$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft File: FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json) Hash identifier: h2LL3bxjYtnIK1Sofqj8y1fRp6bNUXGmG4Kiqd26bIc= Subject key identifier: 34:0D:BC:C0:86:1A:97:6E:5F:14:16:3A:66:37:FC:5F:11:A1:F6:8D Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Certificate serial: 0CD9 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft Manifest number: 0CC5 Signing time: Thu 26 Mar 2026 17:26:21 +0000 Manifest this update: Thu 26 Mar 2026 17:26:21 +0000 Manifest next update: Thu 02 Apr 2026 17:26:21 +0000 Files and hashes: 1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: IsqTWBGwuR6+2gkLKYab88U/36rgPlnfGcPCgmcoLDM=) 2: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: twJcU0dvcEBMbuiZq5Wi1cC3xSMhYlFvAN7WKpOcESs=) 3: DD004670C39711F0A241F86DC4F9AE02.roa (hash: ILb2f5MFl0hmYnyJlCFO6BUBR2uQox0knIxNniHNGBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3289 (0xcd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Validity Not Before: Mar 26 17:26:21 2026 GMT Not After : Apr 2 17:26:21 2026 GMT Subject: CN=69c56c3d-d520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d7:5e:26:74:5b:0a:2f:09:b7:50:6c:ac:d7: 41:76:94:59:78:35:7b:ee:ea:76:c7:76:44:f9:06: 5f:56:d6:42:74:54:7e:c1:a9:5b:0d:dc:dd:bb:fb: 55:09:02:70:b6:cc:3f:f5:c8:7b:27:8e:6f:d7:78: ff:7a:51:71:a9:18:08:e9:88:50:e4:f7:42:4d:f9: 64:56:dc:9d:76:79:2c:21:09:c4:8f:03:d8:0b:67: fe:cc:b9:3f:b7:35:6d:31:87:a5:ba:ac:92:1f:30: b8:3e:be:ea:31:b9:79:8c:39:5a:a7:4f:c8:b1:42: d3:7a:00:6c:c8:a7:0d:96:1a:20:18:25:a4:9d:f1: 3b:56:07:c7:03:df:84:48:30:80:4c:79:d2:02:20: d5:31:fc:6b:1e:47:83:6b:fb:c4:1a:d5:3c:6c:55: a3:29:e6:a8:82:63:ac:af:7b:7b:e7:90:39:32:b7: 5e:d7:b5:59:14:6e:85:dc:83:43:ec:fd:3a:3b:0b: a8:51:b9:ef:22:c0:67:5c:93:29:92:4f:13:ad:e8: 21:b9:b0:27:f8:67:b9:d2:72:a5:b0:f5:d8:c5:65: d9:9a:2e:fd:99:41:04:9f:91:c9:ff:ae:16:ff:f6: 33:c2:02:18:d5:b3:da:78:76:15:e2:b6:16:af:e1: d4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0D:BC:C0:86:1A:97:6E:5F:14:16:3A:66:37:FC:5F:11:A1:F6:8D X509v3 Authority Key Identifier: keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:70:84:ce:09:ee:0d:0d:28:df:25:0b:73:a4:8f:35:48:36: 79:9b:6b:c0:ac:ce:93:41:89:2d:d7:62:81:89:5b:f9:64:3f: 29:c8:3d:ee:16:1c:e3:09:b3:ed:61:87:6b:e1:f7:12:f9:d4: 7e:6c:3b:7b:e2:7a:cf:e7:c1:08:1a:32:b5:ff:03:46:78:03: b1:23:2e:91:a0:c9:2f:68:ae:44:20:7d:bd:72:4a:f2:1b:1a: a6:4b:84:af:0b:e1:96:66:3d:81:70:27:d9:1e:43:1a:dd:3c: 1d:39:ab:ba:0a:6d:b1:8f:b8:b9:5b:70:02:58:1f:73:50:ab: 4f:6c:52:cd:d8:3b:be:93:0b:89:e8:5e:57:cd:8e:54:57:3e: fb:12:82:00:0f:fb:ea:88:4b:44:03:fe:4f:db:93:4e:97:82: 07:00:04:b7:b1:53:1c:d0:f5:96:02:ef:32:b7:36:89:6d:ac: e5:08:8b:31:dd:ee:22:1b:d9:4b:50:59:4d:6b:8d:cb:2e:8b: d9:bc:a9:d1:3b:0f:2a:22:89:88:d1:66:39:51:81:83:98:f1: a8:5d:ce:6a:15:60:e9:b1:ab:13:96:d9:ed:7e:de:c4:38:91: 1f:9b:98:8b:87:b1:6e:0e:16:a3:2d:f4:13:77:36:99:5c:39: 8a:8a:3f:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKDE2MzMxNjc2MjExQUVFNjc3MzQ4NUI2NTIzM0M2MkMz QTQ1ODdBRkQwHhcNMjYwMzI2MTcyNjIxWhcNMjYwNDAyMTcyNjIxWjAYMRYwFAYD VQQDEw02OWM1NmMzZC1kNTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9deJnRbCi8Jt1BsrNdBdpRZeDV77up2x3ZE+QZfVtZCdFR+walbDdzdu/tV CQJwtsw/9ch7J45v13j/elFxqRgI6YhQ5PdCTflkVtyddnksIQnEjwPYC2f+zLk/ tzVtMYeluqySHzC4Pr7qMbl5jDlap0/IsULTegBsyKcNlhogGCWknfE7VgfHA9+E SDCATHnSAiDVMfxrHkeDa/vEGtU8bFWjKeaogmOsr3t755A5Mrde17VZFG6F3IND 7P06OwuoUbnvIsBnXJMpkk8TreghubAn+Ge50nKlsPXYxWXZmi79mUEEn5HJ/64W //YzwgIY1bPaeHYV4rYWr+HUiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDQNvMCG GpduXxQWOmY3/F8RofaNMB8GA1UdIwQYMBaAFBYzFnYhGu5nc0hbZSM8YsOkWHr9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC84RDhGMEFCRTBC NUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdtZHpTRnRsSXp4aXc2Ulll djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0ZqTVdkaUVhN21kelNGdGxJenhpdzZSWWV2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC84RDhGMEFCRTBCNUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdt ZHpTRnRsSXp4aXc2UllldjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUHCEzgnuDQ0o3yULc6SPNUg2eZtrwKzOk0GJLddigYlb+WQ/Kcg97hYc4wmz 7WGHa+H3EvnUfmw7e+J6z+fBCBoytf8DRngDsSMukaDJL2iuRCB9vXJK8hsapkuE rwvhlmY9gXAn2R5DGt08HTmrugptsY+4uVtwAlgfc1CrT2xSzdg7vpMLieheV82O VFc++xKCAA/76ohLRAP+T9uTTpeCBwAEt7FTHND1lgLvMrc2iW2s5QiLMd3uIhvZ S1BZTWuNyy6L2byp0TsPKiKJiNFmOVGBg5jxqF3OahVg6bGrE5bZ7X7exDiRH5uY i4exbg4Woy30E3c2mVw5ioo/CQ== -----END CERTIFICATE-----Generated at Thu Mar 26 23:43:52 2026 by rpki-client