$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft File: FyPctBoEJopYeqzoz9na5fn1Hfc.mft (raw, json) Hash identifier: Q0XAXmTLUqX48HwmTczjp+916QEOgS0GaJtZuBMG69c= Subject key identifier: 73:09:45:B3:FE:DE:38:B4:A0:71:FF:89:0B:5D:F2:03:27:41:54:DD Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Certificate serial: 0853 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft Manifest number: 0822 Signing time: Sat 04 Apr 2026 20:53:50 +0000 Manifest this update: Sat 04 Apr 2026 20:53:49 +0000 Manifest next update: Sat 11 Apr 2026 20:53:49 +0000 Files and hashes: 1: FyPctBoEJopYeqzoz9na5fn1Hfc.crl (hash: HrCGGX+D63FVEo+uiakUDnIYFBVUv+FsTxFErCwTJyk=) 2: 26D56F6425FF11EBAF634966C4F9AE02.roa (hash: /kyIgZiBfNWT65KeLq4ju9c7Mhij++QBadeo1QUbPok=) 3: 8037BC50EB2E11EDB835EF4AC4F9AE02.roa (hash: f2nEio6eLUyv7yDtFiV3KwH4vS6At+iiNXP9RqT+g84=) 4: 68DAAA1A749711EFB4EDA45FC4F9AE02.roa (hash: jQKMgjpzfVC4yr89ThGiT9ygh+/rUur+KtBDxKUm250=) 5: 284E9E9E1D5611EB891ADC6CC4F9AE02.roa (hash: 0K9xo1NevqH2KRC8xQxUcHRpqfQKIdlyoCnPNU33oSE=) 6: 7AA7B416E01011EEA1CA127CC4F9AE02.roa (hash: b0lsSLqk839sfXbmjzCscLovBQK1FxU7wYdESQOxP2U=) 7: 2840D3A225FF11EBAF634966C4F9AE02.roa (hash: EtwqGb/CzlP64HTzen0hEAfqgQV3m0e0KLHXsR7RmN0=) 8: 3CD29BF4D46911EE8B36431CC4F9AE02.roa (hash: hJLGe+zYrwYxwpdQvFaS8hi/p8W1GhibzXeCk3G6BNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2131 (0x853) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Validity Not Before: Apr 4 20:53:49 2026 GMT Not After : Apr 11 20:53:49 2026 GMT Subject: CN=69d17a5e-521c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4c:ec:a0:48:6e:b7:32:76:d5:70:76:bc:cb: 9e:71:20:13:ab:59:ff:1f:a4:6e:00:ce:48:62:2f: 22:03:09:f0:78:67:52:fc:05:8e:7b:55:ac:f9:a0: 45:7a:2d:45:f0:21:19:b2:37:aa:57:7f:4e:06:11: 86:6f:42:07:5a:50:7f:97:4e:18:49:35:d1:b6:d4: 41:d9:46:e7:87:6c:ce:53:76:e2:c2:8a:ab:b3:e4: ec:10:ec:e7:d9:ea:18:7e:32:01:85:dd:c8:5e:f3: 0c:a9:c3:f6:98:3a:c7:de:04:53:1c:25:54:05:a7: 56:1b:72:37:7a:3b:67:a9:16:ac:9e:3b:bb:ce:f9: 35:4c:73:a3:24:6f:a0:e4:9d:4a:12:57:64:f8:2d: 16:bc:fa:06:a2:38:c5:b2:55:7e:5c:3a:7e:11:5b: e6:6b:b9:06:cd:8c:a6:4b:28:2a:48:65:aa:57:84: 31:a2:ba:d3:79:fb:18:e9:e6:ff:4b:12:6b:3b:7a: ee:44:cf:55:32:76:60:9d:e6:52:4d:d9:3a:76:70: 88:a4:09:fe:5e:ff:e8:46:c8:a5:88:59:74:c5:d3: a3:6e:3b:4a:7d:11:33:e5:a9:aa:1a:05:31:89:69: 8a:1e:a5:60:d3:46:04:22:92:35:01:d6:a8:a8:d2: 41:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:09:45:B3:FE:DE:38:B4:A0:71:FF:89:0B:5D:F2:03:27:41:54:DD X509v3 Authority Key Identifier: keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:74:60:43:b1:eb:68:d2:2f:97:22:29:4f:c6:00:fc:7f:cb: 23:be:2c:8f:b5:43:fc:75:f2:64:4c:9b:f4:f4:83:4c:9f:0c: a5:d5:94:1a:10:34:c6:76:5f:45:c8:10:3d:cc:cf:98:6b:1a: d7:64:92:94:89:89:47:71:b8:09:d6:38:4f:17:50:09:3f:12: 27:70:9c:f2:24:a9:2a:cf:0b:f3:c6:20:da:27:bf:13:80:82: 5c:d0:2d:bc:d4:a5:89:87:85:43:cc:5d:e0:3e:9b:35:bf:5a: 54:84:d7:3c:e0:99:24:f3:99:61:b9:e1:71:79:ca:a0:1f:d9: 7c:d1:3d:60:dc:6d:4b:32:ad:49:5c:e0:e3:f6:fa:c4:b8:09: 82:76:c7:2e:13:9d:52:5c:a1:a0:07:80:a8:98:7b:0e:8d:78: 85:df:e9:99:74:20:31:44:86:69:5f:d8:47:92:53:d1:df:e8: de:df:b1:82:17:ae:c4:00:81:5b:0d:aa:37:4c:25:9b:99:1e: 0b:06:74:8f:40:03:86:01:b2:58:4b:8c:70:99:b5:07:5d:6d: 6d:c2:67:c3:d5:95:e0:11:9d:12:b8:af:6b:34:49:7b:21:ec: cb:a0:f5:ee:13:e3:89:50:06:6d:6e:10:51:9f:84:6d:03:d2: 4d:16:fa:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlEQ0IxMTAvBgNVBAUTKDE3MjNEQ0I0MUEwNDI2OEE1ODdBQUNFOENGRDlEQUU1 RjlGNTFERjcwHhcNMjYwNDA0MjA1MzQ5WhcNMjYwNDExMjA1MzQ5WjAYMRYwFAYD VQQDEw02OWQxN2E1ZS01MjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukzsoEhutzJ21XB2vMuecSATq1n/H6RuAM5IYi8iAwnweGdS/AWOe1Ws+aBF ei1F8CEZsjeqV39OBhGGb0IHWlB/l04YSTXRttRB2Ubnh2zOU3biwoqrs+TsEOzn 2eoYfjIBhd3IXvMMqcP2mDrH3gRTHCVUBadWG3I3ejtnqRasnju7zvk1THOjJG+g 5J1KEldk+C0WvPoGojjFslV+XDp+EVvma7kGzYymSygqSGWqV4QxorrTefsY6eb/ SxJrO3ruRM9VMnZgneZSTdk6dnCIpAn+Xv/oRsiliFl0xdOjbjtKfREz5amqGgUx iWmKHqVg00YEIpI1AdaoqNJB9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHMJRbP+ 3ji0oHH/iQtd8gMnQVTdMB8GA1UdIwQYMBaAFBcj3LQaBCaKWHqs6M/Z2uX59R33 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOURDQi9FNEMwRjU2QzE4 N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpvcFllcXpvejluYTVmbjFI ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z5UGN0Qm9FSm9wWWVxem96OW5hNWZuMUhmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OURDQi9FNEMwRjU2QzE4N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpv cFllcXpvejluYTVmbjFIZmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWXRgQ7HraNIvlyIpT8YA/H/LI74sj7VD/HXyZEyb9PSDTJ8MpdWUGhA0xnZf RcgQPczPmGsa12SSlImJR3G4CdY4TxdQCT8SJ3Cc8iSpKs8L88Yg2ie/E4CCXNAt vNSliYeFQ8xd4D6bNb9aVITXPOCZJPOZYbnhcXnKoB/ZfNE9YNxtSzKtSVzg4/b6 xLgJgnbHLhOdUlyhoAeAqJh7Do14hd/pmXQgMUSGaV/YR5JT0d/o3t+xgheuxACB Ww2qN0wlm5keCwZ0j0ADhgGyWEuMcJm1B11tbcJnw9WV4BGdErivazRJeyHsy6D1 7hPjiVAGbW4QUZ+EbQPSTRb65w== -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:12 2026 by rpki-client