$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft File: f7FuQPo8p3_OJMTJpGRWg8OeihE.mft (raw, json) Hash identifier: i2oXIsc80X1Bypil+HymYvOwybcR2eBk3wmBhU2wmY4= Subject key identifier: FC:A6:C0:E7:B3:7D:B8:52:FE:27:F8:02:0B:62:9B:F1:37:AB:48:C9 Authority key identifier: 7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11 Certificate issuer: /CN=A91AF83D/serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11 Certificate serial: 0242 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft Manifest number: 023C Signing time: Sun 05 Apr 2026 02:04:46 +0000 Manifest this update: Sun 05 Apr 2026 02:04:46 +0000 Manifest next update: Sun 12 Apr 2026 02:04:46 +0000 Files and hashes: 1: f7FuQPo8p3_OJMTJpGRWg8OeihE.crl (hash: 50GGBGcwvuGCe2BjC+3tp8V8DIP+7UysxAxW3voK6oM=) 2: AB3814CEC85411EDAE5D9322C4F9AE02.roa (hash: UmgIXHzfkXMqKWVff6849jzy9LFm+7q1hZgvaLwPQ/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 578 (0x242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF83D, serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11 Validity Not Before: Apr 5 02:04:46 2026 GMT Not After : Apr 12 02:04:46 2026 GMT Subject: CN=69d1c33e-62ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:95:91:ff:95:13:d9:62:46:b6:47:57:9b:7d: f0:75:7a:18:43:ef:42:9b:46:c7:e3:ed:06:f3:4b: 61:92:fe:76:49:ac:47:28:95:c6:f4:9c:58:a4:18: b6:03:b7:bf:5a:ac:c4:4e:46:99:75:e8:81:a3:b8: c8:6e:88:15:de:a3:a4:71:6d:b2:7a:d7:56:31:2d: 8d:ff:85:e5:9a:8a:c2:e2:c5:f9:44:18:09:50:ee: c0:b8:6a:9c:74:d1:9b:b6:6f:43:2f:fb:8d:a2:cb: fc:c3:a3:a4:39:55:b6:d6:0a:4e:ad:18:69:42:f3: d7:23:6c:59:7d:e2:aa:3d:ce:28:e5:e4:53:e6:3f: d3:82:8d:7b:32:59:86:23:37:24:e9:69:a7:72:71: 98:2b:9e:cd:e3:99:2f:bb:9c:c7:e1:95:57:6f:d2: e5:d8:04:4f:21:41:79:d1:14:76:d4:37:10:0a:14: 71:77:38:6d:c4:1a:58:06:33:60:3d:dd:a1:54:c4: 30:13:1e:c3:8e:b1:e9:02:73:47:ba:df:a8:b7:98: bd:9d:30:35:99:34:4b:b5:bb:7e:4c:3f:93:c3:0b: 5f:dc:f5:dc:1f:a0:54:57:be:61:16:53:f7:61:8b: 9d:a7:68:01:de:63:3f:d3:1e:8e:ad:d9:3d:92:c4: da:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A6:C0:E7:B3:7D:B8:52:FE:27:F8:02:0B:62:9B:F1:37:AB:48:C9 X509v3 Authority Key Identifier: keyid:7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d6:a3:72:e4:ee:ed:ea:41:1a:93:6d:a4:83:15:5a:cc:65: 20:ad:10:b4:eb:f9:91:08:98:87:b5:91:4b:14:16:54:4a:86: d8:57:c9:c4:e1:e0:73:7a:3f:20:ee:ff:0e:0e:bf:31:97:d6: 85:3a:42:e8:dd:b2:cd:f6:40:9a:0d:86:7c:ed:f7:c2:b2:ca: ee:25:b6:43:ce:4d:a1:c3:36:7b:11:a5:61:b7:e8:a8:d9:a5: 5d:ab:e5:3e:cb:1f:fe:d9:2a:70:30:d4:e1:c7:4d:6f:ad:19: 01:b0:fb:1f:ad:5b:6b:74:a7:84:35:93:c0:6f:60:de:56:b6: d8:89:d2:5b:0d:7f:de:d2:0b:cd:5b:93:c3:3f:68:8e:e7:35: d7:bf:7d:bc:db:31:7e:61:b0:21:5c:a3:36:0c:87:1d:a9:7a: 2e:75:59:e7:2d:b6:f8:90:d0:d6:1f:b9:54:aa:63:3a:0b:fb: e8:f1:bc:e0:ab:d8:82:04:fd:81:48:c2:12:22:c4:6c:f8:62: 76:ee:f1:e7:9f:d3:0b:0d:5e:8f:bd:a9:ed:99:70:ee:8c:32: 67:85:d7:b4:97:f1:6a:76:7a:e0:b3:d1:b7:3d:de:09:d8:83: 15:28:21:15:76:7f:58:52:84:a8:79:1f:62:b5:ab:05:39:d3: f2:22:d9:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY4M0QxMTAvBgNVBAUTKDdGQjE2RTQwRkEzQ0E3N0ZDRTI0QzRDOUE0NjQ1Njgz QzM5RThBMTEwHhcNMjYwNDA1MDIwNDQ2WhcNMjYwNDEyMDIwNDQ2WjAYMRYwFAYD VQQDEw02OWQxYzMzZS02MmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnpWR/5UT2WJGtkdXm33wdXoYQ+9Cm0bH4+0G80thkv52SaxHKJXG9JxYpBi2 A7e/WqzETkaZdeiBo7jIbogV3qOkcW2yetdWMS2N/4XlmorC4sX5RBgJUO7AuGqc dNGbtm9DL/uNosv8w6OkOVW21gpOrRhpQvPXI2xZfeKqPc4o5eRT5j/Tgo17MlmG Izck6WmncnGYK57N45kvu5zH4ZVXb9Ll2ARPIUF50RR21DcQChRxdzhtxBpYBjNg Pd2hVMQwEx7DjrHpAnNHut+ot5i9nTA1mTRLtbt+TD+Twwtf3PXcH6BUV75hFlP3 YYudp2gB3mM/0x6Ordk9ksTahwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPymwOez fbhS/if4Agtim/E3q0jJMB8GA1UdIwQYMBaAFH+xbkD6PKd/ziTEyaRkVoPDnooR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjgzRC9BM0Q1MkZCOEM4 NTAxMUVEQUY1QkJBODdDNEY5QUUwMi9mN0Z1UVBvOHAzX09KTVRKcEdSV2c4T2Vp aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y3RnVRUG84cDNfT0pNVEpwR1JXZzhPZWloRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjgzRC9BM0Q1MkZCOEM4NTAxMUVEQUY1QkJBODdDNEY5QUUwMi9mN0Z1UVBvOHAz X09KTVRKcEdSV2c4T2VpaEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAatajcuTu7epBGpNtpIMVWsxlIK0QtOv5kQiYh7WRSxQWVEqG2FfJxOHgc3o/ IO7/Dg6/MZfWhTpC6N2yzfZAmg2GfO33wrLK7iW2Q85NocM2exGlYbfoqNmlXavl Pssf/tkqcDDU4cdNb60ZAbD7H61ba3SnhDWTwG9g3la22InSWw1/3tILzVuTwz9o juc11799vNsxfmGwIVyjNgyHHal6LnVZ5y22+JDQ1h+5VKpjOgv76PG84KvYggT9 gUjCEiLEbPhidu7x55/TCw1ej72p7Zlw7owyZ4XXtJfxanZ64LPRtz3eCdiDFSgh FXZ/WFKEqHkfYrWrBTnT8iLZvg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:39:40 2026 by rpki-client