$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft File: 1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft (raw, json) Hash identifier: 2IkG7zVy7HtPqbAto8CSWYXiTTdufafTD32SBiH9pkQ= Subject key identifier: AE:A5:14:61:5B:46:CA:6E:94:16:5A:EB:EF:71:0D:98:D6:58:36:6A Authority key identifier: D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F Certificate issuer: /CN=A91CFFBE/serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F Certificate serial: 061D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft Manifest number: 0618 Signing time: Tue 24 Mar 2026 22:32:08 +0000 Manifest this update: Tue 24 Mar 2026 22:32:07 +0000 Manifest next update: Tue 31 Mar 2026 22:32:07 +0000 Files and hashes: 1: 1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl (hash: ckHWSkr5cmOf2ERxspBHQQ2f020ofvCTcO6Hi4zi5hA=) 2: 05A2A4008FE811EEACB1296AC4F9AE02.roa (hash: M5Aw+b/bHsIys2hkZbVggFi9gRiAWBXbAHIAYVqCW7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1565 (0x61d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFBE, serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F Validity Not Before: Mar 24 22:32:07 2026 GMT Not After : Mar 31 22:32:07 2026 GMT Subject: CN=69c310e8-2f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:da:9a:13:0b:07:f5:7e:2f:c1:2f:fe:ce:a1: 60:a5:1d:6b:da:9a:96:6e:44:79:4b:0c:65:26:16: cd:a4:20:58:4d:b2:00:ef:8c:e6:9a:a5:3f:26:e6: fd:b6:f0:a5:60:7a:80:a4:47:0b:38:3d:e8:de:ee: 94:bd:03:a6:d6:c5:16:7f:79:f6:5a:a8:5b:a3:07: 99:95:d0:e8:1d:20:c3:c8:f5:1c:da:f6:c3:ad:52: e4:f0:c3:ab:24:cc:41:a9:2b:db:bb:76:5f:6e:58: cc:81:9e:34:f5:6e:ce:77:0d:e3:f0:07:79:ad:ff: f4:db:5c:45:53:cd:54:3c:dd:97:08:b8:2e:b6:c2: b1:30:8b:c4:63:9d:8b:46:0d:c7:90:cf:0e:d2:41: 07:0e:b8:a7:2c:61:04:3b:6e:b7:37:3d:6e:9e:6d: 3a:de:22:35:e0:e6:ac:30:ae:c8:ca:60:fe:7a:f6: 90:00:0e:62:09:6c:23:a6:6a:3c:95:98:76:40:c7: b7:ab:23:22:42:f3:95:6b:b0:6f:38:97:19:33:38: 4c:8c:fd:40:c4:f8:c3:5f:17:7b:c4:2c:a4:23:65: 60:fa:b8:35:bc:5e:34:cb:a2:1b:08:dd:4e:db:55: 7d:1e:a0:49:dc:9e:37:77:8a:1f:a9:60:13:9b:e0: 46:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A5:14:61:5B:46:CA:6E:94:16:5A:EB:EF:71:0D:98:D6:58:36:6A X509v3 Authority Key Identifier: keyid:D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:64:4f:d5:18:bf:89:6f:e9:84:d9:b0:87:a0:65:f4:4e:b8: cc:7c:48:cd:89:c6:a9:e2:47:ca:77:52:80:be:26:8b:50:89: 29:5c:cd:75:41:98:2f:96:8f:bb:96:93:dd:d4:bf:c4:76:b8: c7:34:ad:bd:36:97:d5:95:3c:7a:cf:3a:6c:28:9a:29:15:8f: 54:9c:2d:39:70:d6:1e:70:36:59:d2:59:7a:8f:76:0d:44:c7: ca:a1:e7:bf:67:98:da:e5:c8:0b:8d:6e:17:0b:8a:c2:80:81: ca:84:aa:6a:d9:b3:75:4b:03:47:66:f7:3c:57:69:0d:0f:30: 69:55:51:96:07:12:93:6f:04:78:c1:f8:0b:12:0e:af:ec:d0: 52:8b:4a:3a:e8:65:a0:e7:ab:c2:d5:f4:5a:29:46:2a:c7:47: d6:cc:c2:45:7a:12:d0:7e:fb:2a:9d:ef:63:75:66:70:11:b5: 0d:39:13:8d:13:5e:b4:e5:a4:db:dc:9d:ab:91:9f:c5:d7:c6: cd:a5:1b:c1:8e:1e:15:2b:9b:c9:80:48:f1:be:bb:0a:b5:a3: ca:1c:26:47:32:26:85:90:3c:85:ef:6a:c1:be:4d:fc:11:02: ad:ec:7f:bb:cb:8f:1f:2a:e0:f9:83:47:8f:98:44:09:7c:78: c1:11:af:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQkUxMTAvBgNVBAUTKEQ3MEU1OTRCODFBMTY1OEMyQURERjRBMzI2OEVGOUNG MDhGOTY1MEYwHhcNMjYwMzI0MjIzMjA3WhcNMjYwMzMxMjIzMjA3WjAYMRYwFAYD VQQDEw02OWMzMTBlOC0yZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdqaEwsH9X4vwS/+zqFgpR1r2pqWbkR5SwxlJhbNpCBYTbIA74zmmqU/Jub9 tvClYHqApEcLOD3o3u6UvQOm1sUWf3n2WqhboweZldDoHSDDyPUc2vbDrVLk8MOr JMxBqSvbu3ZfbljMgZ409W7Odw3j8Ad5rf/021xFU81UPN2XCLgutsKxMIvEY52L Rg3HkM8O0kEHDrinLGEEO263Nz1unm063iI14OasMK7IymD+evaQAA5iCWwjpmo8 lZh2QMe3qyMiQvOVa7BvOJcZMzhMjP1AxPjDXxd7xCykI2Vg+rg1vF40y6IbCN1O 21V9HqBJ3J43d4ofqWATm+BG9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK6lFGFb RspulBZa6+9xDZjWWDZqMB8GA1UdIwQYMBaAFNcOWUuBoWWMKt30oyaO+c8I+WUP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZCRS83NDIyMzcwNkRB RkExMUVCODJGRTMxNjJDNEY5QUUwMi8xdzVaUzRHaFpZd3EzZlNqSm83NXp3ajVa UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF3NVpTNEdoWll3cTNmU2pKbzc1endqNVpROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZCRS83NDIyMzcwNkRBRkExMUVCODJGRTMxNjJDNEY5QUUwMi8xdzVaUzRHaFpZ d3EzZlNqSm83NXp3ajVaUTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAz2RP1Ri/iW/phNmwh6Bl9E64zHxIzYnGqeJHyndSgL4mi1CJKVzNdUGYL5aP u5aT3dS/xHa4xzStvTaX1ZU8es86bCiaKRWPVJwtOXDWHnA2WdJZeo92DUTHyqHn v2eY2uXIC41uFwuKwoCByoSqatmzdUsDR2b3PFdpDQ8waVVRlgcSk28EeMH4CxIO r+zQUotKOuhloOerwtX0WilGKsdH1szCRXoS0H77Kp3vY3VmcBG1DTkTjRNetOWk 29ydq5GfxdfGzaUbwY4eFSubyYBI8b67CrWjyhwmRzImhZA8he9qwb5N/BECrex/ u8uPHyrg+YNHj5hECXx4wRGv9g== -----END CERTIFICATE-----Generated at Thu Mar 26 15:49:48 2026 by rpki-client