$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft File: fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json) Hash identifier: GzLwV2CyZTYgy1TX6YqK50HPgxn1ki8Sz8wiPNtsa0s= Subject key identifier: 51:E9:56:DD:0E:89:3E:75:AC:F2:5A:61:C7:E6:1A:D9:AA:BC:B7:73 Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0CD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft Manifest number: 0C0A Signing time: Sat 04 Apr 2026 19:02:39 +0000 Manifest this update: Sat 04 Apr 2026 19:02:39 +0000 Manifest next update: Sat 11 Apr 2026 19:02:39 +0000 Files and hashes: 1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: Jt4VUgX5sCqbyOfiHhB4IFk+TkMhLwndKD8gVt/SsoA=) 2: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (hash: whrOto6YdWxD5nUJi5RhnyhfSKeLupBw4gHNI11xyhI=) 3: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: BZMmvsi1yqiTsCVctnffOHMNepndBiyB42ybFXbXkIE=) 4: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: EykGpXwalZSOBcmCqBPjJofqYixjM46Qzlbp8WB+N/Q=) 5: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: lU4qj9qhMKsVAQxIlEtzz2s2LN2qpGRwvCOWleMDdN8=) 6: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: TjrXzvrlWANf8JvFU1WnxrTztuxOH43IK3Zl85V0kH0=) 7: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (hash: RupCODMCVn7fipZVaU8cDxGLwLhz8c3cckM5d5QL83Q=) 8: E8819018178811EC876F5F50C4F9AE02.roa (hash: vUBN3WiPziWGZpfHV/nuh0lxaXpR2pUDXk1dHU8ebwE=) 9: C3290D00636F11F0A1C6DA70C4F9AE02.roa (hash: I8QsExkkx/lQXZrUI8Q7vR9Vux4YkSdHgTIl8y+WbMk=) 10: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: utuJrvT7k0aAp1PIv4kJ0yTf9B0xorguSm8sns4EFRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3282 (0xcd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Apr 4 19:02:39 2026 GMT Not After : Apr 11 19:02:39 2026 GMT Subject: CN=69d1604f-f862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d4:cb:13:5d:c9:a3:4e:7a:4c:62:f8:5a:6b: 8a:7e:8f:41:9b:3a:b4:00:db:3f:9a:57:c7:67:a9: ae:fb:59:2c:9d:d8:a3:3f:3d:a2:8f:f7:d3:c9:fd: 71:ca:44:38:52:ae:72:f2:d6:49:ca:de:80:bb:6f: 13:dd:bd:41:e5:9b:96:2a:61:55:ea:54:93:61:b8: 03:a3:ed:60:f3:20:42:53:02:7f:3d:91:e7:cd:c5: 0f:16:82:d9:3b:08:14:cb:d4:78:fa:7b:fb:25:7c: 4b:66:3c:b7:df:2f:42:c0:65:56:a0:e3:30:8b:f4: 6f:fb:4f:3b:2d:d0:11:93:02:7f:63:66:cd:c5:03: a2:93:a8:60:e6:f0:d3:19:da:17:79:b5:67:75:0a: 92:6c:87:3e:ec:ef:57:8f:ae:63:88:fb:18:90:e2: e3:e7:c5:38:2d:e5:80:2c:ce:27:2e:3d:80:14:c1: a8:a8:8e:12:92:f4:bc:dc:56:1a:18:8a:13:02:b2: f7:d3:a0:bc:bd:25:e1:73:04:ff:bb:ed:a2:b1:56: 28:3b:63:c6:d8:c2:b9:84:cf:13:45:1d:84:f6:96: bc:55:bc:ac:6f:4e:06:b6:e6:0e:21:30:9e:39:40: 22:a6:bf:b5:a4:a4:3d:02:42:d6:0f:46:1a:c4:fa: d0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E9:56:DD:0E:89:3E:75:AC:F2:5A:61:C7:E6:1A:D9:AA:BC:B7:73 X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:85:73:e2:2d:09:f6:69:c8:98:da:92:e8:bc:d9:3b:dc:aa: 50:78:dc:dd:1c:e2:26:6a:59:84:79:72:72:d5:35:2b:c5:d7: 42:ee:8d:81:80:58:69:5b:99:62:cb:47:4e:d7:58:d0:4d:ac: ce:30:29:84:96:80:0c:42:f4:88:bf:3d:b5:a6:bf:ad:d9:46: fc:28:e3:c5:84:99:ff:38:a7:0e:f2:7c:7b:cb:9b:03:14:a7: f4:00:28:93:0c:dd:6f:86:a7:53:59:3e:02:aa:83:37:d4:8e: 79:e3:4d:94:65:f8:c9:55:82:08:4d:b9:a2:84:53:56:67:98: d3:c2:f4:95:88:19:6f:04:c3:99:37:e7:9f:a5:47:51:61:f9: fe:cc:46:5a:08:3e:c1:45:2e:ec:88:9d:53:08:9d:4d:68:d5: bc:91:31:6e:9f:4b:5c:15:a1:a4:d7:f1:0e:71:6a:da:1f:b9: 87:59:80:f1:2c:74:42:02:5c:67:36:e6:7a:a6:a3:ff:fa:cc: fa:dd:f7:2b:32:12:76:0f:f6:32:83:de:1d:35:77:9f:11:10: 57:47:c2:eb:dd:d4:fd:01:d9:0e:60:2c:c5:ed:98:21:73:36: 04:22:61:60:fc:01:c1:68:5c:93:44:f4:58:58:44:2a:fe:c5: a4:03:57:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjYwNDA0MTkwMjM5WhcNMjYwNDExMTkwMjM5WjAYMRYwFAYD VQQDEw02OWQxNjA0Zi1mODYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytTLE13Jo056TGL4WmuKfo9Bmzq0ANs/mlfHZ6mu+1ksndijPz2ij/fTyf1x ykQ4Uq5y8tZJyt6Au28T3b1B5ZuWKmFV6lSTYbgDo+1g8yBCUwJ/PZHnzcUPFoLZ OwgUy9R4+nv7JXxLZjy33y9CwGVWoOMwi/Rv+087LdARkwJ/Y2bNxQOik6hg5vDT GdoXebVndQqSbIc+7O9Xj65jiPsYkOLj58U4LeWALM4nLj2AFMGoqI4SkvS83FYa GIoTArL306C8vSXhcwT/u+2isVYoO2PG2MK5hM8TRR2E9pa8Vbysb04GtuYOITCe OUAipr+1pKQ9AkLWD0YaxPrQHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFHpVt0O iT51rPJaYcfmGtmqvLdzMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEUzRi9DMjQzMjJCQTU0NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0 UGdQQWVGRmhKMUdJR3VTUmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ4Vz4i0J9mnImNqS6LzZO9yqUHjc3RziJmpZhHlyctU1K8XXQu6NgYBYaVuZ YstHTtdY0E2szjAphJaADEL0iL89taa/rdlG/CjjxYSZ/zinDvJ8e8ubAxSn9AAo kwzdb4anU1k+AqqDN9SOeeNNlGX4yVWCCE25ooRTVmeY08L0lYgZbwTDmTfnn6VH UWH5/sxGWgg+wUUu7IidUwidTWjVvJExbp9LXBWhpNfxDnFq2h+5h1mA8Sx0QgJc Zzbmeqaj//rM+t33KzISdg/2MoPeHTV3nxEQV0fC693U/QHZDmAsxe2YIXM2BCJh YPwBwWhck0T0WFhEKv7FpANXsQ== -----END CERTIFICATE-----Generated at Mon Apr 6 13:58:45 2026 by rpki-client