$ rpki-client -vvf rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft File: FDm85NeiKugDbOsu5uavGPIbtZM.mft (raw, json) Hash identifier: iw0m3GphEWcfFOCdK/tlmRX/U0eO9jiUHzS4aDzbkOE= Subject key identifier: 1B:F9:E7:89:63:D9:76:23:C1:4E:7F:D0:27:43:83:1C:5F:B6:8A:60 Authority key identifier: 14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 Certificate issuer: /CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Certificate serial: 043C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft Manifest number: 042A Signing time: Thu 12 Mar 2026 23:54:32 +0000 Manifest this update: Thu 12 Mar 2026 23:54:32 +0000 Manifest next update: Thu 19 Mar 2026 23:54:32 +0000 Files and hashes: 1: FDm85NeiKugDbOsu5uavGPIbtZM.crl (hash: 0F+kvEEgfzLIvk2dx0JqIgASTgTSo1PBDaO/XUazC0c=) 2: F8071E24DC1111EC80AE816DC4F9AE02.roa (hash: diQEJwaRZGmvk+KKJJNr2sqtXhHrrXlc+8yBz+g5Wd0=) 3: CD22C9C8DC0D11ECA064B94CC4F9AE02.roa (hash: KrGSfeFezfMBfirneaLIWiJ6P58/fqAvRIXr1XydAtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 23:54:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1084 (0x43c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F57D9, serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Validity Not Before: Mar 12 23:54:32 2026 GMT Not After : Mar 19 23:54:32 2026 GMT Subject: CN=69b35238-c77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:07:a5:b4:d7:23:68:00:4b:78:cd:e6:bd:10: 64:23:a2:ca:7a:5b:8b:72:e2:b1:f9:46:8d:e0:ab: a8:ae:3e:97:3b:17:33:9e:a5:4c:6f:3a:68:08:27: bd:dc:94:0b:44:82:c1:49:1e:90:00:32:7a:03:f5: b0:b2:e4:df:95:fa:46:9f:8b:07:fe:f8:c5:e0:f9: cb:d5:82:40:c4:09:eb:18:f5:c5:43:45:d0:bc:04: 46:e6:f6:07:8b:98:bf:4d:d5:65:2a:40:0b:5e:39: f1:5d:9b:7e:66:58:ec:03:87:a7:60:cb:96:7b:a5: 41:ea:7d:bf:da:5a:1b:3b:af:1d:0a:75:68:24:06: b4:b5:da:6a:39:ac:07:57:d5:f3:04:1e:7f:f1:8e: 6d:9f:ce:8d:a2:a5:df:56:92:98:6b:05:e5:10:50: 33:b6:77:95:2f:ae:e0:06:d9:33:05:1a:4c:1e:f6: 2a:10:a1:f9:f8:2c:c9:a4:54:80:1c:7b:1a:8c:a3: 7c:15:1f:fc:1a:ce:22:bb:3f:71:38:07:35:cb:05: 8e:e2:bd:22:23:35:32:70:ba:05:bf:f0:67:cf:25: 05:54:d1:ce:8b:fc:05:7c:cd:73:ef:40:e9:df:e7: 71:40:9d:b1:0a:d6:a3:ef:60:60:85:c4:a1:bb:85: a4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F9:E7:89:63:D9:76:23:C1:4E:7F:D0:27:43:83:1C:5F:B6:8A:60 X509v3 Authority Key Identifier: keyid:14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:0d:70:bf:6a:6c:de:45:48:0b:9b:fe:73:f6:17:cf:d5:1d: b2:6c:90:14:b2:55:c4:8f:e2:90:f2:1b:9d:6d:29:bb:75:20: 6f:e9:85:a6:d5:23:d6:bf:22:7d:28:75:f2:c7:97:30:02:1d: 11:66:d5:43:cc:8e:ec:b8:20:a3:32:96:78:1e:5d:df:2c:fc: 9b:65:97:22:2c:38:f1:a3:70:df:10:fd:13:a7:8d:d7:ea:36: 77:0a:4d:72:7a:e3:22:14:e6:3b:ba:16:8c:49:cc:52:77:08: aa:ea:26:58:47:60:b4:f7:2f:48:1c:39:58:0d:1b:bc:93:99: 47:81:57:12:ff:49:d0:b1:51:77:06:05:ea:a1:5c:0a:d4:e0: 5c:ff:10:2e:fc:5f:47:c6:92:fd:ab:ab:2e:73:69:af:d7:ab: 65:70:4d:52:30:fb:87:23:bc:2b:3d:f0:1f:b3:1f:71:39:7d: 82:fc:73:bc:ac:2e:11:2c:2e:a1:23:35:51:08:22:bb:4e:0e: d6:4c:bc:05:ce:56:11:46:cf:1a:7a:30:2d:a6:42:ff:03:63: 81:58:a2:71:e5:a5:89:df:8c:1d:47:c8:70:ad:c5:8b:d1:2d: cd:a8:ec:c5:1d:04:2c:ff:67:5d:9f:41:c8:a8:c7:8a:43:3d: 19:1f:db:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3RDkxMTAvBgNVBAUTKDE0MzlCQ0U0RDdBMjJBRTgwMzZDRUIyRUU2RTZBRjE4 RjIxQkI1OTMwHhcNMjYwMzEyMjM1NDMyWhcNMjYwMzE5MjM1NDMyWjAYMRYwFAYD VQQDEw02OWIzNTIzOC1jNzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9AeltNcjaABLeM3mvRBkI6LKeluLcuKx+UaN4Kuorj6XOxcznqVMbzpoCCe9 3JQLRILBSR6QADJ6A/WwsuTflfpGn4sH/vjF4PnL1YJAxAnrGPXFQ0XQvARG5vYH i5i/TdVlKkALXjnxXZt+ZljsA4enYMuWe6VB6n2/2lobO68dCnVoJAa0tdpqOawH V9XzBB5/8Y5tn86NoqXfVpKYawXlEFAztneVL67gBtkzBRpMHvYqEKH5+CzJpFSA HHsajKN8FR/8Gs4iuz9xOAc1ywWO4r0iIzUycLoFv/BnzyUFVNHOi/wFfM1z70Dp 3+dxQJ2xCtaj72BghcShu4Wk4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBv554lj 2XYjwU5/0CdDgxxftopgMB8GA1UdIwQYMBaAFBQ5vOTXoiroA2zrLubmrxjyG7WT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTdEOS8wNzE3RTlFRTlG NUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1Z0RiT3N1NXVhdkdQSWJ0 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZEbTg1TmVpS3VnRGJPc3U1dWF2R1BJYnRaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTdEOS8wNzE3RTlFRTlGNUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1 Z0RiT3N1NXVhdkdQSWJ0Wk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhg1wv2ps3kVIC5v+c/YXz9UdsmyQFLJVxI/ikPIbnW0pu3Ugb+mFptUj1r8i fSh18seXMAIdEWbVQ8yO7LggozKWeB5d3yz8m2WXIiw48aNw3xD9E6eN1+o2dwpN cnrjIhTmO7oWjEnMUncIquomWEdgtPcvSBw5WA0bvJOZR4FXEv9J0LFRdwYF6qFc CtTgXP8QLvxfR8aS/aurLnNpr9erZXBNUjD7hyO8Kz3wH7MfcTl9gvxzvKwuESwu oSM1UQgiu04O1ky8Bc5WEUbPGnowLaZC/wNjgViiceWlid+MHUfIcK3Fi9Etzajs xR0ELP9nXZ9ByKjHikM9GR/bDw== -----END CERTIFICATE-----Generated at Fri Mar 13 02:44:44 2026 by rpki-client