$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft File: 05fnjG3TxpaFEzQVMschiNd1Z68.mft (raw, json) Hash identifier: Xvoh4/BcgFgQgMlUC2bmiDh+DtpeRddn3vR32l+zihA= Subject key identifier: E5:E0:22:E3:31:44:86:E1:50:5C:FF:E4:0A:52:38:8D:0E:BE:2A:2F Authority key identifier: D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF Certificate issuer: /CN=A91D3CA7/serialNumber=D397E78C6DD3C6968513341532C72188D77567AF Certificate serial: 0379 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft Manifest number: 0372 Signing time: Thu 21 May 2026 00:56:06 +0000 Manifest this update: Thu 21 May 2026 00:56:05 +0000 Manifest next update: Thu 28 May 2026 00:56:05 +0000 Files and hashes: 1: 05fnjG3TxpaFEzQVMschiNd1Z68.crl (hash: YLyhEMtgRnZqy1twXPuCNRFHGncAzab1dMsksWGhsnc=) 2: DE183F1CF46611EC815F7283C4F9AE02.roa (hash: al8fBj0l9FNorWDDEmWTxJIA8uTe/zODnox5rpi44HU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 889 (0x379) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3CA7, serialNumber=D397E78C6DD3C6968513341532C72188D77567AF Validity Not Before: May 21 00:56:05 2026 GMT Not After : May 28 00:56:05 2026 GMT Subject: CN=6a0e5826-a6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:26:04:a0:43:74:0f:41:43:74:b8:d6:cf:e7: f2:46:ef:d8:32:97:f7:15:81:2d:ef:57:c6:ce:93: b9:91:fb:c4:bd:23:2d:6c:ed:dd:fe:03:20:53:d8: d2:20:85:c5:72:31:a4:09:5f:bd:ed:c5:79:8d:cc: c0:e9:42:5a:a6:58:25:39:7c:b8:54:55:d3:b4:6b: 77:84:1c:c5:ad:9a:7b:6a:de:7d:b0:36:50:d6:6f: c0:8e:d1:b6:55:53:7c:dd:8a:a0:ea:79:e2:a4:aa: 71:98:9d:14:ac:61:3d:fb:4c:cb:4b:21:f9:a6:f9: 07:64:8f:9c:79:a2:08:f7:26:89:d2:66:54:0c:1d: 6e:ed:15:e2:e1:78:65:44:68:32:14:a2:d0:3e:31: be:42:80:71:e5:f7:9f:e8:80:35:3d:2c:1e:b4:59: ee:08:29:5c:3e:ca:c4:90:f8:19:3d:e2:fd:72:d8: 03:e9:85:89:a7:3a:af:48:ec:e8:83:49:e9:4d:1c: 64:da:54:4d:bd:cf:90:61:5e:34:ab:37:5c:ea:c1: 5d:e8:b4:24:dd:73:b9:cc:12:66:49:c9:2e:b9:a9: a8:0c:dd:70:4c:c3:15:f8:df:03:25:97:b7:35:87: ad:11:5b:2c:e7:e5:20:c9:6d:ed:12:2b:a0:3b:aa: 58:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E0:22:E3:31:44:86:E1:50:5C:FF:E4:0A:52:38:8D:0E:BE:2A:2F X509v3 Authority Key Identifier: keyid:D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:78:51:20:a4:c7:88:cc:c3:31:d3:25:39:a6:65:f6:34:f9: 2a:7c:05:15:39:18:37:1b:09:f4:a2:47:58:12:5c:c2:99:c3: 1b:6c:a3:20:e2:f8:ce:e9:3d:70:1e:b8:cf:a1:50:03:7f:74: 09:2c:1f:59:b8:7c:70:8e:71:be:2d:c1:01:8d:de:53:ac:41: 40:4b:25:77:ca:18:97:65:26:fd:d2:c8:14:f6:3d:90:c6:cd: 57:4d:df:a9:42:2a:9f:3e:e8:99:dc:8f:5e:b6:17:3a:fd:35: 2f:b8:02:d3:57:9e:d2:97:a1:81:6b:cb:44:ab:f4:03:46:bc: c4:e9:ad:57:6c:e0:63:a2:06:f7:1f:32:38:ea:8f:bf:62:86: c1:30:28:ef:04:f5:21:83:25:91:d1:21:0b:80:40:53:d0:69: b8:ae:05:94:e2:f7:81:34:1a:17:df:12:03:98:1c:d3:f5:07: ca:40:9b:35:15:1b:c9:82:da:38:1a:86:fa:8f:00:5f:b6:06: 29:35:c0:ca:ad:8b:ff:ea:6f:df:f2:21:06:b2:45:1c:b7:7a: 4b:f4:3f:3c:0b:f1:81:38:fe:93:7f:b3:25:90:2a:c3:5c:f2: 58:90:d5:09:1f:57:ef:dd:1c:34:c9:bc:e0:5e:05:85:1e:60: e0:b1:d4:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNDQTcxMTAvBgNVBAUTKEQzOTdFNzhDNkREM0M2OTY4NTEzMzQxNTMyQzcyMTg4 RDc3NTY3QUYwHhcNMjYwNTIxMDA1NjA1WhcNMjYwNTI4MDA1NjA1WjAYMRYwFAYD VQQDEw02YTBlNTgyNi1hNmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCYEoEN0D0FDdLjWz+fyRu/YMpf3FYEt71fGzpO5kfvEvSMtbO3d/gMgU9jS IIXFcjGkCV+97cV5jczA6UJaplglOXy4VFXTtGt3hBzFrZp7at59sDZQ1m/AjtG2 VVN83Yqg6nnipKpxmJ0UrGE9+0zLSyH5pvkHZI+ceaII9yaJ0mZUDB1u7RXi4Xhl RGgyFKLQPjG+QoBx5fef6IA1PSwetFnuCClcPsrEkPgZPeL9ctgD6YWJpzqvSOzo g0npTRxk2lRNvc+QYV40qzdc6sFd6LQk3XO5zBJmSckuuamoDN1wTMMV+N8DJZe3 NYetEVss5+UgyW3tEiugO6pYJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOXgIuMx RIbhUFz/5ApSOI0OviovMB8GA1UdIwQYMBaAFNOX54xt08aWhRM0FTLHIYjXdWev MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0NBNy8zRjBFMEUwNkY0 NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhwYUZFelFWTXNjaGlOZDFa NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA1Zm5qRzNUeHBhRkV6UVZNc2NoaU5kMVo2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0NBNy8zRjBFMEUwNkY0NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhw YUZFelFWTXNjaGlOZDFaNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXXhRIKTHiMzDMdMlOaZl9jT5KnwFFTkYNxsJ9KJHWBJcwpnDG2yjIOL4zuk9 cB64z6FQA390CSwfWbh8cI5xvi3BAY3eU6xBQEsld8oYl2Um/dLIFPY9kMbNV03f qUIqnz7omdyPXrYXOv01L7gC01ee0pehgWvLRKv0A0a8xOmtV2zgY6IG9x8yOOqP v2KGwTAo7wT1IYMlkdEhC4BAU9BpuK4FlOL3gTQaF98SA5gc0/UHykCbNRUbyYLa OBqG+o8AX7YGKTXAyq2L/+pv3/IhBrJFHLd6S/Q/PAvxgTj+k3+zJZAqw1zyWJDV CR9X790cNMm84F4FhR5g4LHU3w== -----END CERTIFICATE-----Generated at Thu May 21 09:37:26 2026 by rpki-client