$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft File: FyPctBoEJopYeqzoz9na5fn1Hfc.mft (raw, json) Hash identifier: +7rnpp96TR5dur1Bm+gYLrUv2+wYBZJwlO13BfRunoY= Subject key identifier: D2:A3:17:FD:92:F9:41:09:58:71:7F:79:77:6D:4B:4E:27:59:5C:3A Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Certificate serial: 084D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft Manifest number: 081C Signing time: Tue 24 Mar 2026 20:51:47 +0000 Manifest this update: Tue 24 Mar 2026 20:51:46 +0000 Manifest next update: Tue 31 Mar 2026 20:51:46 +0000 Files and hashes: 1: FyPctBoEJopYeqzoz9na5fn1Hfc.crl (hash: kW0vrgcqU8kUL2yc4kABeb4Dg45Acawg165XlgYM310=) 2: 3CD29BF4D46911EE8B36431CC4F9AE02.roa (hash: hJLGe+zYrwYxwpdQvFaS8hi/p8W1GhibzXeCk3G6BNI=) 3: 68DAAA1A749711EFB4EDA45FC4F9AE02.roa (hash: jQKMgjpzfVC4yr89ThGiT9ygh+/rUur+KtBDxKUm250=) 4: 8037BC50EB2E11EDB835EF4AC4F9AE02.roa (hash: f2nEio6eLUyv7yDtFiV3KwH4vS6At+iiNXP9RqT+g84=) 5: 7AA7B416E01011EEA1CA127CC4F9AE02.roa (hash: b0lsSLqk839sfXbmjzCscLovBQK1FxU7wYdESQOxP2U=) 6: 284E9E9E1D5611EB891ADC6CC4F9AE02.roa (hash: 0K9xo1NevqH2KRC8xQxUcHRpqfQKIdlyoCnPNU33oSE=) 7: 2840D3A225FF11EBAF634966C4F9AE02.roa (hash: EtwqGb/CzlP64HTzen0hEAfqgQV3m0e0KLHXsR7RmN0=) 8: 26D56F6425FF11EBAF634966C4F9AE02.roa (hash: /kyIgZiBfNWT65KeLq4ju9c7Mhij++QBadeo1QUbPok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:51:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2125 (0x84d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Validity Not Before: Mar 24 20:51:46 2026 GMT Not After : Mar 31 20:51:46 2026 GMT Subject: CN=69c2f962-425e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cf:47:d9:01:1f:53:0a:b5:40:d2:89:00:2c: 00:50:ba:c7:0c:35:c5:d1:e9:a5:54:b5:45:4e:59: 66:9c:1e:b5:ca:17:82:f2:c6:52:68:5b:86:0a:64: 8a:a8:fb:1e:ca:8d:7c:9a:a8:da:61:e8:d9:cd:c6: 72:c8:22:3a:f7:00:f3:df:1e:6e:96:71:b2:64:ad: 3d:f5:a1:9c:19:0e:1c:07:a9:a5:26:fc:04:52:8a: 85:aa:ce:2a:79:8d:a9:f7:42:84:1c:5d:52:55:48: 26:e4:e6:89:df:42:36:27:4b:64:18:8d:f9:2a:37: 10:cd:9e:b9:5b:a2:ea:e0:c8:54:8c:88:4c:e2:ca: 81:c7:43:0f:1a:23:18:98:1b:a6:af:65:dd:91:89: c6:96:77:45:80:38:2e:60:71:4f:a3:a4:a1:05:9a: ed:dc:9d:79:3a:cb:45:81:d3:35:0a:4e:e5:c3:f2: 69:9f:0a:bd:dc:f7:ad:eb:a5:a2:4f:f9:51:33:06: 6d:4a:cf:98:61:d4:90:4c:3b:9d:3f:cc:8c:04:da: 8c:a2:c7:56:f9:ac:e7:ae:24:13:4f:fe:52:20:c6: d4:8c:45:78:cb:d9:06:f6:30:23:9a:46:dd:4e:fe: f0:59:a2:49:d5:db:32:37:74:98:ba:ee:b5:4e:a6: b1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A3:17:FD:92:F9:41:09:58:71:7F:79:77:6D:4B:4E:27:59:5C:3A X509v3 Authority Key Identifier: keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:56:fc:3d:03:7c:7a:37:06:d7:b3:51:ac:71:f7:0c:6a:d3: 46:fe:47:d4:fb:92:6f:32:fd:d2:17:82:dd:88:0d:cc:23:1c: ba:9a:f3:a4:77:94:16:31:9b:ba:d7:ee:d5:7b:e1:63:88:a3: 29:24:dd:5b:aa:b7:1f:44:a9:16:87:3b:0d:87:89:fa:6f:88: 1d:b1:2c:9f:59:b4:5c:dd:a9:63:56:64:c6:1a:44:f8:21:e6: 00:bb:ee:b3:90:c6:18:91:29:ce:66:f9:51:11:9a:65:b3:a5: 5b:e3:49:6f:1e:1f:66:a8:ae:00:6d:65:c9:3d:0f:91:2a:66: b3:82:62:13:9d:27:00:20:92:3d:d0:0b:8b:df:55:c1:19:42: 6b:06:48:ef:af:a4:2c:d5:c3:ae:ca:88:4c:59:bf:1c:4f:63: 18:b9:e5:56:2f:47:3d:ef:7b:17:dd:d4:0b:f6:68:0b:84:11: ff:c5:a0:ee:d8:45:61:1d:af:4b:28:36:10:64:66:ff:b6:a1: 48:99:55:7d:50:c3:ae:5d:d4:84:e3:25:12:de:47:80:89:87: c0:d1:66:d7:92:4c:33:88:e9:e5:06:a7:43:50:ec:22:21:ad: dd:9d:4e:78:21:13:bc:c2:6f:dc:65:07:81:cb:ac:e0:00:b9: 78:22:6b:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlEQ0IxMTAvBgNVBAUTKDE3MjNEQ0I0MUEwNDI2OEE1ODdBQUNFOENGRDlEQUU1 RjlGNTFERjcwHhcNMjYwMzI0MjA1MTQ2WhcNMjYwMzMxMjA1MTQ2WjAYMRYwFAYD VQQDEw02OWMyZjk2Mi00MjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAms9H2QEfUwq1QNKJACwAULrHDDXF0emlVLVFTllmnB61yheC8sZSaFuGCmSK qPseyo18mqjaYejZzcZyyCI69wDz3x5ulnGyZK099aGcGQ4cB6mlJvwEUoqFqs4q eY2p90KEHF1SVUgm5OaJ30I2J0tkGI35KjcQzZ65W6Lq4MhUjIhM4sqBx0MPGiMY mBumr2XdkYnGlndFgDguYHFPo6ShBZrt3J15OstFgdM1Ck7lw/Jpnwq93Pet66Wi T/lRMwZtSs+YYdSQTDudP8yMBNqMosdW+aznriQTT/5SIMbUjEV4y9kG9jAjmkbd Tv7wWaJJ1dsyN3SYuu61TqaxTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNKjF/2S +UEJWHF/eXdtS04nWVw6MB8GA1UdIwQYMBaAFBcj3LQaBCaKWHqs6M/Z2uX59R33 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOURDQi9FNEMwRjU2QzE4 N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpvcFllcXpvejluYTVmbjFI ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z5UGN0Qm9FSm9wWWVxem96OW5hNWZuMUhmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OURDQi9FNEMwRjU2QzE4N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpv cFllcXpvejluYTVmbjFIZmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATFb8PQN8ejcG17NRrHH3DGrTRv5H1PuSbzL90heC3YgNzCMcuprzpHeUFjGb utfu1XvhY4ijKSTdW6q3H0SpFoc7DYeJ+m+IHbEsn1m0XN2pY1ZkxhpE+CHmALvu s5DGGJEpzmb5URGaZbOlW+NJbx4fZqiuAG1lyT0PkSpms4JiE50nACCSPdALi99V wRlCawZI76+kLNXDrsqITFm/HE9jGLnlVi9HPe97F93UC/ZoC4QR/8Wg7thFYR2v Syg2EGRm/7ahSJlVfVDDrl3UhOMlEt5HgImHwNFm15JMM4jp5QanQ1DsIiGt3Z1O eCETvMJv3GUHgcus4AC5eCJrpg== -----END CERTIFICATE-----Generated at Thu Mar 26 07:22:45 2026 by rpki-client