$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft File: FKbKvDAuwePc503pi_VYoEK-rFY.mft (raw, json) Hash identifier: rHadM6gNvmp3w9mxvJoopvsvoAwssGHLd1qqNHRwzBY= Subject key identifier: D6:49:D4:6A:D8:D7:86:82:EC:B1:6E:96:3B:53:50:96:3A:A1:5C:ED Authority key identifier: 14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56 Certificate issuer: /CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56 Certificate serial: 0906 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft Manifest number: 15BA Signing time: Sat 04 Apr 2026 18:12:32 +0000 Manifest this update: Sat 04 Apr 2026 18:12:31 +0000 Manifest next update: Sat 11 Apr 2026 18:12:31 +0000 Files and hashes: 1: FKbKvDAuwePc503pi_VYoEK-rFY.crl (hash: Bq3IEFWpuPCGLuTXUKXC4sxEHNXqGtaZi4hH0x61S+I=) 2: DB78B2684BCD11EE8F976B7EC4F9AE02.roa (hash: h0iyfxPuSc/36ldot8gGmUE+Lcy/qPDMQIsY5pWRses=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2310 (0x906) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91409DC, serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56 Validity Not Before: Apr 4 18:12:31 2026 GMT Not After : Apr 11 18:12:31 2026 GMT Subject: CN=69d15490-3ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:40:68:71:04:34:f0:5d:a3:0a:d2:48:b3:d0: 76:de:b5:60:e3:89:2d:ed:ac:cd:57:56:f9:96:7e: 6b:08:0c:25:10:76:e2:37:33:1f:a3:dd:fd:0b:67: 56:7a:74:14:1a:7a:11:0c:30:ae:c4:c7:b5:09:c9: e4:38:04:85:c4:9d:77:00:a7:c0:6b:25:4b:02:ea: a2:63:92:cd:59:9d:aa:22:ad:0f:c8:e2:2e:2e:13: 2a:d4:19:c1:2e:2e:bb:7f:da:16:3f:43:76:53:bf: 4a:f0:4d:66:7d:af:43:39:ed:55:55:99:6a:52:05: 1f:d4:6a:e1:bb:e5:22:72:ae:8f:ec:6c:e7:7a:ea: 85:7c:8c:2f:99:a7:f9:d4:c4:b6:d7:2b:cb:cb:26: 25:8c:fa:58:15:ce:a1:f9:3c:00:7c:df:6c:e0:24: 1a:e8:84:86:ce:23:4c:26:28:1a:af:64:4f:08:b0: fe:f2:ae:d7:f0:26:74:d6:8b:a4:6d:5a:df:f6:48: 9a:08:f4:e8:2f:ac:5d:3b:4f:1b:f4:52:78:73:90: fc:f7:a2:b2:83:ca:70:36:d3:5b:9a:f0:47:a6:49: 12:f3:29:aa:4c:c6:1a:e3:f1:c1:c1:fb:f1:85:19: 01:03:34:a8:9b:0f:f7:c5:10:b8:a3:3a:9a:a8:66: d7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:49:D4:6A:D8:D7:86:82:EC:B1:6E:96:3B:53:50:96:3A:A1:5C:ED X509v3 Authority Key Identifier: keyid:14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:24:9f:0a:b9:9b:cc:d1:d8:21:30:ae:35:6d:c4:90:9a:9f: 05:90:2d:37:d1:dc:ee:2e:34:9b:1d:a5:1b:7d:cf:71:f4:79: 84:31:ee:6e:03:26:dd:e9:3f:7c:e9:d9:14:5b:82:7c:0d:72: 6f:82:55:84:3b:10:db:2a:9b:46:b3:af:84:b7:af:b3:be:1b: 13:30:de:a7:8e:55:3a:5b:06:89:a6:c2:e4:1b:62:6d:33:cf: 23:07:54:9c:e7:29:ca:c9:a2:c5:99:85:aa:fd:08:ae:2e:99: dc:5e:04:c4:f5:66:e1:37:0c:2f:c1:42:dc:8c:04:32:66:da: 21:62:0c:ba:ce:fd:5f:7f:cd:24:9a:37:5e:c5:b3:26:d7:75: 15:b9:63:24:e7:85:2c:dc:6e:4e:b0:b0:4c:6b:7f:1c:df:fd: aa:26:90:f8:22:1a:80:83:e7:40:57:69:fc:b5:fb:65:71:2d: 88:62:e2:33:44:d8:f0:84:49:69:ae:45:24:6e:37:0e:a6:af: 65:bc:cb:1c:e1:68:77:9a:56:f1:24:db:ea:1b:63:fa:db:d9: f3:72:c2:d3:f1:7c:fe:16:4b:74:36:9f:6f:d4:7d:65:58:5a: 41:1f:e0:4a:e6:f6:48:2a:c5:16:10:9d:41:1c:0f:dc:29:d0: 24:93:c2:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA5REMxMTAvBgNVBAUTKDE0QTZDQUJDMzAyRUMxRTNEQ0U3NERFOThCRjU1OEEw NDJCRUFDNTYwHhcNMjYwNDA0MTgxMjMxWhcNMjYwNDExMTgxMjMxWjAYMRYwFAYD VQQDEw02OWQxNTQ5MC0zZWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30BocQQ08F2jCtJIs9B23rVg44kt7azNV1b5ln5rCAwlEHbiNzMfo939C2dW enQUGnoRDDCuxMe1CcnkOASFxJ13AKfAayVLAuqiY5LNWZ2qIq0PyOIuLhMq1BnB Li67f9oWP0N2U79K8E1mfa9DOe1VVZlqUgUf1Grhu+Uicq6P7GzneuqFfIwvmaf5 1MS21yvLyyYljPpYFc6h+TwAfN9s4CQa6ISGziNMJigar2RPCLD+8q7X8CZ01ouk bVrf9kiaCPToL6xdO08b9FJ4c5D896Kyg8pwNtNbmvBHpkkS8ymqTMYa4/HBwfvx hRkBAzSomw/3xRC4ozqaqGbXZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNZJ1GrY 14aC7LFuljtTUJY6oVztMB8GA1UdIwQYMBaAFBSmyrwwLsHj3OdN6Yv1WKBCvqxW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5 MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdlUGM1MDNwaV9WWW9FSy1y RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZLYkt2REF1d2VQYzUwM3BpX1ZZb0VLLXJGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdl UGM1MDNwaV9WWW9FSy1yRlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAViSfCrmbzNHYITCuNW3EkJqfBZAtN9Hc7i40mx2lG33PcfR5hDHubgMm3ek/ fOnZFFuCfA1yb4JVhDsQ2yqbRrOvhLevs74bEzDep45VOlsGiabC5BtibTPPIwdU nOcpysmixZmFqv0Iri6Z3F4ExPVm4TcML8FC3IwEMmbaIWIMus79X3/NJJo3XsWz Jtd1FbljJOeFLNxuTrCwTGt/HN/9qiaQ+CIagIPnQFdp/LX7ZXEtiGLiM0TY8IRJ aa5FJG43DqavZbzLHOFod5pW8STb6htj+tvZ83LC0/F8/hZLdDafb9R9ZVhaQR/g Sub2SCrFFhCdQRwP3CnQJJPCmQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:42:58 2026 by rpki-client