$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft File: F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft (raw, json) Hash identifier: t0+IrN1P3RQPMa3TVmbA9FPXngMK23XUr/1GO5FQW3k= Subject key identifier: C2:A4:26:3B:7A:7F:14:7F:70:D4:89:E5:E8:2A:DF:60:B6:C0:0D:C9 Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 Certificate issuer: /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Certificate serial: 0693 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft Manifest number: 0658 Signing time: Wed 22 Apr 2026 22:39:37 +0000 Manifest this update: Wed 22 Apr 2026 22:39:36 +0000 Manifest next update: Wed 29 Apr 2026 22:39:36 +0000 Files and hashes: 1: F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl (hash: 9qLWgvRoqAppjzg/Xw7X1ZXUYiXfBLsVYiBlDUt8/A0=) 2: 73381ABCAB3611EF809A470EC4F9AE02.roa (hash: 6FEl/xTlrO6k23qkzsJZxZeQTOP267Pxj3B9BnAU7dI=) 3: 6D24010C300311F0995E874EC4F9AE02.roa (hash: v88X53jf1N+0e4ko5ebfMPBilUzf1Ikr3zZ6sHanDNI=) 4: 695C5050C27D11EEB0AE466DC4F9AE02.roa (hash: rB30xmuASYWjmKcidZhlL3g3FgthN2+a8/JMg6RBy4A=) 5: 96B7F96CAB3611EFB500860EC4F9AE02.roa (hash: ASbKYUpnDT3fXeFEGq3R/psOLVXIzQFOM2/AijIzmKA=) 6: 2B7B2500A62E11EF8FF03040C4F9AE02.roa (hash: 36EgBq1n4JNWcqkButdZG4sfZA3L8DsedoJF13m1uY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Apr 2026 22:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1683 (0x693) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB09E, serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Validity Not Before: Apr 22 22:39:36 2026 GMT Not After : Apr 29 22:39:36 2026 GMT Subject: CN=69e94e28-9362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:30:71:5f:8e:2e:e6:89:33:cf:0a:d3:36:ec: a2:da:28:26:e3:11:91:4b:49:0e:68:40:46:9f:3c: 68:c8:ed:f7:0c:a0:51:30:95:08:d8:d9:e7:ab:2e: cc:e9:f5:f0:ce:0b:ba:4b:06:5a:2a:14:3d:9e:3c: 08:22:7c:4b:c9:42:36:c3:f3:9e:51:d5:0a:56:1c: 85:d4:c0:79:82:b9:7f:be:26:c1:54:fa:d1:b9:72: b3:a4:10:fe:8e:ad:7d:c9:0e:e5:26:be:48:39:ce: f4:1b:6e:34:75:5f:4d:9f:cb:19:1a:a6:13:cc:70: 3f:50:f1:9d:01:7a:39:ba:e1:a5:37:95:f0:cc:af: 23:49:c1:ea:69:e0:c2:85:9b:44:54:d9:f8:7a:19: df:4c:e2:8b:2d:29:c3:e9:75:31:e2:3a:e5:b8:5d: b6:e6:ff:6d:73:cc:43:f5:e5:1e:3a:9a:f0:29:ac: 16:d7:8a:b4:00:6a:fc:46:f7:b1:97:1b:e8:f7:4b: 94:42:1e:41:91:2d:e9:62:36:da:00:08:f7:b0:2a: 8f:a3:8a:37:04:4e:31:a2:18:9f:59:c2:2c:f1:1a: de:d5:d2:09:b6:dd:4c:70:d4:31:2a:60:00:f5:57: 33:71:b4:5d:a5:9e:fe:72:40:d8:a1:0b:dc:d2:21: a1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A4:26:3B:7A:7F:14:7F:70:D4:89:E5:E8:2A:DF:60:B6:C0:0D:C9 X509v3 Authority Key Identifier: keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:8f:7a:7b:50:2d:79:db:cf:c6:07:13:d6:2c:c5:a5:e4:16: b5:02:92:ba:76:43:15:e0:2c:8e:b2:63:a0:37:87:4b:1f:aa: a8:fe:98:9b:bc:bd:e6:92:fc:83:01:b2:17:4d:77:d2:7a:7e: 9f:9b:de:13:70:e1:8e:7e:fa:85:43:b1:32:be:2d:50:48:09: 48:f1:af:d7:c7:b9:e3:f0:d7:6b:9c:4c:91:13:14:60:b6:ce: 61:23:a9:f9:4e:1e:8a:9b:a8:cc:76:34:3e:1c:25:f5:81:18: 7a:24:c0:7d:bb:c6:3a:c8:4e:9d:06:e9:9e:a9:3e:ce:80:55: 25:e6:43:bf:50:b1:48:49:8c:9f:c6:55:80:cf:09:ea:65:14: be:26:e2:bc:56:eb:c6:a6:a9:ea:94:c9:31:16:9f:86:c2:24: 8e:d0:d9:5f:ed:63:aa:94:c1:21:f8:c6:5d:ff:e5:bf:3c:a4: c6:c4:94:e0:f3:fd:16:f0:82:1a:cf:6c:31:e0:b1:e8:59:dd: 8c:d8:f7:ce:e2:14:cc:d5:d2:69:d6:4c:8c:de:29:d7:1a:62: 2f:d3:f8:08:b5:ef:34:16:35:a5:76:d5:6a:ca:09:47:a7:1d: e2:0e:2b:32:76:e0:86:4f:3b:67:2b:e1:b6:2d:38:71:70:38: 73:cc:f4:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwOUUxMTAvBgNVBAUTKDE3NjBGRjcxRTE2QkNGRUVFN0I4RDY3MTBENjM2MDY3 OTlBRUY3NjcwHhcNMjYwNDIyMjIzOTM2WhcNMjYwNDI5MjIzOTM2WjAYMRYwFAYD VQQDEw02OWU5NGUyOC05MzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9jBxX44u5okzzwrTNuyi2igm4xGRS0kOaEBGnzxoyO33DKBRMJUI2Nnnqy7M 6fXwzgu6SwZaKhQ9njwIInxLyUI2w/OeUdUKVhyF1MB5grl/vibBVPrRuXKzpBD+ jq19yQ7lJr5IOc70G240dV9Nn8sZGqYTzHA/UPGdAXo5uuGlN5XwzK8jScHqaeDC hZtEVNn4ehnfTOKLLSnD6XUx4jrluF225v9tc8xD9eUeOprwKawW14q0AGr8Rvex lxvo90uUQh5BkS3pYjbaAAj3sCqPo4o3BE4xohifWcIs8Rre1dIJtt1McNQxKmAA 9VczcbRdpZ7+ckDYoQvc0iGhhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMKkJjt6 fxR/cNSJ5egq32C2wA3JMB8GA1UdIwQYMBaAFBdg/3Hha8/u57jWcQ1jYGeZrvdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA5RS80NzExOUQwMEQw MEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnotN251Tlp4RFdOZ1o1bXU5 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YyRF9jZUZyei03bnVOWnhEV05nWjVtdTkyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA5RS80NzExOUQwMEQwMEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnot N251Tlp4RFdOZ1o1bXU5MmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALI96e1AtedvPxgcT1izFpeQWtQKSunZDFeAsjrJjoDeHSx+qqP6Ym7y95pL8 gwGyF0130np+n5veE3Dhjn76hUOxMr4tUEgJSPGv18e54/DXa5xMkRMUYLbOYSOp +U4eipuozHY0Phwl9YEYeiTAfbvGOshOnQbpnqk+zoBVJeZDv1CxSEmMn8ZVgM8J 6mUUvibivFbrxqap6pTJMRafhsIkjtDZX+1jqpTBIfjGXf/lvzykxsSU4PP9FvCC Gs9sMeCx6FndjNj3zuIUzNXSadZMjN4p1xpiL9P4CLXvNBY1pXbVasoJR6cd4g4r Mnbghk87Zyvhti04cXA4c8z0RA== -----END CERTIFICATE-----Generated at Fri Apr 24 14:51:40 2026 by rpki-client