$ rpki-client -vvf rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft File: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft (raw, json) Hash identifier: 4ngzXu5JPjp/9nQWYqf8hU9e0gbvyXvDypj1iSvkjcc= Subject key identifier: 22:CA:8A:7C:87:BF:37:02:B1:0C:01:0E:87:4B:A3:F4:50:C1:26:4A Authority key identifier: E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 Certificate issuer: /CN=A914C7F8/serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft Manifest number: 021C Signing time: Sun 05 Apr 2026 02:32:03 +0000 Manifest this update: Sun 05 Apr 2026 02:32:03 +0000 Manifest next update: Sun 12 Apr 2026 02:32:03 +0000 Files and hashes: 1: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl (hash: 9w2cypwI0SJBGBm3Pv6Shg65nQqtwcfWKin57nsOYLw=) 2: 960C9032C72711F0BD856955C4F9AE02.roa (hash: cBv/6LokTGCmDLCCMsP0N+FLbk6ypRUOowicFCdFSR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C7F8, serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Validity Not Before: Apr 5 02:32:03 2026 GMT Not After : Apr 12 02:32:03 2026 GMT Subject: CN=69d1c9a3-c7df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d4:f4:75:32:ce:ed:71:f0:85:c5:93:74:c2: b9:cb:b8:37:7c:8a:6e:d8:d8:af:46:6b:47:1d:a7: b9:b0:d5:72:3e:b4:2f:a2:2c:84:4a:d1:c6:6c:39: 94:62:40:bc:56:96:f8:c4:8b:90:c7:f0:55:f4:a1: 58:5a:18:2a:2a:19:8e:bf:aa:25:72:85:fe:be:8d: a4:21:fa:b0:0c:59:6a:b8:fd:ee:45:ad:fe:d2:c0: e8:80:99:5f:e5:b2:d1:b7:51:00:13:e1:d2:0e:c1: 95:2c:df:f1:a9:35:22:a6:76:a5:c1:16:bd:42:7b: a2:04:f6:f9:ab:de:64:4d:8d:d8:8d:88:e3:70:47: f0:8e:d6:14:8c:f7:24:7f:a3:90:6f:d5:35:8f:ee: 4b:13:4f:d5:f7:54:ab:4c:b7:28:b1:b6:4d:b6:31: be:1f:97:60:87:b4:b1:a0:b0:87:a6:24:e9:fb:65: e0:cb:99:01:fe:dd:65:ce:d7:49:1b:74:6e:60:de: f0:4f:bd:ff:a9:02:aa:aa:2f:ff:5c:51:37:bf:96: b2:fa:76:1a:93:56:0d:04:2c:71:5b:d2:11:14:86: 2b:3c:f9:08:e0:43:f3:b7:3b:a7:ca:6a:72:a2:8a: d4:ce:da:5f:c3:27:ee:05:16:d2:85:8d:1e:c5:92: 6b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CA:8A:7C:87:BF:37:02:B1:0C:01:0E:87:4B:A3:F4:50:C1:26:4A X509v3 Authority Key Identifier: keyid:E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:be:b5:94:c3:61:73:4d:49:fa:c8:fe:91:a6:0c:47:2c:ff: 36:27:f5:5f:ef:fc:0b:92:0e:84:0d:11:58:05:86:84:19:71: 00:26:6b:66:f2:ee:c4:f2:c6:e0:ab:aa:2d:c1:cc:f6:3d:22: 61:d6:d1:19:12:ba:45:5b:8f:c2:ac:71:13:2d:29:97:d5:cb: 36:16:82:ec:4b:de:3f:f2:d3:94:89:1e:7b:c8:2b:aa:71:9a: db:32:3d:86:18:af:3c:2b:87:ed:42:98:7b:43:ae:99:1d:ad: 58:e6:cb:1d:35:d3:95:08:df:28:95:00:2e:8e:5e:7c:32:4c: 6f:dc:91:29:5c:c1:32:17:1f:4b:32:e9:04:b0:59:37:77:1e: 31:08:fb:0b:99:b0:19:08:f2:7e:57:5d:91:e1:2c:f9:28:98: bb:33:22:27:59:db:e7:a2:36:bb:29:11:59:e8:59:dd:78:eb: 8a:86:8e:74:50:12:12:30:26:2d:9a:4c:fb:54:3d:23:73:17: 9b:5a:b1:33:7a:66:e8:3d:4e:5f:65:5f:a2:2f:78:27:30:05: 56:0d:a4:51:c3:3c:92:22:3b:af:93:aa:c3:68:4f:87:86:3b: 0e:ea:10:ad:2b:a5:22:6a:6c:fa:cb:65:0b:cd:c6:5e:e5:b8: 41:5c:cc:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM3RjgxMTAvBgNVBAUTKEU1MDk2M0Q3MDQ2ODcyNzM1NkI3OEI3RkM0MzgwOTc0 NDI5QjY0RTEwHhcNMjYwNDA1MDIzMjAzWhcNMjYwNDEyMDIzMjAzWjAYMRYwFAYD VQQDEw02OWQxYzlhMy1jN2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNT0dTLO7XHwhcWTdMK5y7g3fIpu2NivRmtHHae5sNVyPrQvoiyEStHGbDmU YkC8Vpb4xIuQx/BV9KFYWhgqKhmOv6olcoX+vo2kIfqwDFlquP3uRa3+0sDogJlf 5bLRt1EAE+HSDsGVLN/xqTUipnalwRa9QnuiBPb5q95kTY3YjYjjcEfwjtYUjPck f6OQb9U1j+5LE0/V91SrTLcosbZNtjG+H5dgh7SxoLCHpiTp+2Xgy5kB/t1lztdJ G3RuYN7wT73/qQKqqi//XFE3v5ay+nYak1YNBCxxW9IRFIYrPPkI4EPztzunympy oorUztpfwyfuBRbShY0exZJrvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCLKinyH vzcCsQwBDodLo/RQwSZKMB8GA1UdIwQYMBaAFOUJY9cEaHJzVreLf8Q4CXRCm2Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzdGOC9FMjUxMEUxQzEy OTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2NuTld0NHRfeERnSmRFS2Ja T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRbGoxd1JvY25OV3Q0dF94RGdKZEVLYlpPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzdGOC9FMjUxMEUxQzEyOTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2Nu Tld0NHRfeERnSmRFS2JaT0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd761lMNhc01J+sj+kaYMRyz/Nif1X+/8C5IOhA0RWAWGhBlxACZrZvLuxPLG 4KuqLcHM9j0iYdbRGRK6RVuPwqxxEy0pl9XLNhaC7EveP/LTlIkee8grqnGa2zI9 hhivPCuH7UKYe0OumR2tWObLHTXTlQjfKJUALo5efDJMb9yRKVzBMhcfSzLpBLBZ N3ceMQj7C5mwGQjyflddkeEs+SiYuzMiJ1nb56I2uykRWehZ3XjrioaOdFASEjAm LZpM+1Q9I3MXm1qxM3pm6D1OX2Vfoi94JzAFVg2kUcM8kiI7r5Oqw2hPh4Y7DuoQ rSulImps+stlC83GXuW4QVzMhQ== -----END CERTIFICATE-----Generated at Mon Apr 6 16:59:45 2026 by rpki-client