$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft File: 5CANRK2dbstocvZTqVhD-yfYR6Q.mft (raw, json) Hash identifier: LgKcjdwhwlBBylZ56kBjfkDm0Ir8XFuAqlaO4w/T9co= Subject key identifier: 2F:12:88:44:5D:F1:F3:B8:BE:18:A7:CD:87:D7:B3:8E:5B:7A:4E:F2 Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 Certificate issuer: /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft Manifest number: 01D3 Signing time: Tue 03 Mar 2026 03:20:02 +0000 Manifest this update: Tue 03 Mar 2026 03:20:01 +0000 Manifest next update: Tue 10 Mar 2026 03:20:01 +0000 Files and hashes: 1: 5CANRK2dbstocvZTqVhD-yfYR6Q.crl (hash: 5twmCv4zxhECjkkYJJgnnGWVWhz42r2Z+AId1A1R9A8=) 2: 0099AE56536911EE8594503BC4F9AE02.roa (hash: A3g1MvapK720MR4guCb5ZHynm0vdBJ498DzGR8wq4fU=) 3: C7C45DD643F611EF84151D6FC4F9AE02.roa (hash: eCz90crmLyyT4eJR0NDAlMlvL0AfXIIanbDH55qxfQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 03:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Validity Not Before: Mar 3 03:20:01 2026 GMT Not After : Mar 10 03:20:01 2026 GMT Subject: CN=69a65362-bb6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:96:4a:98:ba:a3:7f:b9:ec:ff:f3:6b:69:01: 9f:00:74:fc:77:1e:4e:12:a3:cc:19:33:19:21:c6: b8:85:f3:84:86:83:b4:83:28:6d:d8:3e:c8:1e:42: 83:6a:ea:6c:a3:bd:3e:79:a3:6f:b4:56:29:55:48: df:fb:11:bb:5f:70:65:53:ba:7b:b9:9e:0d:e4:7f: c7:f2:e9:63:48:7b:bc:d8:3a:e1:0b:e6:3b:cc:9d: fa:c2:17:7a:c1:a0:3d:bd:68:79:95:a1:63:03:3e: 98:36:03:7d:f1:01:08:97:8b:26:b2:86:7f:1d:2b: 35:5d:1c:a4:4f:ec:f0:e3:6d:56:a5:68:ea:65:71: 93:f1:53:5e:5d:be:20:bf:75:0e:dc:d8:21:21:25: dc:fc:58:04:74:4a:9b:42:36:26:e8:b6:2a:94:87: 83:05:40:e7:92:70:3d:0d:fb:e5:ce:1c:97:f5:1f: 3b:d2:78:38:a2:8f:90:a1:aa:9a:c3:cc:68:c3:a4: fb:1a:70:82:24:3b:bc:12:e3:e0:9d:c4:55:b4:28: ea:16:ed:08:3b:5e:6b:bc:ff:68:64:d0:e3:6d:0b: 99:3a:7b:47:45:a1:44:b7:95:06:be:fc:5b:5b:e2: c9:62:c3:11:0a:48:ae:0c:ab:08:86:80:26:ec:20: 0e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:12:88:44:5D:F1:F3:B8:BE:18:A7:CD:87:D7:B3:8E:5B:7A:4E:F2 X509v3 Authority Key Identifier: keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:77:c7:d8:66:4a:a7:53:33:68:26:d7:e3:40:3a:83:05:30: 20:90:29:bf:fb:2c:a2:52:23:f1:f7:89:c2:0f:f5:b6:3b:19: 19:6a:56:23:24:9e:37:fb:0d:dc:93:4a:da:91:7c:a0:49:e6: 28:e4:b3:f4:7c:41:fc:92:b4:cc:ca:4f:4d:1d:5b:1d:da:91: 20:7c:32:1a:f5:78:ac:26:d3:2b:78:b7:56:56:ce:6f:79:5e: b4:73:9d:2d:ca:4c:ce:e7:ba:b7:8a:14:fc:a5:3b:f3:e1:89: 20:c7:19:4b:d2:be:53:83:61:21:03:6d:96:9e:3c:73:91:fe: d0:66:09:72:a2:43:96:0b:ad:a2:ed:79:80:c9:ee:a1:4a:ad: d5:23:aa:d8:ca:63:c8:ff:e8:5f:2a:dc:bf:7a:e1:c9:0e:9a: b9:5f:fc:bb:e8:4b:dd:54:12:88:8e:33:24:f2:9e:2d:ec:0e: ed:93:db:b2:c2:57:dd:50:31:8b:97:f9:4b:b8:33:b2:58:71: aa:4b:dc:ba:26:d4:fc:80:4d:18:31:bd:b6:3a:7d:9e:97:f1: 6b:54:08:e2:15:4f:82:30:0c:88:92:4c:c9:e6:70:c2:ec:0f: 56:f8:35:2c:cc:3a:4b:ee:2d:55:eb:12:ce:96:d4:d3:43:e0: f5:31:ce:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKEU0MjAwRDQ0QUQ5RDZFQ0I2ODcyRjY1M0E5NTg0M0ZC MjdEODQ3QTQwHhcNMjYwMzAzMDMyMDAxWhcNMjYwMzEwMDMyMDAxWjAYMRYwFAYD VQQDEw02OWE2NTM2Mi1iYjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pZKmLqjf7ns//NraQGfAHT8dx5OEqPMGTMZIca4hfOEhoO0gyht2D7IHkKD aupso70+eaNvtFYpVUjf+xG7X3BlU7p7uZ4N5H/H8uljSHu82DrhC+Y7zJ36whd6 waA9vWh5laFjAz6YNgN98QEIl4smsoZ/HSs1XRykT+zw421WpWjqZXGT8VNeXb4g v3UO3NghISXc/FgEdEqbQjYm6LYqlIeDBUDnknA9DfvlzhyX9R870ng4oo+Qoaqa w8xow6T7GnCCJDu8EuPgncRVtCjqFu0IO15rvP9oZNDjbQuZOntHRaFEt5UGvvxb W+LJYsMRCkiuDKsIhoAm7CAOqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC8SiERd 8fO4vhinzYfXs45bek7yMB8GA1UdIwQYMBaAFOQgDUStnW7LaHL2U6lYQ/sn2Eek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wNUVFQ0Q4NjUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJzdG9jdlpUcVZoRC15ZllS NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDQU5SSzJkYnN0b2N2WlRxVmhELXlmWVI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wNUVFQ0Q4NjUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJz dG9jdlpUcVZoRC15ZllSNlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWnfH2GZKp1MzaCbX40A6gwUwIJApv/ssolIj8feJwg/1tjsZGWpWIySeN/sN 3JNK2pF8oEnmKOSz9HxB/JK0zMpPTR1bHdqRIHwyGvV4rCbTK3i3VlbOb3letHOd LcpMzue6t4oU/KU78+GJIMcZS9K+U4NhIQNtlp48c5H+0GYJcqJDlgutou15gMnu oUqt1SOq2MpjyP/oXyrcv3rhyQ6auV/8u+hL3VQSiI4zJPKeLewO7ZPbssJX3VAx i5f5S7gzslhxqkvcuibU/IBNGDG9tjp9npfxa1QI4hVPgjAMiJJMyeZwwuwPVvg1 LMw6S+4tVesSzpbU00Pg9THO/Q== -----END CERTIFICATE-----Generated at Wed Mar 4 08:37:23 2026 by rpki-client