$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft File: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft (raw, json) Hash identifier: n780tpzmM3BNFXiejVyusSAcKOkZZvHqL5q+jQdhbpo= Subject key identifier: 14:2A:12:AF:D5:87:42:F8:02:C6:9B:32:CB:A6:23:AA:33:AC:64:2A Authority key identifier: E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C Certificate issuer: /CN=A91C3ABA/serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Certificate serial: 0541 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft Manifest number: 053B Signing time: Tue 24 Mar 2026 23:10:47 +0000 Manifest this update: Tue 24 Mar 2026 23:10:47 +0000 Manifest next update: Tue 31 Mar 2026 23:10:47 +0000 Files and hashes: 1: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl (hash: y6Skyg44CaDAh/37yL/nBXOc75kW7nHQTbS1GsYCmMs=) 2: 4B9F1AA6354F11EC8531C34DC4F9AE02.roa (hash: cucAqDfIf3D0jPGb+5i3/trzUjwmYs5adT+GAVhtJiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1345 (0x541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3ABA, serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Validity Not Before: Mar 24 23:10:47 2026 GMT Not After : Mar 31 23:10:47 2026 GMT Subject: CN=69c319f7-271a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:80:6b:67:ab:ef:af:ed:21:52:53:33:16:a0: 22:cf:cb:e3:0f:bf:e3:ee:47:0e:e3:c6:2d:7f:8c: ef:79:86:69:79:df:4b:84:df:0c:65:ce:25:56:a3: 49:ca:09:39:8c:c0:c6:80:62:0c:44:11:15:a4:ea: 4a:e5:4e:d3:77:99:54:ae:e1:e1:c2:9c:7c:d5:ba: 88:ef:0d:0e:36:0b:5f:35:60:4e:79:8f:51:44:19: 7a:dc:ad:8c:6b:4f:e6:81:5c:0b:13:ae:f1:0e:8b: 36:9b:e1:d5:6d:28:af:58:ff:2a:6b:24:55:f5:df: 10:d5:aa:94:2c:f2:99:a6:cb:e8:47:19:22:fb:a1: da:ab:7b:f4:ca:78:70:01:f9:f1:05:65:06:1a:5d: 8b:74:fc:5f:39:96:6e:95:b7:dd:aa:45:34:ae:8e: ee:c6:e4:e5:5c:4d:2c:8d:7c:01:d7:c6:f1:f2:41: ba:24:ea:13:eb:44:e1:cf:7d:4d:25:00:e0:ea:71: 1f:bc:fd:80:55:12:10:ea:9e:7d:ae:d8:96:8b:18: af:34:21:47:96:08:71:d8:c7:6d:40:56:72:76:94: 12:45:8a:b0:b4:8b:7e:e2:d8:1e:55:3d:06:5a:42: 71:9f:2c:b8:26:c0:df:45:df:be:26:36:a2:80:ae: e6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2A:12:AF:D5:87:42:F8:02:C6:9B:32:CB:A6:23:AA:33:AC:64:2A X509v3 Authority Key Identifier: keyid:E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:89:16:ff:42:96:a8:a0:60:db:75:b5:e8:94:2c:10:e8:10: 3e:ec:56:61:a3:0b:d4:3e:ec:b3:2d:88:7c:78:99:ae:c7:97: e2:1c:0b:56:3f:79:09:c1:68:85:67:0a:87:c0:91:ec:a9:bc: b0:69:f4:c7:ba:35:c5:59:07:d7:9b:c7:09:a5:d1:da:2b:ed: 05:ba:f7:c0:e7:c0:f1:7c:eb:4d:0c:13:2f:35:98:df:57:1f: d6:e7:30:d0:a1:e1:ed:ca:9d:4e:80:a7:d7:fd:8f:61:6d:9a: e2:33:0e:95:81:82:20:ab:47:53:b8:c2:a9:cf:82:ae:64:42: d9:fc:5a:60:c7:43:47:62:36:dc:9e:e5:bb:63:bc:74:ff:1c: b8:84:64:aa:0c:86:cd:4e:cb:f3:56:06:26:89:be:a1:fb:55: 65:8e:b7:15:f4:fb:a2:00:cb:87:75:31:54:ac:d2:8e:fc:33: b3:58:87:78:12:47:77:26:38:b7:f8:7a:48:00:83:f7:cd:8e: d2:c2:f0:f8:c1:5d:6d:0d:f8:eb:13:c1:1d:0c:9a:76:57:9a: d0:bf:41:d2:7e:ca:b5:64:42:26:91:0e:96:6a:b2:74:f0:b3: 6e:06:1c:1d:ce:85:8c:97:54:f1:af:38:12:e0:2e:33:e2:10: ad:fa:5d:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBQkExMTAvBgNVBAUTKEU1OTkzMTU1QzQ0NDNBMkU1NkMwREUyMzMzQTQ0QjU2 Q0FENDkxOUMwHhcNMjYwMzI0MjMxMDQ3WhcNMjYwMzMxMjMxMDQ3WjAYMRYwFAYD VQQDEw02OWMzMTlmNy0yNzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIBrZ6vvr+0hUlMzFqAiz8vjD7/j7kcO48Ytf4zveYZped9LhN8MZc4lVqNJ ygk5jMDGgGIMRBEVpOpK5U7Td5lUruHhwpx81bqI7w0ONgtfNWBOeY9RRBl63K2M a0/mgVwLE67xDos2m+HVbSivWP8qayRV9d8Q1aqULPKZpsvoRxki+6Haq3v0ynhw AfnxBWUGGl2LdPxfOZZulbfdqkU0ro7uxuTlXE0sjXwB18bx8kG6JOoT60Thz31N JQDg6nEfvP2AVRIQ6p59rtiWixivNCFHlghx2MdtQFZydpQSRYqwtIt+4tgeVT0G WkJxnyy4JsDfRd++JjaigK7mCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBQqEq/V h0L4AsabMsumI6ozrGQqMB8GA1UdIwQYMBaAFOWZMVXERDouVsDeIzOkS1bK1JGc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0FCQS85ODVGMDkyMjM1 NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9pNVd3TjRqTTZSTFZzclVr WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVaa3hWY1JFT2k1V3dONGpNNlJMVnNyVWtady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0FCQS85ODVGMDkyMjM1NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9p NVd3TjRqTTZSTFZzclVrWncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtYkW/0KWqKBg23W16JQsEOgQPuxWYaML1D7ssy2IfHiZrseX4hwLVj95CcFo hWcKh8CR7Km8sGn0x7o1xVkH15vHCaXR2ivtBbr3wOfA8XzrTQwTLzWY31cf1ucw 0KHh7cqdToCn1/2PYW2a4jMOlYGCIKtHU7jCqc+CrmRC2fxaYMdDR2I23J7lu2O8 dP8cuIRkqgyGzU7L81YGJom+oftVZY63FfT7ogDLh3UxVKzSjvwzs1iHeBJHdyY4 t/h6SACD982O0sLw+MFdbQ346xPBHQyadlea0L9B0n7KtWRCJpEOlmqydPCzbgYc Hc6FjJdU8a84EuAuM+IQrfpdww== -----END CERTIFICATE-----Generated at Thu Mar 26 10:35:00 2026 by rpki-client