$ rpki-client -vvf rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft File: 5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft (raw, json) Hash identifier: IvahlA8R0TfwxxiH5T/Et3X++OTxZvFOBbItuj3GLV4= Subject key identifier: CE:DA:B5:5C:F2:DC:0E:21:0E:4B:1E:4E:B6:17:2A:37:3E:DA:32:77 Authority key identifier: E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF Certificate issuer: /CN=A9187313/serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF Certificate serial: 1A5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft Manifest number: 19E6 Signing time: Tue 24 Mar 2026 16:16:36 +0000 Manifest this update: Tue 24 Mar 2026 16:16:35 +0000 Manifest next update: Tue 31 Mar 2026 16:16:35 +0000 Files and hashes: 1: 5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl (hash: 7WvIkRXddyZaT0JNQ4fo/8WYQBrXVbYQnFPcLAIChcQ=) 2: 97F31854777011E7BF7EED10C4F9AE02.roa (hash: YkCRNqQCS8jVIHV+a7IJFYqulDisT+tl/2C+71L8pZ0=) 3: 9787989A777011E7BF7EED10C4F9AE02.roa (hash: cMSDuBT3kjpyehv0+lJ2MFU5CMopK6TVvtYRY4GXdzU=) 4: 98E572FC777011E7BF7EED10C4F9AE02.roa (hash: oitbivbdUYSMdXh7VLPNdxq472u6AbzxgvTVwLHL+so=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6751 (0x1a5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187313, serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF Validity Not Before: Mar 24 16:16:35 2026 GMT Not After : Mar 31 16:16:35 2026 GMT Subject: CN=69c2b8e4-93ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9a:22:56:1d:b3:31:51:26:90:87:41:d1:43: 3f:53:99:2d:f4:0f:d5:f4:77:f0:89:97:ec:f9:22: e4:fb:b9:f8:e5:b7:70:59:a4:a9:b6:63:9d:4e:ff: 80:43:67:87:98:01:90:98:c5:52:87:22:ca:e5:f2: 48:d4:82:f4:13:8f:41:27:e9:1a:06:af:d7:cb:f7: 4e:4a:87:71:b6:6a:b0:b6:a0:b3:18:27:8a:de:91: a4:30:82:03:1e:da:62:e0:ce:32:a6:62:ca:af:88: 3c:bd:22:44:81:a5:8d:1d:70:e9:9e:ce:b9:34:3b: 74:ee:04:74:24:4a:fb:1a:6d:f4:1f:9f:60:21:b5: 5c:8a:75:78:b7:a6:7a:88:bc:4d:ad:93:88:98:3f: d7:80:9d:1d:01:d8:4f:63:d1:97:60:54:1d:d6:9c: 36:3e:29:68:a8:0e:c9:1c:ee:af:72:3a:3d:1f:b0: 17:3d:7e:29:94:c1:5e:7f:e2:f5:fd:ae:8b:84:9b: 90:92:8f:a9:bf:e5:cd:64:3a:59:94:70:b7:49:75: 82:23:4c:5e:1e:a0:00:cd:24:8a:29:c1:f2:19:1e: 3b:94:a3:38:85:ba:b5:68:be:b2:fd:80:08:ca:21: dd:8b:cf:7b:b4:0b:68:75:ee:da:fd:e8:ce:3e:bd: 4e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DA:B5:5C:F2:DC:0E:21:0E:4B:1E:4E:B6:17:2A:37:3E:DA:32:77 X509v3 Authority Key Identifier: keyid:E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:8f:bd:b8:26:72:c8:65:74:8f:87:76:1a:4d:a0:41:a8:00: c0:71:d5:85:c7:db:a4:5d:03:d1:e2:db:bd:90:02:cf:31:90: e6:80:3a:32:b2:a3:e4:dc:d0:b5:66:32:92:1d:a2:0e:6c:0f: 08:10:0d:f2:ca:25:86:9e:2b:80:fe:15:f7:a3:02:da:f0:82: 57:48:56:7e:b3:15:92:41:e4:ff:59:2c:df:47:4d:5b:d5:8e: 49:a9:e1:89:e0:35:b5:2e:4e:6d:25:be:36:20:1a:77:30:b2: 15:6c:3e:69:47:9f:be:77:6e:68:c6:00:a3:cd:08:e3:bc:c4: c2:44:8c:16:b6:b0:a1:e4:83:03:90:82:20:0f:c9:c7:77:62: f7:8c:59:01:46:40:9d:13:32:c8:02:de:22:4f:00:a4:67:64: c6:2a:55:68:b9:2d:28:f9:49:bf:37:06:26:f2:da:f6:04:bc: e9:5a:89:6d:8c:cc:75:30:88:93:5e:b6:49:61:98:75:a2:80: 5f:18:d7:c7:39:0b:54:40:3b:87:7b:d6:98:37:4c:f5:e8:1a: f5:e8:ff:16:2c:92:19:01:00:ed:87:d0:04:02:d2:d3:60:2e: 23:7e:ec:3a:6d:8f:42:1d:9c:6f:1d:fd:be:36:bb:0c:4d:7a: 1d:b4:42:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczMTMxMTAvBgNVBAUTKEU1NjcyQkJGMThDNENGRUJEM0Y0NzJEMTNCNDg3NzEz NzJEMzRFREYwHhcNMjYwMzI0MTYxNjM1WhcNMjYwMzMxMTYxNjM1WjAYMRYwFAYD VQQDEw02OWMyYjhlNC05M2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlZoiVh2zMVEmkIdB0UM/U5kt9A/V9HfwiZfs+SLk+7n45bdwWaSptmOdTv+A Q2eHmAGQmMVShyLK5fJI1IL0E49BJ+kaBq/Xy/dOSodxtmqwtqCzGCeK3pGkMIID Htpi4M4ypmLKr4g8vSJEgaWNHXDpns65NDt07gR0JEr7Gm30H59gIbVcinV4t6Z6 iLxNrZOImD/XgJ0dAdhPY9GXYFQd1pw2PiloqA7JHO6vcjo9H7AXPX4plMFef+L1 /a6LhJuQko+pv+XNZDpZlHC3SXWCI0xeHqAAzSSKKcHyGR47lKM4hbq1aL6y/YAI yiHdi897tAtode7a/ejOPr1O8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM7atVzy 3A4hDkseTrYXKjc+2jJ3MB8GA1UdIwQYMBaAFOVnK78YxM/r0/Ry0TtIdxNy007f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzMxMy8zQzM0RUMwQTc3 NkYxMUU3ODJBRDZEMEVDNEY5QUUwMi81V2NydnhqRXotdlQ5SExSTzBoM0UzTFRU dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVXY3J2eGpFei12VDlITFJPMGgzRTNMVFR0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzMxMy8zQzM0RUMwQTc3NkYxMUU3ODJBRDZEMEVDNEY5QUUwMi81V2NydnhqRXot dlQ5SExSTzBoM0UzTFRUdDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUI+9uCZyyGV0j4d2Gk2gQagAwHHVhcfbpF0D0eLbvZACzzGQ5oA6MrKj5NzQ tWYykh2iDmwPCBAN8solhp4rgP4V96MC2vCCV0hWfrMVkkHk/1ks30dNW9WOSanh ieA1tS5ObSW+NiAadzCyFWw+aUefvnduaMYAo80I47zEwkSMFrawoeSDA5CCIA/J x3di94xZAUZAnRMyyALeIk8ApGdkxipVaLktKPlJvzcGJvLa9gS86VqJbYzMdTCI k162SWGYdaKAXxjXxzkLVEA7h3vWmDdM9ega9ej/FiySGQEA7YfQBALS02AuI37s Om2PQh2cbx39vja7DE16HbRCJw== -----END CERTIFICATE-----Generated at Thu Mar 26 16:29:38 2026 by rpki-client