$ rpki-client -vvf rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft File: fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft (raw, json) Hash identifier: EcxTndiQo2C9id8kLVTjBV5triPYcieGl9eg6OUdd1U= Subject key identifier: 7E:71:BF:87:99:2E:38:63:13:9F:40:78:5A:79:5D:1D:40:DF:F3:25 Authority key identifier: 7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B Certificate issuer: /CN=A91C96A7/serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Certificate serial: 1066 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft Manifest number: 1057 Signing time: Tue 24 Mar 2026 17:17:21 +0000 Manifest this update: Tue 24 Mar 2026 17:17:21 +0000 Manifest next update: Tue 31 Mar 2026 17:17:21 +0000 Files and hashes: 1: fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl (hash: 8C0kGCZIMYQDat8c7PPiEA5wF423dcs4zChH304/PHs=) 2: 1BB9CAB6578011E99E80631AC4F9AE02.roa (hash: R10os2GVAU1pg56KEoXBll908hbE1lHWdHzq1cEqVa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4198 (0x1066) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C96A7, serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Validity Not Before: Mar 24 17:17:21 2026 GMT Not After : Mar 31 17:17:21 2026 GMT Subject: CN=69c2c721-72f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:36:e9:1c:30:25:ea:b6:fc:ff:75:17:9e:a2: a2:fd:8d:59:ab:49:0a:cb:da:63:19:7e:39:93:63: 91:43:24:4b:5f:cf:c8:5b:b3:1b:23:85:ec:0f:10: 94:ad:7f:ec:45:d8:5b:23:c4:af:2e:1c:0e:0a:7e: df:52:16:a6:91:5a:f3:56:4a:96:1c:3e:eb:78:84: 15:4c:4a:44:37:5c:20:79:dd:fc:44:a1:de:07:04: 8d:9e:6c:18:68:86:6d:a2:f8:75:ce:c2:10:3d:e5: c0:fa:fa:11:23:2c:a7:09:7b:18:0d:f7:c5:04:bf: 91:34:91:ec:09:d5:6e:f5:b5:7b:18:d5:d6:92:23: 29:ea:84:ad:0c:20:23:82:3e:42:a0:b3:9f:30:ed: ab:49:f4:b2:0d:0a:f3:a5:90:af:7a:1d:ab:e4:4e: ff:5c:df:a3:8b:fc:18:64:b0:41:09:ad:05:40:92: e5:e7:cd:03:6d:c1:95:31:2a:29:86:76:46:42:4f: a2:a1:47:42:48:c8:7c:40:b9:07:ca:f6:1e:d8:57: 2f:2a:15:7d:7d:e1:e9:18:6c:f6:b5:a9:58:ad:b3: 92:2f:e8:a9:54:5d:1d:3d:1b:9d:8f:6f:2c:93:49: f3:68:ed:0e:07:20:b7:6a:c5:b4:74:87:81:12:b6: 7d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:71:BF:87:99:2E:38:63:13:9F:40:78:5A:79:5D:1D:40:DF:F3:25 X509v3 Authority Key Identifier: keyid:7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c0:fe:d8:4d:74:fa:a3:4b:19:a4:4b:95:0d:97:2c:c2:8b: eb:a7:ef:b7:07:6a:b5:b8:72:ea:ea:36:24:ef:27:9f:a8:92: 19:4a:03:8f:b2:ad:9f:e2:35:e0:2f:e8:28:88:5f:bf:89:80: dc:05:04:2b:3f:15:7b:b8:37:c3:b5:08:4d:41:43:df:56:55: 71:2a:e6:4e:67:4b:ae:cd:2a:29:01:14:f6:a8:06:37:9c:13: 68:c3:7e:8e:d9:b4:06:37:55:2f:ef:c3:e3:94:94:91:30:fd: e3:dc:1d:c2:f2:44:eb:a8:1b:9e:f7:d8:b5:da:23:97:bd:e1: 8e:29:ed:7a:83:3a:86:7d:1a:a2:52:a4:64:9d:60:d1:f6:ca: ad:34:5a:a4:01:c2:38:f1:9e:30:cd:a8:0f:99:59:77:f7:6d: 46:6a:6d:63:69:c0:32:0d:1e:be:bd:12:0d:7f:6f:8c:3b:05: d2:6f:c5:61:ca:87:1d:69:1c:f2:e2:9a:9e:20:41:33:52:cf: 89:42:57:6a:47:f0:66:97:6d:2d:50:59:ce:43:54:f4:b3:c1: 02:f3:79:8e:50:6e:97:5d:bc:b3:43:0d:44:6d:1e:25:6f:e0: b0:00:00:e1:a3:b9:f7:6f:67:ff:82:78:01:cf:70:ce:4e:31: 10:5b:f4:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2QTcxMTAvBgNVBAUTKDdEQzU2ODkzREEzNTQ4M0ZEOTA5NERGMDM1MDRERTIx N0I2RTNCM0IwHhcNMjYwMzI0MTcxNzIxWhcNMjYwMzMxMTcxNzIxWjAYMRYwFAYD VQQDEw02OWMyYzcyMS03MmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDbpHDAl6rb8/3UXnqKi/Y1Zq0kKy9pjGX45k2ORQyRLX8/IW7MbI4XsDxCU rX/sRdhbI8SvLhwOCn7fUhamkVrzVkqWHD7reIQVTEpEN1wged38RKHeBwSNnmwY aIZtovh1zsIQPeXA+voRIyynCXsYDffFBL+RNJHsCdVu9bV7GNXWkiMp6oStDCAj gj5CoLOfMO2rSfSyDQrzpZCveh2r5E7/XN+ji/wYZLBBCa0FQJLl580DbcGVMSop hnZGQk+ioUdCSMh8QLkHyvYe2FcvKhV9feHpGGz2talYrbOSL+ipVF0dPRudj28s k0nzaO0OByC3asW0dIeBErZ9uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH5xv4eZ LjhjE59AeFp5XR1A3/MlMB8GA1UdIwQYMBaAFH3FaJPaNUg/2QlN8DUE3iF7bjs7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTZBNy8yNkU3NDk5NjU3 N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNEX1pDVTN3TlFUZUlYdHVP enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjVm9rOW8xU0RfWkNVM3dOUVRlSVh0dU96cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTZBNy8yNkU3NDk5NjU3N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNE X1pDVTN3TlFUZUlYdHVPenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO8D+2E10+qNLGaRLlQ2XLMKL66fvtwdqtbhy6uo2JO8nn6iSGUoDj7Ktn+I1 4C/oKIhfv4mA3AUEKz8Ve7g3w7UITUFD31ZVcSrmTmdLrs0qKQEU9qgGN5wTaMN+ jtm0BjdVL+/D45SUkTD949wdwvJE66gbnvfYtdojl73hjinteoM6hn0aolKkZJ1g 0fbKrTRapAHCOPGeMM2oD5lZd/dtRmptY2nAMg0evr0SDX9vjDsF0m/FYcqHHWkc 8uKaniBBM1LPiUJXakfwZpdtLVBZzkNU9LPBAvN5jlBul128s0MNRG0eJW/gsAAA 4aO5929n/4J4Ac9wzk4xEFv0xw== -----END CERTIFICATE-----Generated at Thu Mar 26 13:00:17 2026 by rpki-client