$ rpki-client -vvf rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft File: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft (raw, json) Hash identifier: /RAhOFrC2hEqB9k7H6qYvrS6JC8z0goQ8vrvU1BNObQ= Subject key identifier: BF:C0:82:D7:94:50:F8:6B:12:9B:1F:DA:6D:A7:29:37:51:DA:DE:C7 Authority key identifier: E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25 Certificate issuer: /CN=A914A47A/serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25 Certificate serial: 352A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft Manifest number: 3523 Signing time: Tue 24 Mar 2026 14:51:54 +0000 Manifest this update: Tue 24 Mar 2026 14:51:53 +0000 Manifest next update: Tue 31 Mar 2026 14:51:53 +0000 Files and hashes: 1: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl (hash: 9DzjBLtW6/tMtXX/eZvdAl+4hGwJvepGF6a75EJYLrM=) 2: A5C01D6ED15511EA904EF30BC4F9AE02.roa (hash: TPYIIy7giECCiyhkn2zqAxX7e1+jAVNc9TByU391IOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13610 (0x352a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A47A, serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25 Validity Not Before: Mar 24 14:51:53 2026 GMT Not After : Mar 31 14:51:53 2026 GMT Subject: CN=69c2a50a-2d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:66:9e:1c:9f:f0:67:d6:75:82:a0:70:d7:e1: 37:4a:54:6f:83:83:27:71:75:26:0a:06:ff:55:6d: ae:18:00:43:b5:b4:52:7c:bb:00:42:cf:b8:c3:c6: 3a:c3:9e:79:19:76:a0:80:3e:bf:7e:0d:3e:25:7a: 21:28:07:f6:27:a8:4a:50:b3:9a:72:35:48:d7:9c: e1:34:b4:63:46:fe:2f:3c:37:1d:a9:3b:84:0e:8d: 5d:17:a9:b4:0e:32:31:e6:89:cb:76:2e:39:68:e4: 2f:16:22:6c:ac:4b:15:22:52:c8:ae:b3:a1:35:9b: 22:ec:ee:85:37:54:84:c9:e7:5d:9b:b2:0d:ce:3c: 3d:94:a3:ae:cf:fe:af:e8:84:27:9c:a8:69:da:46: b1:cf:96:b9:c1:8e:26:d8:c2:1b:72:2a:7a:46:5e: da:82:b6:ce:24:2d:68:1e:34:46:a4:2a:6e:3d:7a: e5:46:5c:8a:61:d6:57:2d:b9:28:c1:05:91:02:5d: 9f:20:4c:57:c1:ec:9f:3e:b7:20:aa:ed:c8:30:f9: 2c:79:23:3d:d2:0e:c8:fa:e7:4d:32:8c:b1:13:ae: e5:19:90:6c:ef:8e:65:70:16:53:70:01:3b:26:03: e5:e7:64:af:4d:65:f0:ca:f3:96:54:53:ca:d5:3d: 0f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C0:82:D7:94:50:F8:6B:12:9B:1F:DA:6D:A7:29:37:51:DA:DE:C7 X509v3 Authority Key Identifier: keyid:E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:6a:8a:59:34:90:a5:b1:57:03:15:da:96:bc:70:85:cc:78: 44:b4:5e:a0:a3:05:2f:87:54:77:3e:6f:7d:ef:e9:fc:65:a8: 83:80:78:32:b0:49:9b:01:6d:dd:98:03:2a:a9:29:d3:fb:df: 5d:ea:eb:8b:3d:43:6d:62:08:b4:e7:c4:5c:98:bb:5e:f5:52: 48:84:ca:5e:63:f1:4c:88:73:8e:3f:46:30:97:d2:6f:02:f7: 9b:95:91:0d:b9:82:10:dd:f4:a0:ba:6f:e9:09:9b:59:9d:69: 45:c9:9b:2d:09:4f:fb:2f:d3:50:95:73:be:9b:44:13:4e:0e: e9:29:61:18:ac:af:8f:e5:29:45:c6:89:71:c5:9b:52:65:49: c4:d0:63:0c:e8:08:2a:c5:84:91:22:07:6e:1d:99:77:1a:4b: bb:dd:b5:16:03:d1:e9:09:10:ed:36:b5:cd:7a:eb:27:05:33: 98:1a:78:5d:53:5e:f2:36:db:0f:d0:ff:c8:5b:ab:a0:f1:8d: 12:47:58:cc:5b:7d:ea:c6:8b:6e:88:0f:b9:34:0d:7d:db:65: f6:bc:54:7a:06:ba:f7:90:71:5d:e6:9d:5a:26:8c:22:be:d4: 64:68:d7:22:e6:87:64:06:a6:da:21:bc:c4:35:a7:13:0f:81: 68:e2:fd:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0N0ExMTAvBgNVBAUTKEU1MkQ3RjdGQkFBQzFGNzVBRkZBNzYyRURCM0YyODE2 MEJDRkJEMjUwHhcNMjYwMzI0MTQ1MTUzWhcNMjYwMzMxMTQ1MTUzWjAYMRYwFAYD VQQDEw02OWMyYTUwYS0yZDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWaeHJ/wZ9Z1gqBw1+E3SlRvg4MncXUmCgb/VW2uGABDtbRSfLsAQs+4w8Y6 w555GXaggD6/fg0+JXohKAf2J6hKULOacjVI15zhNLRjRv4vPDcdqTuEDo1dF6m0 DjIx5onLdi45aOQvFiJsrEsVIlLIrrOhNZsi7O6FN1SEyeddm7INzjw9lKOuz/6v 6IQnnKhp2kaxz5a5wY4m2MIbcip6Rl7agrbOJC1oHjRGpCpuPXrlRlyKYdZXLbko wQWRAl2fIExXweyfPrcgqu3IMPkseSM90g7I+udNMoyxE67lGZBs745lcBZTcAE7 JgPl52SvTWXwyvOWVFPK1T0P7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL/AgteU UPhrEpsf2m2nKTdR2t7HMB8GA1UdIwQYMBaAFOUtf3+6rB91r/p2Lts/KBYLz70l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTQ3QS80QUYyMjFEQTFE OTgxMUUyQUQyQjM5ODIwOEIwMkNEMi81UzFfZjdxc0gzV3Ytbll1Mno4b0ZndlB2 U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVTMV9mN3FzSDNXdi1uWXUyejhvRmd2UHZTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTQ3QS80QUYyMjFEQTFEOTgxMUUyQUQyQjM5ODIwOEIwMkNEMi81UzFfZjdxc0gz V3Ytbll1Mno4b0ZndlB2U1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiGqKWTSQpbFXAxXalrxwhcx4RLReoKMFL4dUdz5vfe/p/GWog4B4MrBJmwFt 3ZgDKqkp0/vfXerriz1DbWIItOfEXJi7XvVSSITKXmPxTIhzjj9GMJfSbwL3m5WR DbmCEN30oLpv6QmbWZ1pRcmbLQlP+y/TUJVzvptEE04O6SlhGKyvj+UpRcaJccWb UmVJxNBjDOgIKsWEkSIHbh2ZdxpLu921FgPR6QkQ7Ta1zXrrJwUzmBp4XVNe8jbb D9D/yFuroPGNEkdYzFt96saLbogPuTQNfdtl9rxUega695BxXeadWiaMIr7UZGjX IuaHZAam2iG8xDWnEw+BaOL9tg== -----END CERTIFICATE-----Generated at Thu Mar 26 13:01:55 2026 by rpki-client