$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft File: FnnqBmaD8qFVDecPRYQy3RqDJw8.mft (raw, json) Hash identifier: EMQkx0jnQ/nFOY7YXFyt31pwm1cdBvJUfD2MibvO60k= Subject key identifier: 70:78:C4:64:8D:BA:4C:FB:BE:59:E6:E9:99:7C:2F:67:96:05:82:B4 Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F Certificate issuer: /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Certificate serial: 0B87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft Manifest number: 0BD5 Signing time: Sat 04 Apr 2026 18:58:53 +0000 Manifest this update: Sat 04 Apr 2026 18:58:53 +0000 Manifest next update: Sat 11 Apr 2026 18:58:53 +0000 Files and hashes: 1: FnnqBmaD8qFVDecPRYQy3RqDJw8.crl (hash: lMiWDmH2xsHKgOAZ1TawAKN/9sXWr9lSTmq6Nm5/kRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2951 (0xb87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCD9, serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Validity Not Before: Apr 4 18:58:53 2026 GMT Not After : Apr 11 18:58:53 2026 GMT Subject: CN=69d15f6d-790e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4d:ed:4c:d7:39:b2:44:a6:94:4e:9e:90:c6: 42:15:09:e2:38:56:a4:d2:9d:9b:3d:71:09:e3:e6: db:b8:f5:e0:0b:2a:b1:15:bd:63:0e:08:11:11:8e: af:11:36:0b:37:28:86:7a:cb:e1:07:12:c9:d0:fb: b1:fd:dc:2e:97:4a:7b:de:a5:c2:ab:42:c7:2f:94: 33:50:f3:84:9c:b0:83:b6:84:57:26:8e:b8:4c:af: 4c:1b:7a:04:bd:3d:54:a9:48:bf:1f:db:73:81:c8: e0:a1:05:ca:f8:22:26:90:8b:5b:f2:9e:ea:a6:16: 3e:00:b1:72:80:0c:4b:59:42:af:d0:b2:75:74:10: 1b:73:77:53:7a:0d:ba:85:0f:5d:cf:b6:a4:88:1b: 78:b5:24:a7:2f:10:d8:4a:cf:af:1e:f7:da:82:5d: ff:96:26:b3:4b:1c:ac:8a:8f:48:02:84:c2:91:b9: c9:c2:dd:7a:36:db:bf:f8:af:57:e4:32:60:44:ec: 67:27:ae:33:99:b7:17:b9:3f:26:5b:30:3a:65:01: 37:55:de:14:b3:18:9c:0e:55:78:20:c1:09:f8:ef: 7f:08:07:a0:a2:4c:04:fd:e8:ad:a9:69:88:e9:26: 47:51:8c:82:2a:83:07:85:80:6d:66:0a:df:b7:6a: 3a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:78:C4:64:8D:BA:4C:FB:BE:59:E6:E9:99:7C:2F:67:96:05:82:B4 X509v3 Authority Key Identifier: keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0c:a4:d7:54:0d:c8:bc:d5:c5:26:63:b9:66:ad:13:ca:79: 44:78:9c:51:58:85:c2:65:d6:47:2b:95:ec:3d:b1:4b:22:d4: 6f:5e:e4:33:2e:52:b2:a4:38:c0:8a:e7:35:0a:77:7c:51:62: 42:80:4d:61:2e:40:00:fb:56:5e:4c:da:21:f1:e1:49:61:0a: 99:31:30:60:bb:99:fa:8a:e4:4e:9c:da:39:e3:a3:ec:5c:9b: 8a:9d:ed:f9:ed:50:99:37:ff:10:b6:a0:d2:75:6e:cc:d4:e0: 5f:c1:05:63:19:ed:b7:25:0e:92:0e:37:0a:81:39:16:b2:d9: f0:a5:92:22:85:a4:33:6f:f4:50:38:32:de:69:5b:57:d0:f8: 0e:89:b4:cb:05:9b:1e:7a:95:77:1f:9a:d1:c1:03:b4:94:ab: e8:29:dc:e7:1a:70:79:9a:32:31:13:ee:3f:c2:97:a6:33:75: f1:ce:eb:8b:a9:2f:cd:a3:0b:29:22:b3:23:72:16:f1:bd:ae: 09:85:de:a1:f0:56:6c:0d:e8:05:ee:95:11:1f:17:ff:a3:6c: e1:29:f3:05:00:ae:98:61:f8:0b:c6:95:1f:7b:f7:0b:10:39: da:1e:e7:bd:0b:cb:43:ce:21:11:d3:34:66:3f:de:c5:e3:c3: af:d6:f6:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDRDkxMTAvBgNVBAUTKDE2NzlFQTA2NjY4M0YyQTE1NTBERTcwRjQ1ODQzMkRE MUE4MzI3MEYwHhcNMjYwNDA0MTg1ODUzWhcNMjYwNDExMTg1ODUzWjAYMRYwFAYD VQQDEw02OWQxNWY2ZC03OTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1U3tTNc5skSmlE6ekMZCFQniOFak0p2bPXEJ4+bbuPXgCyqxFb1jDggREY6v ETYLNyiGesvhBxLJ0Pux/dwul0p73qXCq0LHL5QzUPOEnLCDtoRXJo64TK9MG3oE vT1UqUi/H9tzgcjgoQXK+CImkItb8p7qphY+ALFygAxLWUKv0LJ1dBAbc3dTeg26 hQ9dz7akiBt4tSSnLxDYSs+vHvfagl3/liazSxysio9IAoTCkbnJwt16Ntu/+K9X 5DJgROxnJ64zmbcXuT8mWzA6ZQE3Vd4UsxicDlV4IMEJ+O9/CAegokwE/eitqWmI 6SZHUYyCKoMHhYBtZgrft2o6LwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHB4xGSN ukz7vlnm6Zl8L2eWBYK0MB8GA1UdIwQYMBaAFBZ56gZmg/KhVQ3nD0WEMt0agycP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENEOS80MTBCQkMxNDRF NkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhxRlZEZWNQUllReTNScURK dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZubnFCbWFEOHFGVkRlY1BSWVF5M1JxREp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENEOS80MTBCQkMxNDRFNkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhx RlZEZWNQUllReTNScURKdzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGgyk11QNyLzVxSZjuWatE8p5RHicUViFwmXWRyuV7D2xSyLUb17kMy5SsqQ4 wIrnNQp3fFFiQoBNYS5AAPtWXkzaIfHhSWEKmTEwYLuZ+orkTpzaOeOj7Fybip3t +e1QmTf/ELag0nVuzNTgX8EFYxnttyUOkg43CoE5FrLZ8KWSIoWkM2/0UDgy3mlb V9D4Dom0ywWbHnqVdx+a0cEDtJSr6Cnc5xpweZoyMRPuP8KXpjN18c7ri6kvzaML KSKzI3IW8b2uCYXeofBWbA3oBe6VER8X/6Ns4SnzBQCumGH4C8aVH3v3CxA52h7n vQvLQ84hEdM0Zj/exePDr9b2yw== -----END CERTIFICATE-----Generated at Mon Apr 6 09:54:40 2026 by rpki-client