$ rpki-client -vvf rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft File: 5tR4mVLfAG9kzr8PNVcqW5bktzc.mft (raw, json) Hash identifier: dQtqmKqpXG0igx71juyiLPTO9PTYDjoS6T8Uit34dSc= Subject key identifier: 98:D8:24:D3:A8:F3:ED:8E:09:D4:3C:B3:FE:AE:E2:1D:A1:50:4A:54 Authority key identifier: E6:D4:78:99:52:DF:00:6F:64:CE:BF:0F:35:57:2A:5B:96:E4:B7:37 Certificate issuer: /CN=A918E63A/serialNumber=E6D4789952DF006F64CEBF0F35572A5B96E4B737 Certificate serial: 0839 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft Manifest number: 0839 Signing time: Tue 24 Mar 2026 20:36:23 +0000 Manifest this update: Tue 24 Mar 2026 20:36:22 +0000 Manifest next update: Tue 31 Mar 2026 20:36:22 +0000 Files and hashes: 1: 5tR4mVLfAG9kzr8PNVcqW5bktzc.crl (hash: /hlOjRhxCU3P4kgJqUI2k5UPBhUI+yl1v/bzFf/cNVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.crl rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2105 (0x839) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E63A, serialNumber=E6D4789952DF006F64CEBF0F35572A5B96E4B737 Validity Not Before: Mar 24 20:36:22 2026 GMT Not After : Mar 31 20:36:22 2026 GMT Subject: CN=69c2f5c7-5bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8e:25:0b:a9:1d:12:3b:21:1d:5d:ac:5e:70: 15:83:f7:df:2a:b5:b9:0c:03:70:38:d6:8f:98:6f: 5a:7b:4d:4f:8e:4e:bb:38:75:93:de:66:50:f0:80: 3d:04:ea:c7:af:ce:89:c6:e3:4b:6c:3d:81:7f:1a: d5:78:5a:83:7b:35:1f:b2:5f:5a:44:45:4b:c6:2b: 65:8e:01:7d:76:a1:6b:6f:49:9b:92:15:d3:cb:dd: 38:05:eb:24:8f:0a:0c:a7:71:37:21:b3:c1:bf:bf: e9:4b:b9:89:42:fd:f7:73:7b:42:aa:a4:7e:2f:fb: 6f:2e:fb:2e:ec:60:e0:e2:e3:3a:50:d8:3d:35:c5: 3e:d2:83:be:99:cf:d9:bc:c7:c1:31:f8:4d:38:49: d1:01:53:f4:be:7f:a8:85:7e:4b:41:90:ae:5d:9f: a9:d8:e5:f5:a7:fa:3b:78:31:8b:9c:1f:68:78:45: 47:be:6f:7b:a7:5d:7d:42:f5:f0:37:32:0e:d3:f4: c8:1c:72:2a:78:2a:6a:5c:5d:ce:47:fc:29:a1:36: 67:03:de:9d:dc:84:cd:c5:72:7c:cb:8d:3c:a8:52: 3e:5d:df:50:e4:12:35:26:f1:fc:6d:fa:fb:9c:ec: 6b:17:cb:d9:8e:5e:f7:3e:b1:17:0e:e2:80:75:47: eb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D8:24:D3:A8:F3:ED:8E:09:D4:3C:B3:FE:AE:E2:1D:A1:50:4A:54 X509v3 Authority Key Identifier: keyid:E6:D4:78:99:52:DF:00:6F:64:CE:BF:0F:35:57:2A:5B:96:E4:B7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:27:21:9f:72:1d:d9:5d:37:79:d3:bc:51:f9:99:c9:a1:7a: ca:82:55:60:a7:31:11:35:a2:ed:99:8a:32:9c:f4:92:aa:98: 80:c8:a5:15:b0:da:92:71:e0:e4:22:14:c0:27:f6:07:b3:2d: 6f:94:8b:7d:1d:b7:7a:df:3d:81:68:eb:b1:56:c9:6e:1b:09: a6:94:f7:49:d6:03:51:57:7e:15:57:08:8e:aa:d5:b0:56:2d: 1d:72:5c:d9:72:45:a0:d2:af:22:a3:57:86:60:7d:96:76:e5: 73:10:c3:f5:f5:f4:d8:e9:16:53:2a:f2:7c:3c:b9:23:b2:c0: e2:29:82:d2:5a:db:17:5a:a9:87:e9:3a:03:5d:88:4b:c0:3a: e7:e6:3e:9d:56:be:77:78:e9:a2:9c:63:a1:77:fb:3a:2c:83: 64:67:e7:77:07:53:b4:af:7e:4b:46:2b:5d:dc:7c:ae:b1:84: 94:d8:d7:52:82:fa:08:2a:f0:27:f2:e1:7a:43:84:b3:10:d1: 0d:77:4d:8f:ae:b7:9a:e3:7f:5a:0b:5b:d4:1b:56:db:bd:b6: 7e:fc:e6:26:27:c9:a4:fe:5c:21:bc:14:2b:b0:07:64:ba:2a: 6d:9b:e1:47:dc:de:6f:12:c2:d3:55:ee:99:1d:f1:20:43:be: 1d:f2:67:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2M0ExMTAvBgNVBAUTKEU2RDQ3ODk5NTJERjAwNkY2NENFQkYwRjM1NTcyQTVC OTZFNEI3MzcwHhcNMjYwMzI0MjAzNjIyWhcNMjYwMzMxMjAzNjIyWjAYMRYwFAYD VQQDEw02OWMyZjVjNy01YmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApI4lC6kdEjshHV2sXnAVg/ffKrW5DANwONaPmG9ae01Pjk67OHWT3mZQ8IA9 BOrHr86JxuNLbD2BfxrVeFqDezUfsl9aREVLxitljgF9dqFrb0mbkhXTy904Besk jwoMp3E3IbPBv7/pS7mJQv33c3tCqqR+L/tvLvsu7GDg4uM6UNg9NcU+0oO+mc/Z vMfBMfhNOEnRAVP0vn+ohX5LQZCuXZ+p2OX1p/o7eDGLnB9oeEVHvm97p119QvXw NzIO0/TIHHIqeCpqXF3OR/wpoTZnA96d3ITNxXJ8y408qFI+Xd9Q5BI1JvH8bfr7 nOxrF8vZjl73PrEXDuKAdUfr/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJjYJNOo 8+2OCdQ8s/6u4h2hUEpUMB8GA1UdIwQYMBaAFObUeJlS3wBvZM6/DzVXKluW5Lc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTYzQS8zN0Q3QTVBRTAz MkYxMUVCQjU4ODJFMEFDNEY5QUUwMi81dFI0bVZMZkFHOWt6cjhQTlZjcVc1Ymt0 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV0UjRtVkxmQUc5a3pyOFBOVmNxVzVia3R6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTYzQS8zN0Q3QTVBRTAzMkYxMUVCQjU4ODJFMEFDNEY5QUUwMi81dFI0bVZMZkFH OWt6cjhQTlZjcVc1Ymt0emMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQSchn3Id2V03edO8UfmZyaF6yoJVYKcxETWi7ZmKMpz0kqqYgMilFbDaknHg 5CIUwCf2B7Mtb5SLfR23et89gWjrsVbJbhsJppT3SdYDUVd+FVcIjqrVsFYtHXJc 2XJFoNKvIqNXhmB9lnblcxDD9fX02OkWUyryfDy5I7LA4imC0lrbF1qph+k6A12I S8A65+Y+nVa+d3jpopxjoXf7OiyDZGfndwdTtK9+S0YrXdx8rrGElNjXUoL6CCrw J/LhekOEsxDRDXdNj663muN/Wgtb1BtW2722fvzmJifJpP5cIbwUK7AHZLoqbZvh R9zebxLC01XumR3xIEO+HfJn4g== -----END CERTIFICATE-----Generated at Thu Mar 26 17:24:21 2026 by rpki-client