$ rpki-client -vvf rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft File: 5HE8G511dZKVr2TN-6YrcNuaBTc.mft (raw, json) Hash identifier: RlN0HFLU+MdlevaILEH0RRM9lCAxgQJ8WGnZiuYFhGY= Subject key identifier: AA:A3:F7:C1:98:FA:28:9F:59:52:65:A5:97:DF:F2:FC:20:9E:31:69 Authority key identifier: E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37 Certificate issuer: /CN=A91561B7/serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537 Certificate serial: 1E57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft Manifest number: 1E3C Signing time: Sat 04 Apr 2026 16:00:16 +0000 Manifest this update: Sat 04 Apr 2026 16:00:15 +0000 Manifest next update: Sat 11 Apr 2026 16:00:15 +0000 Files and hashes: 1: 5HE8G511dZKVr2TN-6YrcNuaBTc.crl (hash: 041JI9JDgMsNpB0DGZ8zXGL9tYxIug7HnqdzVnJqe88=) 2: 4865DD00A13B11E687921078C4F9AE02.roa (hash: ct9I/aMYPGYqo53jKTnyxK/j3JeT25nkuXtpX13/eJM=) 3: 1D57FF40A01311E684546521C4F9AE02.roa (hash: lNaIu73lqivuKf4impc1RoL9Iorynr8Oq1i414eOVLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7767 (0x1e57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91561B7, serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537 Validity Not Before: Apr 4 16:00:15 2026 GMT Not After : Apr 11 16:00:15 2026 GMT Subject: CN=69d1358f-d047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:17:b7:36:f0:f8:24:03:6b:d8:81:0f:85:9a: fe:75:9a:a1:7d:c7:1c:94:d7:15:e7:63:4d:74:20: 7c:5d:f0:f3:af:6a:22:32:d7:88:4d:3f:41:66:69: 84:7b:4a:a3:22:28:d8:5d:ab:61:92:b2:ae:53:e5: 74:e5:75:b8:6e:39:1d:cc:3a:c9:6f:01:c7:33:5d: 18:32:89:46:a7:94:7c:69:27:a7:11:7a:f1:1f:b2: e4:98:d7:98:6e:28:42:ad:f4:0f:ef:af:c4:1c:b3: 11:60:b9:8b:dd:c5:0f:cf:f3:b5:27:df:b7:a0:b8: ed:3a:74:75:36:b0:65:3a:12:19:df:c5:d0:35:00: 5c:92:1f:b7:65:2d:02:b2:94:9a:89:97:df:67:6c: 62:20:b8:08:d9:af:35:6d:63:bb:66:48:dc:80:50: 60:21:d2:30:2c:73:ef:35:47:9d:0e:a7:c5:40:78: f0:cc:c8:f3:54:73:38:a5:16:23:3d:5f:9f:36:bb: 52:99:f8:df:68:17:3d:cc:93:cb:5e:91:fc:41:68: ac:6b:d7:c1:07:a6:23:fb:4f:2f:d8:95:de:bf:7b: 4f:36:a1:27:2a:a0:97:4d:cb:c7:44:46:a1:a6:9e: 74:c2:be:46:f5:6e:86:8d:05:86:8d:22:d5:b2:ec: 97:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A3:F7:C1:98:FA:28:9F:59:52:65:A5:97:DF:F2:FC:20:9E:31:69 X509v3 Authority Key Identifier: keyid:E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:03:30:7c:53:1f:fc:9f:c2:a7:56:22:d3:f9:ea:86:fe:4f: 12:ad:90:30:f0:62:8a:0d:29:d1:5f:96:df:d6:98:0d:15:50: 4c:4e:70:53:11:7c:47:75:25:ca:dd:ef:6b:63:72:a5:5e:93: 14:04:39:e4:9b:ba:69:78:67:6e:32:b9:df:be:d3:93:2e:4c: e2:86:98:4a:8c:1a:fd:b7:9c:b7:37:c2:dc:71:c2:b4:b8:1b: ae:67:0f:45:c9:e2:8e:c8:59:08:0a:dc:6b:0a:f2:e9:5f:a9: 1d:62:32:9b:18:34:dd:a3:5f:77:9b:b0:e9:90:8d:1c:76:f3: aa:1c:d2:b3:c5:d0:42:1d:0c:fd:3f:06:52:6f:10:a8:70:bc: 89:27:ad:10:b5:89:23:a8:3b:7a:b0:d2:cf:1f:db:ee:ac:23: 6b:87:e0:9b:00:16:f2:7e:dc:18:af:fa:f1:ea:ea:88:3f:df: 22:8f:9e:9d:b4:56:83:c1:67:ff:f7:c8:33:0d:7b:55:5e:40: f5:ea:1a:0b:89:c8:c9:a6:8c:02:fd:7a:ff:c9:4d:63:62:ad: d1:37:dd:12:e6:92:3f:2f:da:54:18:75:c1:a7:52:d5:63:ed: ff:f2:96:00:73:54:43:c2:ea:19:7b:63:66:d4:fe:69:ef:e3: 3b:e4:8e:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxQjcxMTAvBgNVBAUTKEU0NzEzQzFCOUQ3NTc1OTI5NUFGNjRDREZCQTYyQjcw REI5QTA1MzcwHhcNMjYwNDA0MTYwMDE1WhcNMjYwNDExMTYwMDE1WjAYMRYwFAYD VQQDEw02OWQxMzU4Zi1kMDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxe3NvD4JANr2IEPhZr+dZqhfccclNcV52NNdCB8XfDzr2oiMteITT9BZmmE e0qjIijYXathkrKuU+V05XW4bjkdzDrJbwHHM10YMolGp5R8aSenEXrxH7LkmNeY bihCrfQP76/EHLMRYLmL3cUPz/O1J9+3oLjtOnR1NrBlOhIZ38XQNQBckh+3ZS0C spSaiZffZ2xiILgI2a81bWO7ZkjcgFBgIdIwLHPvNUedDqfFQHjwzMjzVHM4pRYj PV+fNrtSmfjfaBc9zJPLXpH8QWisa9fBB6Yj+08v2JXev3tPNqEnKqCXTcvHREah pp50wr5G9W6GjQWGjSLVsuyXHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKqj98GY +iifWVJlpZff8vwgnjFpMB8GA1UdIwQYMBaAFORxPBuddXWSla9kzfumK3DbmgU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjFCNy81RkExRUQzMDlF RjAxMUU2ODExMDI3MzNDNEY5QUUwMi81SEU4RzUxMWRaS1ZyMlROLTZZcmNOdWFC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVIRThHNTExZFpLVnIyVE4tNllyY051YUJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjFCNy81RkExRUQzMDlFRjAxMUU2ODExMDI3MzNDNEY5QUUwMi81SEU4RzUxMWRa S1ZyMlROLTZZcmNOdWFCVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKgMwfFMf/J/Cp1Yi0/nqhv5PEq2QMPBiig0p0V+W39aYDRVQTE5wUxF8R3Ul yt3va2NypV6TFAQ55Ju6aXhnbjK5377Tky5M4oaYSowa/bectzfC3HHCtLgbrmcP RcnijshZCArcawry6V+pHWIymxg03aNfd5uw6ZCNHHbzqhzSs8XQQh0M/T8GUm8Q qHC8iSetELWJI6g7erDSzx/b7qwja4fgmwAW8n7cGK/68erqiD/fIo+enbRWg8Fn //fIMw17VV5A9eoaC4nIyaaMAv16/8lNY2Kt0TfdEuaSPy/aVBh1wadS1WPt//KW AHNUQ8LqGXtjZtT+ae/jO+SOpA== -----END CERTIFICATE-----Generated at Sun Apr 5 22:25:14 2026 by rpki-client