$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft File: 5Ihhomij6U17foS6dO6vR3KJZwk.mft (raw, json) Hash identifier: ORCTKDBG8FLFjnq4E3dpvMtw5+CuDQwY+B0lI67r5NE= Subject key identifier: 1B:55:63:BA:44:D4:BB:BF:D0:F7:15:A4:A2:8B:E0:3F:6D:2E:53:B6 Authority key identifier: E4:88:61:A2:68:A3:E9:4D:7B:7E:84:BA:74:EE:AF:47:72:89:67:09 Certificate issuer: /CN=A91D3060/serialNumber=E48861A268A3E94D7B7E84BA74EEAF4772896709 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ihhomij6U17foS6dO6vR3KJZwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft Manifest number: 5C Signing time: Wed 25 Mar 2026 07:15:59 +0000 Manifest this update: Wed 25 Mar 2026 07:15:59 +0000 Manifest next update: Wed 01 Apr 2026 07:15:59 +0000 Files and hashes: 1: 5Ihhomij6U17foS6dO6vR3KJZwk.crl (hash: fCBk9czccTmxJm3bc3UrQjSyCtHQzM7gA5eCjOxnurQ=) 2: 0FCEAD129CF111F0A76B5F3AC4F9AE02.roa (hash: GsR/Ts01CmpABMN4kDyTQIg4MbBkjEEMhLEdWWuFsZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.crl rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ihhomij6U17foS6dO6vR3KJZwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3060, serialNumber=E48861A268A3E94D7B7E84BA74EEAF4772896709 Validity Not Before: Mar 25 07:15:59 2026 GMT Not After : Apr 1 07:15:59 2026 GMT Subject: CN=69c38baf-b712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:51:17:8a:32:46:37:b4:62:50:6d:52:b9:be: 94:68:fd:6d:21:09:69:ae:df:87:e0:53:b8:32:44: 74:79:2a:5e:94:93:41:3c:12:2d:0d:5e:bc:3f:66: 44:b6:61:a0:1c:5b:0a:9e:05:8a:7f:ee:db:33:50: 3e:b5:d8:8f:ea:3c:46:02:42:02:cd:8d:d7:bd:3c: 5d:e0:b4:81:c2:eb:a9:57:54:96:e7:2d:69:76:93: 8a:eb:44:d3:b1:7e:bd:99:db:e3:33:bc:a0:80:2e: e5:fd:9e:c9:6a:dc:d9:8f:f5:63:1c:d7:f2:6b:67: ac:51:0b:cb:46:e4:fd:8b:ca:17:65:48:81:7e:c3: eb:86:ea:3b:51:ef:1c:50:8b:88:8a:df:97:7e:70: 41:e8:72:53:b9:f7:7c:b4:29:36:7e:67:da:6b:8d: d1:a3:af:b0:44:b2:31:4a:c5:df:21:dc:1b:f4:13: 49:80:da:3f:ea:c9:94:42:8b:08:fc:17:9b:2f:84: 50:6d:77:b0:99:f3:4d:8f:24:47:d1:df:a2:48:27: 65:a2:21:0f:b2:03:b7:cc:6d:11:a9:4c:00:83:fc: d0:b5:38:25:6c:2b:ac:83:49:5b:7d:69:38:85:51: 5f:a0:7c:fb:fb:0a:51:cd:c7:1e:73:82:58:cf:c3: 1d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:55:63:BA:44:D4:BB:BF:D0:F7:15:A4:A2:8B:E0:3F:6D:2E:53:B6 X509v3 Authority Key Identifier: keyid:E4:88:61:A2:68:A3:E9:4D:7B:7E:84:BA:74:EE:AF:47:72:89:67:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ihhomij6U17foS6dO6vR3KJZwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:26:ba:c9:7e:41:07:4e:ca:ee:24:8f:45:3c:e4:49:4b:ae: b9:d2:bc:33:76:40:ca:27:36:ad:d4:fe:59:71:f5:06:58:98: 84:fe:36:e0:eb:d5:c2:b3:fa:ed:74:53:a6:74:7e:0a:d7:10: 7f:25:3f:ef:9c:16:6d:9d:e6:f2:ae:c0:89:7a:5b:ee:1d:7c: 3c:1d:74:0b:d0:6b:7b:8b:e0:24:1a:fc:ee:c7:a3:89:a8:2a: d6:18:d8:eb:27:40:c2:bd:97:e5:40:87:9d:f6:56:b1:ac:32: 18:c1:87:7f:ee:9c:3e:57:51:fa:f3:80:b6:fa:c9:f2:94:e8: c6:20:3a:a4:ad:68:7f:a9:f2:29:41:8f:82:de:cd:1c:6c:8b: 3c:d3:70:22:d9:e9:5b:f6:31:af:5e:d4:35:4c:fc:cf:91:9d: eb:ae:1f:5a:e8:ce:3d:9b:bb:f3:db:3d:74:be:21:ea:d4:f6: 70:d6:77:08:f3:1f:4c:f8:b5:e3:ed:b5:55:6f:34:c6:43:c0: ee:d9:2d:0c:02:2c:52:5d:3f:13:37:93:a2:dd:e6:f2:2e:a9: f8:e0:99:a9:ab:6d:0b:f3:64:3a:9d:15:1d:06:31:b9:57:5d: cd:0e:86:07:d4:cd:56:3f:78:96:6d:ee:70:14:f6:e6:80:45: 69:59:ad:9c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MzA2MDExMC8GA1UEBRMoRTQ4ODYxQTI2OEEzRTk0RDdCN0U4NEJBNzRFRUFGNDc3 Mjg5NjcwOTAeFw0yNjAzMjUwNzE1NTlaFw0yNjA0MDEwNzE1NTlaMBgxFjAUBgNV BAMTDTY5YzM4YmFmLWI3MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjUReKMkY3tGJQbVK5vpRo/W0hCWmu34fgU7gyRHR5Kl6Uk0E8Ei0NXrw/ZkS2 YaAcWwqeBYp/7tszUD612I/qPEYCQgLNjde9PF3gtIHC66lXVJbnLWl2k4rrRNOx fr2Z2+MzvKCALuX9nslq3NmP9WMc1/JrZ6xRC8tG5P2LyhdlSIF+w+uG6jtR7xxQ i4iK35d+cEHoclO593y0KTZ+Z9prjdGjr7BEsjFKxd8h3Bv0E0mA2j/qyZRCiwj8 F5svhFBtd7CZ802PJEfR36JIJ2WiIQ+yA7fMbRGpTACD/NC1OCVsK6yDSVt9aTiF UV+gfPv7ClHNxx5zgljPwx05AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUG1VjukTU u7/Q9xWkoovgP20uU7YwHwYDVR0jBBgwFoAU5Ihhomij6U17foS6dO6vR3KJZwkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzMDYwL0VGOTQxQTEwOUNF RjExRjA5NjQ5N0MzN0M0RjlBRTAyLzVJaGhvbWlqNlUxN2ZvUzZkTzZ2UjNLSlp3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNUloaG9taWo2VTE3Zm9TNmRPNnZSM0tKWndrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQz MDYwL0VGOTQxQTEwOUNFRjExRjA5NjQ5N0MzN0M0RjlBRTAyLzVJaGhvbWlqNlUx N2ZvUzZkTzZ2UjNLSlp3ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAZJrrJfkEHTsruJI9FPORJS6650rwzdkDKJzat1P5ZcfUGWJiE/jbg69XCs/rt dFOmdH4K1xB/JT/vnBZtnebyrsCJelvuHXw8HXQL0Gt7i+AkGvzux6OJqCrWGNjr J0DCvZflQIed9laxrDIYwYd/7pw+V1H684C2+snylOjGIDqkrWh/qfIpQY+C3s0c bIs803Ai2elb9jGvXtQ1TPzPkZ3rrh9a6M49m7vz2z10viHq1PZw1ncI8x9M+LXj 7bVVbzTGQ8Du2S0MAixSXT8TN5Oi3ebyLqn44Jmpq20L82Q6nRUdBjG5V13NDoYH 1M1WP3iWbe5wFPbmgEVpWa2c -----END CERTIFICATE-----Generated at Thu Mar 26 07:54:01 2026 by rpki-client