$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft File: 5xqfIU6Aybw7LSOf-LmqtxP27bc.mft (raw, json) Hash identifier: Dwtm5VdnK9IMxml/xTBNVeqAB+gnoZmn941q8AocN8c= Subject key identifier: 37:F6:72:09:0B:83:A0:CB:EF:F8:24:AC:D3:45:26:4F:A1:C3:27:F7 Authority key identifier: E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7 Certificate issuer: /CN=A91E8525/serialNumber=E71A9F214E80C9BC3B2D239FF8B9AAB713F6EDB7 Certificate serial: 1A74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft Manifest number: 1A5E Signing time: Tue 24 Mar 2026 16:15:41 +0000 Manifest this update: Tue 24 Mar 2026 16:15:40 +0000 Manifest next update: Tue 31 Mar 2026 16:15:40 +0000 Files and hashes: 1: 5xqfIU6Aybw7LSOf-LmqtxP27bc.crl (hash: Aq7C/GL0e1KUt/kyIbGh0H6Jf25fYMDM67erK4g1vx0=) 2: 3A21C144E51211EBB1225278C4F9AE02.roa (hash: 4HTCBd1B951dp8RI98cRe5qVuag3SCN+aI63ZMLFsbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.crl rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6772 (0x1a74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8525, serialNumber=E71A9F214E80C9BC3B2D239FF8B9AAB713F6EDB7 Validity Not Before: Mar 24 16:15:40 2026 GMT Not After : Mar 31 16:15:40 2026 GMT Subject: CN=69c2b8ad-6754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:68:f8:71:df:67:b5:81:19:22:68:04:fb:b1: 9c:4f:a3:30:58:ed:a1:02:19:8d:57:f4:b2:7e:27: ad:c3:22:15:1f:e8:b8:e9:51:c4:26:76:d1:05:cf: 5a:4c:2d:c8:30:12:ad:bc:4c:7d:3b:ad:8a:f8:94: 07:18:d9:e7:f1:38:42:ac:28:6b:2f:26:74:0c:c9: f7:1a:65:5f:66:cf:e5:f6:18:05:2f:2e:aa:e5:dc: ec:ec:e9:f3:2a:fb:29:75:29:d4:41:5b:dc:88:25: 83:75:59:1b:8f:67:76:a3:fb:c6:56:81:04:88:e0: 38:f7:39:d2:d4:f3:44:c9:c1:83:5b:1b:37:b1:40: 3f:e4:be:97:86:40:47:d1:c7:7f:14:15:d9:ea:74: 2d:cd:92:a4:6d:2c:83:e0:07:30:bf:e2:ac:f0:d4: 6f:7c:47:e9:26:d6:ce:bc:86:4c:54:28:03:2c:c9: 90:72:12:ab:99:0a:90:83:fa:01:a8:86:0d:9f:b5: 40:fc:bf:a3:ed:81:8b:b7:8d:d0:52:cf:61:e9:08: 8a:ee:b4:d8:68:50:33:34:5e:66:b1:72:64:be:99: c5:02:56:9b:73:c9:dc:ba:5b:b7:4a:23:45:ce:55: a8:43:55:4d:23:6c:c2:00:4d:8f:78:7f:71:37:65: ba:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F6:72:09:0B:83:A0:CB:EF:F8:24:AC:D3:45:26:4F:A1:C3:27:F7 X509v3 Authority Key Identifier: keyid:E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:ab:4b:52:a1:9e:c8:6d:80:1e:98:3f:cb:b1:e3:88:dc:00: c0:ed:1f:1b:16:82:f7:0d:0a:85:d8:d9:9f:15:4a:7c:6d:ad: 60:3c:25:c4:68:6f:21:4d:7d:0c:27:45:20:7f:ff:50:9a:a3: 97:c0:2c:46:2b:10:e1:17:98:aa:19:56:01:79:d0:bb:c4:56: 9b:c8:23:8f:69:f6:4e:ea:40:fe:fc:5e:69:3e:db:20:93:d0: d2:ce:4b:03:01:cd:42:69:2e:9d:45:24:74:c4:ce:f2:f6:fa: 12:24:21:2e:40:36:2c:bc:7e:14:ec:dc:d8:ce:a8:79:5b:f9: b3:0d:7e:07:21:eb:4c:1d:a6:30:c1:26:66:44:95:95:6f:73: 4c:b1:42:4c:c9:8e:5f:34:14:97:b1:98:57:36:6b:f2:08:37: bc:e2:f5:c1:e8:2f:5c:39:2d:a6:d9:7a:d1:71:7e:3b:7c:22: 4b:2a:f4:9a:79:56:2b:94:82:64:ae:b1:1f:af:25:28:fb:73: e2:fc:a1:ac:43:e7:78:e3:15:14:ef:ef:e8:2c:62:a0:31:f0: f7:c5:1f:eb:5d:b5:ae:cd:c2:b6:bc:d0:ec:57:0d:9a:d7:18: 17:06:ac:c2:2c:fa:5a:3c:52:7b:7a:2c:bf:c0:18:84:c3:ec: b4:aa:3d:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1MjUxMTAvBgNVBAUTKEU3MUE5RjIxNEU4MEM5QkMzQjJEMjM5RkY4QjlBQUI3 MTNGNkVEQjcwHhcNMjYwMzI0MTYxNTQwWhcNMjYwMzMxMTYxNTQwWjAYMRYwFAYD VQQDEw02OWMyYjhhZC02NzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5mj4cd9ntYEZImgE+7GcT6MwWO2hAhmNV/SyfietwyIVH+i46VHEJnbRBc9a TC3IMBKtvEx9O62K+JQHGNnn8ThCrChrLyZ0DMn3GmVfZs/l9hgFLy6q5dzs7Onz KvspdSnUQVvciCWDdVkbj2d2o/vGVoEEiOA49znS1PNEycGDWxs3sUA/5L6XhkBH 0cd/FBXZ6nQtzZKkbSyD4Acwv+Ks8NRvfEfpJtbOvIZMVCgDLMmQchKrmQqQg/oB qIYNn7VA/L+j7YGLt43QUs9h6QiK7rTYaFAzNF5msXJkvpnFAlabc8nculu3SiNF zlWoQ1VNI2zCAE2PeH9xN2W6qwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDf2cgkL g6DL7/gkrNNFJk+hwyf3MB8GA1UdIwQYMBaAFOcanyFOgMm8Oy0jn/i5qrcT9u23 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODUyNS81MjIxMjYxMDYx MkYxMUU3QkQyRURBMEJDNEY5QUUwMi81eHFmSVU2QXlidzdMU09mLUxtcXR4UDI3 YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4cWZJVTZBeWJ3N0xTT2YtTG1xdHhQMjdiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODUyNS81MjIxMjYxMDYxMkYxMUU3QkQyRURBMEJDNEY5QUUwMi81eHFmSVU2QXli dzdMU09mLUxtcXR4UDI3YmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtqtLUqGeyG2AHpg/y7HjiNwAwO0fGxaC9w0KhdjZnxVKfG2tYDwlxGhvIU19 DCdFIH//UJqjl8AsRisQ4ReYqhlWAXnQu8RWm8gjj2n2TupA/vxeaT7bIJPQ0s5L AwHNQmkunUUkdMTO8vb6EiQhLkA2LLx+FOzc2M6oeVv5sw1+ByHrTB2mMMEmZkSV lW9zTLFCTMmOXzQUl7GYVzZr8gg3vOL1wegvXDktptl60XF+O3wiSyr0mnlWK5SC ZK6xH68lKPtz4vyhrEPneOMVFO/v6CxioDHw98Uf6121rs3CtrzQ7FcNmtcYFwas wiz6WjxSe3osv8AYhMPstKo9sQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:37:27 2026 by rpki-client