$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft File: 5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft (raw, json) Hash identifier: ZIuaFIZwY3qhMidy7dkzwsbJk+BqIuktI/vaa7VpeR8= Subject key identifier: 54:17:DC:BF:E2:2C:FC:BE:E1:09:06:2E:8A:A0:94:D8:66:F2:C8:E3 Authority key identifier: E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20 Certificate issuer: /CN=A91D2B62/serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720 Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft Manifest number: 0131 Signing time: Sat 21 Mar 2026 04:31:24 +0000 Manifest this update: Sat 21 Mar 2026 04:31:24 +0000 Manifest next update: Sat 28 Mar 2026 04:31:24 +0000 Files and hashes: 1: 5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl (hash: xcos030rI4/lM8CWCP06Z914LVd+Oo57CKks6QmTMlo=) 2: E9BDEF2CABD011F0B868ED11C4F9AE02.roa (hash: 6qNEgwLHVAYpgshoxndpSifoEhXIYB8Fbev50w/bqoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:31:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2B62, serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720 Validity Not Before: Mar 21 04:31:24 2026 GMT Not After : Mar 28 04:31:24 2026 GMT Subject: CN=69be1f1c-1e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:39:a7:59:b5:06:e6:74:00:2d:4c:e9:7b:2c: 80:24:8b:e4:48:41:14:5c:3a:d6:6b:08:e3:dd:e2: 0f:32:49:ee:f2:b9:c5:bd:8a:33:f3:2d:70:9e:e8: 90:94:08:1b:31:3e:01:b7:c8:bb:a7:50:b0:f0:ce: 9e:68:dd:62:c8:7f:9d:e4:79:9e:5f:ca:cf:85:64: 86:0c:89:a2:cf:f6:ef:37:4c:f6:8f:df:01:ad:46: 72:ce:ff:a2:8e:86:fd:cd:08:c3:41:6b:38:ff:e5: a8:42:ac:a0:96:bb:e2:06:fe:71:61:17:9f:ae:cb: 78:18:5a:98:32:fa:3f:7d:f9:bb:65:15:ff:f5:11: 88:4d:cf:a0:7c:81:d8:1a:9d:79:5f:e0:29:f7:12: 17:d3:f0:c4:0d:e6:66:46:f4:ab:47:a0:b4:55:3d: 10:90:57:a5:1c:1f:23:89:07:a4:a4:c0:53:17:b7: 1f:74:81:98:60:b0:f7:26:d3:8c:ea:c1:cc:67:44: d0:9e:a3:43:f0:d0:46:86:7c:91:a0:88:8f:14:b3: 86:06:59:a3:71:49:d3:14:64:c0:6f:e9:25:2a:a0: 50:3d:fd:ad:74:f1:78:65:e0:14:9c:3c:69:35:99: cf:0d:2e:e9:d7:ba:8d:a7:59:18:eb:50:c6:d4:64: f5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:17:DC:BF:E2:2C:FC:BE:E1:09:06:2E:8A:A0:94:D8:66:F2:C8:E3 X509v3 Authority Key Identifier: keyid:E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:3e:a3:d7:38:a9:23:30:d0:ad:62:35:b5:6c:b1:63:5a:6e: 99:4a:02:2f:91:7b:65:9e:9b:fe:69:a0:8f:fb:d6:ce:00:95: 06:55:2f:bd:03:77:2e:75:d6:29:8f:1a:5a:3f:34:3d:39:f2: 3e:28:dd:49:a9:f6:61:9e:62:09:83:14:91:f3:90:a4:ac:b5: ce:05:8f:03:77:06:61:88:1d:f7:2f:36:73:b6:5f:8e:a0:80: fb:43:80:53:2b:8c:19:8e:56:55:50:9f:93:3a:0d:cf:4a:46: ec:84:8d:4f:ee:54:96:d8:e3:23:44:ba:56:a2:bf:08:02:45: dc:03:4d:4f:d6:4c:9c:db:0e:fa:3e:2e:a6:a7:4a:80:e8:2d: a6:56:9d:3f:2d:b3:29:0b:40:9c:bc:9b:c0:3a:93:e8:33:8c: f6:45:53:df:8a:8d:bc:55:09:e0:84:5b:78:eb:90:d4:6e:7e: 82:08:65:d4:72:dd:22:07:68:e2:9f:23:b2:2c:86:b0:62:b9: 0d:f8:6b:39:a5:c9:cb:32:b4:e5:98:47:b0:48:5a:76:7f:75: 6b:99:79:11:c0:21:c5:e9:05:40:9b:c4:0a:30:34:e3:7b:43: 32:86:2b:47:4c:3a:f5:95:c8:21:f6:dd:74:5e:4a:eb:3b:bc: f9:5e:33:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJCNjIxMTAvBgNVBAUTKEU2RjY1RDIyMUI1OTVGNkJBMTNFQjMxNERFRTMzOENB MjQxRTI3MjAwHhcNMjYwMzIxMDQzMTI0WhcNMjYwMzI4MDQzMTI0WjAYMRYwFAYD VQQDEw02OWJlMWYxYy0xZTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4jmnWbUG5nQALUzpeyyAJIvkSEEUXDrWawjj3eIPMknu8rnFvYoz8y1wnuiQ lAgbMT4Bt8i7p1Cw8M6eaN1iyH+d5HmeX8rPhWSGDImiz/bvN0z2j98BrUZyzv+i job9zQjDQWs4/+WoQqyglrviBv5xYRefrst4GFqYMvo/ffm7ZRX/9RGITc+gfIHY Gp15X+Ap9xIX0/DEDeZmRvSrR6C0VT0QkFelHB8jiQekpMBTF7cfdIGYYLD3JtOM 6sHMZ0TQnqND8NBGhnyRoIiPFLOGBlmjcUnTFGTAb+klKqBQPf2tdPF4ZeAUnDxp NZnPDS7p17qNp1kY61DG1GT1ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFQX3L/i LPy+4QkGLoqglNhm8sjjMB8GA1UdIwQYMBaAFOb2XSIbWV9roT6zFN7jOMokHicg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkI2Mi9CRDI5QjgxNjVB RTAxMUVGODY1MUI2MUJDNEY5QUUwMi81dlpkSWh0WlgydWhQck1VM3VNNHlpUWVK eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV2WmRJaHRaWDJ1aFByTVUzdU00eWlRZUp5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkI2Mi9CRDI5QjgxNjVBRTAxMUVGODY1MUI2MUJDNEY5QUUwMi81dlpkSWh0Wlgy dWhQck1VM3VNNHlpUWVKeUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuz6j1zipIzDQrWI1tWyxY1pumUoCL5F7ZZ6b/mmgj/vWzgCVBlUvvQN3LnXW KY8aWj80PTnyPijdSan2YZ5iCYMUkfOQpKy1zgWPA3cGYYgd9y82c7ZfjqCA+0OA UyuMGY5WVVCfkzoNz0pG7ISNT+5UltjjI0S6VqK/CAJF3ANNT9ZMnNsO+j4upqdK gOgtpladPy2zKQtAnLybwDqT6DOM9kVT34qNvFUJ4IRbeOuQ1G5+gghl1HLdIgdo 4p8jsiyGsGK5DfhrOaXJyzK05ZhHsEhadn91a5l5EcAhxekFQJvECjA043tDMoYr R0w69ZXIIfbddF5K6zu8+V4zAA== -----END CERTIFICATE-----Generated at Sat Mar 21 23:45:18 2026 by rpki-client