$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft File: 5iFGnNWlePlHq0frDs6Ik5uH6_s.mft (raw, json) Hash identifier: CDNFDmhqdr9upBWptRCGx49NvupPPok9Wl5e3TKEPPo= Subject key identifier: 9F:4E:7E:57:59:74:A9:2C:AC:B3:66:0D:5A:55:ED:9A:DA:33:5D:06 Authority key identifier: E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB Certificate issuer: /CN=A9170982/serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB Certificate serial: 0453 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft Manifest number: 0427 Signing time: Wed 25 Mar 2026 00:05:10 +0000 Manifest this update: Wed 25 Mar 2026 00:05:09 +0000 Manifest next update: Wed 01 Apr 2026 00:05:09 +0000 Files and hashes: 1: 5iFGnNWlePlHq0frDs6Ik5uH6_s.crl (hash: Ck3la0PsUz9WAzwa2uLAgGy4gp7yJ/dmPGLxCu2LjqE=) 2: C8165660822F11EEABA7D533C4F9AE02.roa (hash: h/A2ekMJ720Ho+otYfeYLNAk/zsB1s3sx7Qk4yapaYo=) 3: 2B2CF35A35A411ED89F95974C4F9AE02.roa (hash: 8jF/NpHwWErBgGhdC58vIaXRoe97OZ3zIJ5DPfjZVz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1107 (0x453) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170982, serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB Validity Not Before: Mar 25 00:05:09 2026 GMT Not After : Apr 1 00:05:09 2026 GMT Subject: CN=69c326b6-f195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6c:ee:7f:9d:b4:03:e3:55:5d:e2:6e:83:72: 89:3b:65:d6:b5:80:8c:86:87:69:2e:35:09:85:b4: b4:a9:6e:4c:73:45:5d:16:99:0e:f1:f2:80:e6:55: 65:03:77:77:39:f6:89:3a:44:9e:db:75:9c:b6:3f: 3e:49:cb:80:ae:6f:90:97:09:3b:7c:b9:62:b3:bf: 3e:25:0b:d4:4e:f7:92:da:84:1a:bf:a8:61:97:ca: 06:51:74:e9:c1:65:81:08:0a:bf:21:4c:b6:c3:38: 86:87:c5:89:a3:10:ca:a6:1a:33:3d:b8:19:a0:7e: 2c:81:19:ab:6a:c0:52:6e:0b:a1:87:0d:71:26:7f: 27:dc:89:35:19:36:c9:72:f3:64:f4:71:a9:dc:18: eb:47:32:9c:b6:38:a4:ea:39:70:db:32:5f:db:a6: 3a:d9:eb:90:f3:28:3c:80:0d:65:d9:25:70:cb:27: 77:fd:d5:58:5c:73:85:bc:7e:69:68:14:10:a8:ee: 75:47:4d:4a:b5:d8:77:3c:1b:9c:72:6c:88:2a:8c: 2a:2b:6a:16:17:6f:6f:63:06:2a:82:0f:a1:52:49: 34:6c:67:af:3d:da:c7:7b:d4:01:a6:54:fa:26:39: 11:cf:1a:22:e6:26:02:89:8e:27:83:86:8c:ab:db: 38:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4E:7E:57:59:74:A9:2C:AC:B3:66:0D:5A:55:ED:9A:DA:33:5D:06 X509v3 Authority Key Identifier: keyid:E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:cf:fd:1a:7e:6c:a2:d8:83:e3:a6:46:21:a3:fe:f1:de:f9: 6e:75:4d:4c:5f:3d:47:f4:89:91:fb:5c:f1:26:84:7a:7c:bf: 28:c0:18:2c:59:3b:d2:6d:b5:91:3b:14:31:cb:ce:37:28:fb: 15:d8:ba:e8:a6:cc:b0:5b:8b:09:a5:68:9d:64:16:a1:f3:02: 37:60:9c:33:35:38:cb:04:b1:06:e1:ea:b5:77:f6:0e:44:7e: ba:0f:9c:c8:d4:81:80:61:10:5a:72:13:6d:60:8a:ea:c1:63: 1a:60:36:5d:77:2b:f1:8e:0e:70:f0:25:cf:d2:81:81:d2:3c: 0f:3f:d7:08:e2:44:65:1e:69:42:8a:ae:0e:e7:8a:c1:31:8e: d5:07:c6:fa:20:5c:de:f9:87:37:e3:81:ae:b4:79:29:c4:25: a4:47:d1:0b:92:7c:16:27:11:96:cd:42:9e:9e:62:1a:33:da: f1:44:92:ac:d5:e8:96:d3:46:4b:70:92:09:95:42:db:68:3a: c6:10:80:ae:83:75:9c:b1:ce:66:9a:23:6c:54:d8:98:55:1c: c4:4f:02:24:fb:9c:2d:eb:0f:34:c2:3f:0b:92:10:77:dc:3a: 15:fb:c1:eb:5a:ac:53:65:03:e7:2a:e2:50:0e:ea:3e:83:78: bd:d4:e3:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5ODIxMTAvBgNVBAUTKEU2MjE0NjlDRDVBNTc4Rjk0N0FCNDdFQjBFQ0U4ODkz OUI4N0VCRkIwHhcNMjYwMzI1MDAwNTA5WhcNMjYwNDAxMDAwNTA5WjAYMRYwFAYD VQQDEw02OWMzMjZiNi1mMTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGzuf520A+NVXeJug3KJO2XWtYCMhodpLjUJhbS0qW5Mc0VdFpkO8fKA5lVl A3d3OfaJOkSe23Wctj8+ScuArm+Qlwk7fLlis78+JQvUTveS2oQav6hhl8oGUXTp wWWBCAq/IUy2wziGh8WJoxDKphozPbgZoH4sgRmrasBSbguhhw1xJn8n3Ik1GTbJ cvNk9HGp3BjrRzKctjik6jlw2zJf26Y62euQ8yg8gA1l2SVwyyd3/dVYXHOFvH5p aBQQqO51R01Ktdh3PBuccmyIKowqK2oWF29vYwYqgg+hUkk0bGevPdrHe9QBplT6 JjkRzxoi5iYCiY4ng4aMq9s4HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ9OfldZ dKksrLNmDVpV7ZraM10GMB8GA1UdIwQYMBaAFOYhRpzVpXj5R6tH6w7OiJObh+v7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9EOEI2ODY5NkFD MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi81aUZHbk5XbGVQbEhxMGZyRHM2SWs1dUg2 X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpRkduTldsZVBsSHEwZnJEczZJazV1SDZfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDk4Mi9EOEI2ODY5NkFDMTMxMUVDQjc3NkIyMDlDNEY5QUUwMi81aUZHbk5XbGVQ bEhxMGZyRHM2SWs1dUg2X3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATc/9Gn5sotiD46ZGIaP+8d75bnVNTF89R/SJkftc8SaEeny/KMAYLFk70m21 kTsUMcvONyj7Fdi66KbMsFuLCaVonWQWofMCN2CcMzU4ywSxBuHqtXf2DkR+ug+c yNSBgGEQWnITbWCK6sFjGmA2XXcr8Y4OcPAlz9KBgdI8Dz/XCOJEZR5pQoquDueK wTGO1QfG+iBc3vmHN+OBrrR5KcQlpEfRC5J8FicRls1Cnp5iGjPa8USSrNXoltNG S3CSCZVC22g6xhCAroN1nLHOZpojbFTYmFUcxE8CJPucLesPNMI/C5IQd9w6FfvB 61qsU2UD5yriUA7qPoN4vdTjxA== -----END CERTIFICATE-----Generated at Thu Mar 26 15:41:58 2026 by rpki-client