fa:e5:b5:5a:c3:f6: 39:f5:15:c5:a3:6f:81:f6:08:7f:f0:99:61:9b:36: 4e:ad:95:5e:4d:01:21:0b:85:14:c0:c6:c0:ec:6d: b6:c0:77:93:d2:01:bd:b6:1a:4a:db:ab:dc:e3:b3: 1a:d8:92:8f:eb:1d:86:25:91:26:2f:fb:13:bc:c9: 3e:61:81:ee:fe:42:74:d4:fb:76:54:f0:2d:f0:f9: b5:4f:ad:35:7e:26:9a:55:87:de:91:f8:48:d6:9c: be:d0:cd:0e:d3:aa:35:19:e4:a9:84:7a:a6:d9:d6: 38:25:4b:5f:a3:5f:9f:2a:38:95:2f:83:28:29:23: ea:f5:f5:15:09:72:75:98:36:23:90:b7:c6:c7:80: 2d:0a:85:86:0e:69:64:8e:95:8e:45:24:ee:2e:ff: 2a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CC:F0:E1:0E:D4:7B:50:19:7B:46:69:8C:AD:4C:57:44:F0:18:A2 X509v3 Authority Key Identifier: keyid:15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:62:3d:4f:d4:be:c1:88:7d:67:f4:07:e4:ed:1d:c0:88:c8: f1:39:a6:9a:b3:2c:d8:f3:dd:e2:58:22:1c:18:15:fe:47:0b: b6:14:a6:c0:f7:9c:c9:a9:9d:94:c2:d0:c6:0d:c3:36:8e:24: 95:52:e1:33:35:e6:09:96:c8:fc:11:43:13:09:7e:b1:f8:a9: 54:97:c3:d4:f4:dc:21:1e:07:98:06:dc:5d:2c:85:b6:5d:17: 27:bd:be:f4:e8:00:9a:ac:8f:4b:3b:fe:2f:0f:e6:c2:61:26: 8b:83:53:af:21:b0:54:f8:e3:f6:05:9a:e2:3a:d0:66:b7:20: 4c:33:20:e8:e7:44:ef:3d:f7:9a:4a:9a:70:f8:29:d9:4b:1a: 90:6e:4b:e7:bc:d9:ed:b5:ee:90:06:86:17:2a:03:df:97:af: f8:b9:71:96:68:e5:5c:cb:f7:a4:bf:d0:dc:aa:8d:21:70:cd: 30:69:5b:c1:45:8e:4c:f0:36:b8:b2:29:9f:4e:19:8e:32:45: 93:ce:74:51:fe:db:38:7e:55:a6:c7:c6:44:0c:73:18:31:3a: cb:db:72:7f:e1:48:12:10:fa:3d:45:1c:c0:3f:90:c2:2b:8f: 51:ef:8d:da:96:bb:06:08:bf:74:0f:fd:93:7f:a3:c1:bb:e3: 3d:ed:14:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU2NjExMTAvBgNVBAUTKDE1OTM2NjkzMkFDQkMyRjM4MUY4MTEwNjIyOTgwNEE0 MTUyQjM1RjEwHhcNMjYwNDE3MDAzNjMyWhcNMjYwNDI0MDAzNjMyWjAYMRYwFAYD VQQDEw02OWUxODA5MS1iN2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDiCE2wb/ceLqdP4HDBlLOu7eDzSW3d3F+8PcHy21Kw4uucsGdX8dihPB/d4 ekVOkfBGlYvUckz3WWWDNjTJARUw4i6f2WhqACbFvqZaIJTVJQcGps4BlXbBinPr 6lwB2Uv65bVaw/Y59RXFo2+B9gh/8JlhmzZOrZVeTQEhC4UUwMbA7G22wHeT0gG9 thpK26vc47Ma2JKP6x2GJZEmL/sTvMk+YYHu/kJ01Pt2VPAt8Pm1T601fiaaVYfe kfhI1py+0M0O06o1GeSphHqm2dY4JUtfo1+fKjiVL4MoKSPq9fUVCXJ1mDYjkLfG x4AtCoWGDmlkjpWORSTuLv8qEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL3M8OEO 1HtQGXtGaYytTFdE8BiiMB8GA1UdIwQYMBaAFBWTZpMqy8LzgfgRBiKYBKQVKzXx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTY2MS9FREM3MTQ0NEQ1 Q0UxMUVDQTlEQjI0NjJDNEY5QUUwMi9GWk5ta3lyTHd2T0ItQkVHSXBnRXBCVXJO ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZaTm1reXJMd3ZPQi1CRUdJcGdFcEJVck5mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTY2MS9FREM3MTQ0NEQ1Q0UxMUVDQTlEQjI0NjJDNEY5QUUwMi9GWk5ta3lyTHd2 T0ItQkVHSXBnRXBCVXJOZkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgWI9T9S+wYh9Z/QH5O0dwIjI8TmmmrMs2PPd4lgiHBgV/kcLthSmwPecyamd lMLQxg3DNo4klVLhMzXmCZbI/BFDEwl+sfipVJfD1PTcIR4HmAbcXSyFtl0XJ72+ 9OgAmqyPSzv+Lw/mwmEmi4NTryGwVPjj9gWa4jrQZrcgTDMg6OdE7z33mkqacPgp 2UsakG5L57zZ7bXukAaGFyoD35ev+LlxlmjlXMv3pL/Q3KqNIXDNMGlbwUWOTPA2 uLIpn04ZjjJFk850Uf7bOH5VpsfGRAxzGDE6y9tyf+FIEhD6PUUcwD+QwiuPUe+N 2pa7Bgi/dA/9k3+jwbvjPe0UkA== -----END CERTIFICATE-----Generated at Fri Apr 17 08:05:44 2026 by rpki-client