$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft File: 5KlM-o0vn1s570Y1BZHOMS5RT7M.mft (raw, json) Hash identifier: lirlJ3A5LOPgv9wqC1IHd3IkKTjYxsX3sqSrisJ0lIc= Subject key identifier: F3:26:4E:9E:92:52:11:B1:53:82:9F:3A:9A:E7:C1:3E:AF:1C:C8:F5 Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 Certificate issuer: /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Certificate serial: 0325 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft Manifest number: 030C Signing time: Wed 25 Mar 2026 00:56:23 +0000 Manifest this update: Wed 25 Mar 2026 00:56:23 +0000 Manifest next update: Wed 01 Apr 2026 00:56:23 +0000 Files and hashes: 1: 5KlM-o0vn1s570Y1BZHOMS5RT7M.crl (hash: nkxgHW381VfX7+IDjk0A+AOeAbBv/kWVFlRmoc5/lvY=) 2: 3D331986E17211EFA5959B2FC4F9AE02.roa (hash: HWbA9pcNRQ2T+MNcxggr7hprcPhBvL1c1z3ltsFnoBs=) 3: F3997FACE21D11EFA5819B7EC4F9AE02.roa (hash: u+ZBN57vIi/zKLX25fP2Ihd1dJ5sMPLruwdZtn9hxms=) 4: 5B69CE3A474A11EF8624EE6DC4F9AE02.roa (hash: V4WCKZt7Bk1mQsPfTsZBXrVnrbvkth09Cs8cneRogjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 805 (0x325) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3AB3, serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Validity Not Before: Mar 25 00:56:23 2026 GMT Not After : Apr 1 00:56:23 2026 GMT Subject: CN=69c332b7-bb7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3a:c3:d4:61:98:dc:d3:a3:75:bb:7f:67:6c: d0:f9:da:68:50:9c:ae:53:0a:74:d1:92:94:b2:b7: f2:82:ff:61:7b:07:16:2f:f6:10:a3:7c:8f:8f:b1: 98:3d:16:3d:fc:0b:f6:6e:09:be:7a:5d:26:52:89: 77:b1:2a:60:c9:06:73:0f:97:47:4e:b7:e5:19:62: 6f:e0:48:7e:8a:9f:1a:de:63:52:91:9f:55:2e:05: 99:fb:1d:53:58:23:e5:41:21:f6:90:5c:68:9d:b3: 44:a7:a5:c2:eb:b0:6e:27:6c:f3:33:a1:c8:4e:0e: 72:d6:84:94:39:e0:8d:fc:f1:b3:02:db:e9:5c:0e: 41:f6:21:d4:0a:30:e2:0b:93:85:90:de:1f:0b:25: 3e:b3:94:3b:2e:44:5b:29:9e:8f:a7:88:28:f2:f1: 36:78:59:85:12:b6:6d:a0:21:ec:3b:91:b1:a1:3d: ca:65:99:0b:7f:d1:af:e7:0d:0a:01:0f:dc:af:fb: d9:99:fc:32:61:4d:2f:2b:f7:8f:76:fc:12:07:6d: ed:d9:50:0a:40:55:2c:b9:f3:7c:b3:fa:4f:0e:f4: bf:8d:d6:27:e9:2c:8d:72:b1:7f:51:1b:b6:eb:f6: 09:77:ca:ce:35:58:68:a7:0f:d2:73:54:f6:2f:a8: d1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:26:4E:9E:92:52:11:B1:53:82:9F:3A:9A:E7:C1:3E:AF:1C:C8:F5 X509v3 Authority Key Identifier: keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:c0:98:b3:ef:59:9a:c5:89:b3:e7:c0:db:65:3a:bd:bc:cf: 66:a4:c4:ef:e5:78:65:6e:d3:62:29:cb:26:36:ee:1b:30:88: 65:da:d6:ed:5d:53:22:2c:9c:f9:8c:e0:81:b9:fd:7c:1a:a2: 9e:d7:4d:80:43:c2:ad:43:32:b1:95:ba:2a:e0:cd:35:67:66: 4f:8c:42:36:18:60:de:5c:42:89:b9:05:21:4f:53:05:e2:d4: 03:b6:4d:c7:81:b7:40:2a:36:82:3e:b0:62:cf:57:48:a1:89: c3:1f:76:5c:05:e5:23:7a:50:aa:72:06:45:ce:75:a5:6b:23: e4:c2:3e:2e:e1:ba:e8:8f:d1:11:49:93:50:e4:dd:e7:64:af: 9f:a2:14:ed:dd:4f:0d:a8:76:88:2d:3a:10:2b:83:3b:a4:e1: 85:63:0d:30:28:01:03:9b:8d:21:f8:59:43:04:f9:be:be:0a: 53:ba:65:31:08:ea:9d:6b:9f:59:ca:56:1c:14:46:ca:b6:50: 65:39:7d:0e:01:1c:f1:5a:6e:fa:f5:d5:56:aa:ff:9a:b4:56: 9c:80:6a:7b:ee:f8:41:3c:40:3a:20:11:fd:a9:1b:a4:e3:6c: a0:2d:3c:7d:ab:bc:e8:31:3e:2e:1a:88:df:85:99:d4:5d:23: ce:7a:3a:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNBQjMxMTAvBgNVBAUTKEU0QTk0Q0ZBOEQyRjlGNUIzOUVGNDYzNTA1OTFDRTMx MkU1MTRGQjMwHhcNMjYwMzI1MDA1NjIzWhcNMjYwNDAxMDA1NjIzWjAYMRYwFAYD VQQDEw02OWMzMzJiNy1iYjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jrD1GGY3NOjdbt/Z2zQ+dpoUJyuUwp00ZKUsrfygv9hewcWL/YQo3yPj7GY PRY9/Av2bgm+el0mUol3sSpgyQZzD5dHTrflGWJv4Eh+ip8a3mNSkZ9VLgWZ+x1T WCPlQSH2kFxonbNEp6XC67BuJ2zzM6HITg5y1oSUOeCN/PGzAtvpXA5B9iHUCjDi C5OFkN4fCyU+s5Q7LkRbKZ6Pp4go8vE2eFmFErZtoCHsO5GxoT3KZZkLf9Gv5w0K AQ/cr/vZmfwyYU0vK/ePdvwSB23t2VAKQFUsufN8s/pPDvS/jdYn6SyNcrF/URu2 6/YJd8rONVhopw/Sc1T2L6jRXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPMmTp6S UhGxU4KfOprnwT6vHMj1MB8GA1UdIwQYMBaAFOSpTPqNL59bOe9GNQWRzjEuUU+z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0FCMy8wNUVEOTRDRTE5 NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4xczU3MFkxQlpIT01TNVJU N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVLbE0tbzB2bjFzNTcwWTFCWkhPTVM1UlQ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0FCMy8wNUVEOTRDRTE5NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4x czU3MFkxQlpIT01TNVJUN00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA8CYs+9ZmsWJs+fA22U6vbzPZqTE7+V4ZW7TYinLJjbuGzCIZdrW7V1TIiyc +Yzggbn9fBqintdNgEPCrUMysZW6KuDNNWdmT4xCNhhg3lxCibkFIU9TBeLUA7ZN x4G3QCo2gj6wYs9XSKGJwx92XAXlI3pQqnIGRc51pWsj5MI+LuG66I/REUmTUOTd 52Svn6IU7d1PDah2iC06ECuDO6ThhWMNMCgBA5uNIfhZQwT5vr4KU7plMQjqnWuf WcpWHBRGyrZQZTl9DgEc8Vpu+vXVVqr/mrRWnIBqe+74QTxAOiAR/akbpONsoC08 fau86DE+LhqI34WZ1F0jzno6WQ== -----END CERTIFICATE-----Generated at Thu Mar 26 10:15:58 2026 by rpki-client