$ rpki-client -vvf rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft File: sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft (raw, json) Hash identifier: IGjOSS13pizZYJ8CANOvY5QEIgTbM4CT7AMoJjXmRCA= Subject key identifier: 8F:B2:D0:90:02:DD:F9:98:12:0B:01:20:72:BF:D8:9D:C9:1D:BE:B9 Authority key identifier: B2:9E:45:31:16:74:5C:87:4B:F0:F0:B4:72:45:98:2A:71:D5:26:B5 Certificate issuer: /CN=A911FE83/serialNumber=B29E453116745C874BF0F0B47245982A71D526B5 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft Manifest number: 22 Signing time: Sun 29 Mar 2026 08:32:20 +0000 Manifest this update: Sun 29 Mar 2026 08:32:20 +0000 Manifest next update: Sun 05 Apr 2026 08:32:20 +0000 Files and hashes: 1: sp5FMRZ0XIdL8PC0ckWYKnHVJrU.crl (hash: alzgwZ0wiKnGtcKfLVSo35kjA+HtFsIHxWBST5Jbn5E=) 2: 1CF20536001311F1AC4D12CC406F56BC.roa (hash: g4Ud8ofVkhlMNmXk1DVd80+pMPQpIN+9NWS+U7ei8zU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.crl rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 08:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FE83, serialNumber=B29E453116745C874BF0F0B47245982A71D526B5 Validity Not Before: Mar 29 08:32:20 2026 GMT Not After : Apr 5 08:32:20 2026 GMT Subject: CN=69c8e394-e9e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e5:bf:73:91:90:88:9f:79:23:88:86:20:78: 68:d3:e0:2d:86:ef:5e:20:a7:56:0f:af:6a:65:e2: df:6e:04:d4:0c:fc:9b:6e:37:3d:bd:5f:e3:f7:e7: f7:c7:f6:87:f6:03:c7:75:a1:3a:8f:d7:20:85:a2: 5e:4b:fe:55:44:07:f7:cc:26:35:89:59:4a:51:90: 4c:72:3e:fc:4e:70:cb:ae:4a:7c:52:73:37:46:0a: ef:3a:66:90:50:75:68:23:5a:6f:61:d8:2c:9a:be: 69:3a:90:a8:15:63:b9:a4:bf:f2:f0:19:63:9c:bc: 63:78:2d:b6:26:66:ed:81:7e:92:03:a1:b4:21:da: 97:67:29:c4:3e:40:a5:d2:93:ac:c0:e8:69:22:80: 16:18:65:e9:f6:a4:a0:b6:66:0c:6c:c7:0d:96:26: 6d:d9:8e:8b:59:c2:80:ec:b2:c3:b1:aa:b2:87:90: 63:2c:25:6c:a6:7f:38:76:2b:0e:c1:41:af:9f:96: 99:ea:43:84:88:c1:c5:4b:fa:16:56:4e:a0:54:bb: a7:07:7a:75:f8:b8:dd:fe:06:79:17:2c:c8:ca:e2: 36:4a:db:db:1a:f3:fe:a0:e1:e1:dd:6c:13:4d:6c: 93:69:89:3a:e7:7a:b0:19:48:d9:a0:5e:4d:fe:b3: f2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B2:D0:90:02:DD:F9:98:12:0B:01:20:72:BF:D8:9D:C9:1D:BE:B9 X509v3 Authority Key Identifier: keyid:B2:9E:45:31:16:74:5C:87:4B:F0:F0:B4:72:45:98:2A:71:D5:26:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:f9:b2:ca:7e:34:a5:63:ab:5c:3c:11:5f:57:ce:05:53:c1: 42:3d:f1:f6:cd:8c:79:2b:e0:bd:03:2d:08:6e:9b:25:a4:00: a8:a9:7b:4d:75:b3:b5:25:b5:bc:6a:75:aa:2d:2f:2a:e7:50: 24:6b:c4:3a:6d:ba:dc:13:00:73:88:50:b9:ef:f1:3a:3b:d1: 5b:b4:56:33:8a:d9:23:e8:5d:97:1e:e2:fa:b3:61:47:45:33: a5:89:20:46:26:f6:30:40:2a:4d:06:20:5d:d3:c2:c8:ac:d4: 9b:df:c7:71:c7:5b:3d:8b:98:4f:33:d0:a7:46:1f:50:ee:ee: 36:7f:6f:4e:2e:86:f9:7f:89:13:d8:d9:18:f6:97:d0:14:1c: f0:04:81:ab:89:01:b8:bf:ef:46:dc:0e:cb:99:74:5d:8a:0c: a4:2a:0e:b3:2a:70:0a:5e:3c:a5:9b:3d:07:9a:47:c7:a2:0f: 7c:b5:f9:68:d5:52:c4:6b:6d:c7:a7:3f:b9:b0:b7:f0:3e:60: 98:a0:82:5d:57:a1:4c:48:85:34:8d:f6:e1:a2:ec:b2:b4:9a: 92:45:d7:0d:f5:e0:5c:90:0a:8b:53:ac:de:0c:1b:6a:52:05: 0a:f3:ac:c6:84:45:3a:ce:aa:19:b0:0e:9d:04:47:94:bb:2c: 52:36:56:0f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RkU4MzExMC8GA1UEBRMoQjI5RTQ1MzExNjc0NUM4NzRCRjBGMEI0NzI0NTk4MkE3 MUQ1MjZCNTAeFw0yNjAzMjkwODMyMjBaFw0yNjA0MDUwODMyMjBaMBgxFjAUBgNV BAMTDTY5YzhlMzk0LWU5ZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCM5b9zkZCIn3kjiIYgeGjT4C2G714gp1YPr2pl4t9uBNQM/JtuNz29X+P35/fH 9of2A8d1oTqP1yCFol5L/lVEB/fMJjWJWUpRkExyPvxOcMuuSnxSczdGCu86ZpBQ dWgjWm9h2Cyavmk6kKgVY7mkv/LwGWOcvGN4LbYmZu2BfpIDobQh2pdnKcQ+QKXS k6zA6GkigBYYZen2pKC2Zgxsxw2WJm3ZjotZwoDsssOxqrKHkGMsJWymfzh2Kw7B Qa+flpnqQ4SIwcVL+hZWTqBUu6cHenX4uN3+BnkXLMjK4jZK29sa8/6g4eHdbBNN bJNpiTrnerAZSNmgXk3+s/LnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUj7LQkALd +ZgSCwEgcr/YnckdvrkwHwYDVR0jBBgwFoAUsp5FMRZ0XIdL8PC0ckWYKnHVJrUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGRTgzL0U3RUIyNkIwMDAx MjExRjFBRkY0MEFDQjQwNkY1NkJDL3NwNUZNUlowWElkTDhQQzBja1dZS25IVkpy VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3A1Rk1SWjBYSWRMOFBDMGNrV1lLbkhWSnJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG RTgzL0U3RUIyNkIwMDAxMjExRjFBRkY0MEFDQjQwNkY1NkJDL3NwNUZNUlowWElk TDhQQzBja1dZS25IVkpyVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDC+bLKfjSlY6tcPBFfV84FU8FCPfH2zYx5K+C9Ay0IbpslpACoqXtNdbO1JbW8 anWqLS8q51Aka8Q6bbrcEwBziFC57/E6O9FbtFYzitkj6F2XHuL6s2FHRTOliSBG JvYwQCpNBiBd08LIrNSb38dxx1s9i5hPM9CnRh9Q7u42f29OLob5f4kT2NkY9pfQ FBzwBIGriQG4v+9G3A7LmXRdigykKg6zKnAKXjylmz0HmkfHog98tflo1VLEa23H pz+5sLfwPmCYoIJdV6FMSIU0jfbhouyytJqSRdcN9eBckAqLU6zeDBtqUgUK86zG hEU6zqoZsA6dBEeUuyxSNlYP -----END CERTIFICATE-----Generated at Mon Mar 30 13:13:48 2026 by rpki-client