$ rpki-client -vvf rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft File: FDm85NeiKugDbOsu5uavGPIbtZM.mft (raw, json) Hash identifier: 7Sq1FWWS0NikEHnwW8b6zgD4C5TkJbAYzW8+2Wp2oKc= Subject key identifier: 8A:BA:5E:48:85:57:79:B6:5B:6E:11:D4:45:3F:F5:AF:62:05:7E:B7 Authority key identifier: 14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 Certificate issuer: /CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Certificate serial: 0442 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft Manifest number: 0430 Signing time: Wed 25 Mar 2026 00:00:06 +0000 Manifest this update: Wed 25 Mar 2026 00:00:06 +0000 Manifest next update: Wed 01 Apr 2026 00:00:06 +0000 Files and hashes: 1: FDm85NeiKugDbOsu5uavGPIbtZM.crl (hash: 7zRNvreLqZXTtdqxr3obqxfhdIWsPAKSP/VDvoSzu+s=) 2: CD22C9C8DC0D11ECA064B94CC4F9AE02.roa (hash: KrGSfeFezfMBfirneaLIWiJ6P58/fqAvRIXr1XydAtM=) 3: F8071E24DC1111EC80AE816DC4F9AE02.roa (hash: diQEJwaRZGmvk+KKJJNr2sqtXhHrrXlc+8yBz+g5Wd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1090 (0x442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F57D9, serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Validity Not Before: Mar 25 00:00:06 2026 GMT Not After : Apr 1 00:00:06 2026 GMT Subject: CN=69c32586-1803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:0a:44:58:cf:66:62:e9:dd:24:24:93:88:53: d5:15:e4:e2:1a:44:a1:e8:3c:94:f0:b4:8d:66:f8: 2d:7f:20:84:66:3d:4d:4f:c4:b1:d5:e0:c3:d7:31: d3:02:34:8c:f2:d3:97:02:54:22:28:0b:1c:a8:ce: eb:e9:b7:f0:30:72:8c:d6:5f:26:54:7f:e2:b1:4a: 49:12:92:b7:87:df:27:1c:e7:cf:e1:86:7a:ec:78: 2b:a7:fa:d4:27:db:f1:56:44:91:ca:d1:db:57:da: c4:43:c7:98:25:fb:72:b6:34:58:2a:8e:7b:3d:02: e5:dd:13:ee:0a:e8:85:0c:ae:f8:d7:31:59:63:d0: c9:ff:37:9b:41:74:b2:13:03:65:bb:35:3f:1d:48: 50:d5:d9:39:f5:b5:32:22:47:6f:70:18:98:0b:cf: 6a:42:8f:7d:3f:da:fb:c9:7d:1d:ab:37:8e:f6:07: 4b:a9:53:6e:63:b7:e4:54:31:5c:03:31:d9:a2:51: 96:ee:f5:52:65:46:ae:cc:6d:3d:7f:e1:01:5d:5e: be:85:cf:38:62:a3:a8:4e:b4:df:d5:9c:e8:5b:e6: 44:18:dc:79:9c:3e:76:eb:ca:15:8b:b4:f3:52:0c: 95:22:c3:01:00:1d:7e:3c:9f:81:b7:1d:f5:9d:89: 10:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BA:5E:48:85:57:79:B6:5B:6E:11:D4:45:3F:F5:AF:62:05:7E:B7 X509v3 Authority Key Identifier: keyid:14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:59:66:e9:54:ae:84:1f:e7:e0:a6:45:f9:f5:49:19:7a:7e: ae:19:6b:08:7f:32:c2:4e:61:ef:2e:e7:b9:f7:2c:a9:39:d6: d2:84:3b:58:85:f3:8a:bf:45:a9:ee:94:02:ff:1e:5b:e4:4b: f0:fb:54:d3:58:d5:94:29:3c:82:82:e9:4f:35:48:9a:a9:ef: 55:88:1b:82:66:e8:3d:46:2e:de:a7:94:02:99:73:6c:27:43: 9d:22:8d:60:09:ef:00:15:e0:8c:0b:80:37:0a:d1:66:c1:65: a9:7c:16:a1:ab:2c:93:93:0e:e7:37:00:55:03:96:c9:56:e3: 21:32:c4:dc:b6:67:5a:cf:83:da:db:b4:28:7f:96:9d:40:6e: 48:18:9f:76:cd:ae:68:1b:30:2f:bc:8e:1d:7a:61:b7:d7:ff: b3:04:36:d4:f1:12:8b:1d:d4:a7:63:90:e5:ed:ba:1c:8c:0f: c3:45:6a:ca:6d:2c:05:28:57:66:e6:08:3a:35:d1:da:f3:47: a6:fe:6f:e9:57:75:77:82:b5:07:ab:97:d1:fb:27:fa:07:be: b6:55:d4:4a:2b:14:00:e1:dd:97:34:38:ad:1f:2e:ce:bd:05: 5b:d7:24:85:60:ac:1f:d3:0a:91:e9:de:75:a6:50:1f:8f:66: 29:78:ce:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3RDkxMTAvBgNVBAUTKDE0MzlCQ0U0RDdBMjJBRTgwMzZDRUIyRUU2RTZBRjE4 RjIxQkI1OTMwHhcNMjYwMzI1MDAwMDA2WhcNMjYwNDAxMDAwMDA2WjAYMRYwFAYD VQQDEw02OWMzMjU4Ni0xODAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8gpEWM9mYundJCSTiFPVFeTiGkSh6DyU8LSNZvgtfyCEZj1NT8Sx1eDD1zHT AjSM8tOXAlQiKAscqM7r6bfwMHKM1l8mVH/isUpJEpK3h98nHOfP4YZ67Hgrp/rU J9vxVkSRytHbV9rEQ8eYJftytjRYKo57PQLl3RPuCuiFDK741zFZY9DJ/zebQXSy EwNluzU/HUhQ1dk59bUyIkdvcBiYC89qQo99P9r7yX0dqzeO9gdLqVNuY7fkVDFc AzHZolGW7vVSZUauzG09f+EBXV6+hc84YqOoTrTf1ZzoW+ZEGNx5nD5268oVi7Tz UgyVIsMBAB1+PJ+Btx31nYkQWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIq6XkiF V3m2W24R1EU/9a9iBX63MB8GA1UdIwQYMBaAFBQ5vOTXoiroA2zrLubmrxjyG7WT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTdEOS8wNzE3RTlFRTlG NUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1Z0RiT3N1NXVhdkdQSWJ0 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZEbTg1TmVpS3VnRGJPc3U1dWF2R1BJYnRaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTdEOS8wNzE3RTlFRTlGNUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1 Z0RiT3N1NXVhdkdQSWJ0Wk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUllm6VSuhB/n4KZF+fVJGXp+rhlrCH8ywk5h7y7nufcsqTnW0oQ7WIXzir9F qe6UAv8eW+RL8PtU01jVlCk8goLpTzVImqnvVYgbgmboPUYu3qeUAplzbCdDnSKN YAnvABXgjAuANwrRZsFlqXwWoassk5MO5zcAVQOWyVbjITLE3LZnWs+D2tu0KH+W nUBuSBifds2uaBswL7yOHXpht9f/swQ21PESix3Up2OQ5e26HIwPw0Vqym0sBShX ZuYIOjXR2vNHpv5v6Vd1d4K1B6uX0fsn+ge+tlXUSisUAOHdlzQ4rR8uzr0FW9ck hWCsH9MKkenedaZQH49mKXjOtw== -----END CERTIFICATE-----Generated at Thu Mar 26 13:27:28 2026 by rpki-client