$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft File: F4SvaM922Ze5n3dAY3gNspm1SpM.mft (raw, json) Hash identifier: mpyIncF3YA4XjbdAxpUJu5MlsqFKNxae1tEV3ZkQcMY= Subject key identifier: 5E:0B:9D:91:8E:7B:6E:BD:75:1B:EE:FA:B6:71:8B:EF:3B:B9:09:20 Authority key identifier: 17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93 Certificate issuer: /CN=A91EC3C9/serialNumber=1784AF68CF76D997B99F774063780DB299B54A93 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft Manifest number: A2 Signing time: Wed 25 Mar 2026 06:30:43 +0000 Manifest this update: Wed 25 Mar 2026 06:30:43 +0000 Manifest next update: Wed 01 Apr 2026 06:30:43 +0000 Files and hashes: 1: F4SvaM922Ze5n3dAY3gNspm1SpM.crl (hash: Dq0S40Xq0mG6iyvDv+kLY7dj3HkPQ2HgbHsPoBNYXPQ=) 2: 00DDE7DA3AD311F09AB8AF3EC4F9AE02.roa (hash: VbbAYRDB1MrB+OHsle6cq0lEvb0Mg7dou4jfOd/d1WA=) 3: 7B6FCB36340B11F0B358096BC4F9AE02.roa (hash: 9rHElgQGkin/9e3Db5VLV3ihFuBVV27/iuFOrelwuPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:30:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3C9, serialNumber=1784AF68CF76D997B99F774063780DB299B54A93 Validity Not Before: Mar 25 06:30:43 2026 GMT Not After : Apr 1 06:30:43 2026 GMT Subject: CN=69c38113-63d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:65:f5:6c:0a:79:81:bd:f9:39:43:74:ce:e9: f2:cb:91:61:6c:64:37:40:d0:bd:63:9b:78:49:65: 67:97:77:c9:21:54:8b:72:54:90:4a:65:e3:45:5b: 91:06:f0:81:cd:1e:9c:f4:2c:70:53:77:41:c4:0f: 17:a8:3e:a3:56:85:c8:53:24:a6:ea:d8:95:67:15: b1:67:15:e4:7c:01:4c:56:2d:c0:17:b1:29:88:fe: 6d:3b:79:10:b9:89:c2:1d:bc:26:8d:c2:8c:5f:03: a6:be:20:e3:1c:f0:c0:67:80:ed:a5:c3:86:e6:8c: 21:44:08:ab:29:e5:32:d9:c5:16:fe:50:5d:3c:29: 01:4f:cf:91:a4:69:0f:e4:9d:ef:a6:a6:80:0a:f1: ce:94:c7:f3:ce:ea:6a:f2:53:a0:81:70:5d:84:49: 5b:0c:88:2c:31:d6:8d:75:fd:b4:63:34:72:ab:1b: 65:b0:f4:f4:cf:10:fa:f8:82:7b:7f:ac:fe:4b:4e: 35:de:4d:50:50:c0:f1:34:32:56:08:83:8f:65:59: 30:fc:48:91:11:1c:e2:43:d0:0c:47:35:da:ad:6d: fd:98:bf:55:d1:a3:df:64:1a:07:28:e5:ac:ce:bb: b2:cf:07:f3:45:f2:f3:6b:8f:22:71:9b:fd:df:d0: 01:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:0B:9D:91:8E:7B:6E:BD:75:1B:EE:FA:B6:71:8B:EF:3B:B9:09:20 X509v3 Authority Key Identifier: keyid:17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:7a:40:97:b3:a8:e2:d5:28:f5:34:46:bc:36:33:97:d6:d7: 33:b0:56:5f:b0:2d:ae:69:43:a3:aa:d8:23:06:7e:8b:78:c8: 0d:e7:34:c6:4d:2e:7a:28:75:e3:83:f3:cf:0d:a2:9b:de:dc: ed:40:2a:93:3c:c9:f8:5b:98:81:1e:2b:28:39:37:c1:fd:9e: 33:3b:1b:cf:4e:8f:42:44:8b:55:21:4d:97:a7:63:f7:4c:a6: 0a:0e:25:58:f3:9e:2c:b5:ed:57:a1:7e:ca:1b:0f:9a:38:b3: 46:0c:a9:32:41:9f:ae:d5:23:31:c8:b7:51:51:52:ca:26:c2: ef:7b:ab:32:7c:9d:dc:a8:cc:5e:07:f1:5e:88:00:a5:bc:5f: a5:46:ce:70:e1:bf:03:1f:c8:25:a5:1e:63:43:92:14:30:88: 0a:10:3c:eb:68:b0:6a:e3:c3:2b:ef:3e:0b:4b:e6:70:f5:73: 73:9c:0f:a5:24:03:a3:ef:83:f7:a2:2c:a5:c5:c2:ee:03:f7: 0c:91:db:a7:40:df:d5:41:16:91:74:76:7c:63:14:79:bb:76: 1b:30:23:e7:58:ee:f3:d3:79:6d:4a:4c:7e:3a:e8:ca:96:c9: fc:9b:62:96:c2:2b:08:8d:4e:63:a4:29:fc:3d:21:25:fd:7f: 41:44:e5:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQzkxMTAvBgNVBAUTKDE3ODRBRjY4Q0Y3NkQ5OTdCOTlGNzc0MDYzNzgwREIy OTlCNTRBOTMwHhcNMjYwMzI1MDYzMDQzWhcNMjYwNDAxMDYzMDQzWjAYMRYwFAYD VQQDEw02OWMzODExMy02M2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWX1bAp5gb35OUN0zunyy5FhbGQ3QNC9Y5t4SWVnl3fJIVSLclSQSmXjRVuR BvCBzR6c9CxwU3dBxA8XqD6jVoXIUySm6tiVZxWxZxXkfAFMVi3AF7EpiP5tO3kQ uYnCHbwmjcKMXwOmviDjHPDAZ4DtpcOG5owhRAirKeUy2cUW/lBdPCkBT8+RpGkP 5J3vpqaACvHOlMfzzupq8lOggXBdhElbDIgsMdaNdf20YzRyqxtlsPT0zxD6+IJ7 f6z+S0413k1QUMDxNDJWCIOPZVkw/EiRERziQ9AMRzXarW39mL9V0aPfZBoHKOWs zruyzwfzRfLza48icZv939ABKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF4LnZGO e269dRvu+rZxi+87uQkgMB8GA1UdIwQYMBaAFBeEr2jPdtmXuZ93QGN4DbKZtUqT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNDOS8xNEE3QjI2MjMz RkYxMUYwOThBQjhGMjBDNEY5QUUwMi9GNFN2YU05MjJaZTVuM2RBWTNnTnNwbTFT cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y0U3ZhTTkyMlplNW4zZEFZM2dOc3BtMVNwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNDOS8xNEE3QjI2MjMzRkYxMUYwOThBQjhGMjBDNEY5QUUwMi9GNFN2YU05MjJa ZTVuM2RBWTNnTnNwbTFTcE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARHpAl7Oo4tUo9TRGvDYzl9bXM7BWX7AtrmlDo6rYIwZ+i3jIDec0xk0ueih1 44Pzzw2im97c7UAqkzzJ+FuYgR4rKDk3wf2eMzsbz06PQkSLVSFNl6dj90ymCg4l WPOeLLXtV6F+yhsPmjizRgypMkGfrtUjMci3UVFSyibC73urMnyd3KjMXgfxXogA pbxfpUbOcOG/Ax/IJaUeY0OSFDCIChA862iwauPDK+8+C0vmcPVzc5wPpSQDo++D 96IspcXC7gP3DJHbp0Df1UEWkXR2fGMUebt2GzAj51ju89N5bUpMfjroypbJ/Jti lsIrCI1OY6Qp/D0hJf1/QUTlgg== -----END CERTIFICATE-----Generated at Thu Mar 26 15:41:21 2026 by rpki-client