$ rpki-client -vvf rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft File: 5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft (raw, json) Hash identifier: VEHGSsr/OvAHjN93cYaqjlqZbg0tdY7XgHTBEFgWyG0= Subject key identifier: D3:52:B4:20:9F:2B:06:08:D1:CD:4B:B7:E2:D3:2B:78:D4:66:B7:DD Authority key identifier: E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3 Certificate issuer: /CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3 Certificate serial: 05F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft Manifest number: 05C8 Signing time: Sat 04 Apr 2026 22:59:11 +0000 Manifest this update: Sat 04 Apr 2026 22:59:11 +0000 Manifest next update: Sat 11 Apr 2026 22:59:11 +0000 Files and hashes: 1: 5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl (hash: erPsAOtKrpcl15+PQShewiV7aXp5aqC7SCptOXLPjbo=) 2: 9CB324BA273111EF9F5B0860C4F9AE02.roa (hash: suAI1YPeN8kbgOgmaGzzfLUHLWI1/VRvkqObcPH/nuk=) 3: 2C4993AA271B11EF97731F0BC4F9AE02.roa (hash: GP7UGfZCMHOPLL1gZXCEO6qhlaky7I3CQ/nq013zLKM=) 4: D5AEE7FEF61A11F0A42262E05A6F56BC.roa (hash: YonCxURFZFCSJYKZZl/AlgVFdSlrOcW3O6u6eFemois=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1524 (0x5f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165362, serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3 Validity Not Before: Apr 4 22:59:11 2026 GMT Not After : Apr 11 22:59:11 2026 GMT Subject: CN=69d197bf-5351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d8:15:ed:f8:8b:7d:8b:53:e0:9d:86:67:27: ff:64:60:0d:6d:c7:b6:85:8f:64:ef:2d:ac:b2:c1: bd:aa:b7:a9:15:3f:52:c1:10:82:35:b0:70:a0:67: c9:2f:05:75:1a:a4:da:6f:00:0e:ed:06:c1:f4:40: f5:ee:ed:14:29:bb:0a:df:d3:03:ba:00:cb:81:10: a2:e9:77:65:8e:54:52:08:d8:a2:ef:e7:bc:6c:f5: 43:d4:19:fe:c2:33:91:67:f8:9f:88:3a:f9:70:16: 29:a4:f7:b2:eb:cf:f3:8d:be:79:78:b8:97:05:6e: 70:bb:9d:2b:ee:37:44:bb:eb:77:b4:d6:f9:f2:15: c2:58:3c:8f:6a:73:29:29:e3:db:2b:33:30:7a:c1: 26:55:b1:e8:4e:1e:fb:5f:9b:44:d5:d8:82:27:8b: 80:ee:a8:58:cb:ff:1f:e4:84:f3:a4:a3:25:6b:d5: 71:b9:c7:17:9e:71:ef:1c:5f:c4:db:50:15:15:31: 0b:12:d4:bd:9e:3d:07:eb:f2:c3:a3:bd:f9:f7:60: 72:cb:07:44:32:94:92:dd:ab:d1:a3:1f:bf:36:bf: 5a:e2:1e:76:c0:37:da:de:0c:8d:b3:d4:05:50:18: 1b:98:de:f3:3f:a6:55:80:1c:62:1a:6c:d7:4c:21: ef:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:52:B4:20:9F:2B:06:08:D1:CD:4B:B7:E2:D3:2B:78:D4:66:B7:DD X509v3 Authority Key Identifier: keyid:E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:dc:40:18:73:c9:7f:8c:5c:88:18:bb:ef:d8:d7:64:9d:52: 6d:4c:06:af:b4:da:73:cc:37:15:58:c1:ba:43:2d:6e:df:22: 3e:30:9e:c0:20:2a:1a:c7:60:9c:6c:68:ca:fe:3f:35:b3:2e: 03:f1:b8:b8:ca:8c:f9:63:cc:97:8b:3f:93:00:34:aa:fb:ba: f0:16:0e:9a:16:09:49:f9:60:a8:46:cd:2f:32:d0:e8:77:ee: 8f:ad:92:bd:f9:78:67:d6:8e:62:69:d8:1c:ac:4c:fa:4f:d8: f0:f3:95:60:61:64:1a:c1:d0:01:31:e9:c2:16:bc:88:b5:77: 61:2c:ac:79:e3:e0:c6:86:63:ee:ad:0a:03:2b:2d:78:30:7d: 22:65:29:c1:64:b2:1c:ff:69:78:de:0b:0a:bf:53:3d:22:29: b4:98:93:2d:80:49:45:14:82:95:7b:f1:98:63:fb:35:58:1e: 67:28:f0:fb:9f:4c:b4:dc:03:ce:4c:62:a3:b1:ea:a7:97:d6: f2:91:97:0a:ba:76:19:c1:b5:ba:c8:8c:40:fa:78:18:3e:e5: 66:0a:d1:03:b8:3c:7e:a5:a7:fa:16:66:20:86:7e:c5:25:86: cd:5d:13:9a:4f:23:03:8b:77:15:b5:a1:77:43:1f:76:68:1a: 94:f6:4a:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUzNjIxMTAvBgNVBAUTKEU1RTVEMTY4QTBFMTA5NkVBMUMzRjlCN0Y4RThENzU4 RUFFQTIzRjMwHhcNMjYwNDA0MjI1OTExWhcNMjYwNDExMjI1OTExWjAYMRYwFAYD VQQDEw02OWQxOTdiZi01MzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6tgV7fiLfYtT4J2GZyf/ZGANbce2hY9k7y2sssG9qrepFT9SwRCCNbBwoGfJ LwV1GqTabwAO7QbB9ED17u0UKbsK39MDugDLgRCi6XdljlRSCNii7+e8bPVD1Bn+ wjORZ/ifiDr5cBYppPey68/zjb55eLiXBW5wu50r7jdEu+t3tNb58hXCWDyPanMp KePbKzMwesEmVbHoTh77X5tE1diCJ4uA7qhYy/8f5ITzpKMla9VxuccXnnHvHF/E 21AVFTELEtS9nj0H6/LDo73592ByywdEMpSS3avRox+/Nr9a4h52wDfa3gyNs9QF UBgbmN7zP6ZVgBxiGmzXTCHv/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNNStCCf KwYI0c1Lt+LTK3jUZrfdMB8GA1UdIwQYMBaAFOXl0Wig4QluocP5t/jo11jq6iPz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTM2Mi9EOUNCRjgwQTEw QjMxMUVDQTMxREY4MkNDNEY5QUUwMi81ZVhSYUtEaENXNmh3X20zLU9qWFdPcnFJ X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlWFJhS0RoQ1c2aHdfbTMtT2pYV09ycUlfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTM2Mi9EOUNCRjgwQTEwQjMxMUVDQTMxREY4MkNDNEY5QUUwMi81ZVhSYUtEaENX Nmh3X20zLU9qWFdPcnFJX00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAstxAGHPJf4xciBi779jXZJ1SbUwGr7Tac8w3FVjBukMtbt8iPjCewCAqGsdg nGxoyv4/NbMuA/G4uMqM+WPMl4s/kwA0qvu68BYOmhYJSflgqEbNLzLQ6Hfuj62S vfl4Z9aOYmnYHKxM+k/Y8POVYGFkGsHQATHpwha8iLV3YSyseePgxoZj7q0KAyst eDB9ImUpwWSyHP9peN4LCr9TPSIptJiTLYBJRRSClXvxmGP7NVgeZyjw+59MtNwD zkxio7Hqp5fW8pGXCrp2GcG1usiMQPp4GD7lZgrRA7g8fqWn+hZmIIZ+xSWGzV0T mk8jA4t3FbWhd0MfdmgalPZKLw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:12 2026 by rpki-client