$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft File: 4H5XaJwnqZNhHLq6l7GU0xeWz28.mft (raw, json) Hash identifier: IlGof8NM4tCUfRjwu4W5uIfrxsY1UIFDr/0oYRHVtx4= Subject key identifier: 9E:5A:97:7A:33:FB:B1:2A:94:46:5D:39:5D:9D:1C:71:3E:7C:0D:B4 Authority key identifier: E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F Certificate issuer: /CN=A91C7E5B/serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft Manifest number: A3 Signing time: Sun 05 Apr 2026 06:41:07 +0000 Manifest this update: Sun 05 Apr 2026 06:41:07 +0000 Manifest next update: Sun 12 Apr 2026 06:41:07 +0000 Files and hashes: 1: 4H5XaJwnqZNhHLq6l7GU0xeWz28.crl (hash: CaPrwbbX1hlls2/AWkJfOmBO01UFIqcsG4OdCl0lulw=) 2: DBBAF162C19811F0A42BC412C4F9AE02.roa (hash: Kic9hnPcMWHN6pDr7Ll5IWiixhuAzQj9NWh88//ur+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7E5B, serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F Validity Not Before: Apr 5 06:41:07 2026 GMT Not After : Apr 12 06:41:07 2026 GMT Subject: CN=69d20403-09f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:67:22:8d:ec:a7:bf:a7:44:4f:13:d3:92:11: 07:90:26:e6:6c:52:18:45:57:f9:eb:e4:cc:12:f4: 8b:4d:88:d6:37:27:08:76:38:61:33:5f:75:bf:0a: 32:96:f9:95:24:11:ab:6d:60:7c:d7:e0:3b:52:25: 4f:78:61:ad:95:b7:e7:0e:06:09:14:7b:cb:c9:af: dd:79:71:6e:63:89:85:f7:5a:f2:12:aa:84:49:bd: 03:6e:b8:7f:7b:5e:bb:b9:74:cf:26:b3:3e:17:86: 3b:f3:6f:ae:ae:be:57:94:db:c0:50:f4:d6:03:6b: 4d:53:1d:c7:54:ed:98:8c:27:10:ca:a4:ba:36:91: ea:b9:6f:b1:d8:96:30:65:51:b8:62:3b:6d:fa:2f: ee:e6:c2:c1:83:61:27:ff:c6:2d:81:95:d5:43:cc: 17:1a:bf:59:b4:27:a6:1d:dc:a2:21:76:b7:41:9d: 33:ef:b9:d8:fe:05:83:8e:c0:7a:31:7c:8a:ad:aa: 2a:dd:c9:a5:87:27:2d:e4:7b:b3:76:28:33:37:09: 37:19:6a:6d:73:22:28:e7:44:32:32:f3:36:97:d1: 1a:76:6e:cd:c9:9f:c3:8c:1e:2d:b3:f7:23:6e:d7: 23:65:17:0e:b5:a3:f3:7e:73:fe:56:32:6a:3e:59: 4f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5A:97:7A:33:FB:B1:2A:94:46:5D:39:5D:9D:1C:71:3E:7C:0D:B4 X509v3 Authority Key Identifier: keyid:E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e2:aa:c6:5f:52:6d:6b:24:f3:b4:f0:c0:e4:79:f2:e3:9b: 78:19:e7:be:fb:bd:f9:84:7d:f6:b8:ed:ce:f4:39:7e:ed:47: 7a:52:40:ea:21:ba:5c:ea:10:21:bb:35:3f:9e:d4:58:c8:96: c1:f5:da:93:f8:2e:29:c1:be:09:1b:b7:b2:ba:6d:7a:d5:3d: 17:8c:40:b7:4e:9f:7c:c9:c7:bc:e5:ed:d6:18:63:db:4b:32: 9a:c7:b9:80:99:55:02:27:0a:15:cf:a0:23:04:33:48:d3:c1: 48:da:92:1f:ac:8b:6e:fe:10:ee:52:05:2a:31:ae:4e:c0:db: 2d:c7:46:39:6c:57:fe:2c:2e:ce:12:83:c8:50:90:61:1d:fa: a5:65:f2:6b:c3:67:e4:cb:4c:56:44:4f:6f:73:7f:dd:4a:8f: 44:2d:b1:b4:58:d9:b2:e6:6a:11:9b:f8:83:69:1f:43:36:4f: 20:0c:ad:8e:da:04:cb:55:bf:56:2c:46:0a:a4:52:4a:4b:63: 4b:e8:8b:f5:0b:e5:f7:f8:27:92:28:55:7c:6a:31:05:1e:5e: ca:7f:ae:1f:72:33:01:e7:12:f9:f6:50:e6:b6:c7:f6:a4:f9: 27:1b:d2:ba:c6:e4:bd:ea:56:40:c7:04:81:66:2d:3f:c3:f5: dd:f5:a2:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdFNUIxMTAvBgNVBAUTKEUwN0U1NzY4OUMyN0E5OTM2MTFDQkFCQTk3QjE5NEQz MTc5NkNGNkYwHhcNMjYwNDA1MDY0MTA3WhcNMjYwNDEyMDY0MTA3WjAYMRYwFAYD VQQDEw02OWQyMDQwMy0wOWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Gcijeynv6dETxPTkhEHkCbmbFIYRVf56+TMEvSLTYjWNycIdjhhM191vwoy lvmVJBGrbWB81+A7UiVPeGGtlbfnDgYJFHvLya/deXFuY4mF91ryEqqESb0Dbrh/ e167uXTPJrM+F4Y782+urr5XlNvAUPTWA2tNUx3HVO2YjCcQyqS6NpHquW+x2JYw ZVG4Yjtt+i/u5sLBg2En/8YtgZXVQ8wXGr9ZtCemHdyiIXa3QZ0z77nY/gWDjsB6 MXyKraoq3cmlhyct5HuzdigzNwk3GWptcyIo50QyMvM2l9Eadm7NyZ/DjB4ts/cj btcjZRcOtaPzfnP+VjJqPllPPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ5al3oz +7EqlEZdOV2dHHE+fA20MB8GA1UdIwQYMBaAFOB+V2icJ6mTYRy6upexlNMXls9v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0U1Qi9FMTRGNzIyNDND NkUxMUYwOUQ3NkEyNERDNEY5QUUwMi80SDVYYUp3bnFaTmhITHE2bDdHVTB4ZVd6 MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRINVhhSnducVpOaEhMcTZsN0dVMHhlV3oyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0U1Qi9FMTRGNzIyNDNDNkUxMUYwOUQ3NkEyNERDNEY5QUUwMi80SDVYYUp3bnFa TmhITHE2bDdHVTB4ZVd6MjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO+Kqxl9SbWsk87TwwOR58uObeBnnvvu9+YR99rjtzvQ5fu1HelJA6iG6XOoQ Ibs1P57UWMiWwfXak/guKcG+CRu3srptetU9F4xAt06ffMnHvOXt1hhj20symse5 gJlVAicKFc+gIwQzSNPBSNqSH6yLbv4Q7lIFKjGuTsDbLcdGOWxX/iwuzhKDyFCQ YR36pWXya8Nn5MtMVkRPb3N/3UqPRC2xtFjZsuZqEZv4g2kfQzZPIAytjtoEy1W/ VixGCqRSSktjS+iL9Qvl9/gnkihVfGoxBR5eyn+uH3IzAecS+fZQ5rbH9qT5JxvS usbkvepWQMcEgWYtP8P13fWiDA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:40:50 2026 by rpki-client