$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft File: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft (raw, json) Hash identifier: Ds2ruEhuwf1NeGseaxyIhjgxhW3BZFcgu+8aAYPWnLg= Subject key identifier: 7D:7F:EE:5C:ED:2E:C8:BB:BC:3B:7E:10:66:03:F4:06:4A:F8:8F:17 Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D Certificate issuer: /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D Certificate serial: 3532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft Manifest number: 352C Signing time: Sat 04 Apr 2026 14:39:11 +0000 Manifest this update: Sat 04 Apr 2026 14:39:11 +0000 Manifest next update: Sat 11 Apr 2026 14:39:11 +0000 Files and hashes: 1: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl (hash: 60sPNYWgnT1saw/CXgyTVKbd0kzjdRuhCmt7TwYikI8=) 2: 3AF0F3E028CB11F195C91CE1BF833773.roa (hash: u52MWF5tX/svUqxjvLk6vmWrJaUj9BbcKl4QUhfj+Tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13618 (0x3532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF26F, serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D Validity Not Before: Apr 4 14:39:11 2026 GMT Not After : Apr 11 14:39:11 2026 GMT Subject: CN=69d1228f-4c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1b:48:49:a3:3d:ff:67:0d:2e:85:0a:ab:ad: 82:33:4d:58:0d:07:80:fd:43:6a:c4:15:ce:85:39: 7e:42:b7:8d:3d:7a:c4:7f:e7:86:c9:cf:b6:c2:cd: 0f:d5:c0:fd:88:21:67:bb:ba:52:d5:59:38:cd:fe: 29:6f:a1:f6:80:c4:88:16:dc:e0:6b:4e:ef:ba:a0: 50:da:44:bc:d5:1d:87:ff:90:6b:5d:cf:92:53:20: 73:95:52:ce:bf:b7:6b:9d:e9:4a:3e:64:7d:fa:a8: b7:42:9c:07:90:39:11:93:d6:0b:25:de:97:b6:0a: a3:d9:85:f7:14:c7:ee:f8:c3:ab:cc:ec:3b:7c:05: 63:04:3b:cd:76:d9:a3:f9:c9:81:30:70:b8:78:45: 03:72:1e:f2:94:e8:c6:7f:36:e4:69:92:39:c7:51: b4:b2:08:4b:61:38:48:98:d0:43:8f:94:3f:c7:fa: d6:eb:aa:3a:a4:6a:02:9a:ff:5c:d5:62:35:ab:11: 1a:78:1b:4c:04:a9:ad:d6:eb:eb:4d:1b:4c:00:6e: 6f:3b:9c:0d:52:fc:e7:d1:6d:d0:d8:bb:23:b2:3c: 3b:02:2b:3e:e5:09:13:97:e8:58:eb:f8:37:75:27: 7c:8d:b0:ca:c9:f0:06:dc:29:09:e9:ed:c4:58:35: bc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7F:EE:5C:ED:2E:C8:BB:BC:3B:7E:10:66:03:F4:06:4A:F8:8F:17 X509v3 Authority Key Identifier: keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:c6:39:02:8c:22:e1:da:fa:58:49:3b:15:e1:58:e9:8e:ee: c8:03:ad:85:5c:fc:6c:bf:9f:53:89:48:29:3c:b2:ea:a6:ef: 6b:d4:62:87:ab:82:7f:a3:e9:05:e2:78:32:47:86:01:d7:7d: 7f:53:f4:e3:3f:f6:35:ff:07:c0:15:75:b0:87:dc:bd:02:97: 23:f7:a4:6b:f7:70:4d:da:f5:80:a9:ee:ef:e3:30:c4:35:e9: 53:dc:c2:30:a8:f0:3c:b1:b9:6f:45:27:74:0f:b5:8b:a5:b6: 43:97:0f:e3:ff:10:24:bd:84:c2:a7:a9:ae:23:4d:d9:5d:32: af:19:bc:cf:df:87:92:f2:27:5f:f2:be:bc:f8:76:9a:4e:d7: d5:8f:ba:28:03:90:b9:2d:de:b7:93:e2:42:2d:89:db:8b:68: de:56:93:12:21:5d:79:f6:07:2b:23:47:05:9b:89:8d:f1:39: b8:ca:8f:fd:d0:1d:6f:c0:b6:e0:ab:b1:5b:f9:e5:da:8f:0e: ed:e9:a0:e2:18:73:ea:1f:fd:2a:8d:87:f0:3d:61:65:d3:52: ff:a4:a9:76:88:59:36:12:7c:22:83:1d:e1:41:ee:6a:08:15: e1:ba:a3:26:2c:b8:26:19:25:19:07:b6:17:82:b7:9a:66:c9: cb:b9:bc:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyNkYxMTAvBgNVBAUTKDdDRDRBRUU0N0NCMjFEQUU5ODc3RUZGNDFGMDRCRTk1 RDk3MzY4NkQwHhcNMjYwNDA0MTQzOTExWhcNMjYwNDExMTQzOTExWjAYMRYwFAYD VQQDEw02OWQxMjI4Zi00YzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBtISaM9/2cNLoUKq62CM01YDQeA/UNqxBXOhTl+QreNPXrEf+eGyc+2ws0P 1cD9iCFnu7pS1Vk4zf4pb6H2gMSIFtzga07vuqBQ2kS81R2H/5BrXc+SUyBzlVLO v7drnelKPmR9+qi3QpwHkDkRk9YLJd6Xtgqj2YX3FMfu+MOrzOw7fAVjBDvNdtmj +cmBMHC4eEUDch7ylOjGfzbkaZI5x1G0sghLYThImNBDj5Q/x/rW66o6pGoCmv9c 1WI1qxEaeBtMBKmt1uvrTRtMAG5vO5wNUvzn0W3Q2Lsjsjw7Ais+5QkTl+hY6/g3 dSd8jbDKyfAG3CkJ6e3EWDW83QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH1/7lzt Lsi7vDt+EGYD9AZK+I8XMB8GA1UdIwQYMBaAFHzUruR8sh2umHfv9B8EvpXZc2ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjI2Ri84Nzk2ODQ5NjFE OEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhhNllkLV8wSHdTLWxkbHph RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZOU3U1SHl5SGE2WWQtXzBId1MtbGRsemFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjI2Ri84Nzk2ODQ5NjFEOEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhh NllkLV8wSHdTLWxkbHphRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwsY5Aowi4dr6WEk7FeFY6Y7uyAOthVz8bL+fU4lIKTyy6qbva9Rih6uCf6Pp BeJ4MkeGAdd9f1P04z/2Nf8HwBV1sIfcvQKXI/eka/dwTdr1gKnu7+MwxDXpU9zC MKjwPLG5b0UndA+1i6W2Q5cP4/8QJL2EwqepriNN2V0yrxm8z9+HkvInX/K+vPh2 mk7X1Y+6KAOQuS3et5PiQi2J24to3laTEiFdefYHKyNHBZuJjfE5uMqP/dAdb8C2 4KuxW/nl2o8O7emg4hhz6h/9Ko2H8D1hZdNS/6SpdohZNhJ8IoMd4UHuaggV4bqj Jiy4JhklGQe2F4K3mmbJy7m8OA== -----END CERTIFICATE-----Generated at Mon Apr 6 13:35:12 2026 by rpki-client