$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft File: 0Q5D4Fk97x241_RMbxzRPnPC8jA.mft (raw, json) Hash identifier: xUqb5WsuaZAlc/HiCHIiIKk/UurSNh5R1hrQ5YbUfZY= Subject key identifier: 65:32:0F:9D:74:E5:E6:A4:A4:21:58:16:FC:24:9D:12:35:8F:97:3D Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Certificate serial: 0BC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft Manifest number: 0BAE Signing time: Tue 24 Mar 2026 18:52:21 +0000 Manifest this update: Tue 24 Mar 2026 18:52:21 +0000 Manifest next update: Tue 31 Mar 2026 18:52:21 +0000 Files and hashes: 1: 0Q5D4Fk97x241_RMbxzRPnPC8jA.crl (hash: QL5Ui5cZFb2ro2cDOX1RFUoD5TOqlt7Edj1Cuy9w9nU=) 2: 5F47B232DF0711F0899AA5EF5C6F56BC.roa (hash: RljGAjjwZ/pe6/m6sE6jioJluQgFaLFt64ScvocrVSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3013 (0xbc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325DC, serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Validity Not Before: Mar 24 18:52:21 2026 GMT Not After : Mar 31 18:52:21 2026 GMT Subject: CN=69c2dd65-720b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ed:9b:f5:8f:92:78:1a:48:04:21:67:eb:17: 32:67:4c:67:b4:68:87:c2:27:b4:59:c3:f9:65:d0: 84:52:23:e8:34:57:8f:8e:83:00:cb:3d:df:d2:e2: b5:d3:5d:dd:87:af:fa:74:7a:ef:dc:89:00:f9:66: 94:83:d9:ca:55:ca:04:13:47:6b:3c:1c:19:14:4d: 24:18:97:c3:d0:0c:92:20:bd:f9:8a:66:77:44:c4: 56:eb:1f:c3:95:c2:4b:3c:84:3f:dc:2a:0d:4e:93: ed:a8:bc:6f:56:1e:f1:c6:85:5a:86:c4:7e:15:c1: 44:33:02:2b:ce:c7:54:a6:1a:7b:1e:dd:4b:3c:54: 96:e4:1a:87:54:b0:50:37:0e:fe:b0:17:cb:6d:32: 3f:4a:30:4e:08:c4:f3:ca:b0:17:a9:56:e5:20:ba: 8d:6c:3f:a1:73:b4:ec:ea:04:a5:74:fc:2b:38:55: 83:5d:4a:a2:da:23:f9:3a:64:20:66:50:5d:64:a8: 3e:77:0d:18:44:04:08:4e:93:93:85:bc:24:17:c5: c7:f5:b1:81:4f:5c:37:53:06:3b:91:71:bb:8f:de: 52:1f:8b:3f:06:97:d4:75:93:67:a7:e9:cf:60:75: 99:73:de:bd:95:93:a0:41:72:13:60:4d:a8:a8:32: 4f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:32:0F:9D:74:E5:E6:A4:A4:21:58:16:FC:24:9D:12:35:8F:97:3D X509v3 Authority Key Identifier: keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:73:c9:34:20:ed:d3:b2:6f:fd:9f:ca:ea:2f:e7:1c:86:66: d5:fc:71:45:5d:6b:05:14:6c:13:34:ad:15:88:90:3d:25:ca: d4:5c:87:6b:cd:01:3c:2b:4d:8d:cb:4f:76:b1:9a:e6:e0:08: 91:21:26:4b:b3:4b:c8:21:83:55:51:7d:71:c2:6f:4a:a5:25: c3:74:cd:e8:bf:6c:31:7f:16:8f:93:3a:0f:9a:c6:de:02:4a: 82:79:28:1b:cd:9c:66:a9:8d:65:ad:65:72:e1:32:e5:c1:5f: 0a:91:6f:0a:18:5d:b6:f3:1b:15:b1:bc:8b:be:ed:2f:37:98: 99:9e:0f:02:56:3b:a2:c4:3e:8b:01:16:68:49:18:7d:ec:2a: d4:66:6e:3e:9f:01:bb:41:4c:c7:14:67:d1:9b:8f:fb:de:76: b8:c8:6e:6a:99:d6:da:bb:74:0c:a3:5a:55:3f:1e:c6:b1:42: 41:2e:48:72:e9:d2:2b:4d:99:bf:e3:a5:4f:5e:ed:ad:fd:19: 06:cd:fe:2f:92:c0:31:9f:dc:12:a0:74:2a:cd:25:77:28:78: 4f:eb:fa:94:9d:35:9c:ad:ea:9c:75:fd:6e:62:95:09:a7:34: b5:40:35:9a:7a:76:83:93:79:95:d4:51:76:f5:3b:c5:72:2a: ab:95:d9:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1REMxMTAvBgNVBAUTKEQxMEU0M0UwNTkzREVGMURCOEQ3RjQ0QzZGMUNEMTNF NzNDMkYyMzAwHhcNMjYwMzI0MTg1MjIxWhcNMjYwMzMxMTg1MjIxWjAYMRYwFAYD VQQDEw02OWMyZGQ2NS03MjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlO2b9Y+SeBpIBCFn6xcyZ0xntGiHwie0WcP5ZdCEUiPoNFePjoMAyz3f0uK1 013dh6/6dHrv3IkA+WaUg9nKVcoEE0drPBwZFE0kGJfD0AySIL35imZ3RMRW6x/D lcJLPIQ/3CoNTpPtqLxvVh7xxoVahsR+FcFEMwIrzsdUphp7Ht1LPFSW5BqHVLBQ Nw7+sBfLbTI/SjBOCMTzyrAXqVblILqNbD+hc7Ts6gSldPwrOFWDXUqi2iP5OmQg ZlBdZKg+dw0YRAQITpOThbwkF8XH9bGBT1w3UwY7kXG7j95SH4s/BpfUdZNnp+nP YHWZc969lZOgQXITYE2oqDJPawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGUyD510 5eakpCFYFvwknRI1j5c9MB8GA1UdIwQYMBaAFNEOQ+BZPe8duNf0TG8c0T5zwvIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVEQy80NjEyRDUxRTQz MTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4MjQxX1JNYnh6UlBuUEM4 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBRNUQ0Rms5N3gyNDFfUk1ieHpSUG5QQzhqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVEQy80NjEyRDUxRTQzMTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4 MjQxX1JNYnh6UlBuUEM4akEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcXPJNCDt07Jv/Z/K6i/nHIZm1fxxRV1rBRRsEzStFYiQPSXK1FyHa80BPCtN jctPdrGa5uAIkSEmS7NLyCGDVVF9ccJvSqUlw3TN6L9sMX8Wj5M6D5rG3gJKgnko G82cZqmNZa1lcuEy5cFfCpFvChhdtvMbFbG8i77tLzeYmZ4PAlY7osQ+iwEWaEkY fewq1GZuPp8Bu0FMxxRn0ZuP+952uMhuapnW2rt0DKNaVT8exrFCQS5IcunSK02Z v+OlT17trf0ZBs3+L5LAMZ/cEqB0Ks0ldyh4T+v6lJ01nK3qnHX9bmKVCac0tUA1 mnp2g5N5ldRRdvU7xXIqq5XZIw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:29:25 2026 by rpki-client