$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft File: 5C9d7yZZtef6JwN2jpSH79xZW7A.mft (raw, json) Hash identifier: aX2KKNqicDFNXmCEeBw6pdRG89QB2IQjuXV7VWmx7ro= Subject key identifier: 69:6A:93:55:D6:46:E6:65:97:3B:BD:2B:99:97:7B:F1:DE:43:99:15 Authority key identifier: E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0 Certificate issuer: /CN=A91CC4A7/serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft Manifest number: 53 Signing time: Wed 25 Mar 2026 07:21:57 +0000 Manifest this update: Wed 25 Mar 2026 07:21:56 +0000 Manifest next update: Wed 01 Apr 2026 07:21:56 +0000 Files and hashes: 1: 5C9d7yZZtef6JwN2jpSH79xZW7A.crl (hash: y+Z8nTi6XLZObZ7tUHKx9QxZbntt0IqwSlZqK4IsXcA=) 2: 944C9A24AB4511F09AA0C458C4F9AE02.roa (hash: 4YrP0rl3gACg5qm8ArvUCizFJDOa1cfOGVN50zaYqQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC4A7, serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0 Validity Not Before: Mar 25 07:21:56 2026 GMT Not After : Apr 1 07:21:56 2026 GMT Subject: CN=69c38d15-ac1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:21:8f:42:88:94:b1:36:5e:57:ec:01:93:d8: 7a:88:47:59:81:40:85:23:e9:77:c9:e6:3a:8e:b2: d2:41:cf:ae:4b:db:9b:0b:c6:5f:01:9f:ff:8d:63: b4:bf:4c:67:04:dc:27:49:e3:d9:c3:9f:3a:8e:94: 96:ee:67:11:31:eb:d2:0e:20:03:27:24:66:ca:fb: 56:ba:fc:24:22:c8:6a:d7:7d:f8:18:cb:75:1f:4c: 6c:aa:0a:5d:91:c0:97:6f:2e:a6:b2:6d:9a:5c:20: 27:93:53:37:c9:87:86:40:00:a1:6e:b2:a4:be:41: 00:30:8e:53:cf:c5:e3:a9:80:e6:48:ba:3c:30:22: 93:d8:67:f8:09:89:84:e5:88:0e:0e:48:5a:b7:8e: 53:99:47:aa:2c:62:f1:e2:35:21:5f:57:13:bb:de: 2c:8e:9c:e0:d3:94:ec:1a:95:36:b8:c7:20:5d:6e: 2a:40:d2:9f:54:13:09:85:08:06:02:f2:d3:85:16: fc:db:cd:f7:9e:11:8e:7a:ed:27:15:68:b2:65:c3: 41:09:95:81:25:88:38:56:9a:c1:5d:94:4c:a2:6d: 18:ec:39:d0:33:0a:30:f3:dd:b1:a6:6e:47:93:53: 8d:ad:d1:30:4d:a7:b8:09:52:71:7b:a9:3d:53:42: 31:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:6A:93:55:D6:46:E6:65:97:3B:BD:2B:99:97:7B:F1:DE:43:99:15 X509v3 Authority Key Identifier: keyid:E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:ba:0a:04:e6:05:a5:7a:90:e9:bb:fb:45:1b:79:07:db:20: 3b:cc:cf:c8:51:2e:ca:77:8f:0e:f2:ee:cd:13:4a:27:bf:53: 2a:ba:17:91:dc:6a:e2:66:3b:9f:3b:fa:9e:2c:18:18:86:1a: 2f:dc:9e:1b:ef:75:3e:bd:3f:23:5c:19:40:d3:ca:e6:53:ac: 41:9d:38:ea:1f:b0:bb:1b:ab:25:97:48:a9:4a:c9:b2:95:70: 97:24:7b:d1:93:8f:95:ec:a7:c3:d6:d4:9f:a5:b1:8b:5a:2e: b9:0d:6d:39:0c:b2:eb:c9:6c:04:e0:82:4b:1d:86:fd:3c:e4: 98:27:b4:c2:95:ad:55:11:2c:43:42:4f:c1:7c:4e:9f:25:ab: 82:94:19:18:16:00:26:3c:d5:b4:27:9e:e3:a9:43:51:1a:95: b1:6f:2f:af:91:7a:d6:43:f4:26:0a:f8:13:91:bc:f1:9f:67: 5c:91:2d:fc:f7:b7:ee:6e:e7:e9:fb:71:27:b5:6d:51:12:a9: 21:06:6e:fa:74:55:19:eb:f6:6c:ad:dc:95:ea:63:cb:7c:e8: c4:86:f6:73:aa:31:29:ad:a0:0d:2e:b2:45:b6:b4:98:49:93: cd:92:1a:ac:5b:3f:a0:e7:de:62:8c:52:69:5b:64:ea:06:3f: 56:47:3f:2e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzRBNzExMC8GA1UEBRMoRTQyRjVERUYyNjU5QjVFN0ZBMjcwMzc2OEU5NDg3RUZE QzU5NUJCMDAeFw0yNjAzMjUwNzIxNTZaFw0yNjA0MDEwNzIxNTZaMBgxFjAUBgNV BAMTDTY5YzM4ZDE1LWFjMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5IY9CiJSxNl5X7AGT2HqIR1mBQIUj6XfJ5jqOstJBz65L25sLxl8Bn/+NY7S/ TGcE3CdJ49nDnzqOlJbuZxEx69IOIAMnJGbK+1a6/CQiyGrXffgYy3UfTGyqCl2R wJdvLqaybZpcICeTUzfJh4ZAAKFusqS+QQAwjlPPxeOpgOZIujwwIpPYZ/gJiYTl iA4OSFq3jlOZR6osYvHiNSFfVxO73iyOnODTlOwalTa4xyBdbipA0p9UEwmFCAYC 8tOFFvzbzfeeEY567ScVaLJlw0EJlYEliDhWmsFdlEyibRjsOdAzCjDz3bGmbkeT U42t0TBNp7gJUnF7qT1TQjFtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUaWqTVdZG 5mWXO70rmZd78d5DmRUwHwYDVR0jBBgwFoAU5C9d7yZZtef6JwN2jpSH79xZW7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDNEE3L0ZBOThGQjNFQUI0 NDExRjA4NDNEMDY1N0M0RjlBRTAyLzVDOWQ3eVpadGVmNkp3TjJqcFNINzl4Wlc3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNUM5ZDd5Wlp0ZWY2SndOMmpwU0g3OXhaVzdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND NEE3L0ZBOThGQjNFQUI0NDExRjA4NDNEMDY1N0M0RjlBRTAyLzVDOWQ3eVpadGVm Nkp3TjJqcFNINzl4Wlc3QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAkugoE5gWlepDpu/tFG3kH2yA7zM/IUS7Kd48O8u7NE0onv1MquheR3GriZjuf O/qeLBgYhhov3J4b73U+vT8jXBlA08rmU6xBnTjqH7C7G6sll0ipSsmylXCXJHvR k4+V7KfD1tSfpbGLWi65DW05DLLryWwE4IJLHYb9POSYJ7TCla1VESxDQk/BfE6f JauClBkYFgAmPNW0J57jqUNRGpWxby+vkXrWQ/QmCvgTkbzxn2dckS3897fubufp +3EntW1REqkhBm76dFUZ6/ZsrdyV6mPLfOjEhvZzqjEpraANLrJFtrSYSZPNkhqs Wz+g595ijFJpW2TqBj9WRz8u -----END CERTIFICATE-----Generated at Fri Mar 27 08:11:12 2026 by rpki-client