$ rpki-client -vvf rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft File: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft (raw, json) Hash identifier: 60tc/Q5kBkLSkhSwwfoUp4hdrm/0NvHPv6fTUxAe7RA= Subject key identifier: B5:5F:E8:A2:E5:95:AB:99:C8:B0:06:F9:B8:57:1E:8E:48:43:62:01 Authority key identifier: 70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 Certificate issuer: /CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Certificate serial: 0D41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft Manifest number: 0D38 Signing time: Sat 04 Apr 2026 17:53:15 +0000 Manifest this update: Sat 04 Apr 2026 17:53:14 +0000 Manifest next update: Sat 11 Apr 2026 17:53:14 +0000 Files and hashes: 1: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl (hash: ax27yhmEr/CP7r2ONStRivV5Y2sBI0Otjutt7ubdmFA=) 2: 430E6130F4B011E99BB3425CC4F9AE02.roa (hash: FgkzVKONq3CKLOrwQ7vibERQJu7ifecHOE3C3Y19pHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3393 (0xd41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983E5, serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Validity Not Before: Apr 4 17:53:14 2026 GMT Not After : Apr 11 17:53:14 2026 GMT Subject: CN=69d1500b-c751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d5:6b:04:b6:77:82:48:a9:26:7f:0f:b7:9e: 77:d6:d0:a2:54:2a:f5:30:14:13:48:dd:ee:7d:49: 27:10:cd:2d:98:3c:68:10:96:82:31:b6:5b:1f:1c: 3f:8d:40:16:ab:20:b8:56:33:40:6b:68:e6:b3:3a: 7b:6e:1e:51:f3:bb:fe:5c:8a:d0:a1:09:12:67:a4: a7:50:6f:11:45:a7:e2:e5:93:2a:4a:16:b9:fc:3b: 0d:ab:76:f1:6f:f3:33:2f:73:96:94:55:7e:b6:c9: b3:07:0c:47:60:31:52:d4:87:c9:ed:c2:c6:b3:ff: de:3b:5b:ff:c0:f5:a1:fe:19:4c:13:07:98:55:04: 0f:43:4a:47:e2:ec:a9:2c:e0:8e:a1:fb:b2:f5:9e: 34:a3:8c:4a:ec:a5:0b:d3:6c:91:c0:49:5e:bf:41: 17:9b:43:8d:bb:b4:34:bc:e4:53:53:a0:ee:d5:79: 85:fc:43:82:63:91:51:8b:1f:bb:88:14:33:69:54: e3:a9:f0:9a:65:e0:fb:ab:c5:d1:cc:13:96:e1:71: 6f:08:d8:57:af:d8:78:74:6b:cb:91:fb:45:69:4c: 9f:8f:c3:e2:73:19:61:b7:62:17:95:dd:fd:57:51: df:98:64:7b:d0:22:1f:90:11:28:c1:04:3f:dc:5c: ae:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:5F:E8:A2:E5:95:AB:99:C8:B0:06:F9:B8:57:1E:8E:48:43:62:01 X509v3 Authority Key Identifier: keyid:70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:f2:74:64:8e:68:1c:89:ad:02:bc:f8:e8:6f:42:e9:08:95: 46:e8:47:75:47:c7:d2:25:27:37:65:00:e6:26:45:93:73:6f: 6a:64:82:0d:7f:17:ab:5b:ec:61:9b:e3:49:93:5e:ea:84:c1: 0f:68:63:bb:12:29:c4:8b:1b:d8:b1:95:d2:af:9f:cc:70:20: e9:9a:c6:ed:ba:b8:a6:b4:20:90:d5:9e:b0:7f:e6:fd:f8:ba: 83:77:d9:c2:47:a9:d3:e9:58:78:5d:1b:34:db:1a:65:76:17: 75:ad:3a:55:80:d1:e4:50:2c:e0:65:63:07:aa:1d:f4:1b:83: 16:35:39:fe:02:ee:07:c1:3f:90:b9:58:54:7b:ad:12:3a:64: 24:05:cd:33:5d:57:54:85:48:20:b3:4a:a2:58:db:3a:0b:ed: 64:d9:df:67:32:68:5a:f5:61:0a:c8:ff:99:82:23:1c:b2:8a: be:58:55:a1:24:36:03:0f:59:7c:fb:fa:09:f3:ea:6a:aa:1e: 5e:40:7f:05:67:63:48:8a:ce:4b:e9:f8:89:56:73:76:f2:a3: 4e:63:d1:2f:6a:38:c9:c7:74:47:94:f2:d7:86:8a:a1:94:8d: 85:4b:9d:31:c1:82:23:80:f5:88:bb:6b:1a:1a:ac:d3:a5:4e: cd:98:26:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzRTUxMTAvBgNVBAUTKDcwNTNGRjgxRkVDRjA1OUEzRThCRDcwRjg1RDY0OTQz RDExNEU1MzYwHhcNMjYwNDA0MTc1MzE0WhcNMjYwNDExMTc1MzE0WjAYMRYwFAYD VQQDEw02OWQxNTAwYi1jNzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtVrBLZ3gkipJn8Pt5531tCiVCr1MBQTSN3ufUknEM0tmDxoEJaCMbZbHxw/ jUAWqyC4VjNAa2jmszp7bh5R87v+XIrQoQkSZ6SnUG8RRafi5ZMqSha5/DsNq3bx b/MzL3OWlFV+tsmzBwxHYDFS1IfJ7cLGs//eO1v/wPWh/hlMEweYVQQPQ0pH4uyp LOCOofuy9Z40o4xK7KUL02yRwElev0EXm0ONu7Q0vORTU6Du1XmF/EOCY5FRix+7 iBQzaVTjqfCaZeD7q8XRzBOW4XFvCNhXr9h4dGvLkftFaUyfj8Picxlht2IXld39 V1HfmGR70CIfkBEowQQ/3FyugwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLVf6KLl lauZyLAG+bhXHo5IQ2IBMB8GA1UdIwQYMBaAFHBT/4H+zwWaPovXD4XWSUPRFOU2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNFNS83MDM4Mzg2Q0Y0 QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJaby1pOWNQaGRaSlE5RVU1 VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGUF9nZjdQQlpvLWk5Y1BoZFpKUTlFVTVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNFNS83MDM4Mzg2Q0Y0QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJa by1pOWNQaGRaSlE5RVU1VFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcPJ0ZI5oHImtArz46G9C6QiVRuhHdUfH0iUnN2UA5iZFk3NvamSCDX8Xq1vs YZvjSZNe6oTBD2hjuxIpxIsb2LGV0q+fzHAg6ZrG7bq4prQgkNWesH/m/fi6g3fZ wkep0+lYeF0bNNsaZXYXda06VYDR5FAs4GVjB6od9BuDFjU5/gLuB8E/kLlYVHut EjpkJAXNM11XVIVIILNKoljbOgvtZNnfZzJoWvVhCsj/mYIjHLKKvlhVoSQ2Aw9Z fPv6CfPqaqoeXkB/BWdjSIrOS+n4iVZzdvKjTmPRL2o4ycd0R5Ty14aKoZSNhUud McGCI4D1iLtrGhqs06VOzZgmaw== -----END CERTIFICATE-----Generated at Sun Apr 5 21:09:20 2026 by rpki-client