$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft File: 5TfQw0j9fcSfX8OwBmoxxYT64as.mft (raw, json) Hash identifier: nYeOXEPlBQlR5RivT7N75Aq+MobJWfPoW4oGGK/r/I4= Subject key identifier: C0:67:11:42:B6:45:EC:2B:68:08:B8:00:75:50:D8:34:12:0C:34:F2 Authority key identifier: E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB Certificate issuer: /CN=A91D4345/serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Certificate serial: 0D08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft Manifest number: 0CF3 Signing time: Sat 04 Apr 2026 18:06:30 +0000 Manifest this update: Sat 04 Apr 2026 18:06:29 +0000 Manifest next update: Sat 11 Apr 2026 18:06:29 +0000 Files and hashes: 1: 5TfQw0j9fcSfX8OwBmoxxYT64as.crl (hash: vyYEYG1BcrMbjQjCdTLBKqrMprEbJLOZxaA3bLe6RK4=) 2: 974869042C2A11F19F1796939D833773.roa (hash: rqXxFyVtS5pdY2Q7Dfm2yuygEbjXNJOU0VtSShOm5Qo=) 3: 984426AE2C2A11F19F1796939D833773.roa (hash: rPjNnZO3RJvZDFFfwLXpFfpD2vHmmkjycbK2kFTaDc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3336 (0xd08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4345, serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Validity Not Before: Apr 4 18:06:29 2026 GMT Not After : Apr 11 18:06:29 2026 GMT Subject: CN=69d15325-dd95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:28:7d:93:83:bf:2b:04:96:57:1a:89:06:cd: 5e:a3:61:9e:10:e1:e6:4e:99:46:eb:b5:23:0a:91: 9b:13:0a:e2:3b:b9:ac:28:c5:93:25:88:cc:45:b9: 67:f8:cc:ae:a3:31:eb:08:2d:5f:c7:f3:dd:26:4b: dd:fd:18:89:38:b6:d3:6a:92:49:bf:48:06:30:16: 19:ff:97:f4:a2:55:f1:2a:33:3a:ff:7f:a3:b5:b4: 5a:63:83:98:98:f4:d1:f2:13:17:52:dd:b0:62:23: 3d:09:bf:20:48:b8:ed:fc:38:0e:83:6c:7b:3f:f8: 27:11:51:83:61:ae:7d:9a:53:f9:a4:2c:fe:3d:b2: ed:db:8f:34:e5:bc:19:9a:61:23:21:7a:b1:71:58: 91:96:c5:b7:d1:46:42:88:7a:5f:a1:20:b3:25:7e: 90:31:33:c0:8c:f0:95:a3:d7:73:32:d9:aa:82:ff: 87:a0:60:97:af:bb:4a:0f:03:7d:e4:d7:fd:77:28: e8:92:0d:3f:df:14:3f:ba:1b:02:cd:f7:cb:fa:a5: 8e:a1:f1:d4:0e:06:20:28:ad:12:39:09:07:ae:47: 23:b0:33:c3:5c:0f:f0:1f:97:f7:94:ac:de:30:f1: ea:df:9c:68:90:cf:fc:4a:dc:0d:73:47:d2:aa:77: 3f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:67:11:42:B6:45:EC:2B:68:08:B8:00:75:50:D8:34:12:0C:34:F2 X509v3 Authority Key Identifier: keyid:E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:d9:2b:45:29:e1:b5:5f:ee:de:a5:76:84:fc:88:71:d1:51: 75:43:53:65:87:67:da:92:ea:01:e1:00:ac:c4:cb:9f:ee:5e: 86:b6:97:bd:a8:59:65:29:c5:5d:6d:1d:34:f5:d7:41:2b:f1: 09:f9:b0:67:f6:b1:06:04:be:91:a3:fb:8b:a4:25:d4:c6:67: 45:ea:7d:da:c4:cc:1d:b3:a8:c8:ad:62:05:ac:15:56:fd:94: 34:5b:e2:00:e0:cc:2b:b6:a6:7e:6f:af:fe:2c:10:cf:8d:e2: 5b:48:00:3e:87:4c:6a:24:49:a3:c0:32:f8:be:7b:a9:40:f6: 6e:9f:16:3c:df:02:5e:af:1e:ee:86:cf:af:c1:4e:73:b8:b4: d8:20:ca:de:95:fb:70:d4:a6:da:27:a5:40:a1:04:85:7a:fe: c5:f8:fb:6f:dd:14:8e:d2:fd:f2:f7:12:8c:72:33:05:80:e2: bb:3d:56:6e:55:03:5f:68:53:f6:7a:77:b4:7c:f6:67:9c:6f: c5:23:f5:77:9b:4f:34:c4:ea:28:95:20:81:86:b5:bf:04:60: 1e:3f:bc:69:a8:71:b4:78:d3:41:a8:2d:b0:ac:c9:6e:ad:6c: 9b:34:d5:06:27:2a:6d:3f:df:eb:65:d4:d1:a7:0b:a0:74:4a: 7b:f9:7b:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQzNDUxMTAvBgNVBAUTKEU1MzdEMEMzNDhGRDdEQzQ5RjVGQzNCMDA2NkEzMUM1 ODRGQUUxQUIwHhcNMjYwNDA0MTgwNjI5WhcNMjYwNDExMTgwNjI5WjAYMRYwFAYD VQQDEw02OWQxNTMyNS1kZDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyh9k4O/KwSWVxqJBs1eo2GeEOHmTplG67UjCpGbEwriO7msKMWTJYjMRbln +MyuozHrCC1fx/PdJkvd/RiJOLbTapJJv0gGMBYZ/5f0olXxKjM6/3+jtbRaY4OY mPTR8hMXUt2wYiM9Cb8gSLjt/DgOg2x7P/gnEVGDYa59mlP5pCz+PbLt24805bwZ mmEjIXqxcViRlsW30UZCiHpfoSCzJX6QMTPAjPCVo9dzMtmqgv+HoGCXr7tKDwN9 5Nf9dyjokg0/3xQ/uhsCzffL+qWOofHUDgYgKK0SOQkHrkcjsDPDXA/wH5f3lKze MPHq35xokM/8StwNc0fSqnc/FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMBnEUK2 RewraAi4AHVQ2DQSDDTyMB8GA1UdIwQYMBaAFOU30MNI/X3En1/DsAZqMcWE+uGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDM0NS9FQzc4Q0REQTA1 MzgxMUVBQjU4OTc2NjhDNEY5QUUwMi81VGZRdzBqOWZjU2ZYOE93Qm1veHhZVDY0 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVUZlF3MGo5ZmNTZlg4T3dCbW94eFlUNjRhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDM0NS9FQzc4Q0REQTA1MzgxMUVBQjU4OTc2NjhDNEY5QUUwMi81VGZRdzBqOWZj U2ZYOE93Qm1veHhZVDY0YXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkNkrRSnhtV/u3qV2hPyIcdFRdUNTZYdn2pLqAeEArMTLn+5ehraXvahZZSnF XW0dNPXXQSvxCfmwZ/axBgS+kaP7i6Ql1MZnRep92sTMHbOoyK1iBawVVv2UNFvi AODMK7amfm+v/iwQz43iW0gAPodMaiRJo8Ay+L57qUD2bp8WPN8CXq8e7obPr8FO c7i02CDK3pX7cNSm2ielQKEEhXr+xfj7b90UjtL98vcSjHIzBYDiuz1WblUDX2hT 9np3tHz2Z5xvxSP1d5tPNMTqKJUggYa1vwRgHj+8aahxtHjTQagtsKzJbq1smzTV BicqbT/f62XU0acLoHRKe/l7dg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:50:50 2026 by rpki-client