$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft File: FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft (raw, json) Hash identifier: AKV8Jt46e6YagCb4TwBHO3rdaF9KIiVzamfqef2Y174= Subject key identifier: D0:8A:E6:90:86:92:7E:62:E5:78:F9:37:40:60:33:00:69:49:94:31 Authority key identifier: 16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 Certificate issuer: /CN=A9188F77/serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft Manifest number: 0161 Signing time: Sun 05 Apr 2026 04:27:36 +0000 Manifest this update: Sun 05 Apr 2026 04:27:36 +0000 Manifest next update: Sun 12 Apr 2026 04:27:36 +0000 Files and hashes: 1: FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl (hash: GRTCu0e0Xsu8YBpR6y0qBwz+REhv2vtcVBPNLi6JJSU=) 2: 1501E24625F511EF8F342F3EC4F9AE02.roa (hash: cToJq782Wf6wX2fDAC0v0G/IJhWX3VFDQW8/8JM0qWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:27:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F77, serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Validity Not Before: Apr 5 04:27:36 2026 GMT Not After : Apr 12 04:27:36 2026 GMT Subject: CN=69d1e4b8-7b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ed:a6:1e:2c:d2:3c:15:5a:89:f5:2f:84:20: b3:51:70:4e:b7:bc:e6:be:13:38:44:a0:bb:4c:97: a9:11:bb:c2:15:6d:7c:e7:cd:dd:d2:fe:d9:a0:7e: d4:1c:17:27:79:a5:a7:1a:1b:1e:ad:60:6d:b2:eb: 16:44:4d:28:ed:46:08:d2:f7:23:e3:8b:06:86:00: 48:54:49:19:b2:81:8a:cc:2f:88:d0:12:4c:7a:11: cf:ae:da:b0:ef:dd:54:85:27:3d:0a:c1:dc:48:d8: fa:66:bb:58:85:c6:81:78:a2:20:6d:9d:e9:6b:61: 70:f9:45:c6:81:f0:71:9e:1c:e1:ee:d3:c9:b8:6e: 65:3e:2d:99:73:a3:fe:81:ac:5c:7d:07:11:ef:84: 0d:54:18:2f:de:ee:5a:d3:72:d0:36:40:c3:bd:8f: 10:76:a2:64:e1:d6:d8:8d:09:e7:6e:d8:88:d8:2f: b6:dc:67:09:d9:53:bb:fd:b0:0e:04:40:9c:4a:23: c6:42:7e:5e:c1:2d:f7:e3:ba:0b:72:cf:d6:78:39: 04:82:3d:59:3c:17:4d:6f:00:27:a9:c9:7a:70:74: 06:2e:81:a2:24:3e:aa:82:39:14:fd:1d:af:0f:e8: b9:ee:e8:2c:82:01:f1:ff:69:c1:f4:ed:46:ef:a7: bb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:8A:E6:90:86:92:7E:62:E5:78:F9:37:40:60:33:00:69:49:94:31 X509v3 Authority Key Identifier: keyid:16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:81:69:02:47:8e:4a:d7:12:7d:94:ae:14:f9:31:07:35:67: 03:c4:c4:d1:db:84:a1:95:96:fa:f9:a0:f7:7e:f9:ea:3e:30: e2:78:26:0e:e5:8a:50:77:72:0f:4b:2b:9e:89:90:84:c8:ce: a2:a4:4c:b8:32:7b:b8:d7:d6:96:07:5d:86:f3:82:b1:f6:13: 2d:f0:71:6f:14:73:49:cd:a4:24:16:ed:7a:17:63:77:ac:0d: f2:ff:8e:b2:4d:8c:2c:94:1c:2b:48:d2:f1:1e:5b:ca:46:a6: 31:55:7a:e1:9f:14:11:1f:68:d3:61:83:a2:a5:55:12:0f:75: 43:cd:35:3d:2d:07:cb:23:3f:06:47:ce:a8:b9:fd:e9:01:08: cb:32:63:d9:43:d3:74:65:6a:0a:dd:3b:e6:20:e9:b8:57:16: bc:f3:42:59:d3:4d:4f:7d:82:55:b6:b9:94:dc:66:70:a0:de: 55:09:1f:be:dc:1b:22:d9:5b:30:0a:47:35:8f:f5:2e:98:a1: 25:49:c8:61:3f:bb:01:dc:c2:66:7c:ba:3e:4d:4d:18:76:45: 16:3c:3f:79:11:cd:90:e7:1a:25:d3:41:c0:0e:a2:41:bf:19: df:33:3d:cd:88:8c:5b:1d:80:26:80:ee:03:3c:39:79:1c:a0: 38:8e:bf:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNzcxMTAvBgNVBAUTKDE2MzE1QTY4QTc0NTA4MEJEREI2QzhGMDE1NkQwNDMw Njg5MzFCNTcwHhcNMjYwNDA1MDQyNzM2WhcNMjYwNDEyMDQyNzM2WjAYMRYwFAYD VQQDEw02OWQxZTRiOC03YjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtu2mHizSPBVaifUvhCCzUXBOt7zmvhM4RKC7TJepEbvCFW18583d0v7ZoH7U HBcneaWnGhserWBtsusWRE0o7UYI0vcj44sGhgBIVEkZsoGKzC+I0BJMehHPrtqw 791UhSc9CsHcSNj6ZrtYhcaBeKIgbZ3pa2Fw+UXGgfBxnhzh7tPJuG5lPi2Zc6P+ gaxcfQcR74QNVBgv3u5a03LQNkDDvY8QdqJk4dbYjQnnbtiI2C+23GcJ2VO7/bAO BECcSiPGQn5ewS3347oLcs/WeDkEgj1ZPBdNbwAnqcl6cHQGLoGiJD6qgjkU/R2v D+i57ugsggHx/2nB9O1G76e7EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNCK5pCG kn5i5Xj5N0BgMwBpSZQxMB8GA1UdIwQYMBaAFBYxWminRQgL3bbI8BVtBDBokxtX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY3Ny9DRDI4NzM4MjI1 QzExMUVGOTAwOTdGNUFDNEY5QUUwMi9GakZhYUtkRkNBdmR0c2p3RlcwRU1HaVRH MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZqRmFhS2RGQ0F2ZHRzandGVzBFTUdpVEcxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY3Ny9DRDI4NzM4MjI1QzExMUVGOTAwOTdGNUFDNEY5QUUwMi9GakZhYUtkRkNB dmR0c2p3RlcwRU1HaVRHMWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOIFpAkeOStcSfZSuFPkxBzVnA8TE0duEoZWW+vmg93756j4w4ngmDuWKUHdy D0srnomQhMjOoqRMuDJ7uNfWlgddhvOCsfYTLfBxbxRzSc2kJBbtehdjd6wN8v+O sk2MLJQcK0jS8R5bykamMVV64Z8UER9o02GDoqVVEg91Q801PS0HyyM/BkfOqLn9 6QEIyzJj2UPTdGVqCt075iDpuFcWvPNCWdNNT32CVba5lNxmcKDeVQkfvtwbItlb MApHNY/1LpihJUnIYT+7AdzCZny6Pk1NGHZFFjw/eRHNkOcaJdNBwA6iQb8Z3zM9 zYiMWx2AJoDuAzw5eRygOI6/zQ== -----END CERTIFICATE-----Generated at Sun Apr 5 20:59:10 2026 by rpki-client