$ rpki-client -vvf rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft File: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft (raw, json) Hash identifier: br4//XQ7tGYrZo9pI0JseXFsrKevhinccZh+ZaS7+ho= Subject key identifier: 5B:2E:0C:C1:04:73:7D:B0:F7:DB:17:F1:7F:4E:FD:2C:8F:6F:7C:A5 Authority key identifier: E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 Certificate issuer: /CN=A91F35BB/serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Certificate serial: 0558 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft Manifest number: 0558 Signing time: Tue 24 Mar 2026 23:03:30 +0000 Manifest this update: Tue 24 Mar 2026 23:03:29 +0000 Manifest next update: Tue 31 Mar 2026 23:03:29 +0000 Files and hashes: 1: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl (hash: i/2cIB+F6CEH6T8gXacjk5cB3Nz25GhxDGgkbU95Qjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1368 (0x558) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F35BB, serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Validity Not Before: Mar 24 23:03:29 2026 GMT Not After : Mar 31 23:03:29 2026 GMT Subject: CN=69c31841-ed00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6a:aa:04:38:5c:64:e5:2f:4f:ff:b5:3c:d0: c2:d2:e7:d9:e2:d6:f1:42:59:28:b5:c6:fd:d9:62: 95:c3:fe:55:e4:33:05:64:f9:72:d5:82:5d:9c:30: 53:55:72:91:48:b5:63:b6:66:b5:58:48:65:04:33: 75:10:94:d1:c8:b0:39:f4:ff:64:3d:bd:ea:36:ba: 90:11:ae:91:a6:c3:e5:0b:21:d4:d2:be:bd:a2:55: 12:13:26:e0:60:a6:98:4b:8e:1e:a0:ec:29:a5:e8: 05:a3:f2:cc:ef:23:29:7c:92:38:30:0f:15:8f:7f: 1a:0c:dc:66:b9:10:b9:5f:37:7a:2d:72:bb:bb:e5: 56:33:27:a0:a5:09:bb:93:b3:ff:59:07:d0:50:c3: 4d:93:2a:47:40:d4:d7:30:55:e9:1e:88:0c:d4:bd: 92:de:2b:2a:f1:7c:b4:a9:71:e1:02:14:79:43:d3: bc:0c:9f:9a:d2:21:cc:f8:f2:c9:7f:a1:d4:35:b7: 3c:f2:b7:b7:5b:14:39:c7:b4:63:61:28:f5:28:4c: fb:b5:90:49:f6:df:f9:ec:79:52:07:08:49:49:54: 55:02:ed:33:7f:49:1d:b6:d4:9f:68:a3:eb:48:33: 18:fc:1f:d4:fc:8a:1d:3c:52:08:45:e7:37:6e:6f: 7f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2E:0C:C1:04:73:7D:B0:F7:DB:17:F1:7F:4E:FD:2C:8F:6F:7C:A5 X509v3 Authority Key Identifier: keyid:E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:2f:4f:d1:fd:7e:3a:4a:c7:cf:e1:c8:7f:c2:04:ff:87:2e: fc:ed:b9:9e:ea:b1:fc:3a:95:cb:f7:4e:31:c9:d9:00:cd:3a: 3d:80:17:6b:88:7e:a0:72:28:57:d2:28:90:bc:c8:3d:35:27: ba:de:d0:52:67:83:16:94:4e:27:fb:f9:ea:ab:d3:d7:99:1d: da:b8:43:28:d3:d6:23:cf:61:52:6c:90:a8:95:6d:3c:2e:86: 4e:ce:fb:d8:da:af:92:c2:e8:05:76:51:a1:59:95:d9:84:8e: ac:94:9a:11:7d:ac:31:7b:0c:ba:c1:5e:19:18:66:19:70:31: 93:d9:ef:d1:50:5a:e1:49:85:38:c8:41:ef:64:5c:70:16:07: 3c:e7:27:1f:f7:1f:63:17:2d:a8:e7:c8:19:01:f9:1d:44:83: a9:c5:67:40:c3:bf:68:75:fe:aa:44:29:f1:5e:50:16:ed:b1: 46:df:fd:67:0d:54:c6:1b:26:4f:30:ab:d6:cf:8a:72:3b:68: d8:1a:c5:3d:db:60:6f:3c:5f:84:19:07:a6:ea:24:82:b5:66: 16:27:17:64:8f:d6:8c:64:ee:94:53:8e:72:96:ec:c9:d7:13: 8c:8c:e4:65:99:04:fa:f4:18:a0:0c:ed:a7:17:dc:a3:99:f5: 5b:be:30:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM1QkIxMTAvBgNVBAUTKEU2MUZBMTI0QTYxOEUyNTY2N0NDMzFDQ0ZDNDkxNkNF MDc2RkRBNTcwHhcNMjYwMzI0MjMwMzI5WhcNMjYwMzMxMjMwMzI5WjAYMRYwFAYD VQQDEw02OWMzMTg0MS1lZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWqqBDhcZOUvT/+1PNDC0ufZ4tbxQlkotcb92WKVw/5V5DMFZPly1YJdnDBT VXKRSLVjtma1WEhlBDN1EJTRyLA59P9kPb3qNrqQEa6RpsPlCyHU0r69olUSEybg YKaYS44eoOwppegFo/LM7yMpfJI4MA8Vj38aDNxmuRC5Xzd6LXK7u+VWMyegpQm7 k7P/WQfQUMNNkypHQNTXMFXpHogM1L2S3isq8Xy0qXHhAhR5Q9O8DJ+a0iHM+PLJ f6HUNbc88re3WxQ5x7RjYSj1KEz7tZBJ9t/57HlSBwhJSVRVAu0zf0kdttSfaKPr SDMY/B/U/IodPFIIRec3bm9/nwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFsuDMEE c32w99sX8X9O/SyPb3ylMB8GA1UdIwQYMBaAFOYfoSSmGOJWZ8wxzPxJFs4Hb9pX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzVCQi8wNzYzN0QwMjI3 RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRsWm56REhNX0VrV3pnZHYy bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVoLWhKS1lZNGxabnpESE1fRWtXemdkdjJsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzVCQi8wNzYzN0QwMjI3RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRs Wm56REhNX0VrV3pnZHYybGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASi9P0f1+OkrHz+HIf8IE/4cu/O25nuqx/DqVy/dOMcnZAM06PYAXa4h+oHIo V9IokLzIPTUnut7QUmeDFpROJ/v56qvT15kd2rhDKNPWI89hUmyQqJVtPC6GTs77 2NqvksLoBXZRoVmV2YSOrJSaEX2sMXsMusFeGRhmGXAxk9nv0VBa4UmFOMhB72Rc cBYHPOcnH/cfYxctqOfIGQH5HUSDqcVnQMO/aHX+qkQp8V5QFu2xRt/9Zw1Uxhsm TzCr1s+Kcjto2BrFPdtgbzxfhBkHpuokgrVmFicXZI/WjGTulFOOcpbsydcTjIzk ZZkE+vQYoAztpxfco5n1W74wGQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:43:32 2026 by rpki-client