$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft File: 5iFGnNWlePlHq0frDs6Ik5uH6_s.mft (raw, json) Hash identifier: y1Ap6q8zD7aXOoxA+FHTLcyRjYXHposz3NjO+8gWIGs= Subject key identifier: EE:0B:AE:72:32:45:42:BD:4A:DD:7A:1A:BF:3B:7B:D1:B2:1F:44:B1 Authority key identifier: E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB Certificate issuer: /CN=A9170982/serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB Certificate serial: 0455 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft Manifest number: 0429 Signing time: Sun 29 Mar 2026 00:20:26 +0000 Manifest this update: Sun 29 Mar 2026 00:20:25 +0000 Manifest next update: Sun 05 Apr 2026 00:20:25 +0000 Files and hashes: 1: 5iFGnNWlePlHq0frDs6Ik5uH6_s.crl (hash: iAXvM69SDxCB1kMDL2oyEdxAR91mHCQGTFj2v0XEt+E=) 2: C8165660822F11EEABA7D533C4F9AE02.roa (hash: h/A2ekMJ720Ho+otYfeYLNAk/zsB1s3sx7Qk4yapaYo=) 3: 2B2CF35A35A411ED89F95974C4F9AE02.roa (hash: 8jF/NpHwWErBgGhdC58vIaXRoe97OZ3zIJ5DPfjZVz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 00:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1109 (0x455) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170982, serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB Validity Not Before: Mar 29 00:20:25 2026 GMT Not After : Apr 5 00:20:25 2026 GMT Subject: CN=69c8704a-ec4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0c:33:2c:66:c7:68:51:33:0c:a8:d9:ad:6a: 18:20:f4:27:d9:f5:59:15:fc:bf:35:6b:1a:3b:83: 27:d0:13:63:db:8a:1a:b3:a1:85:be:88:7e:a8:9e: 78:82:0d:22:7e:07:13:fe:23:38:5d:7b:f3:b9:09: 84:00:6a:b6:bd:1d:a2:e0:bc:42:19:de:c6:6a:5b: 98:e4:90:f1:b9:78:56:69:88:69:98:30:63:83:f4: 4a:9b:63:01:f4:36:f7:ae:eb:59:4d:81:0c:0c:9b: 90:da:c5:43:a6:36:cc:bb:94:61:64:42:04:13:c9: 5c:a1:da:a2:63:0c:40:be:c9:50:2e:28:1d:3b:c9: d2:98:8f:34:8a:a3:f0:2b:a2:bc:ab:0f:2e:fc:38: e9:d6:cb:f9:17:d7:6b:c1:5e:44:73:f3:d5:06:f2: 3a:50:fe:dc:65:be:99:b3:8d:a3:c9:b4:7b:41:8a: 89:31:8f:a2:01:b1:a6:09:fc:b0:55:3f:c3:cf:f7: c0:33:91:d1:39:15:71:ae:6f:89:b1:37:56:11:db: bd:6b:e3:70:c1:36:65:44:f7:28:50:4a:16:b9:e5: 81:ea:83:de:dd:39:c0:f8:e9:1b:36:f5:ca:93:ba: 82:de:97:d2:d4:6f:c4:f8:f3:43:fc:20:ec:70:97: b0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0B:AE:72:32:45:42:BD:4A:DD:7A:1A:BF:3B:7B:D1:B2:1F:44:B1 X509v3 Authority Key Identifier: keyid:E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:c0:5b:40:6f:62:88:0f:91:3f:44:01:f4:5c:f1:f2:23:d6: 04:09:b0:dd:33:88:2b:98:4f:c3:c8:dd:ce:9e:25:ba:38:1c: 90:83:f9:c2:f4:83:76:bd:81:fe:f3:ec:86:76:ac:ec:a7:b8: f9:d0:73:10:b9:05:59:97:53:cf:09:6e:d8:fa:f3:59:6d:8e: 90:55:cd:e7:7f:85:cc:65:fc:ef:13:5a:43:54:35:fa:32:c1: f0:7c:24:c6:db:f5:06:da:5f:12:66:b3:d8:d3:ec:ad:7d:3d: 4d:12:51:dd:07:9d:93:a1:74:b0:a5:77:a8:0d:7e:2f:f5:c8: 2e:e9:03:46:23:3c:4f:f7:04:b1:98:31:f8:b6:32:7c:22:33: 14:74:c4:2a:51:35:e2:f4:f4:7d:61:ab:68:38:a7:f2:72:9c: 64:7b:b1:95:e0:47:d4:6c:c3:93:bc:66:d2:8e:2b:73:0a:1d: e7:95:29:26:84:3a:f8:45:a5:e9:a8:a9:c7:9d:f8:0a:4e:7d: 9d:40:59:2f:af:84:74:de:9c:1b:7e:53:1d:06:62:67:b8:1b: e2:f7:4e:e4:d8:ed:4c:ec:71:eb:73:02:e5:5b:97:2f:f2:3b: c9:ba:10:d0:ce:b7:66:e0:ce:cf:5a:dc:96:8d:3b:a2:94:d6: 36:5f:aa:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5ODIxMTAvBgNVBAUTKEU2MjE0NjlDRDVBNTc4Rjk0N0FCNDdFQjBFQ0U4ODkz OUI4N0VCRkIwHhcNMjYwMzI5MDAyMDI1WhcNMjYwNDA1MDAyMDI1WjAYMRYwFAYD VQQDEw02OWM4NzA0YS1lYzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQwzLGbHaFEzDKjZrWoYIPQn2fVZFfy/NWsaO4Mn0BNj24oas6GFvoh+qJ54 gg0ifgcT/iM4XXvzuQmEAGq2vR2i4LxCGd7GaluY5JDxuXhWaYhpmDBjg/RKm2MB 9Db3rutZTYEMDJuQ2sVDpjbMu5RhZEIEE8lcodqiYwxAvslQLigdO8nSmI80iqPw K6K8qw8u/Djp1sv5F9drwV5Ec/PVBvI6UP7cZb6Zs42jybR7QYqJMY+iAbGmCfyw VT/Dz/fAM5HRORVxrm+JsTdWEdu9a+NwwTZlRPcoUEoWueWB6oPe3TnA+OkbNvXK k7qC3pfS1G/E+PND/CDscJewdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO4LrnIy RUK9St16Gr87e9GyH0SxMB8GA1UdIwQYMBaAFOYhRpzVpXj5R6tH6w7OiJObh+v7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9EOEI2ODY5NkFD MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi81aUZHbk5XbGVQbEhxMGZyRHM2SWs1dUg2 X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpRkduTldsZVBsSHEwZnJEczZJazV1SDZfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDk4Mi9EOEI2ODY5NkFDMTMxMUVDQjc3NkIyMDlDNEY5QUUwMi81aUZHbk5XbGVQ bEhxMGZyRHM2SWs1dUg2X3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApcBbQG9iiA+RP0QB9Fzx8iPWBAmw3TOIK5hPw8jdzp4lujgckIP5wvSDdr2B /vPshnas7Ke4+dBzELkFWZdTzwlu2PrzWW2OkFXN53+FzGX87xNaQ1Q1+jLB8Hwk xtv1BtpfEmaz2NPsrX09TRJR3Qedk6F0sKV3qA1+L/XILukDRiM8T/cEsZgx+LYy fCIzFHTEKlE14vT0fWGraDin8nKcZHuxleBH1GzDk7xm0o4rcwod55UpJoQ6+EWl 6aipx534Ck59nUBZL6+EdN6cG35THQZiZ7gb4vdO5NjtTOxx63MC5VuXL/I7yboQ 0M63ZuDOz1rclo07opTWNl+qKA== -----END CERTIFICATE-----Generated at Sun Mar 29 20:47:03 2026 by rpki-client