$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft File: FFiKS-nrikuZgtGyXesMYHOK77s.mft (raw, json) Hash identifier: S0vqCVn2xplsp9NPwQZWVu5oDM3kOUJgUD+x57xYXjM= Subject key identifier: 99:A1:D6:6F:0F:E7:DF:A3:81:2D:20:F8:E4:23:0A:26:F0:70:70:62 Authority key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB Certificate issuer: /CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB Certificate serial: 0330 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft Manifest number: 0326 Signing time: Sun 05 Apr 2026 00:51:11 +0000 Manifest this update: Sun 05 Apr 2026 00:51:11 +0000 Manifest next update: Sun 12 Apr 2026 00:51:11 +0000 Files and hashes: 1: FFiKS-nrikuZgtGyXesMYHOK77s.crl (hash: iM8ZcRVsokM/QeT++0gmnBKp3BmxmWgeYGzWlNlDVi4=) 2: 4D942BCE08A011ED8AD21272C4F9AE02.roa (hash: jgftd+/9ZeJs/SIOse//P6waVUAgX808BhHUM0pG+LE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 816 (0x330) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CE4, serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB Validity Not Before: Apr 5 00:51:11 2026 GMT Not After : Apr 12 00:51:11 2026 GMT Subject: CN=69d1b1ff-1bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:58:a1:33:f6:01:d0:75:b7:6a:3b:44:04:5a: b2:85:ea:38:92:aa:31:74:67:d7:f5:f1:6b:3f:68: 17:bf:8c:f4:5c:44:8e:9c:b8:bf:dc:fd:62:e2:1c: 79:b2:ea:58:ef:de:cf:63:28:44:6c:81:ec:72:a2: 60:76:27:e4:51:c2:f9:31:44:e3:94:5e:77:7b:3f: 79:d2:42:1e:51:b2:9b:81:ec:fb:17:db:56:db:a3: bd:ee:9e:b9:00:32:48:6f:0f:b3:14:ae:9e:f0:51: 60:06:61:5d:83:a0:ca:b8:bd:7b:f2:68:5b:93:61: 9c:ef:23:6d:c1:59:63:9b:44:5f:ea:f4:aa:b9:d5: 8b:28:6d:83:c9:74:77:a1:f8:20:71:df:de:5a:5c: 1a:be:91:84:b6:89:e8:c5:fd:73:aa:43:fd:72:e5: 70:7b:2e:52:27:c8:02:d9:e5:b8:de:9c:16:d9:3a: 7c:76:c2:6a:e4:60:95:ba:d3:91:78:45:4e:d5:fd: 3f:0e:c1:ed:15:25:bf:56:35:47:19:c7:33:41:1c: 79:56:54:a5:c4:4d:fd:d0:c6:25:1b:a6:e5:ae:b0: 62:c0:40:63:20:f3:db:0f:8b:34:1b:2d:ff:f7:d5: 84:19:9b:40:17:81:27:6b:cc:f3:f5:d9:90:19:94: 4b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A1:D6:6F:0F:E7:DF:A3:81:2D:20:F8:E4:23:0A:26:F0:70:70:62 X509v3 Authority Key Identifier: keyid:14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:fd:02:74:b1:06:59:59:cd:9f:da:f0:a8:15:26:ac:a0:08: a1:ce:c8:b4:8e:cb:e0:27:1a:9c:8f:78:78:c8:0d:df:f4:bd: f1:c2:8b:57:18:9a:1b:82:ee:a5:91:c7:ec:55:ee:c3:ee:72: e8:43:4f:15:2a:5c:e0:02:44:55:49:9c:47:5f:22:20:82:0d: d5:29:96:0e:22:36:20:3a:23:d0:ba:6b:71:c8:5e:b1:b5:ae: cc:e3:1d:e9:91:e6:39:8d:97:b1:db:c5:18:a1:3a:64:94:8e: 51:09:4d:43:ab:f5:32:4c:d8:9c:e6:fe:5a:b6:67:4d:94:f3: 0d:13:44:5e:9a:13:5d:dc:97:ae:c1:fb:73:f8:b5:17:05:a6: df:77:d2:1a:94:68:ff:81:fe:3a:47:6a:71:b2:ed:f1:4a:ed: e0:29:ef:ff:37:c0:95:15:ac:0e:5c:08:91:66:fd:12:e7:70: f9:1b:6c:36:5f:1a:7c:43:23:b2:ad:f1:8a:c2:30:61:f6:52: 8d:57:aa:69:45:03:2c:a2:83:19:3d:46:8c:10:45:75:bf:fd: 74:11:74:f7:55:dd:1f:5f:e6:a9:47:27:ff:1c:9b:de:5c:74: 67:b3:6d:31:2c:c9:ee:06:79:2f:7a:e8:90:4c:27:89:36:54: fe:21:36:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlDRTQxMTAvBgNVBAUTKDE0NTg4QTRCRTlFQjhBNEI5OTgyRDFCMjVERUIwQzYw NzM4QUVGQkIwHhcNMjYwNDA1MDA1MTExWhcNMjYwNDEyMDA1MTExWjAYMRYwFAYD VQQDEw02OWQxYjFmZi0xYmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVihM/YB0HW3ajtEBFqyheo4kqoxdGfX9fFrP2gXv4z0XESOnLi/3P1i4hx5 supY797PYyhEbIHscqJgdifkUcL5MUTjlF53ez950kIeUbKbgez7F9tW26O97p65 ADJIbw+zFK6e8FFgBmFdg6DKuL178mhbk2Gc7yNtwVljm0Rf6vSqudWLKG2DyXR3 ofggcd/eWlwavpGEtonoxf1zqkP9cuVwey5SJ8gC2eW43pwW2Tp8dsJq5GCVutOR eEVO1f0/DsHtFSW/VjVHGcczQRx5VlSlxE390MYlG6blrrBiwEBjIPPbD4s0Gy3/ 99WEGZtAF4Ena8zz9dmQGZRLkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJmh1m8P 59+jgS0g+OQjCibwcHBiMB8GA1UdIwQYMBaAFBRYikvp64pLmYLRsl3rDGBziu+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUNFNC82OUNDQjVCQzA4 OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlrdVpndEd5WGVzTVlIT0s3 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZGaUtTLW5yaWt1Wmd0R3lYZXNNWUhPSzc3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUNFNC82OUNDQjVCQzA4OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlr dVpndEd5WGVzTVlIT0s3N3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANf0CdLEGWVnNn9rwqBUmrKAIoc7ItI7L4CcanI94eMgN3/S98cKLVxiaG4Lu pZHH7FXuw+5y6ENPFSpc4AJEVUmcR18iIIIN1SmWDiI2IDoj0LprcchesbWuzOMd 6ZHmOY2XsdvFGKE6ZJSOUQlNQ6v1MkzYnOb+WrZnTZTzDRNEXpoTXdyXrsH7c/i1 FwWm33fSGpRo/4H+OkdqcbLt8Urt4Cnv/zfAlRWsDlwIkWb9Eudw+RtsNl8afEMj sq3xisIwYfZSjVeqaUUDLKKDGT1GjBBFdb/9dBF091XdH1/mqUcn/xyb3lx0Z7Nt MSzJ7gZ5L3rokEwniTZU/iE2Nw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:30:41 2026 by rpki-client