$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft File: 5TfQw0j9fcSfX8OwBmoxxYT64as.mft (raw, json) Hash identifier: 4Z3im02UEV53P84RguMiXnRwIus0RFiyxpbW1bGPJuU= Subject key identifier: AA:E6:7C:E5:D5:6B:F2:47:33:A5:B5:A8:CD:26:A3:9C:0D:BF:95:F0 Authority key identifier: E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB Certificate issuer: /CN=A91D4345/serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Certificate serial: 0CF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft Manifest number: 0CE8 Signing time: Tue 24 Mar 2026 18:06:44 +0000 Manifest this update: Tue 24 Mar 2026 18:06:43 +0000 Manifest next update: Tue 31 Mar 2026 18:06:43 +0000 Files and hashes: 1: 5TfQw0j9fcSfX8OwBmoxxYT64as.crl (hash: snXllXYhnxTPILehxq6/ZPEQNJAymNd9CouQPMj4mXM=) 2: F3529CDCAE1511EE92D99E46C4F9AE02.roa (hash: /Luy/+jPgTFAJ0u6yblGkfclRN3VgeWuxtxYFg+WKb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3320 (0xcf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4345, serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Validity Not Before: Mar 24 18:06:43 2026 GMT Not After : Mar 31 18:06:43 2026 GMT Subject: CN=69c2d2b3-0726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8a:ef:c1:f1:31:72:3b:10:62:3e:85:80:55: 16:16:e0:a6:70:02:c5:e3:7d:9c:fc:ec:ff:f4:d1: b0:0d:b3:a0:79:eb:15:d9:5f:b8:87:fe:e8:f2:dc: 4c:df:65:e7:2f:c3:a8:57:dd:a5:d9:37:26:01:a9: cc:94:07:e6:8c:04:2b:55:01:24:53:7e:22:d8:ae: 2a:25:c7:58:c2:9e:64:6d:4e:0a:a5:2c:99:1f:03: 9c:ab:9e:52:33:7e:d2:e8:fc:1e:46:c2:25:c4:05: 8b:9e:dc:e0:b6:fc:c3:f0:ef:40:73:8d:39:34:bb: ee:cc:2c:63:9c:97:89:8e:2e:0d:92:8f:fb:bd:bc: a5:3f:9d:74:ec:1c:08:14:42:e0:62:73:f2:5f:86: 4a:80:a9:f7:ae:97:0c:e6:02:27:ff:f4:db:1b:86: 9a:1e:ae:29:0b:97:11:0c:d2:a8:df:47:5a:f6:da: 96:94:83:53:a0:86:5e:21:30:a3:fd:62:e1:95:18: 70:29:0d:68:13:a1:d1:46:d1:70:9e:6e:d0:c4:db: d2:98:d0:32:75:23:a3:de:12:62:d5:dd:a1:a5:a2: 3e:ae:f3:8e:df:c4:7f:c5:d4:eb:6f:6e:19:de:cd: 14:3d:75:18:cf:3c:2a:a4:07:a6:74:43:44:67:46: c4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E6:7C:E5:D5:6B:F2:47:33:A5:B5:A8:CD:26:A3:9C:0D:BF:95:F0 X509v3 Authority Key Identifier: keyid:E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e8:f4:a1:5b:28:00:5e:10:3b:95:f4:0e:0f:8e:1e:38:07: e3:73:11:49:09:7d:5d:54:d9:87:d5:97:ae:ef:3b:f8:b4:ef: 8d:22:f1:83:59:f2:c9:b4:fc:0e:a3:f8:22:52:f1:44:04:25: 9a:e5:89:ea:ae:06:12:bc:da:21:41:cd:b0:89:fb:44:e6:36: 42:67:c0:88:0d:20:0d:cd:24:24:ff:8b:e0:87:95:62:96:ab: c2:b4:28:0a:e9:e3:79:fd:7e:f0:2b:93:42:2c:7b:92:98:00: 10:54:be:88:2f:da:dc:84:1e:86:77:0d:ce:20:de:29:6e:47: 57:5b:a6:cf:d9:9f:ac:14:7b:eb:72:b8:31:9d:cb:39:0c:ee: f9:99:ce:e8:3f:de:c4:71:cd:1c:10:a5:f0:a9:39:ed:7c:1f: dc:ce:db:6f:ea:b3:b2:a9:de:4d:6e:4c:d4:e4:06:ee:e8:67: b1:89:49:06:9a:74:26:33:25:86:18:95:4b:5d:ba:0a:ad:95: 8f:d7:76:e2:13:4c:32:0c:65:98:3a:7a:31:1b:76:51:d6:97: d2:93:4b:bc:af:02:b6:65:66:99:36:e7:e5:0c:f0:ff:d1:f4: a7:07:da:80:7b:50:db:e2:19:b2:96:7b:15:55:90:cb:f1:6f: c8:ce:c4:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQzNDUxMTAvBgNVBAUTKEU1MzdEMEMzNDhGRDdEQzQ5RjVGQzNCMDA2NkEzMUM1 ODRGQUUxQUIwHhcNMjYwMzI0MTgwNjQzWhcNMjYwMzMxMTgwNjQzWjAYMRYwFAYD VQQDEw02OWMyZDJiMy0wNzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnYrvwfExcjsQYj6FgFUWFuCmcALF432c/Oz/9NGwDbOgeesV2V+4h/7o8txM 32XnL8OoV92l2TcmAanMlAfmjAQrVQEkU34i2K4qJcdYwp5kbU4KpSyZHwOcq55S M37S6PweRsIlxAWLntzgtvzD8O9Ac405NLvuzCxjnJeJji4Nko/7vbylP5107BwI FELgYnPyX4ZKgKn3rpcM5gIn//TbG4aaHq4pC5cRDNKo30da9tqWlINToIZeITCj /WLhlRhwKQ1oE6HRRtFwnm7QxNvSmNAydSOj3hJi1d2hpaI+rvOO38R/xdTrb24Z 3s0UPXUYzzwqpAemdENEZ0bEQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKrmfOXV a/JHM6W1qM0mo5wNv5XwMB8GA1UdIwQYMBaAFOU30MNI/X3En1/DsAZqMcWE+uGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDM0NS9FQzc4Q0REQTA1 MzgxMUVBQjU4OTc2NjhDNEY5QUUwMi81VGZRdzBqOWZjU2ZYOE93Qm1veHhZVDY0 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVUZlF3MGo5ZmNTZlg4T3dCbW94eFlUNjRhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDM0NS9FQzc4Q0REQTA1MzgxMUVBQjU4OTc2NjhDNEY5QUUwMi81VGZRdzBqOWZj U2ZYOE93Qm1veHhZVDY0YXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXuj0oVsoAF4QO5X0Dg+OHjgH43MRSQl9XVTZh9WXru87+LTvjSLxg1nyybT8 DqP4IlLxRAQlmuWJ6q4GErzaIUHNsIn7ROY2QmfAiA0gDc0kJP+L4IeVYparwrQo Cunjef1+8CuTQix7kpgAEFS+iC/a3IQehncNziDeKW5HV1umz9mfrBR763K4MZ3L OQzu+ZnO6D/exHHNHBCl8Kk57Xwf3M7bb+qzsqneTW5M1OQG7uhnsYlJBpp0JjMl hhiVS126Cq2Vj9d24hNMMgxlmDp6MRt2UdaX0pNLvK8CtmVmmTbn5Qzw/9H0pwfa gHtQ2+IZspZ7FVWQy/FvyM7Ezw== -----END CERTIFICATE-----Generated at Thu Mar 26 14:27:26 2026 by rpki-client