$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: ruBSQgxugFir/vBzABtxYspVgEaEtrFY+d1NR11TWEk= Subject key identifier: 2B:C9:47:3E:0A:BF:8E:65:F0:00:26:1B:00:CB:17:3D:04:EA:E5:38 Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 0404 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 03EE Signing time: Wed 25 Mar 2026 00:11:28 +0000 Manifest this update: Wed 25 Mar 2026 00:11:27 +0000 Manifest next update: Wed 01 Apr 2026 00:11:27 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: C6aUttFtuID+ot6cPfz8KgQjj55ZHzgiS+W89xtjdY4=) 2: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: 8QW6SQzpdf8WqjCw4pnkX0HYCGVvI59bpneK0fchnuE=) 3: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: fOCLl/2VKdNa0vhoLYzfZhLV3T1IotJ/iZtFzsPrmrk=) 4: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: YL8hbnsNwgCnn/NcUCv0iY/57aut2UGD2Ataw87mmvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1028 (0x404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: Mar 25 00:11:27 2026 GMT Not After : Apr 1 00:11:27 2026 GMT Subject: CN=69c32830-d584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:af:f4:1a:23:08:8a:b7:91:28:8e:86:26:43: 24:9b:73:c5:77:c2:3e:17:00:60:c0:c4:50:9a:cb: 9b:6c:d9:30:d5:e3:43:35:4e:74:39:bd:4e:24:c2: a1:1a:95:13:e2:4f:1c:e8:89:e5:ea:15:0d:32:16: 8a:89:f3:8b:bc:67:61:61:85:01:8b:2b:7c:de:92: 7e:27:33:0b:3d:ff:51:fd:c1:dd:50:43:3e:00:8f: 01:7b:6a:ff:aa:ab:0c:42:ad:ce:78:ec:5d:ec:bc: 69:bd:0d:c5:e0:97:20:21:66:8e:0a:47:79:35:89: c5:b1:49:65:21:5c:48:9e:e8:50:d0:4a:a5:0d:85: b7:07:21:ef:bd:b3:2e:b8:99:c6:16:d8:74:8c:3f: 7d:bf:e3:ed:f3:fb:14:9d:43:6a:40:be:41:ba:42: 86:d0:c4:14:a1:32:a3:47:0f:a9:cb:52:a5:32:f8: 3b:da:53:6c:c8:b6:ca:80:5f:e7:f7:5f:aa:85:05: 66:76:b5:07:b6:a9:1e:0d:12:0e:7d:c5:a8:42:96: b2:2f:f2:f1:5c:18:43:1b:fd:8e:e4:72:19:b1:42: 61:24:49:14:de:88:4c:84:57:28:57:f9:ab:b7:a0: a4:0a:b3:f8:53:e3:96:03:24:5c:9a:aa:87:aa:bb: 5a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C9:47:3E:0A:BF:8E:65:F0:00:26:1B:00:CB:17:3D:04:EA:E5:38 X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:1b:b4:89:a9:0e:6e:09:97:83:20:33:57:a7:3b:86:bb:0e: d8:ff:6b:62:c1:fa:71:d1:56:7b:da:27:23:7e:b1:19:87:12: 71:fb:f3:5b:8f:52:61:1b:5e:98:6d:49:d8:0a:e1:a9:54:a6: 30:e3:c1:b1:2c:f8:fe:d3:ac:3e:42:5e:25:91:04:21:a8:93: eb:95:57:56:13:21:f6:79:71:6d:4f:c8:2b:73:2e:c8:65:40: e4:3a:ef:c8:67:ce:8a:d2:e6:7d:9b:87:13:42:6d:13:32:af: 11:d7:08:ab:a6:9a:ce:17:77:59:2b:20:ec:8d:5f:f5:ae:fc: 7f:fb:45:fc:5f:c9:a7:01:3e:35:24:f4:b5:4c:55:96:25:b7: d7:6a:9c:68:81:a9:67:c5:70:3a:78:8f:85:d1:bc:fd:0a:35: f3:c4:11:c5:62:34:e6:4a:25:95:15:cd:e1:64:fe:7b:b3:40: 8f:da:d9:33:8b:89:3e:79:be:8b:b2:fd:52:35:57:23:68:9e: 25:e8:87:11:d6:d4:b7:60:01:b9:9d:f3:92:59:8d:ab:8e:1a: 4f:b1:a4:24:c7:9d:08:87:d1:9a:cb:0e:29:12:69:17:2f:48: 53:e8:df:1c:85:f8:7c:99:8e:09:dd:da:28:06:87:01:6b:8f: 0b:30:b2:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjYwMzI1MDAxMTI3WhcNMjYwNDAxMDAxMTI3WjAYMRYwFAYD VQQDEw02OWMzMjgzMC1kNTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvK/0GiMIireRKI6GJkMkm3PFd8I+FwBgwMRQmsubbNkw1eNDNU50Ob1OJMKh GpUT4k8c6Inl6hUNMhaKifOLvGdhYYUBiyt83pJ+JzMLPf9R/cHdUEM+AI8Be2r/ qqsMQq3OeOxd7LxpvQ3F4JcgIWaOCkd5NYnFsUllIVxInuhQ0EqlDYW3ByHvvbMu uJnGFth0jD99v+Pt8/sUnUNqQL5BukKG0MQUoTKjRw+py1KlMvg72lNsyLbKgF/n 91+qhQVmdrUHtqkeDRIOfcWoQpayL/LxXBhDG/2O5HIZsUJhJEkU3ohMhFcoV/mr t6CkCrP4U+OWAyRcmqqHqrtaJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCvJRz4K v45l8AAmGwDLFz0E6uU4MB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVxu0iakObgmXgyAzV6c7hrsO2P9rYsH6cdFWe9onI36xGYcScfvzW49SYRte mG1J2ArhqVSmMOPBsSz4/tOsPkJeJZEEIaiT65VXVhMh9nlxbU/IK3MuyGVA5Drv yGfOitLmfZuHE0JtEzKvEdcIq6aazhd3WSsg7I1f9a78f/tF/F/JpwE+NST0tUxV liW312qcaIGpZ8VwOniPhdG8/Qo188QRxWI05kollRXN4WT+e7NAj9rZM4uJPnm+ i7L9UjVXI2ieJeiHEdbUt2ABuZ3zklmNq44aT7GkJMedCIfRmssOKRJpFy9IU+jf HIX4fJmOCd3aKAaHAWuPCzCyWw== -----END CERTIFICATE-----Generated at Thu Mar 26 06:50:47 2026 by rpki-client