$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft File: 05fnjG3TxpaFEzQVMschiNd1Z68.mft (raw, json) Hash identifier: LnDUlpPG6QRS/LZRYA0qY960eV/VliR5agI9YNHecLA= Subject key identifier: E5:B5:AC:04:5B:F8:16:48:7B:E6:52:BA:AD:93:9B:32:B8:F2:75:DA Authority key identifier: D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF Certificate issuer: /CN=A91D3CA7/serialNumber=D397E78C6DD3C6968513341532C72188D77567AF Certificate serial: 0362 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft Manifest number: 035B Signing time: Sun 05 Apr 2026 00:41:03 +0000 Manifest this update: Sun 05 Apr 2026 00:41:03 +0000 Manifest next update: Sun 12 Apr 2026 00:41:03 +0000 Files and hashes: 1: 05fnjG3TxpaFEzQVMschiNd1Z68.crl (hash: MUmbCLbvlNLFm8sGfm8RX7PUaGnin+BCzKRYf+sArgU=) 2: DE183F1CF46611EC815F7283C4F9AE02.roa (hash: al8fBj0l9FNorWDDEmWTxJIA8uTe/zODnox5rpi44HU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 866 (0x362) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3CA7, serialNumber=D397E78C6DD3C6968513341532C72188D77567AF Validity Not Before: Apr 5 00:41:03 2026 GMT Not After : Apr 12 00:41:03 2026 GMT Subject: CN=69d1af9f-cec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ef:aa:ce:e9:48:b8:09:7d:18:9f:48:ac:9e: 71:35:73:83:46:40:6c:ee:61:25:d3:c9:6a:1a:fe: fb:a6:da:2c:0c:f2:53:8d:27:10:7c:37:e8:aa:3b: b9:0a:56:cd:19:78:2c:85:72:8e:0c:e1:2a:6e:dc: ad:7b:61:1c:ab:42:0b:11:e6:30:ec:f5:90:30:2d: 65:dd:73:14:94:99:20:66:fe:81:f1:4b:82:a5:ed: 53:d4:a5:c3:27:c5:8d:24:e7:8a:05:8c:44:27:12: 59:16:86:7c:fa:3a:86:85:13:be:fb:d8:e5:ff:0a: 31:26:e0:c4:20:13:c8:c6:76:46:77:b7:12:7d:18: d0:cb:b0:cc:ba:5c:e8:90:e0:c1:30:15:ff:6e:5b: d2:97:9a:5f:04:7b:bc:7c:f7:27:58:15:bb:0a:72: 1b:b6:b6:4b:0b:d6:34:06:b9:28:25:8f:8a:f8:81: 9c:9e:76:6f:b9:e9:e3:4c:84:f2:84:86:a3:8f:ad: 1c:9a:40:b9:59:bd:91:93:7b:98:75:f3:55:e2:ca: d6:bc:4c:6a:41:f8:5a:6f:07:f0:6f:29:68:97:52: 5a:5d:e2:a4:aa:ad:4c:b6:9c:54:d8:1c:88:09:1a: 56:c1:0e:1f:47:f9:62:c2:6c:31:3f:b3:83:b8:2b: 75:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B5:AC:04:5B:F8:16:48:7B:E6:52:BA:AD:93:9B:32:B8:F2:75:DA X509v3 Authority Key Identifier: keyid:D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:e7:8c:6a:74:bc:27:80:15:a5:22:83:73:6e:dd:97:97:97: bc:5c:d3:81:7b:f2:d4:ad:80:1c:17:91:c8:e5:93:5c:93:fa: 5d:97:25:e3:5f:4d:b4:8b:cd:b8:1e:ac:88:07:01:9f:42:46: cb:29:c3:09:c6:10:26:9f:7a:74:31:c0:24:00:26:e6:38:d2: ec:c2:13:d8:49:65:34:a6:88:8f:bf:78:76:48:2a:89:bb:71: 84:38:f9:90:f5:1b:3e:ac:88:e1:30:a4:ab:9f:6d:c2:e6:e9: dc:a0:f8:72:0b:5e:d2:96:15:71:29:49:40:c9:48:27:c8:5a: f3:29:67:e7:f6:04:25:e7:b6:92:fe:af:dd:d6:b6:1e:e8:7e: 3b:07:27:84:6f:29:89:3f:99:6c:46:d1:36:f3:40:15:81:05: e6:d6:cc:4b:09:43:74:d1:5f:b6:69:4c:63:09:5d:e3:38:b8: 9c:c3:cb:79:7c:8a:f5:fd:9c:98:5f:d7:4f:b3:b2:18:32:d3: 51:71:03:74:f4:03:50:ba:ba:14:97:b2:e4:a2:95:ca:c6:a9: 88:70:c9:53:2b:66:25:eb:6e:15:cf:1e:2b:86:31:7f:74:d7: 45:08:d6:e1:7a:1e:0b:6b:33:bc:76:c7:1a:b5:6b:ad:27:e4: 45:f6:ac:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNDQTcxMTAvBgNVBAUTKEQzOTdFNzhDNkREM0M2OTY4NTEzMzQxNTMyQzcyMTg4 RDc3NTY3QUYwHhcNMjYwNDA1MDA0MTAzWhcNMjYwNDEyMDA0MTAzWjAYMRYwFAYD VQQDEw02OWQxYWY5Zi1jZWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6e+qzulIuAl9GJ9IrJ5xNXODRkBs7mEl08lqGv77ptosDPJTjScQfDfoqju5 ClbNGXgshXKODOEqbtyte2Ecq0ILEeYw7PWQMC1l3XMUlJkgZv6B8UuCpe1T1KXD J8WNJOeKBYxEJxJZFoZ8+jqGhRO++9jl/woxJuDEIBPIxnZGd7cSfRjQy7DMulzo kODBMBX/blvSl5pfBHu8fPcnWBW7CnIbtrZLC9Y0BrkoJY+K+IGcnnZvuenjTITy hIajj60cmkC5Wb2Rk3uYdfNV4srWvExqQfhabwfwbylol1JaXeKkqq1MtpxU2ByI CRpWwQ4fR/liwmwxP7ODuCt1pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOW1rARb +BZIe+ZSuq2TmzK48nXaMB8GA1UdIwQYMBaAFNOX54xt08aWhRM0FTLHIYjXdWev MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0NBNy8zRjBFMEUwNkY0 NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhwYUZFelFWTXNjaGlOZDFa NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA1Zm5qRzNUeHBhRkV6UVZNc2NoaU5kMVo2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0NBNy8zRjBFMEUwNkY0NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhw YUZFelFWTXNjaGlOZDFaNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg+eManS8J4AVpSKDc27dl5eXvFzTgXvy1K2AHBeRyOWTXJP6XZcl419NtIvN uB6siAcBn0JGyynDCcYQJp96dDHAJAAm5jjS7MIT2EllNKaIj794dkgqibtxhDj5 kPUbPqyI4TCkq59twubp3KD4cgte0pYVcSlJQMlIJ8ha8yln5/YEJee2kv6v3da2 Huh+OwcnhG8piT+ZbEbRNvNAFYEF5tbMSwlDdNFftmlMYwld4zi4nMPLeXyK9f2c mF/XT7OyGDLTUXEDdPQDULq6FJey5KKVysapiHDJUytmJetuFc8eK4Yxf3TXRQjW 4XoeC2szvHbHGrVrrSfkRfasoQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:41:31 2026 by rpki-client