$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft File: 5Otd-leSQpC7j-xFuZd_xsf2-jc.mft (raw, json) Hash identifier: 7TALakAYwgGimSQCnfG4NlVwsKa4dzq8/xz3nSIy6g8= Subject key identifier: 88:B4:6B:41:C8:B8:17:5E:5F:35:15:09:6F:0A:A4:27:6D:29:BC:09 Authority key identifier: E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 Certificate issuer: /CN=A91A8B0B/serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Certificate serial: 0D2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft Manifest number: 0D18 Signing time: Thu 26 Mar 2026 18:02:11 +0000 Manifest this update: Thu 26 Mar 2026 18:02:11 +0000 Manifest next update: Thu 02 Apr 2026 18:02:11 +0000 Files and hashes: 1: 5Otd-leSQpC7j-xFuZd_xsf2-jc.crl (hash: KBEpi2fu7+EqzfvnRQEqiw/4CotCz3+lJFf9jIDMsh4=) 2: EA17F65E6C6711ECB7C0925AC4F9AE02.roa (hash: RLirzJKQKFo2gpkEC+bkcfbZ/amz+vvvs7CLn8xZhc8=) 3: 5842DDF0FCE511E9BFA4B27AC4F9AE02.roa (hash: eljEAlMkKKscvcS1ohJrK9p2ggCusjEVdiGi3d1+CNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3374 (0xd2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B0B, serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Validity Not Before: Mar 26 18:02:11 2026 GMT Not After : Apr 2 18:02:11 2026 GMT Subject: CN=69c574a3-2be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4c:d7:a3:dd:8b:83:20:9f:7c:07:53:59:23: d2:8e:b4:07:da:c0:b2:2e:ef:ac:aa:ec:90:1b:f9: 10:71:d5:4f:fc:c0:82:67:a5:6c:17:05:39:2d:b7: 82:49:28:34:30:32:7a:c1:d9:31:b9:09:22:04:2e: 58:a7:e0:73:fb:5c:b6:80:87:53:ea:ec:27:c0:e7: e2:f4:2b:3a:2c:7b:3c:f0:0a:bd:7c:2b:58:30:9a: 10:ec:7c:a0:dd:d9:81:9f:3e:2d:26:4a:49:c1:f1: 62:30:56:0e:bc:ea:a4:87:4c:0b:10:92:a8:c4:e8: 3a:9c:0e:8d:d8:03:97:94:7b:eb:1d:7c:54:f6:ed: f2:14:fd:07:8f:f4:14:c6:25:4f:06:5b:1b:0d:32: 7f:c7:b4:09:9d:44:c9:1a:b2:78:38:68:18:ce:44: d0:ef:17:13:97:44:c2:df:0a:7b:8c:a1:92:f9:1f: b8:d8:a2:4c:5b:e8:bd:57:5d:ce:34:9d:1f:f8:37: 9a:ee:39:00:05:de:72:97:6d:1f:d0:70:1a:6f:a3: dc:bd:74:6d:59:45:7b:8b:78:98:f0:6f:16:ef:d2: 21:df:58:6d:48:80:b4:b2:e2:13:a4:1d:2f:17:06: b5:d1:a1:75:1f:ea:12:ff:7b:b2:c3:b5:6d:1e:09: 32:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B4:6B:41:C8:B8:17:5E:5F:35:15:09:6F:0A:A4:27:6D:29:BC:09 X509v3 Authority Key Identifier: keyid:E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:44:9a:a8:10:88:0a:50:da:13:3c:e2:94:23:30:60:c4:d0: 40:72:df:3d:d5:5f:18:98:97:bb:9b:d6:e8:9c:e2:f3:6b:ec: 12:2b:56:45:a3:23:50:17:5f:85:1f:55:bb:6b:8f:51:88:3d: 64:d2:2c:f8:ff:b3:0a:cd:fb:c0:b7:49:4d:04:ef:a5:ea:14: a7:71:13:1c:97:a7:e4:58:cd:4a:16:c2:3e:f7:17:4d:a7:2a: 0f:b2:33:5e:ee:ce:fa:e7:a0:75:6e:80:58:d2:3b:f0:6b:d4: 07:d5:05:d8:97:c7:cc:66:44:5b:21:07:19:ab:bd:20:61:b1: a5:9d:56:03:40:23:a5:81:34:db:76:c0:79:90:0d:52:7d:e6: 56:21:a7:7c:7a:5e:e9:27:64:34:98:e3:46:89:0b:59:2a:65: b4:eb:0d:a9:2d:54:f6:b0:6b:e5:44:17:35:95:e9:56:d2:7c: bc:c5:b9:62:30:de:a9:38:07:63:89:cf:c4:e5:96:8d:1c:09: 0b:17:e2:31:0a:ef:59:f1:80:94:20:cf:4b:88:05:ed:d1:6c: 9f:c5:fe:3c:13:db:b5:f0:be:5c:c8:fe:49:c3:3c:8d:91:3e: 7e:78:e0:80:1d:e0:a7:99:2d:78:9b:27:e6:ae:19:df:f0:80: 00:11:72:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCMEIxMTAvBgNVBAUTKEU0RUI1REZBNTc5MjQyOTBCQjhGRUM0NUI5OTc3RkM2 QzdGNkZBMzcwHhcNMjYwMzI2MTgwMjExWhcNMjYwNDAyMTgwMjExWjAYMRYwFAYD VQQDEw02OWM1NzRhMy0yYmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi0zXo92LgyCffAdTWSPSjrQH2sCyLu+squyQG/kQcdVP/MCCZ6VsFwU5LbeC SSg0MDJ6wdkxuQkiBC5Yp+Bz+1y2gIdT6uwnwOfi9Cs6LHs88Aq9fCtYMJoQ7Hyg 3dmBnz4tJkpJwfFiMFYOvOqkh0wLEJKoxOg6nA6N2AOXlHvrHXxU9u3yFP0Hj/QU xiVPBlsbDTJ/x7QJnUTJGrJ4OGgYzkTQ7xcTl0TC3wp7jKGS+R+42KJMW+i9V13O NJ0f+Dea7jkABd5yl20f0HAab6PcvXRtWUV7i3iY8G8W79Ih31htSIC0suITpB0v Fwa10aF1H+oS/3uyw7VtHgkyUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIi0a0HI uBdeXzUVCW8KpCdtKbwJMB8GA1UdIwQYMBaAFOTrXfpXkkKQu4/sRbmXf8bH9vo3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEIwQi81QUVCNUVCMkZD QzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1FwQzdqLXhGdVpkX3hzZjIt amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPdGQtbGVTUXBDN2oteEZ1WmRfeHNmMi1qYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEIwQi81QUVCNUVCMkZDQzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1Fw QzdqLXhGdVpkX3hzZjItamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiUSaqBCIClDaEzzilCMwYMTQQHLfPdVfGJiXu5vW6Jzi82vsEitWRaMjUBdf hR9Vu2uPUYg9ZNIs+P+zCs37wLdJTQTvpeoUp3ETHJen5FjNShbCPvcXTacqD7Iz Xu7O+uegdW6AWNI78GvUB9UF2JfHzGZEWyEHGau9IGGxpZ1WA0AjpYE023bAeZAN Un3mViGnfHpe6SdkNJjjRokLWSpltOsNqS1U9rBr5UQXNZXpVtJ8vMW5YjDeqTgH Y4nPxOWWjRwJCxfiMQrvWfGAlCDPS4gF7dFsn8X+PBPbtfC+XMj+ScM8jZE+fnjg gB3gp5kteJsn5q4Z3/CAABFy9g== -----END CERTIFICATE-----Generated at Sat Mar 28 08:43:50 2026 by rpki-client