$ rpki-client -vvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft File: FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft (raw, json) Hash identifier: VMrUUDOyvkCIFdKPU2cE6bhT0ipY3CU1Our8tXx87ro= Subject key identifier: 2E:2C:DC:E2:DB:74:08:37:D4:27:2D:59:02:FA:C1:74:B0:A8:5C:7C Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 Certificate issuer: /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29 Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft Manifest number: 01BA Signing time: Wed 25 Mar 2026 03:10:22 +0000 Manifest this update: Wed 25 Mar 2026 03:10:22 +0000 Manifest next update: Wed 01 Apr 2026 03:10:22 +0000 Files and hashes: 1: FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl (hash: CswCalWvfOkF2vpzCf/a4HNVGhTnXHr09hN4K+eihiM=) 2: 91FC411C836411EE80C08641C4F9AE02.roa (hash: y7rF5vkt8RhtipSe8v56RC2oUIIDL8ARxP+tAlU5uD0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121188, serialNumber=1466407758A8D7B935694896D50275280679AF29 Validity Not Before: Mar 25 03:10:22 2026 GMT Not After : Apr 1 03:10:22 2026 GMT Subject: CN=69c3521e-3c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2e:99:4c:db:af:e7:1e:44:9a:1b:72:31:f5: b2:67:30:c9:e6:b6:b8:87:19:f6:cd:81:0b:dd:b0: 45:4d:c3:e3:2a:3f:50:70:d4:70:34:de:23:1b:f4: 03:51:82:23:8b:3f:ff:76:49:10:51:ff:57:d0:23: 58:33:ac:12:33:77:4e:44:b9:7f:7e:6d:2c:82:12: ae:ee:6f:3f:b7:f6:4e:6a:74:b7:5c:f1:0e:74:9f: 76:5f:ce:0f:e2:68:9b:53:aa:e3:da:61:e4:33:7f: c6:da:d6:4b:84:d2:bd:c1:7b:a7:c9:c6:17:28:8f: c2:1f:b0:a0:27:f7:da:69:f3:8a:fe:53:86:a1:be: 1c:9d:4a:d8:73:fb:a5:13:05:0a:b2:74:44:e7:de: 4f:1f:ac:5b:98:d2:41:e0:98:b5:67:bd:4e:a6:27: 9c:3f:0a:e0:8b:b5:8c:87:2f:21:30:e8:15:ff:bd: 38:1e:8f:b0:ca:3c:72:9a:36:c1:91:40:33:e6:5e: 22:0d:cf:d9:1f:01:ac:74:c7:c4:4a:45:6c:64:f1: ac:1a:f9:27:0f:05:ca:a9:a3:a5:e8:d9:18:84:b6: 26:b5:87:33:dc:bc:dd:f0:4d:d9:e2:27:9d:28:db: 2a:d7:bc:38:36:39:6d:fe:c5:43:76:90:aa:9b:d2: 84:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:2C:DC:E2:DB:74:08:37:D4:27:2D:59:02:FA:C1:74:B0:A8:5C:7C X509v3 Authority Key Identifier: keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:c9:c8:c2:91:b9:22:1d:b9:3b:f8:a5:27:57:a9:f7:fc:a9: b3:6b:a2:a5:df:a1:39:26:5b:4f:8a:b5:0f:ac:33:eb:bd:20: 75:ae:01:a2:fc:d3:d8:f3:2d:b0:8b:29:b1:49:6c:ba:a0:b5: 09:29:bd:bd:f8:f7:58:ac:c0:09:bc:99:83:2c:75:5e:e3:fc: e7:1a:c1:1a:ea:28:6f:87:d4:d8:19:ec:c4:04:3d:8f:72:97: 6d:84:07:e5:b9:ce:b9:83:0b:31:a0:9b:b3:ae:b8:6e:6e:fe: a5:10:84:28:08:4d:a1:70:56:06:bd:2d:fb:8c:ae:c2:21:dc: 9a:fa:f9:7b:07:d7:fa:b4:26:fc:32:5f:ed:78:57:ba:d2:4e: 67:d9:f5:84:b1:69:1a:4f:71:a0:15:96:56:a1:c8:6a:6c:33: af:33:c8:71:f3:d3:f4:1f:14:7d:ef:29:d9:95:cb:37:09:dc: 32:4b:d2:d6:bd:3b:2c:58:63:db:c0:cc:02:e5:07:ba:45:7b: b3:0e:2a:93:ea:31:07:d4:0a:41:ac:94:f6:61:e3:64:7e:b4: d1:3d:a6:02:43:52:9c:86:cc:43:4f:c3:96:5e:09:69:0e:da: b8:cf:b0:b9:da:78:b4:ed:a3:40:3f:3a:d5:fe:2f:25:d8:a8: e3:ca:3b:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExODgxMTAvBgNVBAUTKDE0NjY0MDc3NThBOEQ3QjkzNTY5NDg5NkQ1MDI3NTI4 MDY3OUFGMjkwHhcNMjYwMzI1MDMxMDIyWhcNMjYwNDAxMDMxMDIyWjAYMRYwFAYD VQQDEw02OWMzNTIxZS0zYzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjC6ZTNuv5x5EmhtyMfWyZzDJ5ra4hxn2zYEL3bBFTcPjKj9QcNRwNN4jG/QD UYIjiz//dkkQUf9X0CNYM6wSM3dORLl/fm0sghKu7m8/t/ZOanS3XPEOdJ92X84P 4mibU6rj2mHkM3/G2tZLhNK9wXunycYXKI/CH7CgJ/faafOK/lOGob4cnUrYc/ul EwUKsnRE595PH6xbmNJB4Ji1Z71OpiecPwrgi7WMhy8hMOgV/704Ho+wyjxymjbB kUAz5l4iDc/ZHwGsdMfESkVsZPGsGvknDwXKqaOl6NkYhLYmtYcz3Lzd8E3Z4ied KNsq17w4Njlt/sVDdpCqm9KEnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC4s3OLb dAg31CctWQL6wXSwqFx8MB8GA1UdIwQYMBaAFBRmQHdYqNe5NWlIltUCdSgGea8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTE4OC84NEJBQTA2Qzgz NjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3azFhVWlXMVFKMUtBWjVy eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZHWkFkMWlvMTdrMWFVaVcxUUoxS0FaNXJ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTE4OC84NEJBQTA2QzgzNjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3 azFhVWlXMVFKMUtBWjVyeWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlcnIwpG5Ih25O/ilJ1ep9/yps2uipd+hOSZbT4q1D6wz670gda4BovzT2PMt sIspsUlsuqC1CSm9vfj3WKzACbyZgyx1XuP85xrBGuoob4fU2BnsxAQ9j3KXbYQH 5bnOuYMLMaCbs664bm7+pRCEKAhNoXBWBr0t+4yuwiHcmvr5ewfX+rQm/DJf7XhX utJOZ9n1hLFpGk9xoBWWVqHIamwzrzPIcfPT9B8Ufe8p2ZXLNwncMkvS1r07LFhj 28DMAuUHukV7sw4qk+oxB9QKQayU9mHjZH600T2mAkNSnIbMQ0/Dll4JaQ7auM+w udp4tO2jQD861f4vJdio48o7ww== -----END CERTIFICATE-----Generated at Thu Mar 26 00:52:24 2026 by rpki-client