$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft File: 4x5nyg5b7bJI-Xplfe_2LshvUks.mft (raw, json) Hash identifier: GhA3c6hTmH+iSFwkEW/RgCeJGmOnqOX2th6c4wVidMk= Subject key identifier: 25:62:BA:25:61:D4:6D:87:08:10:4F:33:B1:14:E8:1A:E0:4D:3F:66 Authority key identifier: E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B Certificate issuer: /CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Certificate serial: 0323 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft Manifest number: 031C Signing time: Sun 05 Apr 2026 00:54:21 +0000 Manifest this update: Sun 05 Apr 2026 00:54:20 +0000 Manifest next update: Sun 12 Apr 2026 00:54:20 +0000 Files and hashes: 1: 4x5nyg5b7bJI-Xplfe_2LshvUks.crl (hash: 4XmZlgcMxab34yKR955GEKG1zS3qaBVExgOBqPz2f8g=) 2: A3013D2A0CCB11ED97820077C4F9AE02.roa (hash: TRVZ/NM/BJRiha8eAPz94grzikRFW1KWfdpr0FjIAaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 803 (0x323) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED5D9, serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Validity Not Before: Apr 5 00:54:20 2026 GMT Not After : Apr 12 00:54:20 2026 GMT Subject: CN=69d1b2bd-eebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:97:f2:f9:f0:6e:81:3a:ea:5c:c9:94:5a:46: 60:c9:0e:63:76:7b:99:23:23:34:3b:84:dc:fc:3d: 12:f3:ce:d6:c3:75:0f:cf:cf:e8:0d:bc:d7:ab:86: b7:e3:5d:14:10:6d:d6:53:1a:30:25:11:84:09:90: 3b:32:be:ea:19:c5:50:10:c0:44:99:c3:29:06:87: dd:56:f9:26:2a:86:f0:2b:c7:d3:ca:f1:22:17:68: fd:a4:0c:63:52:ba:ae:27:aa:19:24:4b:26:b6:2f: b0:a3:bc:ea:ed:82:6f:2e:78:43:af:cd:bb:3d:bb: 25:26:d0:03:d9:e0:b2:e2:91:30:e2:4a:6d:f2:f4: ea:fe:22:71:d0:7c:e7:85:3b:b1:b3:7d:e1:01:0e: c1:81:56:ae:9f:fc:d9:b5:51:92:76:99:62:22:c6: 20:7c:83:c2:00:c1:21:9b:d0:81:f3:7a:bc:a1:f8: f9:64:70:6e:00:22:3b:5c:04:d7:45:c5:37:b6:e1: ce:38:7e:ad:fb:b2:b3:5d:ee:14:bd:26:cc:fb:e2: a9:34:08:74:9e:04:4c:29:63:3b:92:5e:56:75:b4: c6:ae:0f:62:29:ad:a0:1e:e6:3a:98:31:a8:d4:3a: 87:46:b2:07:ec:72:a1:4b:c2:46:bd:5e:51:6d:dc: 2b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:62:BA:25:61:D4:6D:87:08:10:4F:33:B1:14:E8:1A:E0:4D:3F:66 X509v3 Authority Key Identifier: keyid:E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:27:d5:4e:e3:41:89:f5:64:1f:d9:2b:02:6c:8b:1f:f8:bc: 1d:5c:52:a0:a2:8f:09:37:15:f1:34:a0:b5:a7:ab:30:ef:ea: be:4a:36:d5:6f:4d:00:e8:e3:82:90:5a:06:1f:2d:71:e1:4f: 0e:11:45:cf:ce:50:cf:53:95:99:63:bc:d2:a2:38:62:ce:92: 1b:f7:63:46:a0:34:92:8a:a9:75:22:c0:ae:8f:82:76:d0:ae: b2:11:2c:be:ae:db:a0:d7:66:1c:8c:91:0a:0a:57:78:90:28: cc:03:e0:28:59:0e:a1:14:69:80:1f:87:cb:a9:1f:2c:04:43: 26:0d:19:97:9a:ff:09:67:a4:bb:4c:42:92:01:df:a1:68:81: 8f:e7:c9:72:d6:90:95:3b:1e:dc:15:8a:b4:ba:65:ca:22:9b: 42:ef:99:a2:40:a6:aa:b7:66:94:a7:0d:a4:df:b8:5a:22:8f: 9f:32:f7:c7:66:a6:21:ea:a4:c7:62:36:8b:d9:b3:b9:03:74: 34:61:1c:a4:39:c0:84:60:fe:71:06:f3:c4:79:ca:b3:53:c6: 13:6a:91:cd:db:4e:67:a9:26:3b:73:70:51:6b:71:4c:db:95: 26:50:99:10:85:6a:ba:77:d1:99:84:cb:ba:ee:d7:5b:be:39: 11:c9:3d:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1RDkxMTAvBgNVBAUTKEUzMUU2N0NBMEU1QkVEQjI0OEY5N0E2NTdERUZGNjJF Qzg2RjUyNEIwHhcNMjYwNDA1MDA1NDIwWhcNMjYwNDEyMDA1NDIwWjAYMRYwFAYD VQQDEw02OWQxYjJiZC1lZWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZfy+fBugTrqXMmUWkZgyQ5jdnuZIyM0O4Tc/D0S887Ww3UPz8/oDbzXq4a3 410UEG3WUxowJRGECZA7Mr7qGcVQEMBEmcMpBofdVvkmKobwK8fTyvEiF2j9pAxj UrquJ6oZJEsmti+wo7zq7YJvLnhDr827PbslJtAD2eCy4pEw4kpt8vTq/iJx0Hzn hTuxs33hAQ7BgVaun/zZtVGSdpliIsYgfIPCAMEhm9CB83q8ofj5ZHBuACI7XATX RcU3tuHOOH6t+7KzXe4UvSbM++KpNAh0ngRMKWM7kl5WdbTGrg9iKa2gHuY6mDGo 1DqHRrIH7HKhS8JGvV5RbdwrhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCViuiVh 1G2HCBBPM7EU6BrgTT9mMB8GA1UdIwQYMBaAFOMeZ8oOW+2ySPl6ZX3v9i7Ib1JL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDVEOS84OUU4N0ZFMDBD QzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1YjdiSkktWHBsZmVfMkxzaHZV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR4NW55ZzViN2JKSS1YcGxmZV8yTHNodlVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDVEOS84OUU4N0ZFMDBDQzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1Yjdi SkktWHBsZmVfMkxzaHZVa3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcCfVTuNBifVkH9krAmyLH/i8HVxSoKKPCTcV8TSgtaerMO/qvko21W9NAOjj gpBaBh8tceFPDhFFz85Qz1OVmWO80qI4Ys6SG/djRqA0koqpdSLAro+CdtCushEs vq7boNdmHIyRCgpXeJAozAPgKFkOoRRpgB+Hy6kfLARDJg0Zl5r/CWeku0xCkgHf oWiBj+fJctaQlTse3BWKtLplyiKbQu+ZokCmqrdmlKcNpN+4WiKPnzL3x2amIeqk x2I2i9mzuQN0NGEcpDnAhGD+cQbzxHnKs1PGE2qRzdtOZ6kmO3NwUWtxTNuVJlCZ EIVqunfRmYTLuu7XW745Eck9Fw== -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:58 2026 by rpki-client