$ rpki-client -vvf rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft File: 5EL5lVmsG6h-4TSLL8evCiL_smE.mft (raw, json) Hash identifier: HQPWpVrT+7N0JfOaUh8iuk+0/QQQn4deU1Ej+SM2K20= Subject key identifier: 3C:68:A0:CB:EC:7D:ED:59:D0:05:E9:26:97:F8:D5:3C:FA:9C:F2:FC Authority key identifier: E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 Certificate issuer: /CN=A9143336/serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Certificate serial: 2B98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft Manifest number: 2B85 Signing time: Thu 26 Mar 2026 02:44:52 +0000 Manifest this update: Thu 26 Mar 2026 02:44:52 +0000 Manifest next update: Thu 02 Apr 2026 02:44:52 +0000 Files and hashes: 1: 5EL5lVmsG6h-4TSLL8evCiL_smE.crl (hash: bVdqrr33H7SyC7BEFJqEsj0mCR+JfcM//T5FNwC8DoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 02:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11160 (0x2b98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143336, serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Validity Not Before: Mar 26 02:44:52 2026 GMT Not After : Apr 2 02:44:52 2026 GMT Subject: CN=69c49da4-b1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:00:55:e0:ef:eb:79:c4:1f:dd:b4:e0:3b:a4: f1:18:ea:5f:e2:de:36:25:5e:a7:56:62:7e:f1:1f: 72:4a:66:01:21:b8:92:3d:58:f2:50:fe:17:b8:fa: 82:ac:63:17:23:c9:c3:43:4c:7a:ff:18:15:be:42: 40:8f:40:70:65:3c:af:46:3c:37:f6:29:48:06:94: 79:ea:c3:0d:5a:79:2a:3d:a8:b6:cf:9a:c7:b6:aa: ba:98:c6:5f:36:53:5e:b0:ff:59:9a:19:71:6a:1b: 99:b8:c0:42:52:dd:cf:c8:bf:fb:b1:5f:2b:97:7f: 6d:7a:30:29:08:dc:f7:e2:20:85:93:66:21:f5:2a: c7:2e:86:d7:37:77:9d:0f:f6:23:10:e2:4e:52:6d: f7:8f:9e:f6:c3:59:16:f1:bf:05:93:a2:da:b8:40: 3b:2f:9a:2e:96:9a:41:30:41:64:c6:b7:ce:7f:13: 74:9a:a4:e6:63:69:1c:1d:b9:16:c5:b8:c2:9c:e4: aa:15:64:96:69:5c:68:df:60:ec:41:e5:5a:1c:d5: a7:e9:62:05:11:34:f2:03:65:ea:64:f8:54:3a:49: 95:07:5c:77:43:f4:ca:8a:a8:9e:fd:28:0a:78:54: 9c:69:5b:da:b7:07:a5:87:aa:b1:d4:21:64:ac:3b: 12:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:68:A0:CB:EC:7D:ED:59:D0:05:E9:26:97:F8:D5:3C:FA:9C:F2:FC X509v3 Authority Key Identifier: keyid:E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:f6:ff:76:95:79:e2:09:38:62:68:c2:be:94:a7:29:ae:be: 8b:ba:e1:b8:7f:ef:70:e0:7a:51:42:99:76:70:c8:e3:4b:93: 42:55:9d:fc:5e:eb:a6:ca:c8:ac:b2:78:46:41:cd:f5:6b:2b: b3:71:50:bb:ca:1b:f5:5a:ff:a4:a5:52:21:42:cd:67:96:c5: 81:de:50:a3:55:29:83:f5:3e:02:3b:8d:fc:54:c3:9a:51:52: 8e:4b:d8:dc:e8:19:40:90:d2:6e:f8:ee:3b:1f:ff:90:81:75: dc:63:a3:16:db:70:5e:66:2f:33:12:23:98:6b:31:0b:23:3a: 54:d4:d5:a3:1d:f7:49:b7:da:e0:ca:26:fc:33:0e:42:e3:fb: 55:90:58:0e:39:0e:f0:3c:f3:ff:7a:0c:68:e6:f9:29:42:f2: dd:d9:01:94:94:4e:35:92:5e:33:d4:b7:48:75:68:f9:e9:8b: 1c:d1:ed:07:ea:4e:87:98:06:d8:bf:af:c3:bc:9c:a7:89:f8: 43:61:00:75:bf:28:04:a8:31:13:1f:32:30:b2:d1:1d:4d:df: 62:fe:16:c3:3b:07:fa:33:78:f6:af:69:11:42:3a:12:5b:2f: e1:18:77:a4:7c:74:3d:c4:36:ec:50:9b:d4:4b:c7:bd:13:46: 72:39:b8:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICK5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMzMzYxMTAvBgNVBAUTKEU0NDJGOTk1NTlBQzFCQTg3RUUxMzQ4QjJGQzdBRjBB MjJGRkIyNjEwHhcNMjYwMzI2MDI0NDUyWhcNMjYwNDAyMDI0NDUyWjAYMRYwFAYD VQQDEw02OWM0OWRhNC1iMWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwBV4O/recQf3bTgO6TxGOpf4t42JV6nVmJ+8R9ySmYBIbiSPVjyUP4XuPqC rGMXI8nDQ0x6/xgVvkJAj0BwZTyvRjw39ilIBpR56sMNWnkqPai2z5rHtqq6mMZf NlNesP9ZmhlxahuZuMBCUt3PyL/7sV8rl39tejApCNz34iCFk2Yh9SrHLobXN3ed D/YjEOJOUm33j572w1kW8b8Fk6LauEA7L5oulppBMEFkxrfOfxN0mqTmY2kcHbkW xbjCnOSqFWSWaVxo32DsQeVaHNWn6WIFETTyA2XqZPhUOkmVB1x3Q/TKiqie/SgK eFScaVvatwelh6qx1CFkrDsSRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDxooMvs fe1Z0AXpJpf41Tz6nPL8MB8GA1UdIwQYMBaAFORC+ZVZrBuofuE0iy/Hrwoi/7Jh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzMzNi84RUU3RkMxRTA4 NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2aC00VFNMTDhldkNpTF9z bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVFTDVsVm1zRzZoLTRUU0xMOGV2Q2lMX3NtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzMzNi84RUU3RkMxRTA4NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2 aC00VFNMTDhldkNpTF9zbUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKPb/dpV54gk4YmjCvpSnKa6+i7rhuH/vcOB6UUKZdnDI40uTQlWd/F7rpsrI rLJ4RkHN9Wsrs3FQu8ob9Vr/pKVSIULNZ5bFgd5Qo1Upg/U+AjuN/FTDmlFSjkvY 3OgZQJDSbvjuOx//kIF13GOjFttwXmYvMxIjmGsxCyM6VNTVox33Sbfa4Mom/DMO QuP7VZBYDjkO8Dzz/3oMaOb5KULy3dkBlJRONZJeM9S3SHVo+emLHNHtB+pOh5gG 2L+vw7ycp4n4Q2EAdb8oBKgxEx8yMLLRHU3fYv4WwzsH+jN49q9pEUI6Elsv4Rh3 pHx0PcQ27FCb1EvHvRNGcjm4TQ== -----END CERTIFICATE-----Generated at Thu Mar 26 06:52:20 2026 by rpki-client