$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft File: 5Otd-leSQpC7j-xFuZd_xsf2-jc.mft (raw, json) Hash identifier: jLbBVPD1oAtGzdHVzbxkNOneg8VPaFOCqkPfD6ARtJM= Subject key identifier: C2:53:4C:A0:67:33:DA:DE:9B:05:46:96:E2:BE:BF:29:48:C7:71:5D Authority key identifier: E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 Certificate issuer: /CN=A91A8B0B/serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Certificate serial: 0D33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft Manifest number: 0D1D Signing time: Sat 04 Apr 2026 17:57:07 +0000 Manifest this update: Sat 04 Apr 2026 17:57:06 +0000 Manifest next update: Sat 11 Apr 2026 17:57:06 +0000 Files and hashes: 1: 5Otd-leSQpC7j-xFuZd_xsf2-jc.crl (hash: +g/b56p8QXWWWU17WwfDee7tVV3gTrzPHknHDPNRL34=) 2: 5842DDF0FCE511E9BFA4B27AC4F9AE02.roa (hash: eljEAlMkKKscvcS1ohJrK9p2ggCusjEVdiGi3d1+CNk=) 3: EA17F65E6C6711ECB7C0925AC4F9AE02.roa (hash: RLirzJKQKFo2gpkEC+bkcfbZ/amz+vvvs7CLn8xZhc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3379 (0xd33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B0B, serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Validity Not Before: Apr 4 17:57:06 2026 GMT Not After : Apr 11 17:57:06 2026 GMT Subject: CN=69d150f3-e5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a2:99:2c:25:21:c2:62:03:13:b9:2d:a1:7e: ea:74:4e:7c:d1:6b:ea:3e:02:14:0a:01:03:c1:35: 0b:7c:d6:fa:6e:c8:85:1f:2e:7a:b7:e0:51:82:a9: a7:20:84:ec:57:bc:ec:0b:5d:5c:53:7d:de:20:6e: 80:8f:ed:7f:04:d3:67:7d:cf:be:b4:ac:cb:c5:35: cf:2a:7b:c4:fe:6b:71:03:4a:4e:ac:1f:45:ae:81: f5:07:47:04:63:b4:06:a5:b9:76:36:a4:14:d8:8f: 06:25:63:34:34:5a:97:84:3e:ab:89:a2:d4:7d:86: fb:47:9b:48:67:7c:1e:78:2f:d7:55:36:2e:b7:d1: a5:62:33:0f:3c:d2:1d:04:41:d5:dd:b8:71:cb:a2: ee:43:46:93:61:4d:ca:c4:34:a7:38:ec:e2:c7:de: 24:50:4c:a3:1a:5b:82:d2:3a:bf:58:25:fc:01:80: 4f:d5:16:ca:0e:52:6c:ae:d5:6c:ba:05:c3:99:bf: 3b:26:a2:ad:3b:79:1b:10:df:e7:9c:33:ee:cf:30: ed:73:6d:8e:7d:95:66:f1:f8:01:3a:56:13:f0:91: ff:a8:55:2e:c8:6d:bd:b3:44:aa:95:7d:15:13:03: 52:aa:00:bd:e1:ba:a6:12:ff:f2:dc:52:b7:a2:09: c9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:53:4C:A0:67:33:DA:DE:9B:05:46:96:E2:BE:BF:29:48:C7:71:5D X509v3 Authority Key Identifier: keyid:E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:cd:58:20:06:32:2a:5c:cd:cd:fe:19:6f:c8:2d:7f:b4:93: 64:ed:26:f8:85:9a:cf:59:54:2e:c3:9e:98:5d:0b:4b:ef:31: f4:89:4a:a3:2d:15:e2:5f:9d:0c:70:4d:e6:96:4a:e6:d6:cf: 79:81:cf:40:dc:92:fc:83:fc:cf:8d:42:f4:0d:32:a4:48:15: c5:40:0c:12:65:2f:78:69:a6:bf:a5:b7:74:b7:f7:9f:b2:d6: 28:21:c6:77:71:68:c5:4c:57:69:64:33:69:bf:b9:82:d7:c9: 49:1a:f8:5e:51:7b:25:58:e8:7d:5f:38:4e:bf:2d:07:17:da: 97:4d:ed:ac:b9:b5:a6:52:51:c9:0f:fb:23:cc:08:57:38:ec: dd:df:17:2b:88:ce:c0:0c:3f:92:d7:59:94:96:eb:2f:c0:21: c0:4b:46:59:56:b0:52:40:3e:f7:bc:d0:dd:ae:e9:ae:8c:b2: f2:c0:48:b8:40:93:e1:54:81:1f:06:be:a1:d2:0b:42:e0:10: b5:9e:65:de:6b:c4:e0:11:fb:a9:9d:5c:da:ed:ab:86:49:ce: e0:38:4b:24:f6:1b:df:a9:93:16:07:fa:ea:47:2a:92:8e:76: 94:6b:49:d8:c8:27:5f:96:4c:82:ce:ad:a4:a2:5f:8b:75:2f: 35:0f:82:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCMEIxMTAvBgNVBAUTKEU0RUI1REZBNTc5MjQyOTBCQjhGRUM0NUI5OTc3RkM2 QzdGNkZBMzcwHhcNMjYwNDA0MTc1NzA2WhcNMjYwNDExMTc1NzA2WjAYMRYwFAYD VQQDEw02OWQxNTBmMy1lNWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6KZLCUhwmIDE7ktoX7qdE580WvqPgIUCgEDwTULfNb6bsiFHy56t+BRgqmn IITsV7zsC11cU33eIG6Aj+1/BNNnfc++tKzLxTXPKnvE/mtxA0pOrB9FroH1B0cE Y7QGpbl2NqQU2I8GJWM0NFqXhD6riaLUfYb7R5tIZ3weeC/XVTYut9GlYjMPPNId BEHV3bhxy6LuQ0aTYU3KxDSnOOzix94kUEyjGluC0jq/WCX8AYBP1RbKDlJsrtVs ugXDmb87JqKtO3kbEN/nnDPuzzDtc22OfZVm8fgBOlYT8JH/qFUuyG29s0SqlX0V EwNSqgC94bqmEv/y3FK3ognJZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMJTTKBn M9remwVGluK+vylIx3FdMB8GA1UdIwQYMBaAFOTrXfpXkkKQu4/sRbmXf8bH9vo3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEIwQi81QUVCNUVCMkZD QzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1FwQzdqLXhGdVpkX3hzZjIt amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPdGQtbGVTUXBDN2oteEZ1WmRfeHNmMi1qYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEIwQi81QUVCNUVCMkZDQzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1Fw QzdqLXhGdVpkX3hzZjItamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAks1YIAYyKlzNzf4Zb8gtf7STZO0m+IWaz1lULsOemF0LS+8x9IlKoy0V4l+d DHBN5pZK5tbPeYHPQNyS/IP8z41C9A0ypEgVxUAMEmUveGmmv6W3dLf3n7LWKCHG d3FoxUxXaWQzab+5gtfJSRr4XlF7JVjofV84Tr8tBxfal03trLm1plJRyQ/7I8wI Vzjs3d8XK4jOwAw/ktdZlJbrL8AhwEtGWVawUkA+97zQ3a7proyy8sBIuECT4VSB Hwa+odILQuAQtZ5l3mvE4BH7qZ1c2u2rhknO4DhLJPYb36mTFgf66kcqko52lGtJ 2MgnX5ZMgs6tpKJfi3UvNQ+CaQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:41:24 2026 by rpki-client