$ rpki-client -vvf rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft File: Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft (raw, json) Hash identifier: yyYbuZzjTFhqj29wWU/Q8tPc4V29AzQ8GYLovAmypT4= Subject key identifier: 5C:E5:F5:E8:8D:1B:F7:6B:E3:D2:5B:5F:02:2C:C8:44:C2:4F:5F:54 Authority key identifier: 16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47 Certificate issuer: /CN=A916223F/serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247 Certificate serial: 0D23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft Manifest number: 0D1A Signing time: Tue 24 Mar 2026 17:56:37 +0000 Manifest this update: Tue 24 Mar 2026 17:56:37 +0000 Manifest next update: Tue 31 Mar 2026 17:56:37 +0000 Files and hashes: 1: Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl (hash: sYY9iFEtOxO31aSX3iUMti3BaGNJWaavtXLDsAhzg5w=) 2: 80392340F95D11E9ABF14387C4F9AE02.roa (hash: ASXvIGV5XQpb47JnlEJHWDEczJ8u/zVk1fKYxytG1Yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3363 (0xd23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916223F, serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247 Validity Not Before: Mar 24 17:56:37 2026 GMT Not After : Mar 31 17:56:37 2026 GMT Subject: CN=69c2d055-770e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d1:5b:ea:4c:a7:21:ce:56:a8:0a:62:4e:3d: 87:b1:b7:7d:91:68:62:a1:8f:fd:d5:09:48:a6:fd: 60:fc:9c:71:f8:88:7a:35:54:c1:3e:0d:28:12:ef: 6a:c5:69:85:fd:0d:1a:1b:97:fa:d4:34:e5:a5:1a: 98:ab:4b:fb:86:22:5d:a6:82:e2:52:81:4e:36:90: da:0c:ba:ce:0a:5f:39:60:7b:86:d5:59:54:aa:5b: 67:b5:13:26:18:35:79:db:20:16:9a:ee:1a:3f:55: 9c:aa:c0:09:af:1a:d1:30:ed:fb:ce:78:d1:67:71: b1:e3:85:66:97:04:3c:ea:aa:4b:13:a4:15:7d:6e: c0:ca:4b:85:b8:b6:73:cd:2d:69:09:b0:31:f1:48: 28:8c:01:ec:43:ca:a1:cc:2d:9c:45:c1:0f:72:58: 05:14:ed:ba:fb:09:92:3a:6f:93:9d:c5:62:c7:e4: 1e:25:5e:fd:b7:52:25:9e:f0:6d:2f:6f:7c:ee:44: 3f:f8:1e:4a:cb:eb:5e:f9:4d:a5:2b:15:84:1c:0e: a0:b7:cb:2a:74:96:72:60:70:f4:53:f3:7e:5a:7c: c6:74:42:05:4c:9f:9d:a1:7f:33:eb:99:c7:17:05: 78:2e:5b:27:a8:69:e8:56:3d:cb:8c:20:b2:eb:2d: 88:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E5:F5:E8:8D:1B:F7:6B:E3:D2:5B:5F:02:2C:C8:44:C2:4F:5F:54 X509v3 Authority Key Identifier: keyid:16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:c4:a8:10:26:dd:07:09:b2:e5:b4:ef:26:35:c6:50:00:fb: 08:e9:92:f6:07:94:61:5c:61:4f:70:a7:7c:71:1e:df:9e:f5: 8c:78:59:85:94:77:3c:22:01:be:c3:0c:ea:ea:60:c6:a5:7c: 8c:65:41:cd:e0:7c:6d:4a:c5:0d:7b:75:03:99:59:82:5c:89: bf:f9:7d:db:6a:c6:d7:fc:54:56:82:af:18:92:52:83:4e:7e: 6c:0e:d5:d8:56:89:f0:5f:b5:ff:0d:c0:e0:95:74:91:ee:af: 2c:40:7d:2e:93:75:a1:25:fa:ce:21:b8:64:3b:07:aa:a0:89: 2f:1b:87:f7:39:d6:c5:7c:76:cd:6f:54:a9:84:f9:dc:1e:4d: fc:53:4d:b3:5f:ed:71:0d:a0:d9:95:76:a8:0f:0b:ca:0b:d9: d2:97:af:44:a2:20:07:0d:db:95:8a:4b:95:41:31:c6:54:3a: 8b:d9:fc:a4:fb:a2:cf:ee:3b:58:c2:65:9f:34:61:51:4b:c3: 5c:64:39:44:0e:bd:bb:63:b1:eb:5c:6e:ff:d4:5e:7d:5e:b3: 84:db:4d:1c:28:d6:b9:c8:6b:68:e2:52:34:08:3a:c0:1a:14: d2:e4:c7:7b:4b:9a:62:0b:42:09:db:15:eb:06:3c:a3:99:ed: 50:cb:70:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIyM0YxMTAvBgNVBAUTKDE2RURDODk1NkJDNDEzQzlDNTAyMTkyOEIwM0JDODUw RkM3RTcyNDcwHhcNMjYwMzI0MTc1NjM3WhcNMjYwMzMxMTc1NjM3WjAYMRYwFAYD VQQDEw02OWMyZDA1NS03NzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9Fb6kynIc5WqApiTj2Hsbd9kWhioY/91QlIpv1g/Jxx+Ih6NVTBPg0oEu9q xWmF/Q0aG5f61DTlpRqYq0v7hiJdpoLiUoFONpDaDLrOCl85YHuG1VlUqltntRMm GDV52yAWmu4aP1WcqsAJrxrRMO37znjRZ3Gx44VmlwQ86qpLE6QVfW7AykuFuLZz zS1pCbAx8UgojAHsQ8qhzC2cRcEPclgFFO26+wmSOm+TncVix+QeJV79t1IlnvBt L2987kQ/+B5Ky+te+U2lKxWEHA6gt8sqdJZyYHD0U/N+WnzGdEIFTJ+doX8z65nH FwV4LlsnqGnoVj3LjCCy6y2InwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFzl9eiN G/dr49JbXwIsyETCT19UMB8GA1UdIwQYMBaAFBbtyJVrxBPJxQIZKLA7yFD8fnJH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjIzRi80RUJGMjdCNkY5 NUMxMUU5QjYyNzIyODVDNEY5QUUwMi9GdTNJbFd2RUU4bkZBaGtvc0R2SVVQeC1j a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z1M0lsV3ZFRThuRkFoa29zRHZJVVB4LWNrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjIzRi80RUJGMjdCNkY5NUMxMUU5QjYyNzIyODVDNEY5QUUwMi9GdTNJbFd2RUU4 bkZBaGtvc0R2SVVQeC1ja2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKMSoECbdBwmy5bTvJjXGUAD7COmS9geUYVxhT3CnfHEe3571jHhZhZR3PCIB vsMM6upgxqV8jGVBzeB8bUrFDXt1A5lZglyJv/l922rG1/xUVoKvGJJSg05+bA7V 2FaJ8F+1/w3A4JV0ke6vLEB9LpN1oSX6ziG4ZDsHqqCJLxuH9znWxXx2zW9UqYT5 3B5N/FNNs1/tcQ2g2ZV2qA8LygvZ0pevRKIgBw3blYpLlUExxlQ6i9n8pPuiz+47 WMJlnzRhUUvDXGQ5RA69u2Ox61xu/9RefV6zhNtNHCjWuchraOJSNAg6wBoU0uTH e0uaYgtCCdsV6wY8o5ntUMtwZw== -----END CERTIFICATE-----Generated at Thu Mar 26 03:37:42 2026 by rpki-client