$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft File: s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft (raw, json) Hash identifier: etqJmGhPeuTSJsRFUCvaQTy1JHbTk4BWGkvwHBZsTxc= Subject key identifier: 78:97:0E:C3:54:49:B3:B6:57:17:CA:3E:33:53:65:76:F1:F7:AA:90 Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 Certificate issuer: /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625 Certificate serial: 384C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft Manifest number: 36D2 Signing time: Tue 28 Apr 2026 14:25:13 +0000 Manifest this update: Tue 28 Apr 2026 14:25:13 +0000 Manifest next update: Tue 05 May 2026 14:25:13 +0000 Files and hashes: 1: s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl (hash: scWD3XYlF3IMDvJZk7ihJeQTnuXbj0zPRGKAK5atSFo=) 2: 305A13D6C9F211F0ABA27932C4F9AE02.roa (hash: NrPp83eADET8bdfQFh9hNsWD9EoYo/UsIxIfM+Xp3F8=) 3: 71D60BC2F6BA11EB865C4246C4F9AE02.roa (hash: KFI2tWHfw3kppvCKmuDyoJI/TXZwNEgYE/dBKADg924=) 4: 26A143C291EB11EF8A024083C4F9AE02.roa (hash: qOuOZrrZglkih59X/Pjz7efqStftFhfdFn50wlzJXt4=) 5: B36EA83C70B111E98CFFF710C4F9AE02.roa (hash: 2nquH/Th3aV+FpaTguBv+jy8p2aXbOfhDSjXTwmNigg=) 6: 9AF37E96D71B11EA9532F30CC4F9AE02.roa (hash: 548W6O4jy2t4m978fP7/vkFNV7StaszXL5cUkqOrlsQ=) 7: 160B219870BA11E99E0F6D2DC4F9AE02.roa (hash: 6MJI5nd76wUg6mIJiXKwgcaYmVbyO2X4VHI5tQqt2gM=) 8: B6704306C9F111F08975B813C4F9AE02.roa (hash: QnDSYmh9AS+vc7/gM3qgxQlZaNKWdqAp8+Ehbtb0lnc=) 9: B0EB27B470B811E9B32F6726C4F9AE02.roa (hash: z4MfCyr+jDttoP5VW5Vb0l643tPHIibVvGJ7ZyGfs8M=) 10: 18F4FD76918111EC93DCA42AC4F9AE02.roa (hash: aZB+rnqYjRl4Uc+17dt2ByemLhQ+5bYKCdCl9y70GQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 May 2026 14:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14412 (0x384c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3, serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625 Validity Not Before: Apr 28 14:25:13 2026 GMT Not After : May 5 14:25:13 2026 GMT Subject: CN=69f0c349-5014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:44:10:d7:e4:aa:d9:b0:22:81:d8:10:aa:0f: 98:15:3e:8f:8f:c5:fd:d6:73:54:5c:c1:70:e8:8f: 20:18:7a:2f:f9:22:68:51:36:42:cc:2e:19:34:52: d5:be:f9:3b:fe:75:ac:12:af:60:0f:2d:e5:76:6a: fb:15:d5:b7:8a:6c:e6:fc:e4:a3:9b:f7:ab:b3:75: 00:2b:22:b9:67:cd:44:8f:93:e7:47:f3:22:2f:8a: 5b:20:c4:fe:4b:be:33:cb:78:fa:00:77:79:08:a2: 6a:e8:4f:f4:24:e0:59:b0:9c:c7:2a:d5:3c:01:d4: 21:fb:17:70:80:f2:80:e9:86:da:a5:48:9b:f0:0c: fc:ec:81:15:c3:36:e2:b5:c3:79:b6:d7:c3:f0:50: fa:42:34:c1:d8:57:ab:d6:d9:36:b9:fa:57:80:4f: 4c:44:36:55:41:28:9c:75:c6:16:6d:c0:0b:ca:b7: de:37:6b:c3:99:9e:fe:ef:c3:53:57:b3:32:de:d3: d5:2b:c0:3c:08:ed:eb:96:4b:8c:83:59:c9:4b:92: f5:92:99:40:e3:4b:d9:d3:c7:37:da:d1:0d:a7:3c: cf:94:e0:f2:f7:10:7d:2f:4e:c2:0c:bc:07:12:d3: 51:47:3a:bd:9e:4d:ac:07:da:cd:83:74:f1:0c:f7: 2f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:97:0E:C3:54:49:B3:B6:57:17:CA:3E:33:53:65:76:F1:F7:AA:90 X509v3 Authority Key Identifier: keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:05:a9:c5:fc:d3:43:cd:2f:5f:7d:93:6d:75:d7:46:d9:5b: 81:e5:7b:44:50:28:d6:f7:01:f6:b8:76:db:2b:99:e0:9c:95: 95:5c:c4:05:d5:4e:83:f4:9e:ee:9d:04:79:8c:2d:a0:f0:d9: 78:03:3d:c3:92:97:c4:9f:d9:33:c3:3b:9b:51:1c:54:51:13: 91:86:e2:d9:54:1d:5d:28:51:75:0b:e4:06:43:96:05:ed:23: d0:17:6f:7a:85:a8:c4:30:a4:46:f0:d8:ff:51:a6:f1:20:8f: 69:5c:bb:46:52:da:69:75:7f:b7:6c:b5:85:c9:18:99:9d:a4: 1c:58:2c:5a:38:6c:61:fb:bb:55:85:f8:c4:86:97:a7:cf:57: 01:aa:16:f0:99:c4:7a:ee:d4:35:43:f7:1f:ba:bb:c9:7c:73: 33:ca:1b:b5:33:94:af:26:ac:56:0c:9f:3b:50:7a:6c:16:3b: 57:f5:c6:3f:34:5a:35:92:81:e0:81:63:65:35:97:55:44:61: 5e:82:32:ee:20:7d:34:cf:cd:85:e3:ec:35:3a:db:42:cb:9f: 2c:1f:18:42:25:83:c0:93:1b:19:47:75:43:6b:83:85:c9:3b: a6:9f:2b:64:8a:e9:7d:72:78:49:c4:36:af:5e:94:a9:04:78: 65:11:b7:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICOEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0QjMxMTAvBgNVBAUTKEIzOTg2NkE5OUQxQ0Q5RjRFN0U4RjUzQzg4QUQxNERB ODlBMTg2MjUwHhcNMjYwNDI4MTQyNTEzWhcNMjYwNTA1MTQyNTEzWjAYMRYwFAYD VQQDEw02OWYwYzM0OS01MDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkQQ1+Sq2bAigdgQqg+YFT6Pj8X91nNUXMFw6I8gGHov+SJoUTZCzC4ZNFLV vvk7/nWsEq9gDy3ldmr7FdW3imzm/OSjm/ers3UAKyK5Z81Ej5PnR/MiL4pbIMT+ S74zy3j6AHd5CKJq6E/0JOBZsJzHKtU8AdQh+xdwgPKA6YbapUib8Az87IEVwzbi tcN5ttfD8FD6QjTB2Fer1tk2ufpXgE9MRDZVQSicdcYWbcALyrfeN2vDmZ7+78NT V7My3tPVK8A8CO3rlkuMg1nJS5L1kplA40vZ08c32tENpzzPlODy9xB9L07CDLwH EtNRRzq9nk2sB9rNg3TxDPcviQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHiXDsNU SbO2VxfKPjNTZXbx96qQMB8GA1UdIwQYMBaAFLOYZqmdHNn05+j1PIitFNqJoYYl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy9FNjU4NTExMjFE ODQxMUUyQTFCQTMwREIwOEIwMkNEMi9zNWhtcVowYzJmVG42UFU4aUswVTJvbWho aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1aG1xWjBjMmZUbjZQVThpSzBVMm9taGhpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjRCMy9FNjU4NTExMjFEODQxMUUyQTFCQTMwREIwOEIwMkNEMi9zNWhtcVowYzJm VG42UFU4aUswVTJvbWhoaVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnQWpxfzTQ80vX32TbXXXRtlbgeV7RFAo1vcB9rh22yuZ4JyVlVzEBdVOg/Se 7p0EeYwtoPDZeAM9w5KXxJ/ZM8M7m1EcVFETkYbi2VQdXShRdQvkBkOWBe0j0Bdv eoWoxDCkRvDY/1Gm8SCPaVy7RlLaaXV/t2y1hckYmZ2kHFgsWjhsYfu7VYX4xIaX p89XAaoW8JnEeu7UNUP3H7q7yXxzM8obtTOUryasVgyfO1B6bBY7V/XGPzRaNZKB 4IFjZTWXVURhXoIy7iB9NM/NhePsNTrbQsufLB8YQiWDwJMbGUd1Q2uDhck7pp8r ZIrpfXJ4ScQ2r16UqQR4ZRG38g== -----END CERTIFICATE-----Generated at Wed Apr 29 00:03:12 2026 by rpki-client