$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft File: FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json) Hash identifier: 2Yuuy5FR33sLMatrEOl82+613bYnS3Q4uzQozBAuQ0E= Subject key identifier: 29:AF:05:38:85:5A:40:0E:D8:B2:8E:77:80:10:E4:11:FB:C5:D1:C6 Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Certificate serial: 0CE6 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft Manifest number: 0CD2 Signing time: Mon 20 Apr 2026 17:25:18 +0000 Manifest this update: Mon 20 Apr 2026 17:25:17 +0000 Manifest next update: Mon 27 Apr 2026 17:25:17 +0000 Files and hashes: 1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: ld3wf27k2kOZp5om/gSucD3xpF4Uba5+5vRx9G9uQBY=) 2: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: twJcU0dvcEBMbuiZq5Wi1cC3xSMhYlFvAN7WKpOcESs=) 3: DD004670C39711F0A241F86DC4F9AE02.roa (hash: ILb2f5MFl0hmYnyJlCFO6BUBR2uQox0knIxNniHNGBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 17:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3302 (0xce6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Validity Not Before: Apr 20 17:25:17 2026 GMT Not After : Apr 27 17:25:17 2026 GMT Subject: CN=69e6617e-38ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e4:50:56:a8:c8:a9:93:fc:49:f0:12:15:e5: 5e:71:52:83:ff:d8:31:32:34:55:84:7e:68:28:ea: 7b:44:55:ec:99:6c:4b:e5:2d:5c:44:b0:47:5a:ae: 4d:c6:f0:ce:33:bb:e8:3d:ba:3b:9a:a7:78:2d:fd: 38:ee:e8:4c:eb:b3:7a:6e:80:a7:df:4d:b5:74:c5: 5f:8e:07:97:03:20:ec:02:d5:c7:24:50:29:ca:51: 2f:48:85:37:84:00:9c:41:8a:4c:7d:82:78:de:96: d7:d9:a4:1a:ad:04:f6:f9:ed:71:a9:e1:8c:21:ad: a2:7b:53:44:89:55:39:33:21:2d:05:2f:63:d1:cb: a8:e5:0b:c5:84:77:18:1a:3b:82:7a:b0:1a:69:3c: 1c:e9:47:b5:bf:af:1c:f3:3f:ea:30:0b:f5:14:c3: c5:7d:3d:ef:8b:b5:f0:c4:8c:09:25:bd:3a:fd:da: 82:e1:00:07:c0:94:d6:0a:0b:a1:85:8f:27:21:04: 7f:f3:ab:8d:73:3a:df:5a:23:41:4c:86:40:f9:35: 45:c3:64:ad:1d:4c:41:00:c9:81:f9:f5:fe:92:84: af:83:6a:53:60:de:cf:88:bd:b2:9e:a0:be:05:3f: 91:52:e1:a9:d0:87:ac:17:54:f1:f7:19:d1:92:57: 45:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AF:05:38:85:5A:40:0E:D8:B2:8E:77:80:10:E4:11:FB:C5:D1:C6 X509v3 Authority Key Identifier: keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:a2:1b:53:cd:75:44:5d:e9:6c:fa:36:1d:12:19:13:03:e6: 76:12:c6:40:64:6c:1e:95:ca:e9:7a:ce:3a:01:ec:c8:42:9f: 26:ea:0d:70:e3:7b:50:14:b0:45:6e:23:d3:11:6c:ff:72:66: 0c:64:c4:4f:1e:a7:9d:8e:7a:69:c4:1d:34:89:78:2c:c1:c8: 32:e6:de:29:56:fa:80:a7:b6:ab:eb:3c:83:d2:b6:06:02:9f: 36:cc:71:a0:7d:c1:ae:c4:7f:5b:e5:6a:38:3e:14:0e:dd:2e: fb:a3:48:bc:12:52:3b:ce:43:fc:7f:9a:31:72:d7:2e:d0:31: 47:28:f8:ac:03:e3:d1:f4:ad:6e:30:9c:15:0f:7c:56:e2:e8: 01:0c:34:1e:5a:33:1b:78:91:19:a2:17:d8:3f:61:79:56:c6: 26:14:fc:d3:ed:31:2b:db:88:d2:43:c4:15:95:9b:e8:f6:91: 72:c7:f8:43:b7:57:86:0f:31:92:68:fe:58:54:c6:90:25:ea: e1:17:22:38:73:70:df:d0:b2:bc:b2:f4:93:56:5e:4c:8e:6f: 7c:93:b2:ca:42:3d:01:f0:c7:3c:97:b5:83:6f:99:3d:df:60: 81:16:c5:06:35:ef:92:79:7d:69:17:26:1f:10:2c:b8:41:42: 1a:64:a6:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKDE2MzMxNjc2MjExQUVFNjc3MzQ4NUI2NTIzM0M2MkMz QTQ1ODdBRkQwHhcNMjYwNDIwMTcyNTE3WhcNMjYwNDI3MTcyNTE3WjAYMRYwFAYD VQQDEw02OWU2NjE3ZS0zOGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoeRQVqjIqZP8SfASFeVecVKD/9gxMjRVhH5oKOp7RFXsmWxL5S1cRLBHWq5N xvDOM7voPbo7mqd4Lf047uhM67N6boCn3021dMVfjgeXAyDsAtXHJFApylEvSIU3 hACcQYpMfYJ43pbX2aQarQT2+e1xqeGMIa2ie1NEiVU5MyEtBS9j0cuo5QvFhHcY GjuCerAaaTwc6Ue1v68c8z/qMAv1FMPFfT3vi7XwxIwJJb06/dqC4QAHwJTWCguh hY8nIQR/86uNczrfWiNBTIZA+TVFw2StHUxBAMmB+fX+koSvg2pTYN7PiL2ynqC+ BT+RUuGp0IesF1Tx9xnRkldF0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCmvBTiF WkAO2LKOd4AQ5BH7xdHGMB8GA1UdIwQYMBaAFBYzFnYhGu5nc0hbZSM8YsOkWHr9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC84RDhGMEFCRTBC NUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdtZHpTRnRsSXp4aXc2Ulll djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0ZqTVdkaUVhN21kelNGdGxJenhpdzZSWWV2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC84RDhGMEFCRTBCNUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdt ZHpTRnRsSXp4aXc2UllldjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApaIbU811RF3pbPo2HRIZEwPmdhLGQGRsHpXK6XrOOgHsyEKfJuoNcON7UBSw RW4j0xFs/3JmDGTETx6nnY56acQdNIl4LMHIMubeKVb6gKe2q+s8g9K2BgKfNsxx oH3BrsR/W+VqOD4UDt0u+6NIvBJSO85D/H+aMXLXLtAxRyj4rAPj0fStbjCcFQ98 VuLoAQw0HlozG3iRGaIX2D9heVbGJhT80+0xK9uI0kPEFZWb6PaRcsf4Q7dXhg8x kmj+WFTGkCXq4RciOHNw39CyvLL0k1ZeTI5vfJOyykI9AfDHPJe1g2+ZPd9ggRbF BjXvknl9aRcmHxAsuEFCGmSmNg== -----END CERTIFICATE-----Generated at Tue Apr 21 21:40:45 2026 by rpki-client