$ rpki-client -vvf rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft File: FF-_nuMXN-kcPNSE7AFq48jzgDw.mft (raw, json) Hash identifier: yeDNFNaYrDDfxGUm15ZAQ5ivHuwu/9A7KP0HQU0U5Co= Subject key identifier: DC:38:28:BB:00:A5:A0:78:DB:14:53:0E:B4:38:98:EB:00:85:28:42 Authority key identifier: 14:5F:BF:9E:E3:17:37:E9:1C:3C:D4:84:EC:01:6A:E3:C8:F3:80:3C Certificate issuer: /CN=A91B978D/serialNumber=145FBF9EE31737E91C3CD484EC016AE3C8F3803C Certificate serial: 034C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft Manifest number: 0345 Signing time: Wed 25 Mar 2026 00:38:04 +0000 Manifest this update: Wed 25 Mar 2026 00:38:03 +0000 Manifest next update: Wed 01 Apr 2026 00:38:03 +0000 Files and hashes: 1: FF-_nuMXN-kcPNSE7AFq48jzgDw.crl (hash: lWuhId42cn3C0el+GI1ymxP+Ej6dtZRj+L1gDzZlyq4=) 2: D5D64BB0FB6811EC863B8150C4F9AE02.roa (hash: QRtlstVkdBXEszVrg/iIFuaNaUBnHazamE53eJaDdno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.crl rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 844 (0x34c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B978D, serialNumber=145FBF9EE31737E91C3CD484EC016AE3C8F3803C Validity Not Before: Mar 25 00:38:03 2026 GMT Not After : Apr 1 00:38:03 2026 GMT Subject: CN=69c32e6b-cd4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:90:26:c0:ad:52:6d:14:00:6e:f6:7b:7c:1d: fd:3b:95:22:29:92:e7:6a:01:4e:92:0d:fa:4b:9f: ff:3e:a4:09:27:ef:5e:d4:dd:65:f0:6b:90:df:2d: 24:35:c9:f8:6c:35:8c:b5:2d:2b:4e:48:f7:c7:ad: aa:f2:84:5d:c3:d5:ec:0e:5f:f9:4a:ba:ad:75:2f: 61:69:0d:1f:05:79:5e:9d:1e:c0:34:97:9e:67:c8: e7:d5:ff:e8:1e:44:7d:05:61:22:46:a8:ca:5c:b0: 65:f2:5f:8d:ca:1b:b5:e9:e7:8f:02:e4:0f:a9:23: d2:af:3a:85:9d:cb:73:0c:07:8d:bb:b4:ab:0c:82: 0c:35:97:7e:cf:88:5d:29:d8:25:5a:16:90:98:9a: 2e:82:e3:bd:5b:dd:78:9c:8e:7e:ee:6b:5d:d3:96: c7:d4:24:22:0f:a7:54:f7:9e:a8:36:20:df:b5:cb: 89:87:28:6d:6b:81:1b:a0:93:36:b5:95:c1:f9:72: 9d:19:e5:b7:b5:0f:0d:bd:71:23:d0:bb:c3:ca:52: 00:a8:c7:f2:c0:9f:c4:07:48:84:f0:cb:1c:9b:ed: 9d:d3:8d:87:70:a0:cd:58:be:ab:5f:41:bc:0d:ee: 5b:5f:26:65:64:14:8c:c7:14:d4:eb:ec:93:98:ba: 47:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:38:28:BB:00:A5:A0:78:DB:14:53:0E:B4:38:98:EB:00:85:28:42 X509v3 Authority Key Identifier: keyid:14:5F:BF:9E:E3:17:37:E9:1C:3C:D4:84:EC:01:6A:E3:C8:F3:80:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:83:23:56:46:45:7c:03:32:19:64:fe:ac:16:44:50:e0:3f: 40:09:8c:8e:ae:1e:f1:89:b2:03:d0:75:1f:3c:ea:34:a7:c1: ec:09:81:dc:3e:ab:74:45:cd:04:90:9a:99:37:eb:bd:65:4b: b2:3a:91:c1:d9:af:4b:23:4c:33:d1:24:51:27:c1:91:df:cb: 5f:82:85:e4:29:47:3c:dd:04:96:4a:b0:53:e7:c5:1c:33:f5: a7:cc:58:65:78:d2:6b:e5:10:d5:d6:cd:d2:64:1f:c3:bc:ea: 04:35:09:1c:ae:a5:4f:a7:4e:b0:16:cb:fd:e2:a3:98:ce:29: 19:d7:ad:62:22:ed:e3:2c:4d:0e:04:6c:67:87:29:11:8f:e7: 71:43:17:13:8e:c0:9d:14:77:f0:6e:43:15:bd:ae:37:51:6e: 9c:d1:ea:cd:20:b0:28:57:1a:f9:51:f5:9c:5a:ad:6a:2f:a2: 64:5b:59:36:6f:88:1c:be:fc:9c:d9:55:d6:cc:cc:93:c0:f7: 90:83:80:5c:50:c0:8b:60:e9:f0:cf:75:4b:7f:b5:14:2f:ff: 15:6f:4b:56:9a:4d:6b:25:5c:a2:63:5c:b6:d4:0a:cb:8c:25: 8f:84:ed:f8:9f:da:02:e5:ce:8f:df:88:b4:e6:b3:c8:30:9e: 43:36:56:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk3OEQxMTAvBgNVBAUTKDE0NUZCRjlFRTMxNzM3RTkxQzNDRDQ4NEVDMDE2QUUz QzhGMzgwM0MwHhcNMjYwMzI1MDAzODAzWhcNMjYwNDAxMDAzODAzWjAYMRYwFAYD VQQDEw02OWMzMmU2Yi1jZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpAmwK1SbRQAbvZ7fB39O5UiKZLnagFOkg36S5//PqQJJ+9e1N1l8GuQ3y0k Ncn4bDWMtS0rTkj3x62q8oRdw9XsDl/5SrqtdS9haQ0fBXlenR7ANJeeZ8jn1f/o HkR9BWEiRqjKXLBl8l+Nyhu16eePAuQPqSPSrzqFnctzDAeNu7SrDIIMNZd+z4hd KdglWhaQmJouguO9W914nI5+7mtd05bH1CQiD6dU956oNiDftcuJhyhta4EboJM2 tZXB+XKdGeW3tQ8NvXEj0LvDylIAqMfywJ/EB0iE8Mscm+2d042HcKDNWL6rX0G8 De5bXyZlZBSMxxTU6+yTmLpHJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNw4KLsA paB42xRTDrQ4mOsAhShCMB8GA1UdIwQYMBaAFBRfv57jFzfpHDzUhOwBauPI84A8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTc4RC82N0I0NDgyOEZC NjYxMUVDQUJBMTAxNEZDNEY5QUUwMi9GRi1fbnVNWE4ta2NQTlNFN0FGcTQ4anpn RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZGLV9udU1YTi1rY1BOU0U3QUZxNDhqemdEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTc4RC82N0I0NDgyOEZCNjYxMUVDQUJBMTAxNEZDNEY5QUUwMi9GRi1fbnVNWE4t a2NQTlNFN0FGcTQ4anpnRHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZYMjVkZFfAMyGWT+rBZEUOA/QAmMjq4e8YmyA9B1HzzqNKfB7AmB3D6rdEXN BJCamTfrvWVLsjqRwdmvSyNMM9EkUSfBkd/LX4KF5ClHPN0ElkqwU+fFHDP1p8xY ZXjSa+UQ1dbN0mQfw7zqBDUJHK6lT6dOsBbL/eKjmM4pGdetYiLt4yxNDgRsZ4cp EY/ncUMXE47AnRR38G5DFb2uN1FunNHqzSCwKFca+VH1nFqtai+iZFtZNm+IHL78 nNlV1szMk8D3kIOAXFDAi2Dp8M91S3+1FC//FW9LVppNayVcomNcttQKy4wlj4Tt +J/aAuXOj9+ItOazyDCeQzZW0Q== -----END CERTIFICATE-----Generated at Thu Mar 26 00:52:00 2026 by rpki-client