$ rpki-client -vvf rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft File: fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft (raw, json) Hash identifier: WIgMbkSWWpXD7g2buSGeb0t/530Wcobh8nEOCW/H058= Subject key identifier: EA:1E:8C:F2:EF:69:8B:51:EE:1A:02:4C:9B:4E:6D:DE:B3:C5:83:86 Authority key identifier: 7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D Certificate issuer: /CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D Certificate serial: 0950 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft Manifest number: 093F Signing time: Sat 04 Apr 2026 19:58:32 +0000 Manifest this update: Sat 04 Apr 2026 19:58:32 +0000 Manifest next update: Sat 11 Apr 2026 19:58:32 +0000 Files and hashes: 1: fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl (hash: Fpjn09BFvSHPoNLXtiPOsJPs1fVUbGRCrwfiVj6tzE4=) 2: 10A6E062B70A11EDB851464EC4F9AE02.roa (hash: +2GMR/V9mZr0Ife9tGdydPkVcoSqLY2zhQZIUiI3Hq0=) 3: 38B92F54E17D11EDBCAFC081C4F9AE02.roa (hash: bPFO6I2wWIPENqB/X87e5uIatc/LQckX7tfxgiWc7ts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:58:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2384 (0x950) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918753F, serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D Validity Not Before: Apr 4 19:58:32 2026 GMT Not After : Apr 11 19:58:32 2026 GMT Subject: CN=69d16d68-2ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f7:23:61:1a:c7:79:55:e1:ff:55:95:a8:1a: 9b:56:74:58:24:a5:3a:25:22:3a:a4:2c:8e:b1:f9: ea:23:db:71:66:6f:11:64:cb:95:8b:bd:15:78:18: 11:65:31:fa:7d:6f:cb:fd:99:b6:51:7d:ab:cf:8f: 05:90:e4:99:15:66:16:23:3b:38:ee:57:22:5e:a8: 0c:eb:cb:6d:df:23:62:d2:a4:bd:83:3d:75:71:8e: 3e:f3:8b:c2:f8:5b:fb:3f:b4:57:82:82:f9:4c:c7: f2:10:8f:51:bc:99:ab:11:49:0e:c3:40:36:33:a0: 67:86:f5:da:20:9b:52:2a:ea:f6:a5:22:09:2f:fd: 02:45:d9:d2:c2:34:dc:23:10:f8:e9:77:5c:73:89: cf:bb:07:88:99:53:d9:35:9a:72:91:b7:b9:3c:d8: 59:b7:1f:dd:3d:e7:57:9e:f2:9d:74:19:0a:8c:c4: 60:5b:8c:b1:7b:54:7a:bd:4a:64:f6:48:9c:a2:64: 6b:0f:f5:d5:f6:7a:27:43:37:b7:0e:64:53:3d:0a: f1:8a:b5:99:67:55:45:54:64:46:ad:dd:46:bd:3b: f0:8c:b2:42:d7:21:73:4e:32:ed:5d:b4:a6:14:d8: 4a:9f:37:6f:91:ea:e2:6b:fb:61:67:69:03:b8:21: 6e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1E:8C:F2:EF:69:8B:51:EE:1A:02:4C:9B:4E:6D:DE:B3:C5:83:86 X509v3 Authority Key Identifier: keyid:7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:e6:38:a5:5d:70:61:3c:ef:89:14:f1:4b:63:ca:bb:75:3a: ee:10:9f:6a:e6:09:a9:7f:69:82:8e:a1:40:0c:68:73:07:39: df:f2:6d:6c:d9:69:62:b1:83:d8:12:19:c9:8d:0b:77:ae:c4: fd:a1:c3:92:bb:bb:9b:e5:20:c1:96:5f:12:57:58:28:de:50: fe:81:37:6f:74:43:67:fd:43:0f:94:4b:c0:b1:22:61:21:94: f0:2a:6a:72:79:d7:8b:b0:4b:e6:76:f2:93:5c:e6:e8:11:d9: 4a:e2:d0:11:3c:05:cf:ed:cd:a0:66:f3:c0:e9:21:cd:e2:59: 1c:0f:1a:88:b6:04:bc:6e:5e:83:9a:c7:17:5a:7b:ef:1d:11: 95:9c:69:c6:be:12:d9:ab:e7:d8:3a:75:49:0c:25:a9:66:e0: a4:49:25:c8:25:78:51:25:20:d1:92:e0:79:e3:df:82:c7:dd: 99:49:dd:ce:a6:c9:ca:ed:e5:b3:d2:b8:f1:e4:1e:08:29:d6: 03:94:69:99:8f:12:8e:ad:0c:c1:d1:ff:b6:96:a9:5c:23:f7: 52:34:e3:dc:e5:1a:8e:3c:68:81:3d:52:86:70:3c:a6:70:a2: 44:0d:4d:73:2e:9c:be:84:5c:0c:08:56:ba:eb:5b:36:22:4e: cf:fb:86:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1M0YxMTAvBgNVBAUTKDdFNzJEODAxQjM4QTcyQUI0QjAzNzZFMTJDOTU0MTI0 QUFFNDNDNkQwHhcNMjYwNDA0MTk1ODMyWhcNMjYwNDExMTk1ODMyWjAYMRYwFAYD VQQDEw02OWQxNmQ2OC0yY2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PcjYRrHeVXh/1WVqBqbVnRYJKU6JSI6pCyOsfnqI9txZm8RZMuVi70VeBgR ZTH6fW/L/Zm2UX2rz48FkOSZFWYWIzs47lciXqgM68tt3yNi0qS9gz11cY4+84vC +Fv7P7RXgoL5TMfyEI9RvJmrEUkOw0A2M6BnhvXaIJtSKur2pSIJL/0CRdnSwjTc IxD46Xdcc4nPuweImVPZNZpykbe5PNhZtx/dPedXnvKddBkKjMRgW4yxe1R6vUpk 9kicomRrD/XV9nonQze3DmRTPQrxirWZZ1VFVGRGrd1GvTvwjLJC1yFzTjLtXbSm FNhKnzdvkeria/thZ2kDuCFukwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOoejPLv aYtR7hoCTJtObd6zxYOGMB8GA1UdIwQYMBaAFH5y2AGzinKrSwN24SyVQSSq5Dxt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzUzRi9CREE1N0ZGRUJD MTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2NxdExBM2JoTEpWQkpLcmtQ RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuTFlBYk9LY3F0TEEzYmhMSlZCSktya1BHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzUzRi9CREE1N0ZGRUJDMTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2Nx dExBM2JoTEpWQkpLcmtQRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl+Y4pV1wYTzviRTxS2PKu3U67hCfauYJqX9pgo6hQAxocwc53/JtbNlpYrGD 2BIZyY0Ld67E/aHDkru7m+UgwZZfEldYKN5Q/oE3b3RDZ/1DD5RLwLEiYSGU8Cpq cnnXi7BL5nbyk1zm6BHZSuLQETwFz+3NoGbzwOkhzeJZHA8aiLYEvG5eg5rHF1p7 7x0RlZxpxr4S2avn2Dp1SQwlqWbgpEklyCV4USUg0ZLgeePfgsfdmUndzqbJyu3l s9K48eQeCCnWA5RpmY8Sjq0MwdH/tpapXCP3UjTj3OUajjxogT1ShnA8pnCiRA1N cy6cvoRcDAhWuutbNiJOz/uG9Q== -----END CERTIFICATE-----Generated at Mon Apr 6 09:04:18 2026 by rpki-client