$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft File: G5HVFg99VrcFqFFsahz0L0ln71Y.mft (raw, json) Hash identifier: pQxN8DcS6jagX3urrH2kDSFX3N1aCjD8TjW//8pksEg= Subject key identifier: 5D:5E:1E:1C:6A:C1:6D:23:67:F1:43:D2:8F:EE:24:F8:C5:76:E4:8C Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 Certificate issuer: /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Certificate serial: 09DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft Manifest number: 09D4 Signing time: Tue 24 Mar 2026 19:41:16 +0000 Manifest this update: Tue 24 Mar 2026 19:41:16 +0000 Manifest next update: Tue 31 Mar 2026 19:41:16 +0000 Files and hashes: 1: G5HVFg99VrcFqFFsahz0L0ln71Y.crl (hash: +eoJeT69kT5MyvH86MSb81B7jfajHEWAUcse23BNqzM=) 2: A37D1F4AF51A11F08A3A39E6586F56BC.roa (hash: jR0WlKY8LzR2LUBl37yUqlZt1qZx888jsAWYo1rjx1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2526 (0x9de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Validity Not Before: Mar 24 19:41:16 2026 GMT Not After : Mar 31 19:41:16 2026 GMT Subject: CN=69c2e8dc-3397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:46:70:7b:5d:29:35:2c:db:9b:5c:f2:fc:65: da:17:4b:6a:52:8a:16:4d:5d:79:e5:4d:99:ba:13: bd:45:1d:3b:8e:c3:8d:5c:1a:ec:4c:4b:f6:4e:64: cf:43:09:b2:d9:5a:8d:28:7b:85:bf:4c:75:b7:25: 95:42:07:39:3a:ea:03:1e:cd:ff:ad:61:17:ed:99: b1:bb:fa:5f:2f:89:04:bf:d8:84:0b:8c:95:18:84: 1a:98:1f:71:c1:0e:a7:8a:c1:92:6e:23:00:85:dc: e9:2b:fa:ac:55:13:9e:f6:0c:3e:63:77:8e:f3:a3: 27:bf:f7:0c:c2:48:7a:9a:8c:6d:36:7e:bc:a7:7a: fc:8e:11:21:aa:0b:45:cc:f4:e4:c9:fa:fe:91:46: 28:77:c2:8f:4e:a1:d2:5f:d0:4c:81:3e:29:0d:51: 04:04:db:59:cf:6e:0d:85:b4:c9:c2:cc:a7:e1:3a: 89:38:68:fb:42:d1:83:dc:37:b9:56:52:0e:ca:94: ac:8a:5d:31:d4:3a:9d:e0:31:c9:5a:2e:5b:21:81: 23:80:f9:ec:d5:3c:94:11:dc:f8:d9:91:b4:76:9a: e6:ce:77:63:4d:67:dd:b3:8f:cd:4e:20:cd:9f:98: 61:53:d5:ab:42:ca:30:48:ed:ca:63:6e:06:96:f3: 8a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5E:1E:1C:6A:C1:6D:23:67:F1:43:D2:8F:EE:24:F8:C5:76:E4:8C X509v3 Authority Key Identifier: keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:97:06:84:a0:ab:c8:ab:bd:f9:57:a4:ef:e8:97:83:ab:61: 3b:9e:1e:ce:99:41:62:cd:d3:b9:31:78:bb:85:9b:0e:08:60: d3:0f:84:53:2b:64:ff:66:80:c4:ba:eb:fb:ef:48:ff:cf:eb: 9d:9b:9e:78:78:5d:ff:84:4c:2a:23:a1:5b:02:90:6a:b1:52: 9c:77:98:fb:57:1c:cd:0e:78:2e:8b:41:f1:2d:bd:9b:46:24: 1f:ad:ca:69:cd:78:4a:8a:40:fe:2a:89:92:60:a3:bf:40:42: 9a:da:5b:28:72:52:44:9e:3b:ac:80:06:a5:02:35:c3:ca:95: e4:ed:d2:cd:19:22:8d:c9:ae:91:fd:cc:32:87:26:7a:27:bb: f8:94:bf:29:9d:d4:6a:0c:62:2e:f5:9d:53:23:3c:54:7b:c1: 6b:0b:d2:d3:ad:05:e3:ed:0f:44:27:64:22:bf:7f:eb:28:63: 6e:4c:38:f1:5d:45:33:8f:c8:f0:29:df:38:99:10:ac:68:98: f7:9f:b2:ae:47:24:2f:02:7a:09:94:47:7d:f0:d4:2a:96:ad: f1:dd:53:78:07:e8:08:9b:5c:10:e2:b5:9a:b8:c2:b8:ea:a6: 3c:a3:78:7d:55:f4:f6:5e:91:b5:af:f2:70:2b:1f:f0:5d:4c: 7d:af:29:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NTQxMTAvBgNVBAUTKDFCOTFENTE2MEY3RDU2QjcwNUE4NTE2QzZBMUNGNDJG NDk2N0VGNTYwHhcNMjYwMzI0MTk0MTE2WhcNMjYwMzMxMTk0MTE2WjAYMRYwFAYD VQQDEw02OWMyZThkYy0zMzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10Zwe10pNSzbm1zy/GXaF0tqUooWTV155U2ZuhO9RR07jsONXBrsTEv2TmTP Qwmy2VqNKHuFv0x1tyWVQgc5OuoDHs3/rWEX7Zmxu/pfL4kEv9iEC4yVGIQamB9x wQ6nisGSbiMAhdzpK/qsVROe9gw+Y3eO86Mnv/cMwkh6moxtNn68p3r8jhEhqgtF zPTkyfr+kUYod8KPTqHSX9BMgT4pDVEEBNtZz24NhbTJwsyn4TqJOGj7QtGD3De5 VlIOypSsil0x1Dqd4DHJWi5bIYEjgPns1TyUEdz42ZG0dprmzndjTWfds4/NTiDN n5hhU9WrQsowSO3KY24GlvOKqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF1eHhxq wW0jZ/FD0o/uJPjFduSMMB8GA1UdIwQYMBaAFBuR1RYPfVa3BahRbGoc9C9JZ+9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU1NC9FQjFDQkJFMjlF NUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZyY0ZxRkZzYWh6MEwwbG43 MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c1SFZGZzk5VnJjRnFGRnNhaHowTDBsbjcxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU1NC9FQjFDQkJFMjlFNUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZy Y0ZxRkZzYWh6MEwwbG43MVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh5cGhKCryKu9+Vek7+iXg6thO54ezplBYs3TuTF4u4WbDghg0w+EUytk/2aA xLrr++9I/8/rnZueeHhd/4RMKiOhWwKQarFSnHeY+1cczQ54LotB8S29m0YkH63K ac14SopA/iqJkmCjv0BCmtpbKHJSRJ47rIAGpQI1w8qV5O3SzRkijcmukf3MMocm eie7+JS/KZ3UagxiLvWdUyM8VHvBawvS060F4+0PRCdkIr9/6yhjbkw48V1FM4/I 8CnfOJkQrGiY95+yrkckLwJ6CZRHffDUKpat8d1TeAfoCJtcEOK1mrjCuOqmPKN4 fVX09l6Rta/ycCsf8F1Mfa8pUQ== -----END CERTIFICATE-----Generated at Thu Mar 26 05:48:55 2026 by rpki-client