$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft File: FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json) Hash identifier: oecYHBpG+8Gz5YDyQr4kZsiBAAGNswLZmL4MHz2YMXY= Subject key identifier: 6E:43:84:6E:A6:15:1D:9E:6D:9C:8B:A7:C3:38:F6:D5:6B:AE:4B:01 Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Certificate serial: 0CE4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft Manifest number: 0CD0 Signing time: Thu 16 Apr 2026 17:24:23 +0000 Manifest this update: Thu 16 Apr 2026 17:24:23 +0000 Manifest next update: Thu 23 Apr 2026 17:24:23 +0000 Files and hashes: 1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: X6/2OMES84y2kT8W6A+rJWDYNcfTHO7bMsmFQVovMTA=) 2: DD004670C39711F0A241F86DC4F9AE02.roa (hash: ILb2f5MFl0hmYnyJlCFO6BUBR2uQox0knIxNniHNGBA=) 3: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: twJcU0dvcEBMbuiZq5Wi1cC3xSMhYlFvAN7WKpOcESs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3300 (0xce4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Validity Not Before: Apr 16 17:24:23 2026 GMT Not After : Apr 23 17:24:23 2026 GMT Subject: CN=69e11b47-065b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ed:d2:3d:2b:07:f7:aa:22:0d:4b:ac:dc:18: 57:aa:8e:b5:e2:ea:f4:41:72:3a:80:d5:dd:ed:71: 51:13:88:1d:ff:55:0b:cf:a1:fc:83:f0:77:a1:f5: ac:87:26:5b:d9:66:1c:3b:cb:e5:d9:0c:0b:66:da: e1:e5:a8:97:ba:02:77:24:ea:0b:1b:5b:da:94:ef: 4e:94:17:1c:4a:bf:5f:df:2b:d8:d7:97:62:23:3d: 29:73:f5:fa:42:a6:a8:57:b9:98:64:05:5d:d3:33: dc:f9:65:e8:24:6b:c0:09:a9:92:df:ff:65:88:65: 5b:57:ef:26:4b:9a:e3:c7:2c:c6:28:9d:06:ac:21: 50:cf:35:f0:c4:48:c3:ce:1f:ce:3f:b6:72:71:6f: 05:af:d6:b5:25:45:9a:ef:08:ef:63:78:fa:c6:e2: 20:77:0e:99:6e:3e:cf:84:70:b2:62:10:44:20:2d: a9:5a:1e:41:09:c7:2e:58:fc:a9:b0:73:58:e8:b0: ab:93:7b:b3:50:c5:bf:a5:e3:4d:cf:05:5b:2c:1c: 68:52:e4:79:11:7f:5e:51:dc:3f:56:3f:22:82:9e: 26:50:de:53:0b:f7:7c:80:82:87:33:1b:68:56:16: c2:7c:a5:aa:22:24:15:92:e1:97:ba:e3:26:4d:39: 21:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:43:84:6E:A6:15:1D:9E:6D:9C:8B:A7:C3:38:F6:D5:6B:AE:4B:01 X509v3 Authority Key Identifier: keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:16:1f:c0:6b:b2:8a:84:92:bb:ae:79:d3:d7:a9:d7:da:75: 56:81:a3:1d:fa:6d:04:0e:50:0e:f3:7f:d1:20:84:c2:7c:a5: d0:5c:fd:73:99:c2:d7:d4:90:fd:25:ed:2e:eb:22:e9:c8:09: 92:0e:1b:92:9a:47:46:50:69:bc:30:29:90:a2:0e:38:43:e2: 21:6e:7c:3c:14:81:d6:33:52:f7:43:59:6a:21:84:e8:27:34: 62:41:8f:6c:1b:1e:02:81:f6:ea:2f:ed:76:9d:c0:15:db:7f: 28:7e:43:df:28:16:27:5b:b2:61:f0:d9:04:85:43:94:f1:1b: 85:47:ed:ac:15:2e:57:d3:aa:b8:4d:5c:77:b0:cb:f8:da:eb: c0:63:1a:cc:84:31:20:f8:af:3f:6c:8f:9b:40:81:59:23:3f: c8:12:c1:c1:f3:a0:fb:0c:09:8b:28:f5:72:2b:ad:72:e3:dd: 67:37:1d:6e:23:5f:71:bc:3d:f1:90:84:68:9b:41:97:3d:b4: 48:01:96:24:d7:f1:7e:37:f3:60:be:62:9a:79:08:13:61:c4: d7:37:c8:89:54:2f:9c:56:c0:68:51:73:8a:84:3f:1f:0c:79: c6:50:94:d9:ca:ae:6d:cb:60:64:29:c9:d2:6a:89:33:e2:a7: 59:89:90:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKDE2MzMxNjc2MjExQUVFNjc3MzQ4NUI2NTIzM0M2MkMz QTQ1ODdBRkQwHhcNMjYwNDE2MTcyNDIzWhcNMjYwNDIzMTcyNDIzWjAYMRYwFAYD VQQDEw02OWUxMWI0Ny0wNjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+3SPSsH96oiDUus3BhXqo614ur0QXI6gNXd7XFRE4gd/1ULz6H8g/B3ofWs hyZb2WYcO8vl2QwLZtrh5aiXugJ3JOoLG1valO9OlBccSr9f3yvY15diIz0pc/X6 QqaoV7mYZAVd0zPc+WXoJGvACamS3/9liGVbV+8mS5rjxyzGKJ0GrCFQzzXwxEjD zh/OP7ZycW8Fr9a1JUWa7wjvY3j6xuIgdw6Zbj7PhHCyYhBEIC2pWh5BCccuWPyp sHNY6LCrk3uzUMW/peNNzwVbLBxoUuR5EX9eUdw/Vj8igp4mUN5TC/d8gIKHMxto VhbCfKWqIiQVkuGXuuMmTTkhCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG5DhG6m FR2ebZyLp8M49tVrrksBMB8GA1UdIwQYMBaAFBYzFnYhGu5nc0hbZSM8YsOkWHr9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC84RDhGMEFCRTBC NUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdtZHpTRnRsSXp4aXc2Ulll djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0ZqTVdkaUVhN21kelNGdGxJenhpdzZSWWV2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC84RDhGMEFCRTBCNUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdt ZHpTRnRsSXp4aXc2UllldjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvxYfwGuyioSSu65509ep19p1VoGjHfptBA5QDvN/0SCEwnyl0Fz9c5nC19SQ /SXtLusi6cgJkg4bkppHRlBpvDApkKIOOEPiIW58PBSB1jNS90NZaiGE6Cc0YkGP bBseAoH26i/tdp3AFdt/KH5D3ygWJ1uyYfDZBIVDlPEbhUftrBUuV9OquE1cd7DL +NrrwGMazIQxIPivP2yPm0CBWSM/yBLBwfOg+wwJiyj1ciutcuPdZzcdbiNfcbw9 8ZCEaJtBlz20SAGWJNfxfjfzYL5imnkIE2HE1zfIiVQvnFbAaFFzioQ/Hwx5xlCU 2cqubctgZCnJ0mqJM+KnWYmQgg== -----END CERTIFICATE-----Generated at Fri Apr 17 19:40:34 2026 by rpki-client