$ rpki-client -vvf rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft File: 5LOuPtIxeiPhm9egMr766tU3J9M.mft (raw, json) Hash identifier: Zzcx8I+XyrXD29QaFb2d8y9hN59i6mhA4E5vCR9sq+Q= Subject key identifier: 58:8F:E4:62:21:DB:9A:95:06:DE:05:2C:A8:EA:B8:50:60:F3:4D:F9 Authority key identifier: E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3 Certificate issuer: /CN=A91298E0/serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3 Certificate serial: 3523 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft Manifest number: 3523 Signing time: Thu 26 Mar 2026 14:44:38 +0000 Manifest this update: Thu 26 Mar 2026 14:44:38 +0000 Manifest next update: Thu 02 Apr 2026 14:44:38 +0000 Files and hashes: 1: 5LOuPtIxeiPhm9egMr766tU3J9M.crl (hash: gz1jHswLwL8Qa0vrAP9zYRnMl6RIac/UQ9Wa0sJ9KiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13603 (0x3523) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91298E0, serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3 Validity Not Before: Mar 26 14:44:38 2026 GMT Not After : Apr 2 14:44:38 2026 GMT Subject: CN=69c54656-37a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a2:70:56:8c:8f:e4:85:75:5e:89:9f:ed:eb: 57:e6:be:5a:15:6e:8d:fc:6b:4a:aa:f5:6a:c1:4b: 23:b5:28:bf:c9:94:27:22:23:f4:ff:fb:e2:20:f3: 3a:64:89:00:d2:eb:76:a3:e2:59:32:26:33:0b:75: b2:60:3d:0e:0b:80:80:77:ad:98:7f:49:1c:50:0a: a6:25:1b:96:a4:0d:28:f3:9f:d3:39:53:c9:85:56: 0a:68:34:00:22:81:94:f4:cc:7b:64:fd:de:a1:e4: 50:f8:57:ad:ec:cc:cc:d2:20:1e:dd:2a:f4:7c:44: 97:15:66:be:26:4e:7a:70:dc:b7:6b:32:12:e6:b5: ee:45:aa:97:3f:9a:be:29:32:77:99:46:63:b3:63: d0:fd:5e:e8:51:a3:64:67:fd:94:8c:df:a9:ec:de: ba:da:d6:63:03:32:18:1e:f8:9a:19:f5:9d:cc:ad: 9c:1d:4f:5d:cc:4a:28:62:50:b3:b5:50:cb:55:f0: b5:6b:8b:8e:9a:f5:25:7f:4d:a2:63:28:bf:ba:5c: d6:a6:fc:3d:89:98:7f:b0:ac:8d:56:3b:8b:2e:f5: 29:f3:26:70:14:af:d6:91:fb:1c:0c:d1:52:74:38: b6:2b:3e:e9:6a:91:95:e2:1e:0c:7d:1b:29:b6:1a: 73:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8F:E4:62:21:DB:9A:95:06:DE:05:2C:A8:EA:B8:50:60:F3:4D:F9 X509v3 Authority Key Identifier: keyid:E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:fb:c6:19:80:87:48:e6:21:b5:38:f7:6b:2c:aa:88:6e:93: b6:2e:91:b1:67:a1:c3:70:c8:ef:ad:0a:9a:31:dc:63:ea:8d: 24:04:7f:18:d1:8a:50:47:a7:1f:2a:5e:28:81:6d:03:f9:8e: 61:b6:47:61:02:ae:78:75:bc:f0:a4:18:07:a9:52:34:a1:92: 68:86:ab:93:82:3f:f1:9a:50:57:79:91:69:dd:1e:78:31:36: 73:c7:7e:b0:17:73:76:a2:4d:2a:83:dc:83:21:b6:49:ae:a2: 75:18:84:96:e2:00:92:99:c3:8b:7f:2e:05:69:27:29:37:df: 77:1c:29:bc:4b:b8:c8:7c:ef:dd:40:de:a1:a4:22:b0:b8:05: 15:eb:fb:e4:0b:f9:4f:1e:cb:d8:6b:54:d8:be:84:fe:bf:28: ad:b9:a5:b1:3c:7f:1e:7c:b0:2e:77:b0:c0:c8:97:7e:5a:d6: 5a:e8:75:a1:6d:f8:f8:4b:0e:fa:b2:61:eb:0b:e8:07:8f:c5: 38:ce:f6:5b:4e:84:4a:e4:7f:73:00:ae:aa:a4:d1:33:87:e7: a1:be:83:51:d6:48:97:e9:14:41:db:fd:6d:18:23:c1:88:e9: b9:2a:dd:72:17:86:05:fd:22:c7:18:38:bf:cd:b4:b1:29:e7: 7e:59:3d:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4RTAxMTAvBgNVBAUTKEU0QjNBRTNFRDIzMTdBMjNFMTlCRDdBMDMyQkVGQUVB RDUzNzI3RDMwHhcNMjYwMzI2MTQ0NDM4WhcNMjYwNDAyMTQ0NDM4WjAYMRYwFAYD VQQDEw02OWM1NDY1Ni0zN2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlqJwVoyP5IV1Xomf7etX5r5aFW6N/GtKqvVqwUsjtSi/yZQnIiP0//viIPM6 ZIkA0ut2o+JZMiYzC3WyYD0OC4CAd62Yf0kcUAqmJRuWpA0o85/TOVPJhVYKaDQA IoGU9Mx7ZP3eoeRQ+Fet7MzM0iAe3Sr0fESXFWa+Jk56cNy3azIS5rXuRaqXP5q+ KTJ3mUZjs2PQ/V7oUaNkZ/2UjN+p7N662tZjAzIYHviaGfWdzK2cHU9dzEooYlCz tVDLVfC1a4uOmvUlf02iYyi/ulzWpvw9iZh/sKyNVjuLLvUp8yZwFK/WkfscDNFS dDi2Kz7papGV4h4MfRspthpzzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFiP5GIh 25qVBt4FLKjquFBg8035MB8GA1UdIwQYMBaAFOSzrj7SMXoj4ZvXoDK++urVNyfT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOThFMC9EQzFFRkI0QTFE OTAxMUUyQjU3QUU3RjAwOEIwMkNEMi81TE91UHRJeGVpUGhtOWVnTXI3NjZ0VTNK OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVMT3VQdEl4ZWlQaG05ZWdNcjc2NnRVM0o5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OThFMC9EQzFFRkI0QTFEOTAxMUUyQjU3QUU3RjAwOEIwMkNEMi81TE91UHRJeGVp UGhtOWVnTXI3NjZ0VTNKOU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa/vGGYCHSOYhtTj3ayyqiG6Tti6RsWehw3DI760KmjHcY+qNJAR/GNGKUEen HypeKIFtA/mOYbZHYQKueHW88KQYB6lSNKGSaIark4I/8ZpQV3mRad0eeDE2c8d+ sBdzdqJNKoPcgyG2Sa6idRiEluIAkpnDi38uBWknKTffdxwpvEu4yHzv3UDeoaQi sLgFFev75Av5Tx7L2GtU2L6E/r8orbmlsTx/HnywLnewwMiXflrWWuh1oW34+EsO +rJh6wvoB4/FOM72W06ESuR/cwCuqqTRM4fnob6DUdZIl+kUQdv9bRgjwYjpuSrd cheGBf0ixxg4v820sSnnflk91g== -----END CERTIFICATE-----Generated at Sat Mar 28 12:20:39 2026 by rpki-client