$ rpki-client -vvf rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.mft File: 5k3PxJR4oTweMa6HKi-sEL-4lTE.mft (raw, json) Hash identifier: 7YUf9mUL6E+IPom7jll1y3frIaYuXOWfq1HWSFD0Y/Q= Subject key identifier: D1:B4:26:3C:D7:09:DC:70:6A:91:E4:27:BB:38:3A:A3:B8:A8:83:EB Authority key identifier: E6:4D:CF:C4:94:78:A1:3C:1E:31:AE:87:2A:2F:AC:10:BF:B8:95:31 Certificate issuer: /CN=A915F67F/serialNumber=E64DCFC49478A13C1E31AE872A2FAC10BFB89531 Certificate serial: 3529 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k3PxJR4oTweMa6HKi-sEL-4lTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.mft Manifest number: 3529 Signing time: Sat 04 Apr 2026 14:33:12 +0000 Manifest this update: Sat 04 Apr 2026 14:33:12 +0000 Manifest next update: Sat 11 Apr 2026 14:33:12 +0000 Files and hashes: 1: 5k3PxJR4oTweMa6HKi-sEL-4lTE.crl (hash: Cw1CfRsHpplwMu9f6D/t8L2uNy+4+fOFKfmDUhEJfp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.crl rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k3PxJR4oTweMa6HKi-sEL-4lTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13609 (0x3529) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F67F, serialNumber=E64DCFC49478A13C1E31AE872A2FAC10BFB89531 Validity Not Before: Apr 4 14:33:12 2026 GMT Not After : Apr 11 14:33:12 2026 GMT Subject: CN=69d12128-9022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4d:c1:38:97:7f:88:70:2c:cb:d8:7f:2a:5b: 87:2d:b6:04:1d:ed:32:bc:a6:d6:46:48:e1:3a:85: 70:e7:b0:a6:e4:b9:45:08:01:68:24:09:59:7d:19: be:95:34:84:5c:b9:28:3e:9b:46:ca:5e:48:5c:e8: c5:39:23:ae:01:5d:b5:88:3c:ee:d4:0c:a7:b8:8a: c7:6d:2b:d4:98:ac:3d:78:89:75:77:92:97:c1:65: 59:43:94:e0:7c:35:db:60:39:25:53:5e:db:87:84: 48:76:ba:32:d7:a0:76:2f:77:df:97:57:4f:58:c6: 8e:bd:52:ae:8c:2c:f4:49:d7:bf:f4:93:51:c9:7c: 83:c4:5a:43:95:09:2c:af:ac:3d:53:85:e4:35:82: e1:fa:09:f2:7a:97:1c:56:2d:9d:31:d1:27:85:d2: d0:c0:40:31:89:2e:38:31:d8:f1:67:95:b6:9d:fa: 54:1a:1f:01:6a:6a:c1:57:19:0e:5f:c7:86:60:0a: 99:0a:55:6e:07:6f:05:b6:9c:31:79:fb:04:f8:0b: fc:83:78:3f:96:f4:c2:22:4b:5c:dc:93:5a:84:58: 4f:35:0d:f6:d0:dd:47:18:80:fb:72:b4:ea:5b:e9: 38:66:04:e2:15:30:c4:c0:77:b3:27:ed:14:73:e3: e9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B4:26:3C:D7:09:DC:70:6A:91:E4:27:BB:38:3A:A3:B8:A8:83:EB X509v3 Authority Key Identifier: keyid:E6:4D:CF:C4:94:78:A1:3C:1E:31:AE:87:2A:2F:AC:10:BF:B8:95:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k3PxJR4oTweMa6HKi-sEL-4lTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:a3:f2:29:f8:a0:ee:03:72:1f:4d:db:ae:99:d8:35:c3:5e: b5:59:99:7d:22:e2:63:09:93:9f:d6:20:61:0c:b0:fa:90:a0: f9:0d:c7:23:76:2d:e7:5f:1b:3d:5c:47:4a:58:9a:8b:17:8e: 2d:c8:cb:a9:cb:8b:c2:4c:f5:5d:a6:4b:70:bb:b1:74:d4:2d: d9:9d:1f:6c:93:1d:fd:5f:25:bf:c5:51:cb:41:b5:f8:b4:4b: 7d:a7:42:bc:ed:56:ce:3c:1a:d1:24:46:ca:ce:db:8c:c2:96: 79:ac:42:df:5a:75:7f:e5:78:7a:af:9a:54:40:c1:5c:c5:b6: 8d:bd:6e:92:bd:dd:03:92:0c:40:3f:3d:2a:43:7b:2e:9b:44: 9d:2d:4b:ff:ae:82:f5:c8:4b:45:49:45:9e:d6:fb:33:9f:06: b5:6b:3e:4d:2b:b4:b4:8d:ae:6c:5f:59:bc:73:59:bc:73:90: d4:06:bf:4c:d4:c5:36:85:ee:86:b9:94:a0:53:34:b4:2c:ed: ba:79:b7:d0:03:d9:88:95:20:4c:7a:ab:9e:5b:28:d1:81:b6: 53:43:95:6a:9e:d2:bc:8f:e9:84:5a:26:6b:a9:be:f0:d0:aa: 87:5d:83:a2:51:59:58:55:28:66:a3:cb:af:59:1b:98:c6:09: 7f:b2:69:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY2N0YxMTAvBgNVBAUTKEU2NERDRkM0OTQ3OEExM0MxRTMxQUU4NzJBMkZBQzEw QkZCODk1MzEwHhcNMjYwNDA0MTQzMzEyWhcNMjYwNDExMTQzMzEyWjAYMRYwFAYD VQQDEw02OWQxMjEyOC05MDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp03BOJd/iHAsy9h/KluHLbYEHe0yvKbWRkjhOoVw57Cm5LlFCAFoJAlZfRm+ lTSEXLkoPptGyl5IXOjFOSOuAV21iDzu1AynuIrHbSvUmKw9eIl1d5KXwWVZQ5Tg fDXbYDklU17bh4RIdroy16B2L3ffl1dPWMaOvVKujCz0Sde/9JNRyXyDxFpDlQks r6w9U4XkNYLh+gnyepccVi2dMdEnhdLQwEAxiS44MdjxZ5W2nfpUGh8BamrBVxkO X8eGYAqZClVuB28FtpwxefsE+Av8g3g/lvTCIktc3JNahFhPNQ320N1HGID7crTq W+k4ZgTiFTDEwHezJ+0Uc+Pp2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNG0JjzX CdxwapHkJ7s4OqO4qIPrMB8GA1UdIwQYMBaAFOZNz8SUeKE8HjGuhyovrBC/uJUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjY3Ri85MUI5ODNDODFE OEExMUUyQjBFNDk0RTQwOEIwMkNEMi81azNQeEpSNG9Ud2VNYTZIS2ktc0VMLTRs VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVrM1B4SlI0b1R3ZU1hNkhLaS1zRUwtNGxURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjY3Ri85MUI5ODNDODFEOEExMUUyQjBFNDk0RTQwOEIwMkNEMi81azNQeEpSNG9U d2VNYTZIS2ktc0VMLTRsVEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKKPyKfig7gNyH03brpnYNcNetVmZfSLiYwmTn9YgYQyw+pCg+Q3HI3Yt518b PVxHSliaixeOLcjLqcuLwkz1XaZLcLuxdNQt2Z0fbJMd/V8lv8VRy0G1+LRLfadC vO1Wzjwa0SRGys7bjMKWeaxC31p1f+V4eq+aVEDBXMW2jb1ukr3dA5IMQD89KkN7 LptEnS1L/66C9chLRUlFntb7M58GtWs+TSu0tI2ubF9ZvHNZvHOQ1Aa/TNTFNoXu hrmUoFM0tCztunm30APZiJUgTHqrnlso0YG2U0OVap7SvI/phFoma6m+8NCqh12D olFZWFUoZqPLr1kbmMYJf7Jp6w== -----END CERTIFICATE-----Generated at Mon Apr 6 09:05:40 2026 by rpki-client