$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft File: 5CANRK2dbstocvZTqVhD-yfYR6Q.mft (raw, json) Hash identifier: S8CYpVdP4Fd1lPDJWPS0Rw/CWte+NZuO0aRmv2s29lo= Subject key identifier: ED:3E:2A:BB:3A:84:B8:5A:13:F4:C9:08:7E:1A:36:7D:75:78:DC:DF Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 Certificate issuer: /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft Manifest number: 01DE Signing time: Wed 25 Mar 2026 02:50:14 +0000 Manifest this update: Wed 25 Mar 2026 02:50:13 +0000 Manifest next update: Wed 01 Apr 2026 02:50:13 +0000 Files and hashes: 1: 5CANRK2dbstocvZTqVhD-yfYR6Q.crl (hash: 2O7CnjOZ6/sUdlWgcLjGJyI+XbEkKMkHckbI+ceNCrc=) 2: 0099AE56536911EE8594503BC4F9AE02.roa (hash: A3g1MvapK720MR4guCb5ZHynm0vdBJ498DzGR8wq4fU=) 3: C7C45DD643F611EF84151D6FC4F9AE02.roa (hash: eCz90crmLyyT4eJR0NDAlMlvL0AfXIIanbDH55qxfQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Validity Not Before: Mar 25 02:50:13 2026 GMT Not After : Apr 1 02:50:13 2026 GMT Subject: CN=69c34d65-649d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f7:e7:be:d7:b4:8c:b1:24:af:0d:00:41:b1: 0d:c9:6a:16:17:ac:f4:47:38:f8:d2:5b:25:18:e2: 25:fc:b3:a3:13:b8:40:74:f1:a2:a8:cf:93:71:64: f3:00:8f:4d:29:e3:b1:51:c6:9b:03:dd:1b:44:2a: fc:83:47:7f:47:75:8b:23:ca:05:a8:1a:f7:61:a3: 11:9a:89:36:f4:36:7b:15:db:b2:8b:b6:3d:93:d8: a1:b7:c2:ce:c6:d0:18:b9:f9:6c:b6:78:e8:b0:01: ef:10:8e:55:fa:86:db:a1:31:91:47:99:f9:c8:5f: b0:e8:d2:a2:71:8d:a4:d1:65:ab:0d:39:65:d0:0a: 4b:30:a1:9a:c4:d9:4a:1c:11:1f:19:31:7e:ea:73: f4:b9:e5:55:75:65:5e:1d:5c:4c:46:b9:28:78:ed: 76:7e:fe:da:58:08:de:a1:83:49:75:d8:11:68:38: d4:db:1e:2d:bb:20:9d:e2:13:c7:a8:da:1d:0e:86: 2e:31:29:41:d9:57:c0:61:bb:7d:8e:52:63:ad:67: f7:ef:60:16:8a:90:22:fd:30:29:99:43:79:f0:e7: be:57:3e:cf:7f:40:98:9d:65:43:19:57:d3:d1:b0: d8:28:54:70:97:42:b7:50:01:a0:63:20:64:e3:eb: c0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3E:2A:BB:3A:84:B8:5A:13:F4:C9:08:7E:1A:36:7D:75:78:DC:DF X509v3 Authority Key Identifier: keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:16:2f:d0:0e:c2:6a:99:05:64:67:3a:5b:e9:d9:39:9d:b6: 59:26:25:00:41:06:f9:f7:7d:60:a6:ab:9e:ec:00:24:5c:e2: 4e:f8:c9:b9:85:91:10:86:95:ad:e9:18:fc:62:02:d7:74:6e: 86:d5:1b:5a:6c:c2:c6:7e:36:59:6f:01:79:db:d2:51:aa:4e: 28:1b:37:ac:9d:82:ad:ce:7c:1f:2b:85:ff:fc:26:7e:09:e0: 48:ad:ee:71:4a:ce:de:6b:84:8c:b4:b3:b5:99:61:18:42:2d: 38:ae:ba:6a:e8:40:d3:2e:dc:00:e5:18:ab:97:1f:59:70:ac: 1c:9b:10:43:cc:16:33:cb:90:57:13:c3:70:c0:2f:65:49:94: 73:22:42:92:f1:95:62:df:30:29:74:25:2e:e9:50:71:fe:2c: bd:39:3e:58:a0:ab:01:af:0a:79:60:f6:b7:de:f2:f3:0d:ba: 68:44:9e:19:21:5e:ca:0a:ae:24:da:2f:30:f4:48:1c:47:34: 6a:2e:21:6d:4b:7b:2c:b4:21:b4:c2:97:5c:53:4e:3e:1f:0b: 19:5e:33:f2:84:bd:cd:0c:fc:4d:2f:fa:80:6a:d8:6b:72:3e: 11:ab:dc:18:8e:49:54:b7:f7:b3:bd:be:ad:9c:d4:02:45:96: 84:9d:64:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKEU0MjAwRDQ0QUQ5RDZFQ0I2ODcyRjY1M0E5NTg0M0ZC MjdEODQ3QTQwHhcNMjYwMzI1MDI1MDEzWhcNMjYwNDAxMDI1MDEzWjAYMRYwFAYD VQQDEw02OWMzNGQ2NS02NDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmPfnvte0jLEkrw0AQbENyWoWF6z0Rzj40lslGOIl/LOjE7hAdPGiqM+TcWTz AI9NKeOxUcabA90bRCr8g0d/R3WLI8oFqBr3YaMRmok29DZ7Fduyi7Y9k9iht8LO xtAYuflstnjosAHvEI5V+obboTGRR5n5yF+w6NKicY2k0WWrDTll0ApLMKGaxNlK HBEfGTF+6nP0ueVVdWVeHVxMRrkoeO12fv7aWAjeoYNJddgRaDjU2x4tuyCd4hPH qNodDoYuMSlB2VfAYbt9jlJjrWf372AWipAi/TApmUN58Oe+Vz7Pf0CYnWVDGVfT 0bDYKFRwl0K3UAGgYyBk4+vAhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO0+Krs6 hLhaE/TJCH4aNn11eNzfMB8GA1UdIwQYMBaAFOQgDUStnW7LaHL2U6lYQ/sn2Eek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wNUVFQ0Q4NjUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJzdG9jdlpUcVZoRC15ZllS NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDQU5SSzJkYnN0b2N2WlRxVmhELXlmWVI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wNUVFQ0Q4NjUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJz dG9jdlpUcVZoRC15ZllSNlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACRYv0A7CapkFZGc6W+nZOZ22WSYlAEEG+fd9YKarnuwAJFziTvjJuYWREIaV rekY/GIC13RuhtUbWmzCxn42WW8BedvSUapOKBs3rJ2Crc58HyuF//wmfgngSK3u cUrO3muEjLSztZlhGEItOK66auhA0y7cAOUYq5cfWXCsHJsQQ8wWM8uQVxPDcMAv ZUmUcyJCkvGVYt8wKXQlLulQcf4svTk+WKCrAa8KeWD2t97y8w26aESeGSFeygqu JNovMPRIHEc0ai4hbUt7LLQhtMKXXFNOPh8LGV4z8oS9zQz8TS/6gGrYa3I+Eavc GI5JVLf3s72+rZzUAkWWhJ1kmQ== -----END CERTIFICATE-----Generated at Thu Mar 26 11:54:39 2026 by rpki-client