$ rpki-client -vvf rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft File: fkTc6XLxPIDlNLLmhf4dKg12FRI.mft (raw, json) Hash identifier: 8CWPWGh/U3EGokaZVyj/w+oouf0TBuNmPyTyEArXQac= Subject key identifier: 53:4E:8C:32:54:21:39:17:74:BA:AD:4E:5E:EA:FE:C0:90:C5:90:CF Authority key identifier: 7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 Certificate issuer: /CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Certificate serial: 036F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft Manifest number: 034A Signing time: Sun 05 Apr 2026 00:52:01 +0000 Manifest this update: Sun 05 Apr 2026 00:52:01 +0000 Manifest next update: Sun 12 Apr 2026 00:52:01 +0000 Files and hashes: 1: fkTc6XLxPIDlNLLmhf4dKg12FRI.crl (hash: 0qLHUFEwGNt4KaW1+UXdxDU39p0YMr2Bo8nTFh+rgDk=) 2: D08FF4F0BB7111EFACA16B1DC4F9AE02.roa (hash: jEbU+UZ6bH7hld9QXt1qM9jJKv0SNsetGnm09iu/Csc=) 3: 03D6E39A824C11F0B2CA540FC4F9AE02.roa (hash: v1c/7CojEGRaNp000m+6ubWlF6Q9FwpjN3RsWsFetvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 879 (0x36f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917270F, serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Validity Not Before: Apr 5 00:52:01 2026 GMT Not After : Apr 12 00:52:01 2026 GMT Subject: CN=69d1b231-fd08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:29:4b:d9:b0:e1:8b:42:5d:1e:45:ee:c1:e6: 0a:50:87:76:1e:59:03:81:05:16:28:fb:a1:4e:ed: 42:78:f4:39:b5:6a:a6:02:b2:b4:fb:09:21:49:75: 4a:98:6f:0a:0f:30:3f:ff:49:63:4a:42:84:1c:44: 93:9d:5e:62:8e:40:d6:07:32:2a:e3:16:a3:e9:82: 5c:78:0e:3b:c2:3e:9c:de:65:4c:4a:fe:5c:6d:d7: 28:31:b8:3c:50:5a:1c:3f:74:40:4d:ad:64:39:52: 5b:25:ad:0b:23:f1:f7:97:0d:5d:20:35:d0:9a:ad: b6:9e:74:93:74:a5:51:96:53:61:ed:77:71:6b:b6: 20:2a:4e:62:93:8e:21:e7:b1:5b:44:ac:f5:17:7d: b9:b6:40:9b:31:ab:75:93:fc:87:59:7e:4a:c2:9a: e8:ed:e2:43:cc:31:1b:38:f5:6d:35:e7:1b:3e:60: 71:0f:a1:d8:41:c6:97:0d:6a:1a:f4:73:37:ff:5c: 82:7e:17:25:5e:a0:46:7d:cb:9b:1f:85:af:67:1a: 1d:77:d5:fa:11:ba:78:fc:04:2f:8d:13:04:1b:99: 1c:81:c7:d0:c4:56:02:7d:2b:cc:76:d1:8a:06:5f: ea:14:d3:61:49:ff:ef:82:18:59:42:01:fb:9f:3e: b5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4E:8C:32:54:21:39:17:74:BA:AD:4E:5E:EA:FE:C0:90:C5:90:CF X509v3 Authority Key Identifier: keyid:7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:59:e0:48:d3:d4:8e:88:a3:fb:22:a4:8d:67:6f:b3:85:6d: 82:9e:6e:c0:0c:2b:1a:46:f0:e1:f9:d8:3a:f6:ce:61:73:78: 2b:35:d2:ba:8a:f5:06:e8:19:c9:84:81:9a:f1:70:f1:74:63: 3e:85:a2:72:c1:0a:09:06:d3:49:0d:98:a4:39:25:96:6e:00: 24:78:a6:8c:ff:a0:24:10:09:05:5f:2d:13:2d:ad:4d:a2:6b: 4a:bc:4b:2c:e4:0e:cb:0c:8d:8c:30:22:12:b1:7b:e7:da:1d: 4e:80:d4:58:81:61:31:77:7e:b2:12:dd:9d:f2:a2:73:f9:f8: 51:94:1f:71:f0:dc:4b:2e:61:aa:55:55:22:48:e2:b0:0f:39: 2b:48:c3:23:12:51:20:c8:f9:4a:55:97:e8:65:62:f7:6f:a3: f3:78:e1:6a:9c:81:73:71:30:87:a8:91:8f:c8:c2:c5:be:41: 36:de:18:36:55:d5:c7:8a:de:8b:79:70:34:ca:ff:5a:89:14: 72:3c:ff:a5:6c:b6:4b:04:e7:37:9b:7c:f4:a2:b4:11:69:7b: a4:1f:c3:fa:4e:50:92:a1:66:b6:14:6a:db:b6:f5:3f:0b:b2: 1c:49:2c:25:3d:52:c0:cb:d1:07:00:c4:6c:f3:26:3f:57:5b: 22:10:51:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3MEYxMTAvBgNVBAUTKDdFNDREQ0U5NzJGMTNDODBFNTM0QjJFNjg1RkUxRDJB MEQ3NjE1MTIwHhcNMjYwNDA1MDA1MjAxWhcNMjYwNDEyMDA1MjAxWjAYMRYwFAYD VQQDEw02OWQxYjIzMS1mZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhylL2bDhi0JdHkXuweYKUId2HlkDgQUWKPuhTu1CePQ5tWqmArK0+wkhSXVK mG8KDzA//0ljSkKEHESTnV5ijkDWBzIq4xaj6YJceA47wj6c3mVMSv5cbdcoMbg8 UFocP3RATa1kOVJbJa0LI/H3lw1dIDXQmq22nnSTdKVRllNh7Xdxa7YgKk5ik44h 57FbRKz1F325tkCbMat1k/yHWX5Kwpro7eJDzDEbOPVtNecbPmBxD6HYQcaXDWoa 9HM3/1yCfhclXqBGfcubH4WvZxodd9X6Ebp4/AQvjRMEG5kcgcfQxFYCfSvMdtGK Bl/qFNNhSf/vghhZQgH7nz61YwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFNOjDJU ITkXdLqtTl7q/sCQxZDPMB8GA1UdIwQYMBaAFH5E3Oly8TyA5TSy5oX+HSoNdhUS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjcwRi9EQzVFNzRDQTA4 RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJRGxOTExtaGY0ZEtnMTJG UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZrVGM2WEx4UElEbE5MTG1oZjRkS2cxMkZSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjcwRi9EQzVFNzRDQTA4RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJ RGxOTExtaGY0ZEtnMTJGUkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAplngSNPUjoij+yKkjWdvs4Vtgp5uwAwrGkbw4fnYOvbOYXN4KzXSuor1BugZ yYSBmvFw8XRjPoWicsEKCQbTSQ2YpDkllm4AJHimjP+gJBAJBV8tEy2tTaJrSrxL LOQOywyNjDAiErF759odToDUWIFhMXd+shLdnfKic/n4UZQfcfDcSy5hqlVVIkji sA85K0jDIxJRIMj5SlWX6GVi92+j83jhapyBc3Ewh6iRj8jCxb5BNt4YNlXVx4re i3lwNMr/WokUcjz/pWy2SwTnN5t89KK0EWl7pB/D+k5QkqFmthRq27b1PwuyHEks JT1SwMvRBwDEbPMmP1dbIhBRDg== -----END CERTIFICATE-----Generated at Mon Apr 6 09:02:37 2026 by rpki-client