$ rpki-client -vvf rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft File: 5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft (raw, json) Hash identifier: sRer/UGKd+yF6PZRE1jKqxUfCaKNkglWjGnLnTHi9YA= Subject key identifier: 44:98:F3:FF:FE:14:E9:2F:BC:FB:00:02:86:A3:A7:D3:75:B2:27:85 Authority key identifier: E5:72:61:FF:C8:10:71:40:79:34:B6:50:4A:22:BB:A3:C1:50:E1:73 Certificate issuer: /CN=A91509B3/serialNumber=E57261FFC81071407934B6504A22BBA3C150E173 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft Manifest number: 7D Signing time: Sun 05 Apr 2026 07:10:18 +0000 Manifest this update: Sun 05 Apr 2026 07:10:17 +0000 Manifest next update: Sun 12 Apr 2026 07:10:17 +0000 Files and hashes: 1: 5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl (hash: EWvuOdcW+HwCBA7fQmUc7oce/+VuWfUNcrH3f6gZgjg=) 2: FD5873EC83BA11F089D8E166C4F9AE02.roa (hash: pgcMYTWRFf4gkxcC+wpc0bSO3rwahz7ouBwd4bk4x64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509B3, serialNumber=E57261FFC81071407934B6504A22BBA3C150E173 Validity Not Before: Apr 5 07:10:17 2026 GMT Not After : Apr 12 07:10:17 2026 GMT Subject: CN=69d20ad9-cd05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f4:c0:91:33:1c:7a:35:a1:8f:bc:3d:7a:e2: e9:a0:3b:5e:84:66:96:b9:81:35:2f:bb:29:d2:53: 42:05:6b:a0:d5:7a:bd:53:1b:03:07:04:39:cc:f1: 74:c6:05:05:24:7e:79:23:c8:95:92:4d:14:15:58: 43:f6:f8:e9:bc:15:9a:b3:1b:c3:9d:59:a5:2c:d6: d0:ed:fd:1f:25:0e:d2:86:71:cd:7d:08:fe:8d:47: 96:3c:52:e2:5f:0a:5c:7d:27:bc:e8:4f:d9:f8:3a: ff:12:ce:a8:cc:64:1d:97:e7:94:72:20:ba:8c:f0: 0c:cd:63:4a:48:3e:9a:01:18:64:17:15:b2:7f:73: 97:ef:15:7b:df:af:67:94:aa:84:d0:08:33:6b:89: 6f:c7:43:c3:01:0d:31:63:83:91:4f:3b:39:36:db: 78:c4:b3:8d:3d:14:5b:11:3a:f9:da:48:d2:55:53: 93:f6:a1:c3:e8:73:7d:3b:ac:3a:c3:3a:30:99:84: e5:42:e7:47:31:8a:85:ed:33:0d:51:12:b8:6d:c1: 9a:f1:90:b0:12:94:85:bd:1b:9b:b0:21:fc:94:99: 6c:33:b2:5b:38:5c:54:91:d0:2b:86:f3:4e:70:e0: 7d:b0:b9:aa:b7:46:93:35:82:76:2a:9a:87:db:08: 46:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:98:F3:FF:FE:14:E9:2F:BC:FB:00:02:86:A3:A7:D3:75:B2:27:85 X509v3 Authority Key Identifier: keyid:E5:72:61:FF:C8:10:71:40:79:34:B6:50:4A:22:BB:A3:C1:50:E1:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:36:89:c1:29:8d:f9:e3:70:ce:85:79:14:38:c4:d3:76:a3: 6d:94:cb:f6:94:0d:5f:4b:be:83:80:81:2f:20:4d:38:e2:fd: e1:0f:85:0b:ef:9b:ef:23:54:6b:f8:a2:b7:9b:c5:76:c3:13: 8a:b4:02:ad:bd:95:d1:d1:58:2d:ef:ec:1b:f4:61:86:ae:d3: 76:8e:5b:98:1d:fb:b4:9f:de:0f:fc:92:ad:81:e4:2f:40:c6: 57:2b:bc:a6:8e:7a:4f:de:a5:cd:f4:94:a6:1e:a9:c9:e0:6d: 77:40:89:e4:0b:a7:c9:52:8f:db:82:30:f9:cb:10:2a:f3:07: 87:df:4c:51:d9:3f:ec:43:93:20:a1:7b:31:35:78:bc:29:5f: 4a:4e:63:51:bb:b5:52:2e:2d:ea:63:da:8d:7a:01:d4:01:ae: 0c:98:87:66:3b:2e:bf:96:7e:3e:d9:62:ba:bc:c1:4c:de:8e: 47:aa:f5:d6:46:80:e0:a6:68:28:7e:81:f7:ed:8c:38:68:bc: 7f:cd:22:3a:43:a4:bd:4f:54:8d:41:43:30:a9:24:40:aa:3c: fe:e1:11:3a:6a:3d:e5:59:0c:cb:72:21:eb:76:4a:7a:9d:b9: 41:2c:ff:c7:21:d3:a6:cb:2d:ee:1f:d1:d4:1c:c4:18:bf:44: c4:57:70:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA5QjMxMTAvBgNVBAUTKEU1NzI2MUZGQzgxMDcxNDA3OTM0QjY1MDRBMjJCQkEz QzE1MEUxNzMwHhcNMjYwNDA1MDcxMDE3WhcNMjYwNDEyMDcxMDE3WjAYMRYwFAYD VQQDEw02OWQyMGFkOS1jZDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/TAkTMcejWhj7w9euLpoDtehGaWuYE1L7sp0lNCBWug1Xq9UxsDBwQ5zPF0 xgUFJH55I8iVkk0UFVhD9vjpvBWasxvDnVmlLNbQ7f0fJQ7ShnHNfQj+jUeWPFLi XwpcfSe86E/Z+Dr/Es6ozGQdl+eUciC6jPAMzWNKSD6aARhkFxWyf3OX7xV7369n lKqE0Agza4lvx0PDAQ0xY4ORTzs5Ntt4xLONPRRbETr52kjSVVOT9qHD6HN9O6w6 wzowmYTlQudHMYqF7TMNURK4bcGa8ZCwEpSFvRubsCH8lJlsM7JbOFxUkdArhvNO cOB9sLmqt0aTNYJ2KpqH2whGcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFESY8//+ FOkvvPsAAoajp9N1sieFMB8GA1UdIwQYMBaAFOVyYf/IEHFAeTS2UEoiu6PBUOFz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDlCMy83NTcwMDE0Mjgz QUMxMUYwQUQ1NDBEMUJDNEY5QUUwMi81WEpoXzhnUWNVQjVOTFpRU2lLN284RlE0 WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVYSmhfOGdRY1VCNU5MWlFTaUs3bzhGUTRYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDlCMy83NTcwMDE0MjgzQUMxMUYwQUQ1NDBEMUJDNEY5QUUwMi81WEpoXzhnUWNV QjVOTFpRU2lLN284RlE0WE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAszaJwSmN+eNwzoV5FDjE03ajbZTL9pQNX0u+g4CBLyBNOOL94Q+FC++b7yNU a/iit5vFdsMTirQCrb2V0dFYLe/sG/Rhhq7Tdo5bmB37tJ/eD/ySrYHkL0DGVyu8 po56T96lzfSUph6pyeBtd0CJ5AunyVKP24Iw+csQKvMHh99MUdk/7EOTIKF7MTV4 vClfSk5jUbu1Ui4t6mPajXoB1AGuDJiHZjsuv5Z+PtliurzBTN6OR6r11kaA4KZo KH6B9+2MOGi8f80iOkOkvU9UjUFDMKkkQKo8/uEROmo95VkMy3Ih63ZKep25QSz/ xyHTpsst7h/R1BzEGL9ExFdwxg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:35 2026 by rpki-client