$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft File: ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json) Hash identifier: peyxeeeQjqAyacgGYP2Xp5+cLjVGoXpJIiakQ0iPecc= Subject key identifier: 53:EB:F1:76:65:13:0F:26:66:40:49:94:1D:FD:73:86:14:48:15:D8 Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 Certificate issuer: /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Certificate serial: 05EC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft Manifest number: 05D4 Signing time: Tue 24 Mar 2026 22:47:52 +0000 Manifest this update: Tue 24 Mar 2026 22:47:52 +0000 Manifest next update: Tue 31 Mar 2026 22:47:52 +0000 Files and hashes: 1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: w5hepAPbUj6qoIN+v7Ys89ju/12sbn3g4BlgYbo+G3E=) 2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: +1hhCYUIxlCa2Yw+101XYnenXc2fZJwDnEsS0lMdUl0=) 3: 13702C3EE15B11ECA05C9236C4F9AE02.roa (hash: yO5pYh5kSLeQxWbh/IwZl8/NyVYKsbLWb0OeBMKvlS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1516 (0x5ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Validity Not Before: Mar 24 22:47:52 2026 GMT Not After : Mar 31 22:47:52 2026 GMT Subject: CN=69c31498-11fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9a:e0:95:ed:8a:58:09:7f:b8:7c:8a:19:dc: de:7d:bc:86:4c:19:a3:b3:d2:22:09:84:70:75:76: 3d:91:6c:4a:37:0f:23:d5:ba:b1:fb:a9:7b:b1:2d: f5:75:40:79:fc:f9:73:12:c8:52:e5:d3:4e:b7:b9: 28:b3:af:aa:63:1a:3b:00:dc:f3:1f:b0:cd:4e:30: 5f:a3:55:63:f6:65:9f:69:90:f0:fd:e2:4c:e9:a5: 99:ac:ac:65:23:f0:50:08:d8:b2:6b:ff:75:b2:f8: 27:80:2d:af:72:db:8f:da:ee:0e:97:90:83:50:54: e1:37:55:5e:0a:7a:05:9b:05:77:bc:e2:57:f5:12: 03:08:81:92:28:de:86:92:52:2b:6b:22:fc:56:11: 45:87:51:99:01:01:b1:16:6d:0a:99:1d:72:ee:8b: f4:fc:41:1f:2f:12:39:3b:4f:5a:10:c2:b8:69:56: f9:19:85:17:7e:44:00:6c:dd:f3:ca:a2:73:03:76: 30:00:07:3b:e2:eb:17:7a:ea:16:20:88:8a:13:cf: 5d:43:b1:74:e1:ef:e8:be:94:a5:54:5d:31:54:c8: 36:19:7d:6c:bf:0c:a8:a5:ac:40:50:00:62:c6:93: 44:2b:27:86:f0:92:6c:25:b5:4b:ff:6e:79:b3:97: 59:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EB:F1:76:65:13:0F:26:66:40:49:94:1D:FD:73:86:14:48:15:D8 X509v3 Authority Key Identifier: keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:2d:fc:88:17:d1:0e:68:9e:e3:90:e1:5a:7e:06:a4:02:cc: f9:c2:a7:31:ef:31:9b:6e:e5:f6:ea:a6:67:cf:6b:8f:75:10: 87:ee:1a:f5:08:6c:9e:bc:a8:a6:20:37:59:13:5f:75:4b:d6: a8:dc:8e:f4:c5:fc:0a:37:ee:82:2f:01:7b:17:67:5a:45:47: f0:37:ea:46:09:4d:b8:dd:b1:38:22:84:45:3c:7c:71:da:01: 29:04:5b:aa:52:18:5c:ae:d8:9c:63:92:c7:9b:47:06:c7:3d: 5e:6d:1d:62:63:f1:4f:26:f3:ef:bb:3f:c4:fe:e6:53:3f:7d: 6a:72:79:cc:5a:8c:cb:b9:a5:6a:4a:07:80:7e:d7:48:7c:6c: 23:43:09:bc:09:b6:61:61:9d:74:1d:ee:e3:f8:ce:cd:c4:42: c4:02:bc:19:71:b3:fb:07:ed:4c:d7:40:2f:53:a8:0b:19:70: 4c:8b:a8:f1:a4:83:2e:4f:54:72:67:4a:e1:27:7f:35:e2:ec: 1d:3d:34:50:76:6e:c1:ea:d7:c3:b7:20:1a:6d:db:9b:8e:de: 5e:2d:1b:55:f6:e6:f3:81:6b:e6:78:b3:64:bd:60:af:d3:5d: 10:b9:22:87:91:56:24:47:c8:33:f3:41:18:c2:7a:63:eb:be: 66:6a:c2:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKDRFMUI4NDBGNUM2NjAxNkNFRDdFNjJFRUM2MUI4MzIy QTMyMUI2QjYwHhcNMjYwMzI0MjI0NzUyWhcNMjYwMzMxMjI0NzUyWjAYMRYwFAYD VQQDEw02OWMzMTQ5OC0xMWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlprgle2KWAl/uHyKGdzefbyGTBmjs9IiCYRwdXY9kWxKNw8j1bqx+6l7sS31 dUB5/PlzEshS5dNOt7kos6+qYxo7ANzzH7DNTjBfo1Vj9mWfaZDw/eJM6aWZrKxl I/BQCNiya/91svgngC2vctuP2u4Ol5CDUFThN1VeCnoFmwV3vOJX9RIDCIGSKN6G klIrayL8VhFFh1GZAQGxFm0KmR1y7ov0/EEfLxI5O09aEMK4aVb5GYUXfkQAbN3z yqJzA3YwAAc74usXeuoWIIiKE89dQ7F04e/ovpSlVF0xVMg2GX1svwyopaxAUABi xpNEKyeG8JJsJbVL/255s5dZIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFPr8XZl Ew8mZkBJlB39c4YUSBXYMB8GA1UdIwQYMBaAFE4bhA9cZgFs7X5i7sYbgyKjIba2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82NDgyREI3QzAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFXenRmbUx1eGh1RElxTWh0 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RodUVEMXhtQVd6dGZtTHV4aHVESXFNaHRyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTNEMy82NDgyREI3QzAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFX enRmbUx1eGh1RElxTWh0clkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANy38iBfRDmie45DhWn4GpALM+cKnMe8xm27l9uqmZ89rj3UQh+4a9Qhsnryo piA3WRNfdUvWqNyO9MX8Cjfugi8BexdnWkVH8DfqRglNuN2xOCKERTx8cdoBKQRb qlIYXK7YnGOSx5tHBsc9Xm0dYmPxTybz77s/xP7mUz99anJ5zFqMy7mlakoHgH7X SHxsI0MJvAm2YWGddB3u4/jOzcRCxAK8GXGz+wftTNdAL1OoCxlwTIuo8aSDLk9U cmdK4Sd/NeLsHT00UHZuwerXw7cgGm3bm47eXi0bVfbm84Fr5nizZL1gr9NdELki h5FWJEfIM/NBGMJ6Y+u+ZmrCkg== -----END CERTIFICATE-----Generated at Thu Mar 26 09:06:30 2026 by rpki-client