$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft File: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft (raw, json) Hash identifier: 61HlqoPrYTwMuknSdipnNOFV+7GC+i8aSbMCLjT+Eyk= Subject key identifier: 14:37:3E:B1:07:97:F2:05:A9:C3:3E:2D:7E:A6:05:E5:29:4F:91:D5 Authority key identifier: 15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C Certificate issuer: /CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft Manifest number: 020B Signing time: Sun 05 Apr 2026 02:35:32 +0000 Manifest this update: Sun 05 Apr 2026 02:35:32 +0000 Manifest next update: Sun 12 Apr 2026 02:35:32 +0000 Files and hashes: 1: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl (hash: iYCCpk1J2Qmnbk0uk00xN4e4V4hq/HpmDqUIj8u/aWs=) 2: 1D52E8E860D711EEA524AE64C4F9AE02.roa (hash: YPR3t0pxNxAAfmPwqIL7jliMlrBzhQ9gLXu93RnHlOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D61DF, serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C Validity Not Before: Apr 5 02:35:32 2026 GMT Not After : Apr 12 02:35:32 2026 GMT Subject: CN=69d1ca74-16da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:82:56:02:bc:47:ab:13:92:45:0c:bb:ba:d3: 23:1d:21:12:16:01:8e:cf:9a:05:4d:c3:9e:c3:b2: 83:3d:67:e1:44:a0:aa:b0:ff:63:84:e7:57:30:75: 0c:b0:45:8f:6b:a0:05:25:d0:32:36:68:59:9e:78: 96:18:8e:58:68:77:90:5e:44:6f:9d:23:36:66:9c: c9:01:5a:d8:a7:5f:0d:89:5d:61:41:66:50:9a:1e: 05:38:85:0e:69:ff:49:0f:ec:98:67:63:6c:7b:92: d2:55:43:f2:ae:8a:ac:a3:ad:4e:82:12:20:ab:eb: d8:dc:cd:7f:cd:26:76:da:54:f4:2d:1c:ed:b1:d2: cc:8b:9c:ae:33:0a:95:07:5a:44:86:7e:2a:a6:39: 50:af:7d:38:3f:12:ff:7e:8d:56:fa:c0:7b:7c:dd: c8:97:79:d6:6c:bc:08:c9:aa:9e:da:cf:ad:e0:d7: 46:0d:c5:b5:e8:3c:62:f9:f6:1b:47:ff:55:75:29: d8:51:79:84:42:fe:8d:00:55:49:01:e9:f4:47:f5: 3c:54:86:e0:fe:78:5d:56:cc:11:99:4a:8f:fc:ab: cc:d3:38:fd:6a:21:fd:d3:23:2b:6d:e4:80:ec:05: 38:49:bb:0b:10:c8:64:7f:9e:e8:87:d0:dc:07:52: 31:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:37:3E:B1:07:97:F2:05:A9:C3:3E:2D:7E:A6:05:E5:29:4F:91:D5 X509v3 Authority Key Identifier: keyid:15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:64:05:d6:9a:11:38:df:84:20:65:8c:b9:6d:c3:1b:07:04: d7:bd:38:b0:16:92:79:3b:a4:af:bf:c5:93:5b:cd:c0:f5:f0: bf:3f:80:b5:5a:77:e9:e2:19:64:99:e6:29:15:ac:19:2f:21: 8d:a3:cb:df:04:ea:d8:ac:28:ab:f0:e9:df:3b:22:85:5c:12: 23:7a:2c:40:df:62:1c:a8:57:5e:dc:40:b8:b2:b5:8d:5f:44: 86:d2:64:fc:c1:5e:c5:a6:6b:54:a5:73:dd:2a:dc:30:bb:3f: ff:ff:dc:dd:9f:d5:3b:c2:1e:6c:cd:40:8d:6c:e5:56:b9:94: 71:79:12:2d:4f:bb:d9:ee:70:98:c1:d8:4a:d7:c5:7b:91:57: d1:68:40:ff:3f:89:46:1f:b7:b7:4d:34:b2:42:04:dd:b7:ba: 07:cc:d7:d8:53:47:6b:af:7c:46:b7:ab:9c:5c:19:1e:07:36: 4c:03:e6:6c:c3:76:5f:4e:f0:55:7d:e8:0a:d3:48:00:a4:f9: 0d:60:88:5b:0a:87:e2:7e:17:2b:7c:4c:2f:dc:15:8e:da:73: 91:ba:e5:c4:26:a7:fb:43:04:a9:a9:a8:b8:0a:44:2c:1a:28: 9b:fb:b9:11:c5:7c:d5:a8:c0:aa:0a:81:01:77:fa:9d:45:b7: c1:c1:af:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYxREYxMTAvBgNVBAUTKDE1QkYyMTBCNzM3ODFENUNDMEJFOTlCRDM5RDcwQjJG RUI0RUI4NkMwHhcNMjYwNDA1MDIzNTMyWhcNMjYwNDEyMDIzNTMyWjAYMRYwFAYD VQQDEw02OWQxY2E3NC0xNmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04JWArxHqxOSRQy7utMjHSESFgGOz5oFTcOew7KDPWfhRKCqsP9jhOdXMHUM sEWPa6AFJdAyNmhZnniWGI5YaHeQXkRvnSM2ZpzJAVrYp18NiV1hQWZQmh4FOIUO af9JD+yYZ2Nse5LSVUPyroqso61OghIgq+vY3M1/zSZ22lT0LRztsdLMi5yuMwqV B1pEhn4qpjlQr304PxL/fo1W+sB7fN3Il3nWbLwIyaqe2s+t4NdGDcW16Dxi+fYb R/9VdSnYUXmEQv6NAFVJAen0R/U8VIbg/nhdVswRmUqP/KvM0zj9aiH90yMrbeSA 7AU4SbsLEMhkf57oh9DcB1IxUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBQ3PrEH l/IFqcM+LX6mBeUpT5HVMB8GA1UdIwQYMBaAFBW/IQtzeB1cwL6ZvTnXCy/rTrhs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjFERi8wRDBDNUY3NDFD NjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhWekF2cG05T2RjTEwtdE91 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZiOGhDM040SFZ6QXZwbTlPZGNMTC10T3VHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjFERi8wRDBDNUY3NDFDNjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhW ekF2cG05T2RjTEwtdE91R3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdmQF1poRON+EIGWMuW3DGwcE1704sBaSeTukr7/Fk1vNwPXwvz+AtVp36eIZ ZJnmKRWsGS8hjaPL3wTq2Kwoq/Dp3zsihVwSI3osQN9iHKhXXtxAuLK1jV9EhtJk /MFexaZrVKVz3SrcMLs////c3Z/VO8IebM1AjWzlVrmUcXkSLU+72e5wmMHYStfF e5FX0WhA/z+JRh+3t000skIE3be6B8zX2FNHa698RrernFwZHgc2TAPmbMN2X07w VX3oCtNIAKT5DWCIWwqH4n4XK3xML9wVjtpzkbrlxCan+0MEqamouApELBoom/u5 EcV81ajAqgqBAXf6nUW3wcGv/w== -----END CERTIFICATE-----Generated at Sun Apr 5 19:42:41 2026 by rpki-client