$ rpki-client -vvf rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft File: 5r9G5TDfkimPrAMq-8mECcRDBDk.mft (raw, json) Hash identifier: ++cljD4+I1H+iY03X5yv0ZJKx0l13Qbz2O2m9MyOdYs= Subject key identifier: E9:FF:04:A5:C5:B2:0C:9B:65:E6:76:33:F5:9B:48:2E:52:CC:E4:FE Authority key identifier: E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 Certificate issuer: /CN=A91527F9/serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Certificate serial: 3554 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft Manifest number: 3536 Signing time: Tue 24 Mar 2026 14:54:23 +0000 Manifest this update: Tue 24 Mar 2026 14:54:23 +0000 Manifest next update: Tue 31 Mar 2026 14:54:23 +0000 Files and hashes: 1: 5r9G5TDfkimPrAMq-8mECcRDBDk.crl (hash: A4OJ9cNKOgnww7du5GsWCWROtwHiHAJ0/T7reG6MhoA=) 2: 909C5126F0A711EEA6150174C4F9AE02.roa (hash: oqJ462g0qJmgmHMOMVy2Cc6+TnCbz3LnnEel6B43bqo=) 3: AD5BA998D85D11EB8E31070BC4F9AE02.roa (hash: mZjZ+p8cLcbwXds5Q+V/zmBkA9l9nadihJZ6Y3qg9aQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13652 (0x3554) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91527F9, serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Validity Not Before: Mar 24 14:54:23 2026 GMT Not After : Mar 31 14:54:23 2026 GMT Subject: CN=69c2a59f-4b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cc:7e:14:a2:4e:ae:73:bc:9b:b1:62:64:67: 50:c7:b8:d0:0d:c2:4e:1e:16:6c:e3:fa:51:74:2e: 5f:da:68:87:ac:f3:ea:e9:51:57:c8:db:14:f2:dd: b5:65:6a:3d:81:4c:d7:d0:c0:3e:11:cf:29:55:fa: 82:03:8c:ac:ee:b0:12:2b:46:10:ae:5e:e4:5e:29: f5:78:0b:91:f8:8f:e1:fa:aa:87:06:12:03:59:94: ff:3c:43:b4:03:15:d0:44:ba:54:2c:56:5a:be:cb: 18:db:ee:32:93:eb:21:7b:94:10:44:0e:08:4b:ff: 5f:c0:e8:8b:ed:6a:f2:2e:f4:61:08:b3:fd:fd:fd: 5d:cb:f2:26:ae:82:f1:fb:f7:16:06:51:34:1c:1a: 39:66:d9:31:73:e5:34:da:9d:f2:c7:bf:83:ab:77: fd:d4:ca:d9:7f:ba:c0:2e:51:17:c0:6a:31:51:9a: fd:ad:68:4a:9e:55:9f:50:f9:d4:98:a1:11:6b:5f: 6c:b9:49:d6:22:5f:cb:dd:4c:c5:fe:4f:ba:e8:2d: fc:74:d9:49:b1:70:00:ac:ca:63:d0:7c:0d:de:87: 36:54:a9:5e:d2:1d:6b:03:90:be:16:f9:45:fc:16: 67:31:82:5e:d0:42:c7:2c:93:9d:10:1e:76:08:36: 0d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FF:04:A5:C5:B2:0C:9B:65:E6:76:33:F5:9B:48:2E:52:CC:E4:FE X509v3 Authority Key Identifier: keyid:E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:4e:69:f3:03:42:bf:9f:7c:7c:92:04:df:98:cd:33:8e:ac: df:99:9c:00:e5:11:43:a9:53:77:0c:3c:d0:4f:9c:98:9e:25: d4:96:9f:1f:76:c9:36:ca:33:ef:a2:33:54:b6:a8:53:00:f8: 55:e7:ec:0b:01:24:f5:5b:23:54:ec:6c:94:40:21:2c:9a:ae: 42:d3:ae:7e:14:77:f3:1e:99:2f:51:4c:20:f3:3f:b5:38:28: f1:36:f6:e6:70:84:79:11:63:da:31:d0:89:59:57:18:66:e2: db:d8:44:e4:d9:98:88:53:d9:6d:bc:79:a8:dd:25:48:d2:ae: 26:75:8a:63:3f:72:0e:f4:4b:7b:8b:b4:9a:f0:9a:0a:83:f2: 48:bb:79:0c:3d:ca:95:93:4a:56:3b:a4:b1:44:05:12:87:9c: 17:dc:00:46:32:d3:58:a8:1b:c0:cf:1f:03:fb:2b:55:b7:5d: e2:2b:a3:d0:74:97:23:3f:a8:0e:f4:7c:d7:5c:b5:e6:7e:69: e5:11:70:c3:b6:e4:b6:5e:85:85:90:0d:24:ba:cd:86:07:7d: d5:e5:1b:6e:87:87:5d:11:45:53:20:ce:b9:54:66:0b:40:e4: 2d:79:ad:ff:2c:3b:1f:75:3e:4f:9a:e3:a6:cb:88:cb:c4:ab: de:71:dc:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI3RjkxMTAvBgNVBAUTKEU2QkY0NkU1MzBERjkyMjk4RkFDMDMyQUZCQzk4NDA5 QzQ0MzA0MzkwHhcNMjYwMzI0MTQ1NDIzWhcNMjYwMzMxMTQ1NDIzWjAYMRYwFAYD VQQDEw02OWMyYTU5Zi00YjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsx+FKJOrnO8m7FiZGdQx7jQDcJOHhZs4/pRdC5f2miHrPPq6VFXyNsU8t21 ZWo9gUzX0MA+Ec8pVfqCA4ys7rASK0YQrl7kXin1eAuR+I/h+qqHBhIDWZT/PEO0 AxXQRLpULFZavssY2+4yk+she5QQRA4IS/9fwOiL7WryLvRhCLP9/f1dy/ImroLx +/cWBlE0HBo5Ztkxc+U02p3yx7+Dq3f91MrZf7rALlEXwGoxUZr9rWhKnlWfUPnU mKERa19suUnWIl/L3UzF/k+66C38dNlJsXAArMpj0HwN3oc2VKle0h1rA5C+FvlF /BZnMYJe0ELHLJOdEB52CDYNXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOn/BKXF sgybZeZ2M/WbSC5SzOT+MB8GA1UdIwQYMBaAFOa/RuUw35Ipj6wDKvvJhAnEQwQ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjdGOS82RUQyRUJBQTFE OUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtpbVByQU1xLThtRUNjUkRC RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyOUc1VERma2ltUHJBTXEtOG1FQ2NSREJEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjdGOS82RUQyRUJBQTFEOUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtp bVByQU1xLThtRUNjUkRCRGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhk5p8wNCv598fJIE35jNM46s35mcAOURQ6lTdww80E+cmJ4l1JafH3bJNsoz 76IzVLaoUwD4VefsCwEk9VsjVOxslEAhLJquQtOufhR38x6ZL1FMIPM/tTgo8Tb2 5nCEeRFj2jHQiVlXGGbi29hE5NmYiFPZbbx5qN0lSNKuJnWKYz9yDvRLe4u0mvCa CoPySLt5DD3KlZNKVjuksUQFEoecF9wARjLTWKgbwM8fA/srVbdd4iuj0HSXIz+o DvR811y15n5p5RFww7bktl6FhZANJLrNhgd91eUbboeHXRFFUyDOuVRmC0DkLXmt /yw7H3U+T5rjpsuIy8Sr3nHcYg== -----END CERTIFICATE-----Generated at Thu Mar 26 12:39:58 2026 by rpki-client