$ rpki-client -vvf rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft File: sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft (raw, json) Hash identifier: KAamLg/lvAosfXeMAhsRAeClt+NWrSko7WCWj8ibeMg= Subject key identifier: F4:A5:6C:51:DD:A0:F2:E6:1A:3A:A7:0E:A0:73:13:BB:72:18:D2:34 Authority key identifier: B2:9E:45:31:16:74:5C:87:4B:F0:F0:B4:72:45:98:2A:71:D5:26:B5 Certificate issuer: /CN=A911FE83/serialNumber=B29E453116745C874BF0F0B47245982A71D526B5 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft Manifest number: 20 Signing time: Wed 25 Mar 2026 08:05:45 +0000 Manifest this update: Wed 25 Mar 2026 08:05:44 +0000 Manifest next update: Wed 01 Apr 2026 08:05:44 +0000 Files and hashes: 1: sp5FMRZ0XIdL8PC0ckWYKnHVJrU.crl (hash: 5lKS/PmZeWAEKfdlb5kq9qNAzDs2KIVsJRhwp3ddZ0U=) 2: 1CF20536001311F1AC4D12CC406F56BC.roa (hash: g4Ud8ofVkhlMNmXk1DVd80+pMPQpIN+9NWS+U7ei8zU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.crl rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FE83, serialNumber=B29E453116745C874BF0F0B47245982A71D526B5 Validity Not Before: Mar 25 08:05:44 2026 GMT Not After : Apr 1 08:05:44 2026 GMT Subject: CN=69c39758-0dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:65:ce:ad:3b:2c:f6:c3:2a:dc:0e:fb:83:39: eb:15:05:0e:3d:e2:2f:90:f4:5f:70:da:76:10:79: 30:f0:6c:03:8c:c1:2d:e3:5a:a2:af:02:08:2a:2a: 5b:08:a4:d2:da:d3:41:8c:70:37:15:72:e6:bf:57: 8d:0d:b5:a2:b4:f6:ca:ed:ae:9c:fe:cb:7e:14:ee: 41:60:bb:2f:3a:89:8c:2e:64:2e:14:8e:5e:ef:7f: 91:ea:69:62:66:6b:4d:e2:de:6b:7f:4f:38:7a:e7: 99:71:f8:0f:92:e4:c4:f9:f1:c2:5b:aa:ec:4b:08: a3:74:b1:72:78:97:f4:fe:10:f3:94:4a:bb:13:0d: 03:d7:0b:d9:39:d6:a1:fd:e9:44:c7:fb:2f:d5:77: 33:63:f3:63:27:6a:af:c9:b1:24:66:f1:0c:e1:52: 39:c4:6f:88:81:51:82:81:7a:13:0a:4c:f9:70:1e: df:00:17:a2:d6:f6:68:ac:ec:67:5e:48:f8:aa:96: e1:78:bc:3e:3e:0b:52:22:fc:ab:4a:83:4b:01:db: a7:c6:08:16:f4:c7:6e:22:e9:01:04:cd:04:4e:31: 50:34:85:2f:50:78:1e:40:f3:d2:9f:1f:75:17:7a: 8d:e3:16:3a:14:2a:18:ec:e3:fc:b2:04:8e:69:c0: 93:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A5:6C:51:DD:A0:F2:E6:1A:3A:A7:0E:A0:73:13:BB:72:18:D2:34 X509v3 Authority Key Identifier: keyid:B2:9E:45:31:16:74:5C:87:4B:F0:F0:B4:72:45:98:2A:71:D5:26:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:46:b6:33:41:98:d4:1b:62:fe:9b:86:91:1e:21:28:d1:1a: c5:c1:84:3c:0f:bd:1a:f5:9c:10:a8:2e:82:25:92:8d:2d:31: 2d:cb:45:ba:ab:75:2d:f5:67:6d:5a:c9:b9:91:db:2e:80:ce: 1e:87:7e:34:79:77:b9:5f:4a:3d:a5:ff:5d:f7:51:3a:f3:f5: cd:c9:b5:d3:f2:0c:87:44:75:57:f4:d2:1b:72:d6:32:04:ec: ae:51:2a:bc:17:f0:78:c5:ab:62:db:c4:d0:76:c9:53:dd:a2: 74:29:5a:c1:5c:fc:9d:c1:97:47:29:b3:5a:a7:a4:85:bd:5b: f5:78:b1:a4:26:f4:26:61:d8:ab:9a:51:7f:fe:80:4a:c9:5a: 32:0f:7b:29:ce:25:ab:a3:0f:69:39:f5:c0:4e:06:00:e3:52: 77:02:3b:76:cf:87:a5:81:01:8a:58:18:84:2a:fe:94:5f:5f: 83:bd:ed:25:db:f1:65:55:77:db:e3:5b:71:e5:e4:f3:fe:85: 92:36:79:36:99:e5:17:1b:7f:d2:fb:fd:aa:07:07:78:72:c7: 7f:a0:a1:1a:d9:32:27:47:f0:37:6f:75:97:c9:12:8d:15:f3: 6d:5a:8c:31:e2:48:79:b4:34:43:60:45:21:3a:95:4d:5f:42: 52:b6:6a:37 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RkU4MzExMC8GA1UEBRMoQjI5RTQ1MzExNjc0NUM4NzRCRjBGMEI0NzI0NTk4MkE3 MUQ1MjZCNTAeFw0yNjAzMjUwODA1NDRaFw0yNjA0MDEwODA1NDRaMBgxFjAUBgNV BAMTDTY5YzM5NzU4LTBkYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxZc6tOyz2wyrcDvuDOesVBQ494i+Q9F9w2nYQeTDwbAOMwS3jWqKvAggqKlsI pNLa00GMcDcVcua/V40NtaK09srtrpz+y34U7kFguy86iYwuZC4Ujl7vf5HqaWJm a03i3mt/Tzh655lx+A+S5MT58cJbquxLCKN0sXJ4l/T+EPOUSrsTDQPXC9k51qH9 6UTH+y/VdzNj82Mnaq/JsSRm8QzhUjnEb4iBUYKBehMKTPlwHt8AF6LW9mis7Gde SPiqluF4vD4+C1Ii/KtKg0sB26fGCBb0x24i6QEEzQROMVA0hS9QeB5A89KfH3UX eo3jFjoUKhjs4/yyBI5pwJO7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9KVsUd2g 8uYaOqcOoHMTu3IY0jQwHwYDVR0jBBgwFoAUsp5FMRZ0XIdL8PC0ckWYKnHVJrUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGRTgzL0U3RUIyNkIwMDAx MjExRjFBRkY0MEFDQjQwNkY1NkJDL3NwNUZNUlowWElkTDhQQzBja1dZS25IVkpy VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3A1Rk1SWjBYSWRMOFBDMGNrV1lLbkhWSnJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG RTgzL0U3RUIyNkIwMDAxMjExRjFBRkY0MEFDQjQwNkY1NkJDL3NwNUZNUlowWElk TDhQQzBja1dZS25IVkpyVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCBRrYzQZjUG2L+m4aRHiEo0RrFwYQ8D70a9ZwQqC6CJZKNLTEty0W6q3Ut9Wdt Wsm5kdsugM4eh340eXe5X0o9pf9d91E68/XNybXT8gyHRHVX9NIbctYyBOyuUSq8 F/B4xati28TQdslT3aJ0KVrBXPydwZdHKbNap6SFvVv1eLGkJvQmYdirmlF//oBK yVoyD3spziWrow9pOfXATgYA41J3Ajt2z4elgQGKWBiEKv6UX1+Dve0l2/FlVXfb 41tx5eTz/oWSNnk2meUXG3/S+/2qBwd4csd/oKEa2TInR/A3b3WXyRKNFfNtWowx 4kh5tDRDYEUhOpVNX0JStmo3 -----END CERTIFICATE-----Generated at Thu Mar 26 00:21:00 2026 by rpki-client