$ rpki-client -vvf rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft File: FWZDTXxsxlkckNwnSr9z3gDrBQE.mft (raw, json) Hash identifier: rArrAnHk22mBqKBqHd4ihvlL6aLthOmf56dM18fUuO4= Subject key identifier: EE:A4:24:96:FA:30:80:D4:85:77:8A:AC:20:D6:DC:18:98:FA:6C:9C Authority key identifier: 15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01 Certificate issuer: /CN=A912FEAB/serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501 Certificate serial: 02C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft Manifest number: 02BE Signing time: Wed 25 Mar 2026 01:04:06 +0000 Manifest this update: Wed 25 Mar 2026 01:04:05 +0000 Manifest next update: Wed 01 Apr 2026 01:04:05 +0000 Files and hashes: 1: FWZDTXxsxlkckNwnSr9z3gDrBQE.crl (hash: s1yretybcSamHp3S60tug3rXSeW7GuDJWNaAdMUmP1A=) 2: 9082B9C42F8711ED90F1090CC4F9AE02.roa (hash: EDyKn0kWcDVHT/YkbTzVjcZ2ssAl9mljUo5MrerRei0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:04:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 709 (0x2c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FEAB, serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501 Validity Not Before: Mar 25 01:04:05 2026 GMT Not After : Apr 1 01:04:05 2026 GMT Subject: CN=69c33486-2f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b9:40:7b:28:ff:a7:20:f5:41:b1:30:08:6e: 14:7e:c5:77:d7:55:a1:48:05:ce:c8:7e:7b:0d:71: b1:26:a2:18:d6:73:45:33:91:57:65:bf:2e:6e:d7: 27:44:58:71:16:fe:41:3e:8e:3c:58:fd:10:1b:37: 7d:40:20:d4:7f:59:fc:1a:73:20:24:6d:66:e9:49: bb:e0:89:d5:5d:08:73:37:3e:f0:da:d3:cf:2c:5a: da:ca:f9:b9:b2:a9:a0:77:2d:bf:64:34:6f:0c:60: 56:49:da:22:ba:da:83:14:8a:a5:f6:bc:a5:5e:6f: a5:c1:eb:8a:1e:63:7f:e7:b1:c6:e5:75:a9:da:10: b4:bd:d5:5b:27:ef:a7:be:b8:f8:24:ac:96:51:46: 0a:9f:79:a2:27:b9:4f:b1:8a:1a:d1:75:91:62:a5: bb:76:e0:a5:5d:f0:fa:8a:0e:52:c5:28:20:f8:6e: 37:d7:49:43:0d:65:93:f1:83:9a:55:79:66:2d:f5: 10:7c:0e:2b:16:57:6e:5f:1a:54:31:73:4b:57:6c: 1c:7d:b7:45:5b:1d:c5:18:16:1c:3f:8f:8d:23:bd: c4:e3:2c:32:87:0b:38:9b:2d:22:17:21:8c:42:ea: 3a:72:f6:a2:83:10:75:99:56:73:1c:cf:13:d7:03: e1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A4:24:96:FA:30:80:D4:85:77:8A:AC:20:D6:DC:18:98:FA:6C:9C X509v3 Authority Key Identifier: keyid:15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d2:30:e1:de:e8:50:4b:02:73:4e:08:f0:53:ed:9e:ec:7f: af:d0:07:44:26:64:75:01:df:dd:d1:d0:7a:82:68:cf:64:83: b6:bd:d5:86:e1:18:1d:ba:b6:18:a7:cd:db:3a:49:b1:cd:b8: d4:cb:30:81:7b:73:44:b5:c3:95:c9:76:a3:ae:78:2b:a9:14: 1e:fe:cf:d6:6c:9b:48:29:d7:e3:6a:6f:ac:bc:ed:b3:7d:98: 6f:60:fb:df:e4:76:51:b4:19:e5:b4:ef:8d:b2:ad:8b:23:8d: 1f:4e:5e:4f:2d:9b:05:d5:5b:9a:d1:9d:0e:2e:17:37:8f:9d: f3:12:84:54:46:39:8b:bb:48:d1:03:4d:83:8f:85:e7:0b:09: 75:98:cb:ea:1c:77:80:69:d1:9b:a4:32:2f:9c:fe:f4:42:cc: 00:26:5c:f4:c4:07:d1:91:54:54:59:ac:33:62:4c:cf:e5:7b: 52:a9:7f:87:8c:6d:f4:7d:bc:22:c6:a2:f5:29:43:2a:9c:c3: fc:b4:2b:b8:07:15:dc:26:7f:05:71:e0:f9:d4:4e:fb:17:ac: 87:6c:c1:3c:6c:72:f5:d6:9a:f4:4c:98:68:48:09:20:45:63: a4:ec:31:9b:68:69:e1:d8:b0:bc:3c:56:18:50:01:b1:84:9e: 72:41:b0:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZFQUIxMTAvBgNVBAUTKDE1NjY0MzREN0M2Q0M2NTkxQzkwREMyNzRBQkY3M0RF MDBFQjA1MDEwHhcNMjYwMzI1MDEwNDA1WhcNMjYwNDAxMDEwNDA1WjAYMRYwFAYD VQQDEw02OWMzMzQ4Ni0yZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLlAeyj/pyD1QbEwCG4UfsV311WhSAXOyH57DXGxJqIY1nNFM5FXZb8ubtcn RFhxFv5BPo48WP0QGzd9QCDUf1n8GnMgJG1m6Um74InVXQhzNz7w2tPPLFrayvm5 sqmgdy2/ZDRvDGBWSdoiutqDFIql9rylXm+lweuKHmN/57HG5XWp2hC0vdVbJ++n vrj4JKyWUUYKn3miJ7lPsYoa0XWRYqW7duClXfD6ig5SxSgg+G4310lDDWWT8YOa VXlmLfUQfA4rFlduXxpUMXNLV2wcfbdFWx3FGBYcP4+NI73E4ywyhws4my0iFyGM Quo6cvaigxB1mVZzHM8T1wPhNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO6kJJb6 MIDUhXeKrCDW3BiY+mycMB8GA1UdIwQYMBaAFBVmQ018bMZZHJDcJ0q/c94A6wUB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkVBQi9GREQ4OTlFQzJG ODQxMUVEOThCOTFCMEFDNEY5QUUwMi9GV1pEVFh4c3hsa2NrTnduU3I5ejNnRHJC UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXWkRUWHhzeGxrY2tOd25Tcjl6M2dEckJRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkVBQi9GREQ4OTlFQzJGODQxMUVEOThCOTFCMEFDNEY5QUUwMi9GV1pEVFh4c3hs a2NrTnduU3I5ejNnRHJCUUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP9Iw4d7oUEsCc04I8FPtnux/r9AHRCZkdQHf3dHQeoJoz2SDtr3VhuEYHbq2 GKfN2zpJsc241MswgXtzRLXDlcl2o654K6kUHv7P1mybSCnX42pvrLzts32Yb2D7 3+R2UbQZ5bTvjbKtiyONH05eTy2bBdVbmtGdDi4XN4+d8xKEVEY5i7tI0QNNg4+F 5wsJdZjL6hx3gGnRm6QyL5z+9ELMACZc9MQH0ZFUVFmsM2JMz+V7Uql/h4xt9H28 Isai9SlDKpzD/LQruAcV3CZ/BXHg+dRO+xesh2zBPGxy9daa9EyYaEgJIEVjpOwx m2hp4diwvDxWGFABsYSeckGwvw== -----END CERTIFICATE-----Generated at Thu Mar 26 19:16:00 2026 by rpki-client