$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: bMW+pWwbgcXAcRwjqPRAhFVliNnvgvwCLH2BlviqndM= Subject key identifier: EF:58:DD:92:B8:A7:68:4F:06:4D:04:41:6D:44:A8:63:BB:E4:A9:92 Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 0406 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 03F0 Signing time: Sun 29 Mar 2026 00:26:49 +0000 Manifest this update: Sun 29 Mar 2026 00:26:48 +0000 Manifest next update: Sun 05 Apr 2026 00:26:48 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: G2qV0DLlPz1krynLgWNWlVJjOzCFI041Y+l9nkoSeb4=) 2: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: 8QW6SQzpdf8WqjCw4pnkX0HYCGVvI59bpneK0fchnuE=) 3: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: YL8hbnsNwgCnn/NcUCv0iY/57aut2UGD2Ataw87mmvw=) 4: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: fOCLl/2VKdNa0vhoLYzfZhLV3T1IotJ/iZtFzsPrmrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 00:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1030 (0x406) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: Mar 29 00:26:48 2026 GMT Not After : Apr 5 00:26:48 2026 GMT Subject: CN=69c871c8-9499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:70:b7:b8:94:fa:88:1b:90:40:f2:77:d4:3b: d5:ce:8b:b3:a1:6e:7a:dc:15:35:83:69:a5:99:d9: c7:d2:56:b8:bd:85:2a:db:4f:fb:ce:7f:f3:c2:ad: f5:9e:59:b1:16:83:8b:fb:0c:f2:69:4a:e7:20:a3: b3:c4:3e:03:12:c8:65:34:e8:6d:89:64:48:82:2a: b1:66:11:94:6f:6b:e1:74:88:01:44:74:b8:3d:1e: 58:7e:c3:3c:65:f9:ec:c1:a9:6e:01:7a:16:23:19: 11:b3:4e:c7:10:0d:6d:60:10:70:20:fb:cd:40:98: d2:bf:f8:7b:23:9b:44:25:46:03:e7:25:fd:28:bd: 5f:ae:a6:13:83:eb:ee:5b:21:84:94:0b:c6:43:57: 26:23:f7:c9:73:0a:0e:58:e0:2e:f1:29:32:7e:12: 35:17:e8:79:40:90:2b:92:2a:2c:0c:9e:57:58:8a: 89:a0:a5:d9:79:1e:42:a6:a1:3d:2a:6f:7f:4a:a1: a1:54:46:f9:9c:f7:5d:68:54:a0:fc:c5:42:60:8d: 19:f8:28:d4:e4:11:86:8e:83:f4:5c:56:fd:90:e8: 39:f4:18:cf:75:81:58:24:f6:2c:8a:dd:c2:32:fc: 5b:2d:3b:19:a5:c3:c4:67:c6:18:c1:34:4b:c7:6c: 3b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:58:DD:92:B8:A7:68:4F:06:4D:04:41:6D:44:A8:63:BB:E4:A9:92 X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:e0:cf:3f:b6:3a:f4:09:9d:9c:4f:25:95:4b:a7:da:ba:ee: b2:79:40:71:8a:c0:15:0c:da:d7:87:ab:4b:d3:7c:ac:a7:bc: dd:a8:4b:70:e8:29:78:83:71:6c:4d:25:2c:b1:1a:ca:e0:f7: 97:f8:83:78:5d:2e:9a:cb:df:12:ae:42:26:f0:ca:86:6a:ef: ea:dc:df:b2:97:17:84:e3:e9:d4:ad:6f:d2:0b:b5:68:a0:86: 7b:28:a2:5d:58:e7:76:b4:ec:a0:79:e4:71:ba:4d:f7:9a:6a: 13:f2:cb:14:7d:5c:9b:1e:1e:81:46:92:5d:cb:38:c6:16:7d: f6:7a:46:f3:79:93:e2:32:99:91:6f:94:f4:fc:59:51:70:38: 21:af:18:52:b4:51:f1:e4:06:3c:c3:90:b3:0d:66:22:c0:69: 2b:70:28:92:5f:51:a0:7e:7c:78:f1:d1:69:af:87:7b:25:db: 79:a0:c9:1b:da:e3:8e:25:ff:8b:af:c3:1e:fa:41:fe:4a:d6: 44:cc:5a:c7:77:dc:bf:2c:75:4c:04:2b:1f:6d:9b:c3:4f:1c: 3c:db:42:2e:b3:67:16:06:a7:e8:06:90:2a:bd:c2:ff:44:4c: 33:f2:25:04:8b:f9:b3:b4:c8:56:19:c0:c0:4b:aa:15:f0:27: 5a:a5:8f:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjYwMzI5MDAyNjQ4WhcNMjYwNDA1MDAyNjQ4WjAYMRYwFAYD VQQDEw02OWM4NzFjOC05NDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3C3uJT6iBuQQPJ31DvVzouzoW563BU1g2mlmdnH0la4vYUq20/7zn/zwq31 nlmxFoOL+wzyaUrnIKOzxD4DEshlNOhtiWRIgiqxZhGUb2vhdIgBRHS4PR5YfsM8 ZfnswaluAXoWIxkRs07HEA1tYBBwIPvNQJjSv/h7I5tEJUYD5yX9KL1frqYTg+vu WyGElAvGQ1cmI/fJcwoOWOAu8SkyfhI1F+h5QJArkiosDJ5XWIqJoKXZeR5CpqE9 Km9/SqGhVEb5nPddaFSg/MVCYI0Z+CjU5BGGjoP0XFb9kOg59BjPdYFYJPYsit3C MvxbLTsZpcPEZ8YYwTRLx2w7PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO9Y3ZK4 p2hPBk0EQW1EqGO75KmSMB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQODPP7Y69AmdnE8llUun2rrusnlAcYrAFQza14erS9N8rKe83ahLcOgpeINx bE0lLLEayuD3l/iDeF0umsvfEq5CJvDKhmrv6tzfspcXhOPp1K1v0gu1aKCGeyii XVjndrTsoHnkcbpN95pqE/LLFH1cmx4egUaSXcs4xhZ99npG83mT4jKZkW+U9PxZ UXA4Ia8YUrRR8eQGPMOQsw1mIsBpK3Aokl9RoH58ePHRaa+HeyXbeaDJG9rjjiX/ i6/DHvpB/krWRMxax3fcvyx1TAQrH22bw08cPNtCLrNnFgan6AaQKr3C/0RMM/Il BIv5s7TIVhnAwEuqFfAnWqWPAg== -----END CERTIFICATE-----Generated at Mon Mar 30 17:24:57 2026 by rpki-client