$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft File: 5pLFtgs-8cIERDn8OQrVbcPLzWM.mft (raw, json) Hash identifier: QW1Y6U8wAEtlTcaDBSKNJe7muF0z7UTSowXD8TIz138= Subject key identifier: FB:FE:35:AD:73:19:7C:C1:69:36:E5:6E:D1:FE:E6:DA:DC:06:1F:14 Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Certificate serial: 0951 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft Manifest number: 08B7 Signing time: Tue 24 Mar 2026 20:50:35 +0000 Manifest this update: Tue 24 Mar 2026 20:50:34 +0000 Manifest next update: Tue 31 Mar 2026 20:50:34 +0000 Files and hashes: 1: 5pLFtgs-8cIERDn8OQrVbcPLzWM.crl (hash: sdfLPicMYuKCfTKIE9bTPPV6LPoS+r82b+VDfFkg7Os=) 2: 4D135E8012B611F1B7F84153403D8C67.roa (hash: vRwMM+obrOmc0THTJo1CmaR/5N5PMrxAQ2jFuL8LMQI=) 3: 311C494286CC11F09348D16BC4F9AE02.roa (hash: hOODJuT+qDz3zKXE7IWNkIpv3MyslDvXZEoZdj7xXAk=) 4: 215A8FDE4B9E11EEBF766C7FC4F9AE02.roa (hash: n6tcvXpr4IAe1S5u61Xx4m/84oyxH16o7/TxMhPSnE4=) 5: F3643AD6089C11F09BB44535C4F9AE02.roa (hash: h+M8yWQJoBkACzAfTIpQdErBAlAmwZgxPQ+K7UT/ZJ8=) 6: 9765FB988A5D11EE9E6AA223C4F9AE02.roa (hash: EEYzCbyeqxDaeKgknxCRHT1rePeuinavgu4aD0/oSEk=) 7: 244B9D1874CB11EEB3C0267DC4F9AE02.roa (hash: NgHinJNOa5WD0lzlF+pCDsZCucZ3Hfmi2lX8TWyz05k=) 8: 79986EE8FE3D11EFB763F62EC4F9AE02.roa (hash: b0d7KFkivg+pSQhSopB2OC7InpEaaI034fHeKJQ1XME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:50:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2385 (0x951) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Validity Not Before: Mar 24 20:50:34 2026 GMT Not After : Mar 31 20:50:34 2026 GMT Subject: CN=69c2f91b-bf96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c4:8c:bb:ac:b1:96:02:a3:c9:50:c2:33:5f: 12:9e:94:a2:3d:d9:6f:80:ca:45:d6:a9:45:46:15: fe:6f:3d:4c:3a:13:8c:03:dd:b5:b2:fd:24:7e:d8: dd:8f:47:f2:52:d9:b0:da:1c:4c:1b:13:a4:64:91: 2e:9b:dd:2c:51:ce:e0:e7:74:a8:0f:26:a0:4c:a2: a7:f8:83:92:09:dc:d0:6b:aa:dd:7d:2e:a6:3f:99: 8f:a7:1b:47:69:45:63:2a:37:f1:1f:a2:9c:42:34: 18:68:a6:9b:fa:eb:1a:f4:30:6c:f4:f5:b2:e9:b8: 89:0e:60:0a:c4:a0:45:9b:fd:e5:8e:bb:cc:5e:3d: 5f:44:b6:ab:cf:67:03:2e:22:48:da:b0:bb:5a:8f: 6f:51:fe:29:76:d3:54:d7:c8:fb:88:10:ec:02:fd: 6f:25:c5:78:2d:9f:8e:26:3c:bd:b2:f6:6e:6d:92: 9a:9c:6d:30:62:2b:00:4d:ae:55:0a:40:11:33:98: 72:18:a4:68:7b:f5:21:b4:15:29:63:aa:e5:2a:77: 8a:93:43:30:18:81:45:14:c9:e8:16:8a:6c:6f:83: b6:ec:b6:05:74:47:0f:3c:e3:fc:be:3d:bb:31:be: 97:41:b5:fa:51:dd:6e:2f:fd:a7:90:ce:8e:74:b8: 75:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FE:35:AD:73:19:7C:C1:69:36:E5:6E:D1:FE:E6:DA:DC:06:1F:14 X509v3 Authority Key Identifier: keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:39:de:ae:00:38:af:65:8b:ce:11:83:09:94:9a:f6:4f:bb: 0a:39:e9:21:47:52:e6:89:aa:59:31:d4:28:87:4d:5e:45:52: 74:c4:39:78:09:b3:e2:1e:d5:15:62:d0:2f:a2:f2:f9:05:e2: cd:a0:d4:6f:59:e1:c9:77:79:c9:60:5a:8d:9e:38:23:ad:a6: 2a:26:70:1e:70:32:ab:0a:00:9e:90:10:76:1f:7b:0a:b4:9f: 03:c9:82:a1:ee:bd:38:0f:7a:eb:14:f9:7b:34:f7:9a:12:37: 87:ee:a5:a7:4b:d0:58:4e:1f:ed:44:9b:b3:29:12:01:5a:53: bb:fa:86:13:94:0d:29:93:d5:bd:f9:b1:06:99:c1:73:a0:65: 92:25:7c:86:a5:bd:2c:23:12:52:92:3b:84:4d:7b:2f:f8:ff: f0:66:47:83:b8:42:5f:8b:f6:f0:50:f1:c3:6f:a5:d9:29:01: 3f:4b:ae:d8:37:b8:39:35:61:47:73:22:ae:a8:d1:27:81:62: 45:0d:ec:a2:4c:b4:c0:b5:f4:07:bf:75:01:0b:25:e5:89:fd: 10:e6:46:be:76:df:7d:0b:24:ee:24:7f:99:d9:10:a8:1b:d8: ce:1e:17:9c:9e:2a:3f:3a:c9:5f:32:69:34:55:6e:7f:87:69: 9b:3b:85:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QxRUExMTAvBgNVBAUTKEU2OTJDNUI2MEIzRUYxQzIwNDQ0MzlGQzM5MEFENTZE QzNDQkNENjMwHhcNMjYwMzI0MjA1MDM0WhcNMjYwMzMxMjA1MDM0WjAYMRYwFAYD VQQDEw02OWMyZjkxYi1iZjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMSMu6yxlgKjyVDCM18SnpSiPdlvgMpF1qlFRhX+bz1MOhOMA921sv0kftjd j0fyUtmw2hxMGxOkZJEum90sUc7g53SoDyagTKKn+IOSCdzQa6rdfS6mP5mPpxtH aUVjKjfxH6KcQjQYaKab+usa9DBs9PWy6biJDmAKxKBFm/3ljrvMXj1fRLarz2cD LiJI2rC7Wo9vUf4pdtNU18j7iBDsAv1vJcV4LZ+OJjy9svZubZKanG0wYisATa5V CkARM5hyGKRoe/UhtBUpY6rlKneKk0MwGIFFFMnoFopsb4O27LYFdEcPPOP8vj27 Mb6XQbX6Ud1uL/2nkM6OdLh1wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPv+Na1z GXzBaTblbtH+5trcBh8UMB8GA1UdIwQYMBaAFOaSxbYLPvHCBEQ5/DkK1W3Dy81j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDFFQS85QzkzMkI0ODE3 M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThjSUVSRG44T1FyVmJjUEx6 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVwTEZ0Z3MtOGNJRVJEbjhPUXJWYmNQTHpXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDFFQS85QzkzMkI0ODE3M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThj SUVSRG44T1FyVmJjUEx6V00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjDnergA4r2WLzhGDCZSa9k+7CjnpIUdS5omqWTHUKIdNXkVSdMQ5eAmz4h7V FWLQL6Ly+QXizaDUb1nhyXd5yWBajZ44I62mKiZwHnAyqwoAnpAQdh97CrSfA8mC oe69OA966xT5ezT3mhI3h+6lp0vQWE4f7USbsykSAVpTu/qGE5QNKZPVvfmxBpnB c6BlkiV8hqW9LCMSUpI7hE17L/j/8GZHg7hCX4v28FDxw2+l2SkBP0uu2De4OTVh R3MirqjRJ4FiRQ3soky0wLX0B791AQsl5Yn9EOZGvnbffQsk7iR/mdkQqBvYzh4X nJ4qPzrJXzJpNFVuf4dpmzuFVw== -----END CERTIFICATE-----Generated at Thu Mar 26 04:13:57 2026 by rpki-client