$ rpki-client -vvf rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft File: N5vU53MvGo0cOyItt3c8HBVBn0I.mft (raw, json) Hash identifier: Lh9HQE8PTffepzBjFt62M5i/qxXPUFKLrYY39Dfpmhk= Subject key identifier: 99:9E:02:0B:E8:AB:52:4B:5B:81:AD:99:B8:75:DE:79:9B:87:EA:F6 Authority key identifier: 37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42 Certificate issuer: /CN=A912527F/serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42 Certificate serial: 0324 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft Manifest number: 031A Signing time: Mon 27 Apr 2026 01:07:12 +0000 Manifest this update: Mon 27 Apr 2026 01:07:11 +0000 Manifest next update: Mon 04 May 2026 01:07:11 +0000 Files and hashes: 1: N5vU53MvGo0cOyItt3c8HBVBn0I.crl (hash: XEhw0MXCTaX/G4GGcAjqTmCrkTiZZdQXlsi/TZs4o7E=) 2: 2C257150DBCA11EF920CC12BC4F9AE02.roa (hash: pM24w6vKLtsWmfPCHn0P6r3fycQVCoXTQ9k3lCEASV8=) 3: BE0481A4EFA111ED87AD1F0BC4F9AE02.roa (hash: iOuORY+LnmvKLHgsVsbokwSlIctdoiKuQFeKpaNglE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 804 (0x324) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912527F, serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42 Validity Not Before: Apr 27 01:07:11 2026 GMT Not After : May 4 01:07:11 2026 GMT Subject: CN=69eeb6c0-e002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bd:f9:e7:94:6b:08:87:21:9b:88:a5:ce:ea: bd:59:ce:47:a5:2c:56:1e:08:d3:4d:c5:06:64:7c: 15:6f:b8:31:24:48:1f:e1:ac:dc:5a:de:f7:c3:74: b6:3d:4c:cd:5e:38:70:39:eb:68:fa:0c:28:d9:aa: 55:90:2b:e3:27:90:26:3a:9f:96:17:ac:60:3a:b7: 7f:7e:b9:8c:45:2d:87:e8:64:ea:0d:14:5a:36:d0: 23:33:41:53:4b:70:81:ee:e0:4d:72:32:c9:c3:c5: 2b:53:16:0c:0c:74:a7:8c:9c:14:81:aa:90:4a:e4: 72:e0:47:f5:44:11:a8:12:cd:22:1a:c6:d6:f0:19: 7c:1e:e0:14:9f:5f:66:bc:de:0b:e0:a8:08:e5:fb: 98:dd:1c:04:38:05:af:7d:8b:b7:41:87:25:97:b6: 3c:5d:9f:8c:ee:70:3d:02:92:3e:ab:8e:67:ca:d5: 4c:d5:56:47:51:e4:09:a4:43:42:18:15:16:e1:e7: 09:36:bc:bd:8e:96:71:d4:f7:a9:95:60:06:fd:f1: 07:83:2b:b9:65:fa:7d:d4:97:bc:a1:34:8f:f5:1a: a0:e6:cd:99:6b:2b:3e:e7:da:4b:e4:5c:c4:bd:22: be:c7:2f:80:24:0a:06:26:fd:c9:72:c7:98:1f:fa: 03:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9E:02:0B:E8:AB:52:4B:5B:81:AD:99:B8:75:DE:79:9B:87:EA:F6 X509v3 Authority Key Identifier: keyid:37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f6:7c:05:cb:24:93:50:d7:b6:b1:b0:07:44:ce:10:45:fe: b5:94:45:35:91:1d:75:32:cc:54:25:94:f0:b7:d3:1f:05:13: a3:39:17:89:d8:50:47:e6:f4:54:68:53:f9:0a:29:32:e1:44: e9:6d:07:8f:ff:d0:f9:7f:7d:1b:27:6d:b8:62:98:89:83:2a: 19:82:71:7b:53:71:f7:94:77:31:42:5e:95:cd:45:08:a1:ea: 37:98:98:03:f0:16:da:33:d5:19:27:30:e5:32:8f:1c:97:bc: c0:59:86:e1:9f:db:6a:b2:85:d9:ed:1e:93:55:85:84:ea:ee: 61:db:99:08:83:4a:dc:f6:f6:a8:44:da:c6:26:81:de:85:32: e6:00:29:85:75:69:16:8e:93:df:84:3d:82:93:8a:f8:18:60: 44:33:f8:dd:63:53:02:cd:1f:43:bd:0e:ef:11:5c:96:a6:45: 8a:4b:1f:90:16:34:2e:11:3e:3e:6e:e3:3e:c8:ea:b3:35:a6: 51:1b:d8:2c:50:30:af:97:e4:a3:67:ee:e9:10:8d:0d:0c:2c: ad:b3:4c:f9:60:be:91:86:6e:02:be:66:7b:22:7c:90:71:f1: d8:04:f3:6a:67:0c:f2:12:f1:6e:ed:89:8f:cc:c8:3d:fc:f0: 8d:27:76:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUyN0YxMTAvBgNVBAUTKDM3OUJENEU3NzMyRjFBOEQxQzNCMjIyREI3NzczQzFD MTU0MTlGNDIwHhcNMjYwNDI3MDEwNzExWhcNMjYwNTA0MDEwNzExWjAYMRYwFAYD VQQDEw02OWVlYjZjMC1lMDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4b3555RrCIchm4ilzuq9Wc5HpSxWHgjTTcUGZHwVb7gxJEgf4azcWt73w3S2 PUzNXjhwOeto+gwo2apVkCvjJ5AmOp+WF6xgOrd/frmMRS2H6GTqDRRaNtAjM0FT S3CB7uBNcjLJw8UrUxYMDHSnjJwUgaqQSuRy4Ef1RBGoEs0iGsbW8Bl8HuAUn19m vN4L4KgI5fuY3RwEOAWvfYu3QYcll7Y8XZ+M7nA9ApI+q45nytVM1VZHUeQJpENC GBUW4ecJNry9jpZx1PeplWAG/fEHgyu5Zfp91Je8oTSP9Rqg5s2Zays+59pL5FzE vSK+xy+AJAoGJv3JcseYH/oDzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJmeAgvo q1JLW4Gtmbh13nmbh+r2MB8GA1UdIwQYMBaAFDeb1OdzLxqNHDsiLbd3PBwVQZ9C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTI3Ri9CQ0ZEQUZDQzEw REQxMUVEODBBQTI0ODVDNEY5QUUwMi9ONXZVNTNNdkdvMGNPeUl0dDNjOEhCVkJu MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041dlU1M012R28wY095SXR0M2M4SEJWQm4wSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTI3Ri9CQ0ZEQUZDQzEwREQxMUVEODBBQTI0ODVDNEY5QUUwMi9ONXZVNTNNdkdv MGNPeUl0dDNjOEhCVkJuMEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbfZ8Bcskk1DXtrGwB0TOEEX+tZRFNZEddTLMVCWU8LfTHwUTozkXidhQR+b0 VGhT+QopMuFE6W0Hj//Q+X99GydtuGKYiYMqGYJxe1Nx95R3MUJelc1FCKHqN5iY A/AW2jPVGScw5TKPHJe8wFmG4Z/barKF2e0ek1WFhOruYduZCINK3Pb2qETaxiaB 3oUy5gAphXVpFo6T34Q9gpOK+BhgRDP43WNTAs0fQ70O7xFclqZFiksfkBY0LhE+ Pm7jPsjqszWmURvYLFAwr5fko2fu6RCNDQwsrbNM+WC+kYZuAr5meyJ8kHHx2ATz amcM8hLxbu2Jj8zIPfzwjSd2PQ== -----END CERTIFICATE-----Generated at Mon Apr 27 22:51:31 2026 by rpki-client