$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft File: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft (raw, json) Hash identifier: LKkwbf3g2tVP+1tDc0yOMQaNpCTdKQm6+lfb8ZZ4G5U= Subject key identifier: 8B:93:BA:1C:E2:D8:B5:9E:09:AA:AC:0D:E0:15:93:16:51:EB:39:66 Authority key identifier: E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C Certificate issuer: /CN=A91C3ABA/serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Certificate serial: 054A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft Manifest number: 0543 Signing time: Sat 04 Apr 2026 23:15:37 +0000 Manifest this update: Sat 04 Apr 2026 23:15:37 +0000 Manifest next update: Sat 11 Apr 2026 23:15:37 +0000 Files and hashes: 1: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl (hash: Czc4UvgKlD4BSwCoEt4HHJ6Rq55vzngdL5iddQfgtfU=) 2: 4B9F1AA6354F11EC8531C34DC4F9AE02.roa (hash: FjlCfaAiS0/SIVjNyB82F27uQR6v8yVVRfaKD0rMx5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:15:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1354 (0x54a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3ABA, serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Validity Not Before: Apr 4 23:15:37 2026 GMT Not After : Apr 11 23:15:37 2026 GMT Subject: CN=69d19b99-a5b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:60:da:f1:fb:4f:55:0f:66:c0:69:1b:85:03: 81:04:a5:75:6e:f5:5a:33:0e:41:d6:4a:79:a6:e1: 98:98:83:9f:39:f6:58:f2:c3:4e:82:cf:05:88:72: f7:93:4d:c8:30:d3:12:d3:55:77:b9:f3:d8:b6:55: db:c6:06:8e:9f:8e:13:d6:20:c2:08:88:63:87:ad: 5f:c1:9e:70:88:81:7b:cb:a3:29:95:bb:ac:50:37: 3e:09:8c:36:32:26:26:69:e8:19:6c:c3:ef:6e:23: 18:07:5d:a2:25:ec:75:0e:a6:1d:83:bd:47:9f:70: 92:c5:21:c7:cd:e9:6f:0a:2c:48:06:28:ab:b0:f4: 95:68:e2:d0:38:9e:73:d6:5a:61:e5:d0:74:ff:52: 4f:f8:27:9c:d5:d2:94:a5:63:ca:f6:84:c4:08:4d: c3:3a:c9:e7:71:f1:46:e2:e3:01:ee:ab:1f:b5:c5: 1b:dc:7a:38:20:63:48:c2:94:59:38:4b:b0:c9:aa: ce:aa:2f:2c:ee:f7:ce:f0:77:97:a2:dd:13:32:a3: 7d:9b:68:cd:b4:48:9d:2e:cc:43:84:c5:60:18:fa: 84:72:fb:82:34:e4:d5:a7:6a:b9:b4:6e:a9:bf:33: 59:f0:23:12:ef:02:3f:2c:00:eb:ed:6f:d5:6a:df: c7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:93:BA:1C:E2:D8:B5:9E:09:AA:AC:0D:E0:15:93:16:51:EB:39:66 X509v3 Authority Key Identifier: keyid:E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:61:cb:cf:d6:10:29:ea:8a:dd:98:d5:94:56:10:f1:4d:65: 2f:11:57:99:c9:30:ea:ef:04:8a:3e:ab:1b:26:f1:90:2a:60: a2:26:34:06:df:8c:b5:3c:96:25:0c:8c:ea:d7:c6:61:f3:a9: 0b:2b:b8:d9:d5:06:36:fa:50:51:b1:c0:cd:c5:90:9a:3e:c0: 59:75:8a:86:49:17:0b:e5:84:39:46:83:09:33:c5:0f:a7:13: 71:e9:aa:fb:bc:4f:eb:da:40:2e:ef:84:bb:b8:8d:80:b5:63: 54:31:a7:49:06:32:37:14:23:b3:4a:44:e3:cb:ec:01:81:74: 98:45:a2:34:1c:f9:77:14:5e:05:31:0d:f8:17:ff:19:b7:cb: 5a:c5:cb:ea:84:a5:b0:5c:bf:f6:4c:4c:38:95:e1:5c:68:0f: 44:91:97:7e:aa:b6:00:f8:6f:26:32:dc:2d:1b:2f:68:ef:ca: bb:38:5f:dc:5e:6a:1d:9c:0a:e5:ef:8d:c6:ea:c3:90:df:f0: e4:c4:df:31:e5:1c:a7:37:cc:75:93:52:61:46:04:f5:76:56: dd:ea:d8:6f:47:63:d5:7c:37:7a:1e:96:69:c3:9d:68:2f:a4: f0:93:4f:b8:f7:b5:16:84:b3:5e:d4:25:fc:d2:df:b5:69:9e: 7a:31:68:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBQkExMTAvBgNVBAUTKEU1OTkzMTU1QzQ0NDNBMkU1NkMwREUyMzMzQTQ0QjU2 Q0FENDkxOUMwHhcNMjYwNDA0MjMxNTM3WhcNMjYwNDExMjMxNTM3WjAYMRYwFAYD VQQDEw02OWQxOWI5OS1hNWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2Da8ftPVQ9mwGkbhQOBBKV1bvVaMw5B1kp5puGYmIOfOfZY8sNOgs8FiHL3 k03IMNMS01V3ufPYtlXbxgaOn44T1iDCCIhjh61fwZ5wiIF7y6MplbusUDc+CYw2 MiYmaegZbMPvbiMYB12iJex1DqYdg71Hn3CSxSHHzelvCixIBiirsPSVaOLQOJ5z 1lph5dB0/1JP+Cec1dKUpWPK9oTECE3DOsnncfFG4uMB7qsftcUb3Ho4IGNIwpRZ OEuwyarOqi8s7vfO8HeXot0TMqN9m2jNtEidLsxDhMVgGPqEcvuCNOTVp2q5tG6p vzNZ8CMS7wI/LADr7W/Vat/HkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIuTuhzi 2LWeCaqsDeAVkxZR6zlmMB8GA1UdIwQYMBaAFOWZMVXERDouVsDeIzOkS1bK1JGc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0FCQS85ODVGMDkyMjM1 NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9pNVd3TjRqTTZSTFZzclVr WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVaa3hWY1JFT2k1V3dONGpNNlJMVnNyVWtady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0FCQS85ODVGMDkyMjM1NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9p NVd3TjRqTTZSTFZzclVrWncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAmHLz9YQKeqK3ZjVlFYQ8U1lLxFXmckw6u8Eij6rGybxkCpgoiY0Bt+MtTyW JQyM6tfGYfOpCyu42dUGNvpQUbHAzcWQmj7AWXWKhkkXC+WEOUaDCTPFD6cTcemq +7xP69pALu+Eu7iNgLVjVDGnSQYyNxQjs0pE48vsAYF0mEWiNBz5dxReBTEN+Bf/ GbfLWsXL6oSlsFy/9kxMOJXhXGgPRJGXfqq2APhvJjLcLRsvaO/Kuzhf3F5qHZwK 5e+NxurDkN/w5MTfMeUcpzfMdZNSYUYE9XZW3erYb0dj1Xw3eh6WacOdaC+k8JNP uPe1FoSzXtQl/NLftWmeejFonw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:52:10 2026 by rpki-client