$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft File: fFO_avST0kw7fGuiFrOCsMf3_CQ.mft (raw, json) Hash identifier: EbYrGvA3UbaKDM0prtnogc3ZYk6BtWEW2uwOoq3KEUw= Subject key identifier: 31:5C:5C:AD:8F:B7:C2:04:C0:1D:A1:1E:96:8E:4A:AD:2A:78:65:8F Authority key identifier: 7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 Certificate issuer: /CN=A913FA1D/serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Certificate serial: 0933 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft Manifest number: 0921 Signing time: Tue 24 Mar 2026 20:01:03 +0000 Manifest this update: Tue 24 Mar 2026 20:01:02 +0000 Manifest next update: Tue 31 Mar 2026 20:01:02 +0000 Files and hashes: 1: fFO_avST0kw7fGuiFrOCsMf3_CQ.crl (hash: 1T32XpEAkH71we5KCyGDySclGx7WDK0O7Rbq0MsWczY=) 2: F902E016BFED11EABE972E5AC4F9AE02.roa (hash: d+fGr61yoNUPXzaLf+BeZ6kemTLVO0y8GsU/1fIouFE=) 3: F86B8216BFED11EABE972E5AC4F9AE02.roa (hash: gfpq5Vgb/YI4qo4hAIBsJzMcZgPK7w4lTbQ0JqnYdL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2355 (0x933) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA1D, serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Validity Not Before: Mar 24 20:01:02 2026 GMT Not After : Mar 31 20:01:02 2026 GMT Subject: CN=69c2ed7f-5fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e2:54:88:51:c7:ad:9c:59:1d:4d:82:89:3a: e7:c3:b5:cc:8a:7e:9c:06:1d:0a:72:3e:84:44:84: 13:1a:4e:a4:2c:59:4c:9b:0f:68:3a:d8:97:22:e2: 24:f0:17:19:d0:05:6a:e4:7d:84:58:fb:95:39:ca: b8:50:00:62:17:92:77:b4:94:fd:ef:9e:8a:be:31: 8a:ae:48:e6:13:f1:ba:8d:3a:a1:15:6e:2a:fc:38: ee:2b:9f:a9:4a:65:1f:8a:b9:57:2d:13:c1:8b:06: 42:40:65:0e:6a:ef:b2:4c:7e:c4:6b:ea:12:c2:11: a3:10:62:40:f2:b8:b6:44:be:d0:ae:bc:d9:17:73: 92:87:b7:81:5b:2c:ed:97:6a:7a:96:ee:30:e9:95: 5d:d3:13:97:90:3e:50:d0:57:c5:53:4f:81:7c:1c: 9d:d3:c4:be:81:eb:7f:70:f6:8f:c0:7c:a5:d5:9c: 35:44:de:81:9f:a4:a6:00:86:f5:47:81:41:57:e0: 1c:83:36:9c:39:e9:19:8a:2e:3d:73:96:73:b4:f3: 8c:d9:f4:4e:35:35:e0:6b:7d:1c:49:86:78:d9:5f: 20:da:79:5e:dd:18:aa:28:98:d4:47:c3:1b:36:d9: 9a:e7:50:2b:5e:8e:4d:5a:cd:95:30:19:b7:44:08: 41:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5C:5C:AD:8F:B7:C2:04:C0:1D:A1:1E:96:8E:4A:AD:2A:78:65:8F X509v3 Authority Key Identifier: keyid:7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:d9:92:53:96:37:d3:66:be:dd:53:01:5a:0b:45:6f:68:4b: 68:c0:49:07:1b:70:78:66:34:42:8f:86:ec:3b:c5:98:60:c0: 56:95:7e:b2:a0:e6:ef:4c:ac:f3:6c:58:ab:11:34:f1:d7:9e: e4:d6:38:56:97:49:46:78:16:bc:c7:ee:75:74:be:67:68:8a: 4d:41:e1:68:31:50:68:21:83:74:81:14:55:5d:95:09:2b:c6: e7:47:5b:0e:3c:f9:56:1a:45:8b:48:27:f5:14:73:3e:9d:f0: 06:aa:51:33:8d:24:1c:97:57:d2:9a:9c:fd:7e:b9:cf:87:66: 26:54:f5:ab:f9:0e:da:52:92:32:ab:c2:e6:cf:e0:ce:75:b4: b4:51:02:94:4b:0c:42:00:1d:a4:e4:b0:37:3e:15:6a:10:71: 71:ff:02:0f:62:81:92:0c:9d:3d:3b:1a:4e:cd:f3:72:82:07: 58:6c:b8:4c:83:69:1e:66:ac:d0:11:39:9c:f1:d6:5a:27:94: 3f:e1:1e:a1:19:12:59:d3:5d:a3:28:7a:44:03:57:d4:f3:3a: 8f:78:16:97:d5:22:27:28:e0:b8:b7:78:b6:64:c4:36:52:45: d5:db:d8:43:f5:7d:e3:4b:b6:73:2d:89:a2:ae:1e:e7:a5:b8: 3c:27:7d:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZBMUQxMTAvBgNVBAUTKDdDNTNCRjZBRjQ5M0QyNEMzQjdDNkJBMjE2QjM4MkIw QzdGN0ZDMjQwHhcNMjYwMzI0MjAwMTAyWhcNMjYwMzMxMjAwMTAyWjAYMRYwFAYD VQQDEw02OWMyZWQ3Zi01ZmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmOJUiFHHrZxZHU2CiTrnw7XMin6cBh0Kcj6ERIQTGk6kLFlMmw9oOtiXIuIk 8BcZ0AVq5H2EWPuVOcq4UABiF5J3tJT9756KvjGKrkjmE/G6jTqhFW4q/DjuK5+p SmUfirlXLRPBiwZCQGUOau+yTH7Ea+oSwhGjEGJA8ri2RL7QrrzZF3OSh7eBWyzt l2p6lu4w6ZVd0xOXkD5Q0FfFU0+BfByd08S+get/cPaPwHyl1Zw1RN6Bn6SmAIb1 R4FBV+AcgzacOekZii49c5ZztPOM2fRONTXga30cSYZ42V8g2nle3RiqKJjUR8Mb Ntma51ArXo5NWs2VMBm3RAhBTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDFcXK2P t8IEwB2hHpaOSq0qeGWPMB8GA1UdIwQYMBaAFHxTv2r0k9JMO3xrohazgrDH9/wk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkExRC85RUVBNEQ2OEJG RUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBrdzdmR3VpRnJPQ3NNZjNf Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGT19hdlNUMGt3N2ZHdWlGck9Dc01mM19DUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkExRC85RUVBNEQ2OEJGRUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBr dzdmR3VpRnJPQ3NNZjNfQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg9mSU5Y302a+3VMBWgtFb2hLaMBJBxtweGY0Qo+G7DvFmGDAVpV+sqDm70ys 82xYqxE08dee5NY4VpdJRngWvMfudXS+Z2iKTUHhaDFQaCGDdIEUVV2VCSvG50db Djz5VhpFi0gn9RRzPp3wBqpRM40kHJdX0pqc/X65z4dmJlT1q/kO2lKSMqvC5s/g znW0tFEClEsMQgAdpOSwNz4VahBxcf8CD2KBkgydPTsaTs3zcoIHWGy4TINpHmas 0BE5nPHWWieUP+EeoRkSWdNdoyh6RANX1PM6j3gWl9UiJyjguLd4tmTENlJF1dvY Q/V940u2cy2Joq4e56W4PCd9bA== -----END CERTIFICATE-----Generated at Thu Mar 26 09:52:59 2026 by rpki-client