$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft File: o5mhLEjADkJh0o4MV_1OPkcNLrc.mft (raw, json) Hash identifier: bKEvvgkh62HyGPAtW0OflI2IyzaQx0q04EB08KeUXDQ= Subject key identifier: 75:E6:0B:60:36:B7:20:1F:3B:68:DE:40:23:ED:FE:B0:CE:94:57:E2 Authority key identifier: A3:99:A1:2C:48:C0:0E:42:61:D2:8E:0C:57:FD:4E:3E:47:0D:2E:B7 Certificate issuer: /CN=A91C4401/serialNumber=A399A12C48C00E4261D28E0C57FD4E3E470D2EB7 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft Manifest number: 54 Signing time: Wed 25 Mar 2026 07:21:14 +0000 Manifest this update: Wed 25 Mar 2026 07:21:14 +0000 Manifest next update: Wed 01 Apr 2026 07:21:14 +0000 Files and hashes: 1: o5mhLEjADkJh0o4MV_1OPkcNLrc.crl (hash: BHnQqp8yeJeM4omCtMKFRMd3l39Cxtr0v1mvR3obV90=) 2: C0FD1FF0AA7111F0B4546269C4F9AE02.roa (hash: ny6KgtWAxAxsP09sSmBzSKP9/SUXwkqR5HeRZHk3STU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.crl rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4401, serialNumber=A399A12C48C00E4261D28E0C57FD4E3E470D2EB7 Validity Not Before: Mar 25 07:21:14 2026 GMT Not After : Apr 1 07:21:14 2026 GMT Subject: CN=69c38cea-2da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5c:d2:aa:4b:00:7a:a4:4a:4c:ee:fc:11:6b: 25:77:b9:81:f8:6e:19:46:77:09:ec:23:55:98:5f: 01:43:4a:2f:e1:a5:89:36:ec:3e:18:f9:b8:d3:cd: bf:e1:96:e1:3e:af:d7:62:92:81:4a:f3:d0:1f:e7: 7c:0b:77:fd:e9:b0:7a:11:3d:63:fe:d7:62:84:ad: 2c:ba:41:7b:3b:10:42:25:56:fc:4b:58:53:10:be: ed:f5:55:c5:17:52:cb:87:a2:9f:71:4c:14:56:c3: 10:28:27:57:63:0f:93:3e:0c:70:aa:43:1d:99:00: b7:9f:45:ab:6d:c7:ca:a5:a2:dd:36:e1:c6:17:f0: 65:98:6c:1c:bb:02:a1:09:84:6c:78:4d:01:a8:16: be:a0:e2:3d:dd:4a:2f:2b:42:cd:63:ca:a2:59:65: 96:dc:ed:da:32:6d:b3:0f:21:1a:4e:04:40:eb:0e: e3:a7:78:9e:e2:56:9e:5d:d6:1d:85:81:ec:39:19: c3:eb:89:d3:47:d3:f8:d9:42:ad:a4:13:bf:dc:a3: 9e:72:b6:7e:bd:d0:11:75:e4:f2:d5:82:de:a3:95: 05:13:f2:60:5f:b0:c2:46:7a:8f:c8:53:57:ff:6c: 70:74:90:45:1f:ff:b4:20:49:14:7b:84:e2:2e:7b: 24:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E6:0B:60:36:B7:20:1F:3B:68:DE:40:23:ED:FE:B0:CE:94:57:E2 X509v3 Authority Key Identifier: keyid:A3:99:A1:2C:48:C0:0E:42:61:D2:8E:0C:57:FD:4E:3E:47:0D:2E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:f7:db:16:38:b5:8e:e8:ac:82:7e:c6:70:dd:4b:34:cb:58: 5e:54:f3:21:ff:ea:3d:89:8e:e2:88:f3:3d:c2:63:2c:97:0d: 85:be:25:d2:29:0a:d4:9e:4e:d8:32:c2:b1:bf:fa:d7:17:40: 04:31:73:f7:71:04:4c:d3:bf:dd:9c:70:2e:50:47:62:66:ca: c5:97:42:23:1b:e4:bc:08:e8:ab:06:aa:71:94:3d:c0:ec:61: cd:52:d5:bf:f7:e6:cb:a1:55:cd:9c:80:18:2f:14:d6:da:fa: be:70:fa:64:99:3d:32:8d:cb:42:25:14:54:ad:c0:7f:a8:61: cf:f3:fa:66:c3:5b:a4:0f:64:1a:38:6b:40:d8:7e:0c:2d:69: db:9b:d7:1d:69:80:10:b2:79:44:95:bc:b7:be:8e:ae:19:f4: 1a:28:45:18:96:50:fa:99:4d:b8:06:48:d0:ef:fa:7b:66:3c: 10:be:47:a7:4b:c7:04:4b:60:c4:3a:9d:54:24:7d:8b:d7:1b: ae:75:07:07:ce:8e:fe:86:96:af:36:0a:6a:99:40:6d:fc:4e: ff:7a:c4:81:e7:81:6d:c3:c4:36:84:d3:c5:cf:3a:2c:db:98: b4:5b:6e:a3:67:d4:61:ec:58:b4:43:11:48:ed:e1:11:2d:9a: 35:d3:d6:7c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NDQwMTExMC8GA1UEBRMoQTM5OUExMkM0OEMwMEU0MjYxRDI4RTBDNTdGRDRFM0U0 NzBEMkVCNzAeFw0yNjAzMjUwNzIxMTRaFw0yNjA0MDEwNzIxMTRaMBgxFjAUBgNV BAMTDTY5YzM4Y2VhLTJkYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4XNKqSwB6pEpM7vwRayV3uYH4bhlGdwnsI1WYXwFDSi/hpYk27D4Y+bjTzb/h luE+r9dikoFK89Af53wLd/3psHoRPWP+12KErSy6QXs7EEIlVvxLWFMQvu31VcUX UsuHop9xTBRWwxAoJ1djD5M+DHCqQx2ZALefRattx8qlot024cYX8GWYbBy7AqEJ hGx4TQGoFr6g4j3dSi8rQs1jyqJZZZbc7doybbMPIRpOBEDrDuOneJ7iVp5d1h2F gew5GcPridNH0/jZQq2kE7/co55ytn690BF15PLVgt6jlQUT8mBfsMJGeo/IU1f/ bHB0kEUf/7QgSRR7hOIueySLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdeYLYDa3 IB87aN5AI+3+sM6UV+IwHwYDVR0jBBgwFoAUo5mhLEjADkJh0o4MV/1OPkcNLrcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0NDAxLzFCODgyMTYwQUE3 MDExRjBCNDI4RTY2M0M0RjlBRTAyL281bWhMRWpBRGtKaDBvNE1WXzFPUGtjTkxy Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbzVtaExFakFEa0poMG80TVZfMU9Qa2NOTHJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 NDAxLzFCODgyMTYwQUE3MDExRjBCNDI4RTY2M0M0RjlBRTAyL281bWhMRWpBRGtK aDBvNE1WXzFPUGtjTkxyYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCI99sWOLWO6KyCfsZw3Us0y1heVPMh/+o9iY7iiPM9wmMslw2FviXSKQrUnk7Y MsKxv/rXF0AEMXP3cQRM07/dnHAuUEdiZsrFl0IjG+S8COirBqpxlD3A7GHNUtW/ 9+bLoVXNnIAYLxTW2vq+cPpkmT0yjctCJRRUrcB/qGHP8/pmw1ukD2QaOGtA2H4M LWnbm9cdaYAQsnlElby3vo6uGfQaKEUYllD6mU24BkjQ7/p7ZjwQvkenS8cES2DE Op1UJH2L1xuudQcHzo7+hpavNgpqmUBt/E7/esSB54Ftw8Q2hNPFzzos25i0W26j Z9Rh7Fi0QxFI7eERLZo109Z8 -----END CERTIFICATE-----Generated at Thu Mar 26 13:09:47 2026 by rpki-client