$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft File: 5wYBKhBr0JRljmBMVgMFDxTcP0w.mft (raw, json) Hash identifier: uE9D+T7jYu6WNzhltPNSS1H1PLlAIyUcSijeqtN8oYA= Subject key identifier: B3:58:9B:40:CC:BE:56:E3:5E:EB:EE:03:96:D7:11:CE:26:21:C0:55 Authority key identifier: E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C Certificate issuer: /CN=A91D94CD/serialNumber=E706012A106BD094658E604C5603050F14DC3F4C Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft Manifest number: 5E Signing time: Wed 25 Mar 2026 07:17:35 +0000 Manifest this update: Wed 25 Mar 2026 07:17:34 +0000 Manifest next update: Wed 01 Apr 2026 07:17:34 +0000 Files and hashes: 1: 5wYBKhBr0JRljmBMVgMFDxTcP0w.crl (hash: Fo5bpAqqmHdrhPaevrV2YdFD3WBLpiIOfw0uZVLoMS8=) 2: 6767E894A32311F0A8D9D520C4F9AE02.roa (hash: EHyz2xRZs5VYv9OanUFyye7p3N/wXAHiJq/ekOSOYZA=) 3: 67D535ACA32311F0A8D9D520C4F9AE02.roa (hash: BSzgTNzVd1eSvTFBsG3dgq89V/tbKxGI5pw6hlS/4GY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D94CD, serialNumber=E706012A106BD094658E604C5603050F14DC3F4C Validity Not Before: Mar 25 07:17:34 2026 GMT Not After : Apr 1 07:17:34 2026 GMT Subject: CN=69c38c0f-3d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8b:82:8d:58:f3:78:43:83:d8:da:9d:31:88: e3:6e:44:16:99:92:03:9d:4f:e4:ab:0f:98:b4:b3: af:b6:79:5f:57:73:03:75:35:b9:cc:9e:55:47:8b: c7:4f:cd:f7:90:02:d1:72:8e:bc:a7:bc:2f:33:62: b8:dd:7f:b6:90:c2:c6:fb:1a:ff:24:de:ad:94:72: d1:96:39:cf:74:f3:85:66:38:04:8b:74:da:2d:c0: 7f:b6:30:03:22:16:6f:4b:a6:9d:7f:bf:11:83:1f: 59:f6:01:b4:45:c4:d2:48:2d:3f:df:0d:26:f5:f3: 87:09:4a:e4:b4:ed:81:c5:49:c5:94:07:c2:c2:6e: 82:ea:0b:1f:d8:aa:a3:e2:fa:b2:50:5d:a2:89:9e: fa:a9:04:d3:35:8a:9e:8e:50:72:1a:e9:97:ff:19: 12:7e:d6:1a:43:04:c9:68:c6:41:58:3d:22:8e:70: 8a:5e:c5:c9:e8:81:51:77:cd:cc:2c:55:e4:87:4e: bc:b2:da:a2:21:93:27:94:44:0b:f5:d7:b4:f1:a8: 78:05:3c:eb:0a:e1:16:5b:9c:9b:c9:dd:0d:10:43: 05:6e:a9:67:2e:36:06:16:aa:1a:33:ab:c5:5d:a6: f5:9c:81:79:6e:02:5a:9d:4d:46:bf:07:f8:9a:e7: 50:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:58:9B:40:CC:BE:56:E3:5E:EB:EE:03:96:D7:11:CE:26:21:C0:55 X509v3 Authority Key Identifier: keyid:E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:b9:1c:d6:3f:fb:b0:b8:f0:da:84:08:0c:a5:a2:2b:b8:55: 18:e5:08:df:86:7c:9d:7c:9d:f7:6b:3f:a9:e1:fd:7d:45:9e: c7:97:e2:79:81:ca:4c:74:c9:5c:1b:c5:f1:1a:54:a4:fd:5a: 74:43:54:7a:2a:4c:53:0b:ab:9a:92:c9:f2:33:07:22:fd:54: 2e:12:70:b4:49:a5:73:e7:f8:d7:27:41:9d:1c:6b:36:2e:42: 3f:e8:54:61:21:70:1e:36:56:f0:d7:57:be:cb:64:8c:63:47: 7d:57:20:46:df:0d:3f:77:7f:03:28:b2:05:80:2d:6b:a7:6e: 7c:8f:5e:c9:e6:e0:46:24:b8:f2:7c:26:91:9a:0e:52:19:7c: 3d:30:f8:29:1f:a3:39:b5:7f:3b:d4:1f:c3:fa:0a:06:51:d8: 96:e7:b4:ad:0b:ba:41:39:83:0c:c1:fb:1e:5c:d2:ad:9b:93: fb:21:d3:52:fd:c4:8f:11:d5:0b:ec:fa:c2:ea:75:5f:fd:d9: 60:a3:c5:32:1f:0a:5f:2e:1f:8c:60:e7:6c:93:c7:73:90:3a: 94:f2:a6:4e:c9:ee:74:15:e9:2f:4f:ea:d6:f8:3c:b5:75:63: 31:ea:35:8d:3b:90:b3:84:33:29:65:3f:19:77:97:87:b1:1e: dc:68:4d:4d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OTRDRDExMC8GA1UEBRMoRTcwNjAxMkExMDZCRDA5NDY1OEU2MDRDNTYwMzA1MEYx NERDM0Y0QzAeFw0yNjAzMjUwNzE3MzRaFw0yNjA0MDEwNzE3MzRaMBgxFjAUBgNV BAMTDTY5YzM4YzBmLTNkOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKi4KNWPN4Q4PY2p0xiONuRBaZkgOdT+SrD5i0s6+2eV9XcwN1NbnMnlVHi8dP zfeQAtFyjrynvC8zYrjdf7aQwsb7Gv8k3q2UctGWOc9084VmOASLdNotwH+2MAMi Fm9Lpp1/vxGDH1n2AbRFxNJILT/fDSb184cJSuS07YHFScWUB8LCboLqCx/YqqPi +rJQXaKJnvqpBNM1ip6OUHIa6Zf/GRJ+1hpDBMloxkFYPSKOcIpexcnogVF3zcws VeSHTryy2qIhkyeURAv117TxqHgFPOsK4RZbnJvJ3Q0QQwVuqWcuNgYWqhozq8Vd pvWcgXluAlqdTUa/B/ia51A3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUs1ibQMy+ VuNe6+4DltcRziYhwFUwHwYDVR0jBBgwFoAU5wYBKhBr0JRljmBMVgMFDxTcP0ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5NENELzJDRDdGRDBFOUVD ODExRjA4Q0QyQUM3QkM0RjlBRTAyLzV3WUJLaEJyMEpSbGptQk1WZ01GRHhUY1Aw dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNXdZQktoQnIwSlJsam1CTVZnTUZEeFRjUDB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 NENELzJDRDdGRDBFOUVDODExRjA4Q0QyQUM3QkM0RjlBRTAyLzV3WUJLaEJyMEpS bGptQk1WZ01GRHhUY1Awdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBZuRzWP/uwuPDahAgMpaIruFUY5QjfhnydfJ33az+p4f19RZ7Hl+J5gcpMdMlc G8XxGlSk/Vp0Q1R6KkxTC6uaksnyMwci/VQuEnC0SaVz5/jXJ0GdHGs2LkI/6FRh IXAeNlbw11e+y2SMY0d9VyBG3w0/d38DKLIFgC1rp258j17J5uBGJLjyfCaRmg5S GXw9MPgpH6M5tX871B/D+goGUdiW57StC7pBOYMMwfseXNKtm5P7IdNS/cSPEdUL 7PrC6nVf/dlgo8UyHwpfLh+MYOdsk8dzkDqU8qZOye50FekvT+rW+Dy1dWMx6jWN O5CzhDMpZT8Zd5eHsR7caE1N -----END CERTIFICATE-----Generated at Thu Mar 26 14:21:38 2026 by rpki-client