$ rpki-client -vvf rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft File: 5dNtVjx7PUXNnF98WB6d59bsNDE.mft (raw, json) Hash identifier: KpuCrxppPeqU0TrrZQOlnmseX5fDR8VkKgoVmIRfGHg= Subject key identifier: E2:76:9C:55:EC:ED:86:25:A4:6D:41:77:6B:5E:5A:CA:0C:96:57:C2 Authority key identifier: E5:D3:6D:56:3C:7B:3D:45:CD:9C:5F:7C:58:1E:9D:E7:D6:EC:34:31 Certificate issuer: /CN=A91B681A/serialNumber=E5D36D563C7B3D45CD9C5F7C581E9DE7D6EC3431 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5dNtVjx7PUXNnF98WB6d59bsNDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft Manifest number: 17 Signing time: Wed 25 Mar 2026 08:11:39 +0000 Manifest this update: Wed 25 Mar 2026 08:11:39 +0000 Manifest next update: Wed 01 Apr 2026 08:11:39 +0000 Files and hashes: 1: 5dNtVjx7PUXNnF98WB6d59bsNDE.crl (hash: PmBSet5VZ/YiJ1D0CQ5VBxDhQ5qrIG7YJ52j4d0Ek5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.crl rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5dNtVjx7PUXNnF98WB6d59bsNDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:11:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B681A, serialNumber=E5D36D563C7B3D45CD9C5F7C581E9DE7D6EC3431 Validity Not Before: Mar 25 08:11:39 2026 GMT Not After : Apr 1 08:11:39 2026 GMT Subject: CN=69c398bb-df56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:d0:0e:10:d2:66:65:13:29:e3:be:c8:8b: 7f:35:41:5f:f7:74:76:28:4b:94:4b:58:a7:c6:2e: f9:10:f6:57:43:57:a8:fe:9e:df:ed:f5:fe:e9:a4: f5:63:00:9b:2f:28:0a:d3:b7:c3:4c:dc:41:c4:c0: 0b:05:52:ec:42:2c:f1:c6:3b:2a:2c:15:99:5e:30: 2b:d3:94:44:84:0a:ad:b9:9d:ff:f7:12:f0:86:83: 7e:e4:3a:42:7f:29:bb:4b:1e:12:09:e5:e4:9d:a9: 70:d7:ab:ef:31:57:7a:9c:1c:15:a6:b3:70:09:0c: c9:4a:9e:45:65:e4:e5:f4:f0:b3:88:67:1a:f4:4e: 60:cd:c2:90:3c:0a:8e:a3:58:70:67:93:c4:19:1c: 08:80:a2:d1:fc:83:d3:ff:10:57:c7:7a:66:5b:7f: 96:51:c6:7c:bf:fe:00:d2:19:f0:18:27:3a:64:e3: c8:c5:65:80:96:b4:3d:1c:fe:1b:50:17:12:75:1f: fa:78:b8:4d:cb:0d:31:46:6d:fb:c9:f1:73:04:79: c4:d7:6a:56:6a:f8:d9:a9:6a:2d:69:9e:05:b0:71: a0:30:25:8e:b5:48:bc:c3:57:f2:a9:ab:59:58:4a: ac:e7:d5:66:20:4c:1f:c6:47:5f:99:e8:e7:aa:1b: 27:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:76:9C:55:EC:ED:86:25:A4:6D:41:77:6B:5E:5A:CA:0C:96:57:C2 X509v3 Authority Key Identifier: keyid:E5:D3:6D:56:3C:7B:3D:45:CD:9C:5F:7C:58:1E:9D:E7:D6:EC:34:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5dNtVjx7PUXNnF98WB6d59bsNDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:0a:b6:f8:e7:13:3b:f9:c4:de:eb:21:e2:38:46:01:60:67: 07:a5:42:bc:50:6a:74:2d:b6:01:70:8b:24:e2:93:a0:64:81: 37:c0:64:45:a8:17:72:b7:22:62:2d:ca:fd:df:e0:93:30:01: 5f:ea:17:8d:0d:0b:26:cf:40:08:7f:b4:ff:97:19:bb:af:56: 2d:f3:8b:b1:f0:d1:7e:d8:ad:56:1e:82:49:90:82:e5:68:3b: 66:4f:f0:15:96:18:0b:ed:6b:2d:c0:93:64:9d:e1:92:ba:5e: 0b:de:ad:fa:7a:50:d1:dc:77:9d:f8:31:9c:6f:df:e4:58:25: d2:6b:1f:84:10:40:5b:59:13:16:5e:a0:2c:10:ba:55:48:43: 5a:86:28:53:64:3b:29:c3:e2:cb:56:52:82:4a:84:28:dc:e7: 5c:e2:61:88:12:c0:44:0f:77:3f:83:43:58:76:a4:cc:91:c2: b1:4d:80:ad:d1:96:33:66:92:fb:6a:6b:a9:00:94:ac:7d:41: 07:9d:35:f6:e2:3c:06:a3:c2:47:5e:b9:3b:0e:bc:17:77:b6: a5:2b:e8:d9:62:25:25:a5:9a:67:ce:f3:46:9e:20:4c:32:4b: a2:96:7e:d7:ae:2d:d3:c9:c5:b1:6d:fe:87:b5:56:5a:9b:85: 55:fa:64:4a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjgxQTExMC8GA1UEBRMoRTVEMzZENTYzQzdCM0Q0NUNEOUM1RjdDNTgxRTlERTdE NkVDMzQzMTAeFw0yNjAzMjUwODExMzlaFw0yNjA0MDEwODExMzlaMBgxFjAUBgNV BAMTDTY5YzM5OGJiLWRmNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAmdAOENJmZRMp477Ii381QV/3dHYoS5RLWKfGLvkQ9ldDV6j+nt/t9f7ppPVj AJsvKArTt8NM3EHEwAsFUuxCLPHGOyosFZleMCvTlESECq25nf/3EvCGg37kOkJ/ KbtLHhIJ5eSdqXDXq+8xV3qcHBWms3AJDMlKnkVl5OX08LOIZxr0TmDNwpA8Co6j WHBnk8QZHAiAotH8g9P/EFfHemZbf5ZRxny//gDSGfAYJzpk48jFZYCWtD0c/htQ FxJ1H/p4uE3LDTFGbfvJ8XMEecTXalZq+Nmpai1pngWwcaAwJY61SLzDV/Kpq1lY Sqzn1WYgTB/GR1+Z6OeqGycPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4nacVezt hiWkbUF3a15aygyWV8IwHwYDVR0jBBgwFoAU5dNtVjx7PUXNnF98WB6d59bsNDEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2ODFBL0MzNEYxNkZDMEJF MDExRjE5QTE4NjNBNTMxM0Q4QzY3LzVkTnRWang3UFVYTm5GOThXQjZkNTlic05E RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNWROdFZqeDdQVVhObkY5OFdCNmQ1OWJzTkRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 ODFBL0MzNEYxNkZDMEJFMDExRjE5QTE4NjNBNTMxM0Q4QzY3LzVkTnRWang3UFVY Tm5GOThXQjZkNTlic05ERS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBqCrb45xM7+cTe6yHiOEYBYGcHpUK8UGp0LbYBcIsk4pOgZIE3wGRFqBdytyJi Lcr93+CTMAFf6heNDQsmz0AIf7T/lxm7r1Yt84ux8NF+2K1WHoJJkILlaDtmT/AV lhgL7WstwJNkneGSul4L3q36elDR3Hed+DGcb9/kWCXSax+EEEBbWRMWXqAsELpV SENahihTZDspw+LLVlKCSoQo3Odc4mGIEsBED3c/g0NYdqTMkcKxTYCt0ZYzZpL7 amupAJSsfUEHnTX24jwGo8JHXrk7DrwXd7alK+jZYiUlpZpnzvNGniBMMkuiln7X ri3TycWxbf6HtVZam4VV+mRK -----END CERTIFICATE-----Generated at Thu Mar 26 23:01:21 2026 by rpki-client