$ rpki-client -vvf rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft File: fBoPSOpDIx-jND1ZKCHvKejSsxs.mft (raw, json) Hash identifier: d/EeUW5htkaW0mqzSvHiCeWj7GKCyGZFfnlLAPFCNXI= Subject key identifier: AC:D8:17:0B:9C:48:56:A1:73:7D:6B:46:36:AA:65:16:63:1B:31:A9 Authority key identifier: 7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B Certificate issuer: /CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Certificate serial: 1D09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft Manifest number: 1CAE Signing time: Tue 24 Mar 2026 16:07:42 +0000 Manifest this update: Tue 24 Mar 2026 16:07:41 +0000 Manifest next update: Tue 31 Mar 2026 16:07:41 +0000 Files and hashes: 1: fBoPSOpDIx-jND1ZKCHvKejSsxs.crl (hash: S+lDyYXglbcNU/hvSH5CrnmYC+WndFLjHgDJyQBanX0=) 2: 398B3186FE5111E6BCEC6E72C4F9AE02.roa (hash: XTPwHAE+RSrJ2wVavnzJET8Caph7nR447oVW7w8/WgU=) 3: AD3B2582EF9A11EDA4E50366C4F9AE02.roa (hash: YdIG+LX9/nSnlUWidUhwdiQq+gtN7y6hQuASQmVjG5Y=) 4: 0754E1A6115411F19A223E75263D8C67.roa (hash: XkNkIGOcXYJKZ6BnuWlh6sl/eiNLJIsKVaWehkRd9Ok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7433 (0x1d09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91798AD, serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Validity Not Before: Mar 24 16:07:41 2026 GMT Not After : Mar 31 16:07:41 2026 GMT Subject: CN=69c2b6ce-ae87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a6:83:2e:68:af:93:ac:9a:9f:e7:18:83:6a: 58:18:9d:3b:88:c4:3e:ce:56:a5:a8:37:4e:e8:59: c6:9a:77:bc:f4:ee:7d:04:52:7a:f8:d1:f0:65:43: 44:83:97:8c:c4:12:2f:b3:9b:54:71:0e:3b:5b:f0: 81:47:e7:92:b6:2e:30:cb:4a:b0:aa:f5:89:fc:86: 00:a4:7b:19:0e:af:99:cb:06:22:73:97:b1:0f:a3: 43:d2:07:94:01:c7:20:22:05:45:21:2d:ce:2d:26: da:a7:e8:14:2d:eb:ca:16:d5:86:e9:b6:09:5a:95: ac:0b:8d:41:11:32:81:67:29:21:1a:d3:a2:16:75: 2c:94:50:50:a7:3e:33:07:5c:96:ec:c7:18:a1:6f: e7:49:f4:1e:84:fa:01:f3:af:2b:ee:80:40:08:d6: c4:3d:40:bb:8d:b2:94:f3:14:7a:30:0b:c4:85:f1: 1a:9d:96:80:f4:ff:53:9a:bc:d8:1d:46:8b:77:b3: 80:f6:ae:6d:44:34:ed:d1:dd:2f:fa:17:84:1e:38: c2:a3:9b:87:2f:09:12:18:a3:fe:6b:19:a8:58:c4: 42:42:56:38:3d:9f:1e:0b:1d:51:b5:e8:c4:bb:a2: 84:fd:79:32:28:b7:90:3d:38:67:65:75:03:20:f7: 7b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D8:17:0B:9C:48:56:A1:73:7D:6B:46:36:AA:65:16:63:1B:31:A9 X509v3 Authority Key Identifier: keyid:7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:b8:09:39:d3:96:22:77:64:6c:38:99:44:8d:ea:b5:7c:9d: c8:bd:d1:63:f6:6f:b5:cf:67:0f:0a:37:b8:bb:ef:cf:58:a8: a9:ba:a0:90:02:80:ea:88:21:b9:f3:17:b1:82:2b:20:40:ce: e7:03:19:7b:51:37:ff:d9:91:dc:8c:9b:2e:c4:d9:90:70:87: 44:e4:72:5f:45:5d:32:6b:ae:b7:8a:a4:cf:f8:d5:8a:7a:2b: 7c:c4:28:02:fd:29:2f:f5:b1:76:8f:af:f9:73:04:aa:97:4f: ec:22:22:a8:62:6c:f9:09:0d:1f:5c:35:d1:e1:da:3b:68:6e: d0:27:63:f6:34:17:10:ee:f5:bc:db:88:92:f6:93:c8:25:3a: f6:65:e9:ff:88:82:68:fe:11:95:de:d7:b3:da:11:b0:d3:58: cc:20:18:35:df:fb:36:23:36:62:4c:74:e3:bb:55:f0:5a:39: c9:23:03:b3:5a:94:74:49:d5:31:bb:80:17:4a:5a:5e:cc:c3: 10:42:5d:bb:e5:dc:ba:84:59:03:65:46:b6:d9:e7:e8:b3:aa: 06:74:8b:2e:98:9f:7f:86:cc:32:2d:f2:5f:47:c4:c3:27:75: 24:0e:0c:0f:63:d6:1d:f4:77:d9:bc:d4:08:1c:6d:2c:aa:1d: 33:b8:81:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk4QUQxMTAvBgNVBAUTKDdDMUEwRjQ4RUE0MzIzMUZBMzM0M0Q1OTI4MjFFRjI5 RThEMkIzMUIwHhcNMjYwMzI0MTYwNzQxWhcNMjYwMzMxMTYwNzQxWjAYMRYwFAYD VQQDEw02OWMyYjZjZS1hZTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyaaDLmivk6yan+cYg2pYGJ07iMQ+zlalqDdO6FnGmne89O59BFJ6+NHwZUNE g5eMxBIvs5tUcQ47W/CBR+eSti4wy0qwqvWJ/IYApHsZDq+ZywYic5exD6ND0geU AccgIgVFIS3OLSbap+gULevKFtWG6bYJWpWsC41BETKBZykhGtOiFnUslFBQpz4z B1yW7McYoW/nSfQehPoB868r7oBACNbEPUC7jbKU8xR6MAvEhfEanZaA9P9TmrzY HUaLd7OA9q5tRDTt0d0v+heEHjjCo5uHLwkSGKP+axmoWMRCQlY4PZ8eCx1RtejE u6KE/XkyKLeQPThnZXUDIPd74QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKzYFwuc SFahc31rRjaqZRZjGzGpMB8GA1UdIwQYMBaAFHwaD0jqQyMfozQ9WSgh7yno0rMb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OThBRC83MEVGQjRBQ0ZF MkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4LWpORDFaS0NIdktlalNz eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZCb1BTT3BESXgtak5EMVpLQ0h2S2VqU3N4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OThBRC83MEVGQjRBQ0ZFMkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4 LWpORDFaS0NIdktlalNzeHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ7gJOdOWIndkbDiZRI3qtXydyL3RY/Zvtc9nDwo3uLvvz1ioqbqgkAKA6ogh ufMXsYIrIEDO5wMZe1E3/9mR3IybLsTZkHCHRORyX0VdMmuut4qkz/jVinorfMQo Av0pL/Wxdo+v+XMEqpdP7CIiqGJs+QkNH1w10eHaO2hu0Cdj9jQXEO71vNuIkvaT yCU69mXp/4iCaP4Rld7Xs9oRsNNYzCAYNd/7NiM2Ykx047tV8Fo5ySMDs1qUdEnV MbuAF0paXszDEEJdu+XcuoRZA2VGttnn6LOqBnSLLpiff4bMMi3yX0fEwyd1JA4M D2PWHfR32bzUCBxtLKodM7iBww== -----END CERTIFICATE-----Generated at Thu Mar 26 13:51:36 2026 by rpki-client