$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft File: T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json) Hash identifier: Lvot1Ye9thabkYLwWuztQR7HNqgZGSL2RLJV7gj9YhM= Subject key identifier: C8:53:D2:37:C3:39:A1:1B:81:6E:30:29:8E:F9:01:02:5A:23:E8:69 Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Certificate serial: 025D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft Manifest number: 024E Signing time: Fri 27 Mar 2026 01:56:41 +0000 Manifest this update: Fri 27 Mar 2026 01:56:41 +0000 Manifest next update: Fri 03 Apr 2026 01:56:41 +0000 Files and hashes: 1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: /kG/UHbTxWgM6hADU1pACJmSJAwuxk8ofn16Q4gwV1k=) 2: B780E2A097F711EF89B09770C4F9AE02.roa (hash: wK5N6NDC53NOeUkX3Bv4KZdcSUQAmAYv+3NUjiBBfqc=) 3: B987C6AAB7A311F095EF5E67C4F9AE02.roa (hash: BXJT+VuR/xyvQ8o0R6nT8W4UMQGcievCOsLixY+E6r4=) 4: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: xdixf0+5RIcyAcaWT4O3nyVovihJ9bK/xD8dsvcNSEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 01:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 605 (0x25d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Validity Not Before: Mar 27 01:56:41 2026 GMT Not After : Apr 3 01:56:41 2026 GMT Subject: CN=69c5e3d9-27e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:41:9d:7f:6c:b1:0c:0c:90:2a:86:05:4e:75: b1:b2:8f:7d:10:3d:b9:4b:11:50:4a:5f:b9:0d:68: 9e:59:38:39:65:b3:aa:7a:4c:b4:c0:c0:16:04:f1: 5e:0f:5d:c1:c7:0a:97:2b:18:23:71:ee:12:31:ac: 22:bf:08:f0:20:9f:9a:74:40:03:96:38:82:61:cc: b6:0c:8f:76:85:a9:ea:2e:52:b8:e6:32:3e:4b:e0: 89:97:ce:5a:63:0b:01:3b:87:6c:a9:7f:92:63:c5: 99:32:74:c0:d6:32:ea:73:11:2f:81:75:c7:cf:b3: 8d:36:b7:7d:3a:3e:98:d0:8d:6b:32:12:c0:5a:fa: 6b:22:27:11:12:e3:70:5f:74:8b:95:5d:e4:01:0e: b0:25:49:17:5b:a1:5c:03:89:ac:8a:96:2c:6d:f2: 95:ea:be:c7:3e:c1:e3:5d:01:b1:72:65:d0:7e:3d: 51:43:3c:3c:b0:db:e8:12:85:a2:e5:55:94:59:c9: f0:90:60:7f:4d:0b:80:31:c4:6f:92:55:b2:48:38: 1b:7c:ea:94:8b:62:f7:b8:7b:39:9b:19:11:07:55: 60:68:ea:28:08:00:f0:84:b6:55:a2:1f:76:6d:cf: 24:c3:62:fd:a0:c6:8b:97:d5:4d:60:c3:e7:e1:28: a2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:53:D2:37:C3:39:A1:1B:81:6E:30:29:8E:F9:01:02:5A:23:E8:69 X509v3 Authority Key Identifier: keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f7:ff:f8:31:68:4e:07:7a:dd:42:35:a3:b1:4e:83:46:b9: 6c:6a:ba:4e:86:b1:66:6d:f4:17:05:ee:cb:8d:8b:1a:93:cc: 39:a6:fc:d8:b0:9c:3a:59:4b:3b:24:3b:33:f2:61:70:6a:ac: 96:9d:48:83:bd:f3:04:25:ce:9f:35:e0:53:06:fc:16:a3:9a: f8:61:c3:92:c4:e1:5d:aa:39:59:30:76:86:5f:bd:38:78:5f: e1:78:51:96:94:cf:3e:52:4f:8a:0c:aa:87:35:54:74:43:94: 0d:b9:9b:fd:75:fd:25:51:be:45:30:58:4b:47:0e:a9:06:e4: 4c:0b:a0:32:76:8e:df:a5:56:8e:46:49:24:81:6a:0d:03:0f: ff:4d:0d:3e:c0:04:70:65:b7:de:a3:1d:d4:f6:fb:2a:1a:c6: 6f:54:ae:98:e6:70:f6:b8:f9:e6:77:91:57:f9:4b:ee:d0:e4: 30:79:02:61:48:f9:64:6b:42:44:53:47:27:1f:18:ae:70:d0: a4:1c:8a:37:fd:b8:3f:5b:fb:97:4c:88:43:35:c6:fc:34:3c: ee:9d:b4:74:77:6c:50:25:f7:75:b7:19:ea:23:7c:b2:fd:19: 14:2c:0b:50:8a:12:d2:92:87:25:83:e0:f6:1b:b0:c4:ff:72: a7:9f:90:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY0QTExMTAvBgNVBAUTKDRGRUU0Nzk0M0FCRTEzRTM4NTU2QTczQzI4MUI5MEUz NTQ5MjM3REMwHhcNMjYwMzI3MDE1NjQxWhcNMjYwNDAzMDE1NjQxWjAYMRYwFAYD VQQDEw02OWM1ZTNkOS0yN2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kGdf2yxDAyQKoYFTnWxso99ED25SxFQSl+5DWieWTg5ZbOqeky0wMAWBPFe D13BxwqXKxgjce4SMawivwjwIJ+adEADljiCYcy2DI92hanqLlK45jI+S+CJl85a YwsBO4dsqX+SY8WZMnTA1jLqcxEvgXXHz7ONNrd9Oj6Y0I1rMhLAWvprIicREuNw X3SLlV3kAQ6wJUkXW6FcA4msipYsbfKV6r7HPsHjXQGxcmXQfj1RQzw8sNvoEoWi 5VWUWcnwkGB/TQuAMcRvklWySDgbfOqUi2L3uHs5mxkRB1VgaOooCADwhLZVoh92 bc8kw2L9oMaLl9VNYMPn4SiiOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMhT0jfD OaEbgW4wKY75AQJaI+hpMB8GA1UdIwQYMBaAFE/uR5Q6vhPjhVanPCgbkONUkjfc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjRBMS8wRjU4N0E4OEIx Q0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUtT0ZWcWM4S0J1UTQxU1NO OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtNUhsRHEtRS1PRlZxYzhLQnVRNDFTU045dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjRBMS8wRjU4N0E4OEIxQ0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUt T0ZWcWM4S0J1UTQxU1NOOXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHPf/+DFoTgd63UI1o7FOg0a5bGq6ToaxZm30FwXuy42LGpPMOab82LCcOllL OyQ7M/JhcGqslp1Ig73zBCXOnzXgUwb8FqOa+GHDksThXao5WTB2hl+9OHhf4XhR lpTPPlJPigyqhzVUdEOUDbmb/XX9JVG+RTBYS0cOqQbkTAugMnaO36VWjkZJJIFq DQMP/00NPsAEcGW33qMd1Pb7KhrGb1SumOZw9rj55neRV/lL7tDkMHkCYUj5ZGtC RFNHJx8YrnDQpByKN/24P1v7l0yIQzXG/DQ87p20dHdsUCX3dbcZ6iN8sv0ZFCwL UIoS0pKHJYPg9huwxP9yp5+Q3g== -----END CERTIFICATE-----Generated at Sat Mar 28 10:35:00 2026 by rpki-client