$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft File: r5ACm-EBySLPz0vRRdevHcZA5eA.mft (raw, json) Hash identifier: D//P3aWwkLHQi764c6K+Ta1F6pzgpmcKX58xdSW6y7c= Subject key identifier: C1:C1:BC:08:4D:EF:0F:90:C2:4A:EA:E1:D6:43:59:45:BF:81:27:53 Authority key identifier: AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0 Certificate issuer: /CN=A91D2646/serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0 Certificate serial: 0A8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft Manifest number: 0A83 Signing time: Thu 26 Mar 2026 19:28:20 +0000 Manifest this update: Thu 26 Mar 2026 19:28:19 +0000 Manifest next update: Thu 02 Apr 2026 19:28:19 +0000 Files and hashes: 1: r5ACm-EBySLPz0vRRdevHcZA5eA.crl (hash: c7TMmrdfeOwMkR66BIygZBTSFYtmB1ha4MoJrudB2+o=) 2: EE675FC27BED11EABD4A3A27C4F9AE02.roa (hash: Pa7iN+/Nc2RiTHjZ4lG8tJKuf6SwOlhtLxE/cKb22d0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 19:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2703 (0xa8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2646, serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0 Validity Not Before: Mar 26 19:28:19 2026 GMT Not After : Apr 2 19:28:19 2026 GMT Subject: CN=69c588d4-9b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ce:dd:27:af:38:57:02:85:3e:6b:d9:94:31: c1:fc:58:51:0e:ac:91:18:6d:72:55:88:cb:10:ab: 56:39:9a:97:21:1b:83:63:99:8d:75:aa:f4:3c:4f: 09:34:71:45:cf:c2:9f:f2:d9:e8:51:24:26:a1:94: 47:bf:e6:44:95:4c:49:03:76:26:5a:5a:cb:c9:39: 58:29:8d:ed:9f:8d:da:f8:11:82:a2:38:01:fc:74: 14:37:85:d5:22:5a:70:95:51:d9:ca:24:85:1d:12: 0b:9e:78:96:e6:57:6b:6b:88:e2:e6:d3:d9:5f:90: 78:c0:40:34:ca:e9:3d:1c:6a:cb:ad:c1:bf:97:6c: 65:ff:7e:af:a5:50:60:ec:fe:41:48:32:67:20:2b: 6a:7b:35:15:ce:10:49:1a:93:ce:3b:3f:a8:c2:83: e3:6d:e5:2f:3a:9c:20:39:ce:4a:bd:1d:9b:5f:e6: 39:09:2a:93:d3:a2:ea:c7:39:b6:f5:9b:d6:08:6f: a7:50:99:25:30:9a:46:84:a1:ac:52:45:3e:13:ad: ad:e1:cc:60:b1:d3:a3:f1:b2:86:d0:4e:f9:ce:68: 07:d0:8d:3c:b3:80:50:51:c0:7f:f3:20:83:e1:d5: f0:f9:00:75:19:b0:ea:26:cf:f0:3b:dc:c0:33:e4: 7d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C1:BC:08:4D:EF:0F:90:C2:4A:EA:E1:D6:43:59:45:BF:81:27:53 X509v3 Authority Key Identifier: keyid:AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:c0:44:39:63:e3:d2:8b:d9:e3:6b:5c:aa:5d:fb:90:5f:c6: af:bf:6f:16:13:6c:7f:b1:f2:33:3c:3f:97:0c:61:e8:06:ee: 4c:0c:8f:a0:9b:5c:3c:17:78:20:2c:aa:25:5e:31:de:6b:19: 59:76:ab:ee:b7:cc:a1:f8:06:b3:14:f1:06:5c:26:26:45:30: 06:9f:17:fe:ae:0f:dc:8f:5d:a8:36:59:4d:19:29:78:fd:b7: 50:ed:aa:a4:7f:f5:65:a4:f6:cc:7f:6a:cb:f4:11:22:5d:31: 91:2b:6f:bf:69:c1:42:12:c2:e8:30:b2:73:2c:e7:67:37:5e: ca:ef:ed:8d:6f:78:ff:59:63:51:27:fb:be:28:5d:e4:7d:de: a5:6b:4a:7d:2a:a6:8f:0b:a3:38:40:d2:cf:a8:2b:36:a4:e5: 76:53:bc:19:a6:19:ef:0f:10:3c:0f:07:9d:d6:51:ed:8d:b4: 85:27:0c:08:c6:cc:89:cf:e8:cf:00:5e:6a:d2:5d:0e:d7:65: 08:2e:89:83:21:d2:af:4a:86:dd:e5:fc:e4:b0:cf:36:e5:79: 05:2d:05:b6:59:cb:65:a6:69:4c:51:66:1e:f1:9f:79:88:81: 67:14:ec:79:de:e8:8f:4e:af:e7:80:dd:2f:47:d4:65:ae:83: e7:4b:e5:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2NDYxMTAvBgNVBAUTKEFGOTAwMjlCRTEwMUM5MjJDRkNGNEJEMTQ1RDdBRjFE QzY0MEU1RTAwHhcNMjYwMzI2MTkyODE5WhcNMjYwNDAyMTkyODE5WjAYMRYwFAYD VQQDEw02OWM1ODhkNC05YjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuM7dJ684VwKFPmvZlDHB/FhRDqyRGG1yVYjLEKtWOZqXIRuDY5mNdar0PE8J NHFFz8Kf8tnoUSQmoZRHv+ZElUxJA3YmWlrLyTlYKY3tn43a+BGCojgB/HQUN4XV IlpwlVHZyiSFHRILnniW5ldra4ji5tPZX5B4wEA0yuk9HGrLrcG/l2xl/36vpVBg 7P5BSDJnICtqezUVzhBJGpPOOz+owoPjbeUvOpwgOc5KvR2bX+Y5CSqT06Lqxzm2 9ZvWCG+nUJklMJpGhKGsUkU+E62t4cxgsdOj8bKG0E75zmgH0I08s4BQUcB/8yCD 4dXw+QB1GbDqJs/wO9zAM+R9gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMHBvAhN 7w+Qwkrq4dZDWUW/gSdTMB8GA1UdIwQYMBaAFK+QApvhAckiz89L0UXXrx3GQOXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjY0Ni9EMjAzN0QxMjdC RUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlTTFB6MHZSUmRldkhjWkE1 ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I1QUNtLUVCeVNMUHowdlJSZGV2SGNaQTVlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjY0Ni9EMjAzN0QxMjdCRUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlT TFB6MHZSUmRldkhjWkE1ZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEcBEOWPj0ovZ42tcql37kF/Gr79vFhNsf7HyMzw/lwxh6AbuTAyPoJtcPBd4 ICyqJV4x3msZWXar7rfMofgGsxTxBlwmJkUwBp8X/q4P3I9dqDZZTRkpeP23UO2q pH/1ZaT2zH9qy/QRIl0xkStvv2nBQhLC6DCycyznZzdeyu/tjW94/1ljUSf7vihd 5H3epWtKfSqmjwujOEDSz6grNqTldlO8GaYZ7w8QPA8HndZR7Y20hScMCMbMic/o zwBeatJdDtdlCC6JgyHSr0qG3eX85LDPNuV5BS0FtlnLZaZpTFFmHvGfeYiBZxTs ed7oj06v54DdL0fUZa6D50vlWA== -----END CERTIFICATE-----Generated at Fri Mar 27 05:19:48 2026 by rpki-client