$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft File: K5XY2CKKiRR9gBk9l3DrUK7du2s.mft (raw, json) Hash identifier: JkCNT/UOeL/k4wOgzUZkgUqFwIDxw46ImWRrYS2Bgdo= Subject key identifier: 3F:BC:BD:E8:22:96:3C:8F:95:21:15:4F:FF:59:26:21:C9:39:F8:D8 Authority key identifier: 2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B Certificate issuer: /CN=A91FF5A9/serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B Certificate serial: 175F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft Manifest number: 1746 Signing time: Tue 24 Mar 2026 16:29:55 +0000 Manifest this update: Tue 24 Mar 2026 16:29:55 +0000 Manifest next update: Tue 31 Mar 2026 16:29:55 +0000 Files and hashes: 1: K5XY2CKKiRR9gBk9l3DrUK7du2s.crl (hash: rOP+fopV5teRIdi8pGlokRDEBRC8ZYXU3DI5VWcWi0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5983 (0x175f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5A9, serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B Validity Not Before: Mar 24 16:29:55 2026 GMT Not After : Mar 31 16:29:55 2026 GMT Subject: CN=69c2bc03-3475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:60:7e:0f:4c:92:71:8a:9a:fe:96:76:2a:97: 9b:c0:5e:55:06:1a:8a:c3:db:53:58:51:5d:9a:72: 4e:1b:07:95:f2:2f:27:1c:a3:12:9e:dd:72:c2:ea: c0:f4:d7:11:6f:23:da:93:53:bc:e9:b2:0f:c3:cb: c1:56:4b:2c:57:35:7d:93:f0:6a:2d:56:87:05:b4: 40:3e:f0:a2:65:30:65:89:9d:9c:eb:6e:1c:4f:a5: 78:85:93:01:99:8c:e3:43:0d:2a:20:60:13:e6:b6: e5:39:78:66:b4:ba:f7:1b:4c:8d:bb:df:78:a4:aa: d7:f6:c7:86:0d:b6:61:4f:84:1f:52:c0:66:b8:b2: 34:49:b0:98:fa:df:d7:76:a1:04:1e:64:e1:d5:39: 79:09:de:11:e0:1f:36:93:bc:13:a9:c8:cf:4c:bf: e1:82:f1:e4:3f:12:7d:3a:5b:52:d0:ff:e2:63:d4: 96:f2:f8:ae:a5:01:96:18:c1:bc:24:f1:42:66:43: 31:4a:cc:a2:94:8e:a7:df:a0:d5:73:fe:ca:32:b8: bb:b1:2d:a4:5a:fc:cb:ed:77:61:7b:a9:33:cd:d8: e2:00:a2:74:e0:ef:10:24:3f:94:df:80:e5:45:28: df:3f:e9:fc:7c:87:d5:57:d5:c6:d9:e0:06:19:61: 9c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BC:BD:E8:22:96:3C:8F:95:21:15:4F:FF:59:26:21:C9:39:F8:D8 X509v3 Authority Key Identifier: keyid:2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:21:02:a1:07:53:91:f2:e3:4b:38:60:1c:d1:65:70:d0:cf: 31:e5:e0:4f:ed:80:0d:33:82:e8:84:fa:23:66:40:25:b8:4c: 7a:3a:1d:45:2b:15:bb:b1:5d:9c:6b:b8:2a:29:77:79:75:d3: 4c:27:df:37:ba:65:96:46:48:ca:ed:cf:3d:9a:cf:fd:80:e6: 1f:a5:69:2e:b4:de:af:ba:cb:af:73:a5:09:75:63:83:cd:5c: 8c:85:f6:11:17:1c:2f:c0:91:d0:3c:79:1d:2d:94:cb:20:8e: e3:e8:e1:83:21:14:ce:cf:26:42:b4:5f:7a:ce:6c:60:de:02: 1b:ac:80:fd:b4:2e:c3:a4:66:8c:e7:ac:fd:5e:47:9c:48:44: 81:1d:e5:ec:20:d9:3c:9e:fa:54:36:bd:cc:2e:d8:f2:24:2d: 43:e8:fc:91:16:bd:35:d5:d8:20:1b:41:91:d4:e0:f3:6e:a9: 34:9b:be:3c:d6:9e:9c:5a:c6:25:34:a6:80:68:f4:9c:34:47: b9:2e:12:f0:4c:9b:a5:e9:f3:9f:85:1b:7d:67:3b:9d:2c:f4: 53:f1:98:ee:93:59:92:7a:28:57:f4:5b:3b:de:b0:20:03:fe: 20:5c:e0:61:a7:dc:3d:ab:14:53:89:92:e4:d8:d3:ea:62:e9: e3:7c:9f:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1QTkxMTAvBgNVBAUTKDJCOTVEOEQ4MjI4QTg5MTQ3RDgwMTkzRDk3NzBFQjUw QUVEREJCNkIwHhcNMjYwMzI0MTYyOTU1WhcNMjYwMzMxMTYyOTU1WjAYMRYwFAYD VQQDEw02OWMyYmMwMy0zNDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhmB+D0yScYqa/pZ2KpebwF5VBhqKw9tTWFFdmnJOGweV8i8nHKMSnt1ywurA 9NcRbyPak1O86bIPw8vBVkssVzV9k/BqLVaHBbRAPvCiZTBliZ2c624cT6V4hZMB mYzjQw0qIGAT5rblOXhmtLr3G0yNu994pKrX9seGDbZhT4QfUsBmuLI0SbCY+t/X dqEEHmTh1Tl5Cd4R4B82k7wTqcjPTL/hgvHkPxJ9OltS0P/iY9SW8viupQGWGMG8 JPFCZkMxSsyilI6n36DVc/7KMri7sS2kWvzL7Xdhe6kzzdjiAKJ04O8QJD+U34Dl RSjfP+n8fIfVV9XG2eAGGWGcHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD+8vegi ljyPlSEVT/9ZJiHJOfjYMB8GA1UdIwQYMBaAFCuV2NgiiokUfYAZPZdw61Cu3btr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVBOS8wMEI3MTUxQ0ZE MDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lSUjlnQms5bDNEclVLN2R1 MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s1WFkyQ0tLaVJSOWdCazlsM0RyVUs3ZHUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVBOS8wMEI3MTUxQ0ZEMDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lS UjlnQms5bDNEclVLN2R1MnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWyECoQdTkfLjSzhgHNFlcNDPMeXgT+2ADTOC6IT6I2ZAJbhMejodRSsVu7Fd nGu4Kil3eXXTTCffN7pllkZIyu3PPZrP/YDmH6VpLrTer7rLr3OlCXVjg81cjIX2 ERccL8CR0Dx5HS2UyyCO4+jhgyEUzs8mQrRfes5sYN4CG6yA/bQuw6RmjOes/V5H nEhEgR3l7CDZPJ76VDa9zC7Y8iQtQ+j8kRa9NdXYIBtBkdTg826pNJu+PNaenFrG JTSmgGj0nDRHuS4S8Eybpenzn4UbfWc7nSz0U/GY7pNZknooV/RbO96wIAP+IFzg YafcPasUU4mS5NjT6mLp43yf0g== -----END CERTIFICATE-----Generated at Thu Mar 26 02:41:19 2026 by rpki-client