$ rpki-client -vvf rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft File: 5NzsWVobtnOJciNlasY5uVNS3XM.mft (raw, json) Hash identifier: gvfFlCG6fRWns/as+jpnAHAVO+Jl94cecRbBLXIRapk= Subject key identifier: 9E:71:CE:ED:D8:72:4D:EC:C8:D7:DD:2B:1C:33:1B:F4:95:66:DC:51 Authority key identifier: E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 Certificate issuer: /CN=A91D604E/serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Certificate serial: 0D53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft Manifest number: 0D41 Signing time: Tue 24 Mar 2026 17:54:08 +0000 Manifest this update: Tue 24 Mar 2026 17:54:07 +0000 Manifest next update: Tue 31 Mar 2026 17:54:07 +0000 Files and hashes: 1: 5NzsWVobtnOJciNlasY5uVNS3XM.crl (hash: gmQ7LnUippG6m/uUii0bxQFcdnacaeGF1Skw3kzsL5A=) 2: D1C40E28183411EF99FD8776C4F9AE02.roa (hash: 62d4jzUjfsj/dKFMhMN/kf/dBUMWoPHad4ewLC0GCPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3411 (0xd53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D604E, serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Validity Not Before: Mar 24 17:54:07 2026 GMT Not After : Mar 31 17:54:07 2026 GMT Subject: CN=69c2cfc0-3c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:49:0a:dd:2a:68:06:c5:19:e6:02:d1:03:1f: 7d:b0:d6:cb:a7:93:78:92:34:f3:e4:27:0d:4b:81: 8d:d2:51:8f:d6:11:04:0b:2c:2f:4b:01:e8:d1:89: 87:41:41:93:fa:1e:19:12:5a:67:fd:a4:2c:58:6c: ff:73:d4:f0:fb:9b:3e:d4:f2:26:1b:35:ad:28:d4: b3:1d:68:0c:e1:7f:20:ea:dd:ff:da:f3:41:04:5a: 14:92:4b:1c:15:fb:f0:94:cc:1c:ae:18:6f:5e:a3: a0:79:77:d6:35:16:64:b8:d2:20:dd:cd:27:81:9b: 35:49:4c:0b:47:36:c9:72:ad:94:d4:34:ad:0b:8c: 51:9c:73:51:1a:ea:97:c8:91:31:06:61:c9:04:90: 68:7c:dc:e1:15:2b:aa:e9:b6:8b:c8:5d:9f:f6:cb: d7:78:88:50:5e:b5:69:f2:a3:1e:7f:bc:81:01:ed: b7:3c:a3:01:43:ce:65:b4:47:29:ee:c4:8f:1f:6d: b6:41:3d:39:a0:41:e3:9f:0b:d3:8c:b3:31:9d:3a: c9:0e:bb:4a:0f:c0:c6:ab:1c:f4:a3:10:3f:4e:3d: e6:0b:8f:5a:99:7c:c8:c5:fb:b0:b4:4b:ae:09:03: fa:c3:7d:4c:6a:b6:8c:a9:56:25:4d:5f:63:42:ed: 4c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:71:CE:ED:D8:72:4D:EC:C8:D7:DD:2B:1C:33:1B:F4:95:66:DC:51 X509v3 Authority Key Identifier: keyid:E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:77:6e:7d:a5:3e:f7:6d:e5:ad:d2:82:e6:f5:71:da:92:45: 00:c9:28:7f:cd:7f:a7:0a:e6:9e:85:69:2c:6b:72:af:61:23: 57:da:54:38:a7:0b:65:13:d5:a3:3e:fd:29:fb:6e:ae:4c:86: d0:57:cd:cb:12:fa:8c:bc:3a:a2:1e:d9:78:f6:58:ef:6f:61: 80:e2:30:7f:94:cd:92:c5:8b:2e:46:ff:7c:a0:93:8a:41:d4: 7f:1b:fd:d1:0e:0c:84:67:46:2f:00:0a:3d:14:88:a9:2f:c4: 69:f1:a8:b4:2a:0a:4b:54:a6:fb:df:d4:f9:65:ed:26:ea:7d: 19:d0:71:ec:7b:b3:2d:2e:8a:7a:76:6e:58:f4:78:ae:9b:58: 6d:7b:79:78:59:57:ad:3a:67:8d:64:86:b9:7b:56:94:76:56: 26:98:55:b5:dd:3b:ce:79:b9:09:5a:4f:cf:e5:b5:7c:d8:26: a8:f6:48:58:87:63:f2:49:f8:c7:83:a4:f8:10:66:23:1d:dd: f8:d3:36:93:99:50:fa:bc:84:39:87:09:c9:33:aa:13:3e:0c: 15:5c:db:bd:ac:66:f8:5a:22:a6:e7:a3:75:95:f0:8f:60:90: e0:b8:41:b8:14:16:b3:77:82:2e:17:14:28:63:f4:47:16:a8: b9:01:5b:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwNEUxMTAvBgNVBAUTKEU0RENFQzU5NUExQkI2NzM4OTcyMjM2NTZBQzYzOUI5 NTM1MkRENzMwHhcNMjYwMzI0MTc1NDA3WhcNMjYwMzMxMTc1NDA3WjAYMRYwFAYD VQQDEw02OWMyY2ZjMC0zYzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7UkK3SpoBsUZ5gLRAx99sNbLp5N4kjTz5CcNS4GN0lGP1hEECywvSwHo0YmH QUGT+h4ZElpn/aQsWGz/c9Tw+5s+1PImGzWtKNSzHWgM4X8g6t3/2vNBBFoUkksc FfvwlMwcrhhvXqOgeXfWNRZkuNIg3c0ngZs1SUwLRzbJcq2U1DStC4xRnHNRGuqX yJExBmHJBJBofNzhFSuq6baLyF2f9svXeIhQXrVp8qMef7yBAe23PKMBQ85ltEcp 7sSPH222QT05oEHjnwvTjLMxnTrJDrtKD8DGqxz0oxA/Tj3mC49amXzIxfuwtEuu CQP6w31MaraMqVYlTV9jQu1MdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ5xzu3Y ck3syNfdKxwzG/SVZtxRMB8GA1UdIwQYMBaAFOTc7FlaG7ZziXIjZWrGOblTUt1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjA0RS85MUI1QzBDMEY0 RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRuT0pjaU5sYXNZNXVWTlMz WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVOenNXVm9idG5PSmNpTmxhc1k1dVZOUzNYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjA0RS85MUI1QzBDMEY0RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRu T0pjaU5sYXNZNXVWTlMzWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApndufaU+923lrdKC5vVx2pJFAMkof81/pwrmnoVpLGtyr2EjV9pUOKcLZRPV oz79KfturkyG0FfNyxL6jLw6oh7ZePZY729hgOIwf5TNksWLLkb/fKCTikHUfxv9 0Q4MhGdGLwAKPRSIqS/EafGotCoKS1Sm+9/U+WXtJup9GdBx7HuzLS6KenZuWPR4 rptYbXt5eFlXrTpnjWSGuXtWlHZWJphVtd07znm5CVpPz+W1fNgmqPZIWIdj8kn4 x4Ok+BBmIx3d+NM2k5lQ+ryEOYcJyTOqEz4MFVzbvaxm+FoipuejdZXwj2CQ4LhB uBQWs3eCLhcUKGP0RxaouQFbwg== -----END CERTIFICATE-----Generated at Thu Mar 26 14:38:09 2026 by rpki-client