$ rpki-client -vvf rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft File: 5r9G5TDfkimPrAMq-8mECcRDBDk.mft (raw, json) Hash identifier: UglkMp6ZiPyqekRfEOs/GRUVRo70eOs5CKgRo3N1dz8= Subject key identifier: CA:E3:94:2F:CA:AB:B0:EA:6B:D6:35:4F:D8:1B:BD:0F:0F:F5:11:C2 Authority key identifier: E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 Certificate issuer: /CN=A91527F9/serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Certificate serial: 355A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft Manifest number: 353C Signing time: Sat 04 Apr 2026 14:54:14 +0000 Manifest this update: Sat 04 Apr 2026 14:54:13 +0000 Manifest next update: Sat 11 Apr 2026 14:54:13 +0000 Files and hashes: 1: 5r9G5TDfkimPrAMq-8mECcRDBDk.crl (hash: 3lTdC3mdD2QBR0Q/no/XUSNtMLxil5Ap2k3hQg3NYOM=) 2: AD5BA998D85D11EB8E31070BC4F9AE02.roa (hash: mZjZ+p8cLcbwXds5Q+V/zmBkA9l9nadihJZ6Y3qg9aQ=) 3: 909C5126F0A711EEA6150174C4F9AE02.roa (hash: oqJ462g0qJmgmHMOMVy2Cc6+TnCbz3LnnEel6B43bqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13658 (0x355a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91527F9, serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Validity Not Before: Apr 4 14:54:13 2026 GMT Not After : Apr 11 14:54:13 2026 GMT Subject: CN=69d12615-10ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:53:e4:35:28:0e:2d:cb:a6:ac:61:80:47:ad: 44:7a:01:f6:4e:2d:33:4a:cf:f8:b4:4a:76:7b:37: fd:10:68:20:fd:d1:ee:2f:e0:cd:63:c0:9c:b6:9e: 12:db:1c:cc:14:6a:87:21:ea:58:7e:f4:53:36:d4: 94:cb:13:e7:e2:f7:4c:5d:2c:3d:63:bb:f1:5a:f2: 8c:2c:66:2e:b6:b2:59:97:5d:02:85:01:33:ff:f2: 54:25:97:e2:ed:27:7e:5d:af:d7:25:fa:a8:98:d8: 2c:b3:2d:98:f6:ea:8b:50:d8:f0:8d:86:0a:e3:2f: 87:eb:09:43:7f:aa:4c:52:66:ec:cd:26:0f:6a:89: 66:0c:49:18:dc:ef:22:06:7d:a0:7a:4c:06:bf:ad: 85:bb:89:19:0a:2a:f3:2e:d3:e8:c5:e5:4b:86:0a: 4c:5b:6a:7b:b9:27:1a:44:67:d6:00:b4:e3:c5:79: c1:d7:9b:d9:73:57:79:63:41:37:52:39:bb:7d:24: ea:68:8c:17:f5:f0:43:1c:2c:77:e8:7c:86:d2:b9: 33:1b:c9:c4:8a:74:11:98:93:4b:fd:a6:54:f1:71: f2:3b:26:d9:d2:62:53:61:64:7b:7e:d2:3a:1a:96: e9:f1:ad:21:2c:6e:5f:51:4f:59:0a:3d:b0:8d:48: c2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E3:94:2F:CA:AB:B0:EA:6B:D6:35:4F:D8:1B:BD:0F:0F:F5:11:C2 X509v3 Authority Key Identifier: keyid:E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:64:71:82:e7:09:1c:59:51:40:6b:74:ff:45:fb:ce:22:ce: 33:40:86:3a:22:b9:c3:2d:87:14:8c:60:8a:b6:17:b5:e5:5c: 96:4b:0c:87:16:52:75:88:23:b9:89:7a:0a:f9:c2:af:0a:1d: 30:e4:5f:96:d3:62:30:17:e6:a7:2d:2b:0b:db:df:5e:b7:fc: 83:ef:3c:6a:c9:12:a0:d5:e4:27:56:d7:e8:97:96:a1:74:1e: 08:dd:59:95:b7:c2:a3:6e:1f:e8:78:3f:12:a6:72:ed:ed:2e: 82:cf:f3:0b:3e:18:04:a7:23:87:01:9f:ff:06:c9:e3:a9:31: bf:88:cc:8a:22:78:91:39:2e:77:7f:fd:7a:f5:fe:8e:ee:0a: a1:fd:c1:14:25:d0:5e:12:1e:96:9e:d5:b4:0e:0a:08:53:74: 19:c9:43:cb:f6:7d:fb:b2:e1:c4:9d:08:41:7c:a9:bc:10:ee: 30:77:7b:48:59:e9:2b:05:d0:12:06:ba:33:a1:da:08:55:90: 67:b7:5f:da:39:1c:48:13:28:d7:0b:d8:98:6f:d7:ce:c1:09: d3:e3:bd:ac:c7:df:a9:f8:9d:1e:b0:ee:0b:8d:26:f6:9e:33: ac:3a:27:80:08:63:f5:3f:07:7e:b1:04:30:bf:82:b4:99:89: 73:14:66:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI3RjkxMTAvBgNVBAUTKEU2QkY0NkU1MzBERjkyMjk4RkFDMDMyQUZCQzk4NDA5 QzQ0MzA0MzkwHhcNMjYwNDA0MTQ1NDEzWhcNMjYwNDExMTQ1NDEzWjAYMRYwFAYD VQQDEw02OWQxMjYxNS0xMGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VPkNSgOLcumrGGAR61EegH2Ti0zSs/4tEp2ezf9EGgg/dHuL+DNY8Cctp4S 2xzMFGqHIepYfvRTNtSUyxPn4vdMXSw9Y7vxWvKMLGYutrJZl10ChQEz//JUJZfi 7Sd+Xa/XJfqomNgssy2Y9uqLUNjwjYYK4y+H6wlDf6pMUmbszSYPaolmDEkY3O8i Bn2gekwGv62Fu4kZCirzLtPoxeVLhgpMW2p7uScaRGfWALTjxXnB15vZc1d5Y0E3 Ujm7fSTqaIwX9fBDHCx36HyG0rkzG8nEinQRmJNL/aZU8XHyOybZ0mJTYWR7ftI6 Gpbp8a0hLG5fUU9ZCj2wjUjChwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMrjlC/K q7Dqa9Y1T9gbvQ8P9RHCMB8GA1UdIwQYMBaAFOa/RuUw35Ipj6wDKvvJhAnEQwQ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjdGOS82RUQyRUJBQTFE OUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtpbVByQU1xLThtRUNjUkRC RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyOUc1VERma2ltUHJBTXEtOG1FQ2NSREJEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjdGOS82RUQyRUJBQTFEOUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtp bVByQU1xLThtRUNjUkRCRGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW2RxgucJHFlRQGt0/0X7ziLOM0CGOiK5wy2HFIxgirYXteVclksMhxZSdYgj uYl6CvnCrwodMORfltNiMBfmpy0rC9vfXrf8g+88askSoNXkJ1bX6JeWoXQeCN1Z lbfCo24f6Hg/EqZy7e0ugs/zCz4YBKcjhwGf/wbJ46kxv4jMiiJ4kTkud3/9evX+ ju4Kof3BFCXQXhIelp7VtA4KCFN0GclDy/Z9+7LhxJ0IQXypvBDuMHd7SFnpKwXQ Ega6M6HaCFWQZ7df2jkcSBMo1wvYmG/XzsEJ0+O9rMffqfidHrDuC40m9p4zrDon gAhj9T8HfrEEML+CtJmJcxRm6g== -----END CERTIFICATE-----Generated at Mon Apr 6 13:54:21 2026 by rpki-client